Dec 14 04:06:49 ispc postfix/smtpd[1494254]: sql auxprop plugin using mysql engine Dec 14 04:06:49 ispc saslauthd[1494255]: pam_mysql - SELECT returned no result. Dec 14 04:06:49 ispc saslauthd[1494255]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:06:49 ispc saslauthd[1494255]: do_auth : auth failure: [user=nms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:06:53 ispc saslauthd[1494257]: pam_mysql - SELECT returned no result. Dec 14 04:06:53 ispc saslauthd[1494257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:06:53 ispc saslauthd[1494257]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:07:01 ispc CRON[1494266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:07:02 ispc CRON[1494266]: pam_unix(cron:session): session closed for user root Dec 14 04:07:06 ispc sshd[1494277]: Invalid user admin from 52.232.19.79 Dec 14 04:07:18 ispc CRON[1490440]: pam_unix(cron:session): session closed for user root Dec 14 04:07:29 ispc saslauthd[1494288]: pam_mysql - SELECT returned no result. Dec 14 04:07:29 ispc saslauthd[1494288]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:07:29 ispc saslauthd[1494288]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:08:01 ispc CRON[1494313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:08:02 ispc CRON[1494313]: pam_unix(cron:session): session closed for user root Dec 14 04:08:29 ispc sshd[1494327]: Invalid user blceu from 221.156.137.103 Dec 14 04:08:41 ispc sshd[1494329]: Invalid user blceu from 211.57.200.145 Dec 14 04:09:01 ispc CRON[1494331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:09:01 ispc CRON[1494332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:09:01 ispc CRON[1494331]: pam_unix(cron:session): session closed for user root Dec 14 04:09:02 ispc CRON[1494332]: pam_unix(cron:session): session closed for user root Dec 14 04:10:01 ispc CRON[1494364]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:10:01 ispc CRON[1494363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:10:01 ispc CRON[1494362]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 04:10:01 ispc CRON[1494361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:10:01 ispc CRON[1494360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:10:01 ispc CRON[1494361]: pam_unix(cron:session): session closed for user root Dec 14 04:10:01 ispc CRON[1494362]: pam_unix(cron:session): session closed for user www-data Dec 14 04:10:01 ispc CRON[1494364]: pam_unix(cron:session): session closed for user getmail Dec 14 04:10:03 ispc CRON[1494360]: pam_unix(cron:session): session closed for user root Dec 14 04:10:16 ispc sshd[1494469]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:10:24 ispc sshd[1494471]: Did not receive identification string from 80.94.92.182 Dec 14 04:10:40 ispc CRON[1494363]: pam_unix(cron:session): session closed for user root Dec 14 04:11:01 ispc CRON[1494474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:11:25 ispc sshd[1494496]: Invalid user ubuntu from 13.93.203.231 Dec 14 04:11:52 ispc sshd[1494511]: Invalid user martof from 211.45.175.153 Dec 14 04:12:01 ispc CRON[1494517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:12:02 ispc CRON[1494517]: pam_unix(cron:session): session closed for user root Dec 14 04:12:36 ispc sshd[1494544]: Invalid user admin from 116.120.58.228 Dec 14 04:12:36 ispc sshd[1494546]: Invalid user ziplines from 49.247.24.89 Dec 14 04:12:52 ispc postfix/smtpd[1494558]: sql auxprop plugin using mysql engine Dec 14 04:12:55 ispc saslauthd[1494564]: pam_mysql - SELECT returned no result. Dec 14 04:12:55 ispc saslauthd[1494564]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:12:55 ispc saslauthd[1494564]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:13:01 ispc CRON[1494565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:13:01 ispc CRON[1494565]: pam_unix(cron:session): session closed for user root Dec 14 04:14:01 ispc CRON[1494605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:14:02 ispc CRON[1494605]: pam_unix(cron:session): session closed for user root Dec 14 04:15:01 ispc CRON[1494644]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:15:01 ispc CRON[1494641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:15:01 ispc CRON[1494643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:15:01 ispc CRON[1494642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:15:01 ispc CRON[1494642]: pam_unix(cron:session): session closed for user root Dec 14 04:15:01 ispc CRON[1494644]: pam_unix(cron:session): session closed for user getmail Dec 14 04:15:01 ispc CRON[1494643]: pam_unix(cron:session): session closed for user root Dec 14 04:15:01 ispc CRON[1494641]: pam_unix(cron:session): session closed for user root Dec 14 04:15:21 ispc postfix/smtpd[1494728]: sql auxprop plugin using mysql engine Dec 14 04:15:22 ispc saslauthd[1494730]: pam_mysql - SELECT returned no result. Dec 14 04:15:22 ispc saslauthd[1494730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:15:22 ispc saslauthd[1494730]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:15:25 ispc sshd[1494731]: Invalid user admin from 52.232.19.79 Dec 14 04:15:31 ispc sshd[1494738]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:16:01 ispc CRON[1494754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:16:02 ispc CRON[1494754]: pam_unix(cron:session): session closed for user root Dec 14 04:16:22 ispc sshd[1494773]: Invalid user martof from 51.79.36.60 Dec 14 04:16:40 ispc sshd[1494780]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:16:40 ispc sshd[1494780]: Invalid user martof from 123.253.61.95 Dec 14 04:17:01 ispc CRON[1494799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:17:02 ispc CRON[1494799]: pam_unix(cron:session): session closed for user root Dec 14 04:17:19 ispc postfix/smtpd[1494814]: sql auxprop plugin using mysql engine Dec 14 04:17:23 ispc sshd[1494820]: Invalid user martof from 211.23.78.98 Dec 14 04:18:01 ispc CRON[1494845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:18:02 ispc CRON[1494845]: pam_unix(cron:session): session closed for user root Dec 14 04:18:23 ispc postfix/smtpd[1494871]: sql auxprop plugin using mysql engine Dec 14 04:18:23 ispc saslauthd[1494873]: pam_mysql - SELECT returned no result. Dec 14 04:18:23 ispc saslauthd[1494873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:18:23 ispc saslauthd[1494873]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:19:01 ispc CRON[1494886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:19:01 ispc postfix/smtpd[1494893]: sql auxprop plugin using mysql engine Dec 14 04:19:01 ispc saslauthd[1494894]: pam_mysql - SELECT returned no result. Dec 14 04:19:01 ispc saslauthd[1494894]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:19:01 ispc saslauthd[1494894]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:19:02 ispc saslauthd[1494896]: pam_mysql - SELECT returned no result. Dec 14 04:19:02 ispc saslauthd[1494896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:19:02 ispc saslauthd[1494896]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:19:02 ispc CRON[1494886]: pam_unix(cron:session): session closed for user root Dec 14 04:19:06 ispc postfix/smtpd[1494907]: sql auxprop plugin using mysql engine Dec 14 04:19:09 ispc saslauthd[1494908]: pam_mysql - SELECT returned no result. Dec 14 04:19:09 ispc saslauthd[1494908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:19:09 ispc saslauthd[1494908]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:19:46 ispc postfix/smtpd[1494929]: sql auxprop plugin using mysql engine Dec 14 04:19:48 ispc saslauthd[1494931]: pam_mysql - SELECT returned no result. Dec 14 04:19:48 ispc saslauthd[1494931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:19:48 ispc saslauthd[1494931]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:19:57 ispc sshd[1494936]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:19:57 ispc sshd[1494936]: Invalid user blceu from 103.146.203.212 Dec 14 04:20:01 ispc CRON[1494938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:20:01 ispc CRON[1494940]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 04:20:01 ispc CRON[1494939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:20:01 ispc CRON[1494941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:20:01 ispc CRON[1494942]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:20:01 ispc CRON[1494940]: pam_unix(cron:session): session closed for user www-data Dec 14 04:20:01 ispc CRON[1494939]: pam_unix(cron:session): session closed for user root Dec 14 04:20:01 ispc CRON[1494942]: pam_unix(cron:session): session closed for user getmail Dec 14 04:20:02 ispc CRON[1494941]: pam_unix(cron:session): session closed for user root Dec 14 04:20:02 ispc CRON[1494938]: pam_unix(cron:session): session closed for user root Dec 14 04:20:34 ispc sshd[1495030]: Invalid user sol from 80.94.92.182 Dec 14 04:20:37 ispc saslauthd[1495036]: pam_mysql - SELECT returned no result. Dec 14 04:20:37 ispc saslauthd[1495036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:20:37 ispc saslauthd[1495036]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:20:45 ispc sshd[1495037]: Invalid user ziplines from 103.77.207.53 Dec 14 04:21:01 ispc CRON[1495050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:21:01 ispc CRON[1495051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:21:01 ispc CRON[1495050]: pam_unix(cron:session): session closed for user root Dec 14 04:21:02 ispc CRON[1495051]: pam_unix(cron:session): session closed for user root Dec 14 04:21:09 ispc sshd[1495108]: Invalid user blceu from 211.23.78.98 Dec 14 04:21:11 ispc CRON[1491333]: pam_unix(cron:session): session closed for user root Dec 14 04:21:13 ispc postfix/smtpd[1495474]: sql auxprop plugin using mysql engine Dec 14 04:21:47 ispc saslauthd[1495495]: pam_mysql - SELECT returned no result. Dec 14 04:21:47 ispc saslauthd[1495495]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:21:47 ispc saslauthd[1495495]: do_auth : auth failure: [user=nobody] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:22:01 ispc CRON[1495502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:22:02 ispc CRON[1495502]: pam_unix(cron:session): session closed for user root Dec 14 04:22:12 ispc sshd[1495517]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:22:12 ispc sshd[1495517]: Invalid user ziplines from 123.253.61.95 Dec 14 04:22:25 ispc sshd[1495523]: Invalid user from 121.41.236.216 Dec 14 04:22:40 ispc saslauthd[1495542]: pam_mysql - SELECT returned no result. Dec 14 04:22:40 ispc saslauthd[1495542]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:22:40 ispc saslauthd[1495542]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:23:01 ispc CRON[1495553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:23:02 ispc CRON[1495553]: pam_unix(cron:session): session closed for user root Dec 14 04:23:20 ispc saslauthd[1495576]: pam_mysql - SELECT returned no result. Dec 14 04:23:20 ispc saslauthd[1495576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:23:20 ispc saslauthd[1495576]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:23:20 ispc postfix/smtpd[1495577]: sql auxprop plugin using mysql engine Dec 14 04:23:20 ispc saslauthd[1495579]: pam_mysql - SELECT returned no result. Dec 14 04:23:20 ispc saslauthd[1495579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:23:20 ispc saslauthd[1495579]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:23:21 ispc saslauthd[1495580]: pam_mysql - SELECT returned no result. Dec 14 04:23:21 ispc saslauthd[1495580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:23:21 ispc saslauthd[1495580]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:24:01 ispc CRON[1495598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:24:01 ispc CRON[1495598]: pam_unix(cron:session): session closed for user root Dec 14 04:24:11 ispc sshd[1495613]: Invalid user blceu from 43.135.130.196 Dec 14 04:24:22 ispc saslauthd[1495619]: pam_mysql - SELECT returned no result. Dec 14 04:24:22 ispc saslauthd[1495619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:24:22 ispc saslauthd[1495619]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:25:01 ispc CRON[1495639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:25:01 ispc CRON[1495640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:25:01 ispc CRON[1495641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:25:01 ispc CRON[1495642]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:25:01 ispc CRON[1495640]: pam_unix(cron:session): session closed for user root Dec 14 04:25:02 ispc CRON[1495642]: pam_unix(cron:session): session closed for user getmail Dec 14 04:25:02 ispc CRON[1495641]: pam_unix(cron:session): session closed for user root Dec 14 04:25:02 ispc CRON[1495639]: pam_unix(cron:session): session closed for user root Dec 14 04:26:01 ispc CRON[1495745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:26:02 ispc CRON[1495745]: pam_unix(cron:session): session closed for user root Dec 14 04:26:12 ispc postfix/smtpd[1495761]: sql auxprop plugin using mysql engine Dec 14 04:26:14 ispc saslauthd[1495763]: pam_mysql - SELECT returned no result. Dec 14 04:26:14 ispc saslauthd[1495763]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:26:14 ispc saslauthd[1495763]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:26:48 ispc sshd[1495777]: Invalid user solana from 80.94.92.182 Dec 14 04:27:01 ispc CRON[1495787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:27:01 ispc CRON[1495787]: pam_unix(cron:session): session closed for user root Dec 14 04:27:43 ispc sshd[1495821]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:27:43 ispc sshd[1495821]: Invalid user ziplines from 103.28.37.227 Dec 14 04:28:01 ispc CRON[1495837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:28:02 ispc CRON[1495837]: pam_unix(cron:session): session closed for user root Dec 14 04:28:21 ispc postfix/smtpd[1495857]: sql auxprop plugin using mysql engine Dec 14 04:29:01 ispc CRON[1495876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:29:01 ispc CRON[1495876]: pam_unix(cron:session): session closed for user root Dec 14 04:30:01 ispc CRON[1495914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:30:01 ispc CRON[1495915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:30:01 ispc CRON[1495916]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 04:30:01 ispc CRON[1495917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:30:01 ispc CRON[1495918]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:30:01 ispc CRON[1495915]: pam_unix(cron:session): session closed for user root Dec 14 04:30:01 ispc CRON[1495916]: pam_unix(cron:session): session closed for user www-data Dec 14 04:30:01 ispc CRON[1495918]: pam_unix(cron:session): session closed for user getmail Dec 14 04:30:02 ispc CRON[1495917]: pam_unix(cron:session): session closed for user root Dec 14 04:30:02 ispc CRON[1495914]: pam_unix(cron:session): session closed for user root Dec 14 04:30:50 ispc sshd[1496010]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:30:50 ispc sshd[1496010]: Invalid user martof from 157.245.115.125 Dec 14 04:31:01 ispc CRON[1496016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:31:02 ispc CRON[1496016]: pam_unix(cron:session): session closed for user root Dec 14 04:31:14 ispc sshd[1496034]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:15 ispc sshd[1496039]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:15 ispc sshd[1496041]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:16 ispc sshd[1496043]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:16 ispc sshd[1496045]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:17 ispc sshd[1496047]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:17 ispc sshd[1496049]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:18 ispc sshd[1496051]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:19 ispc sshd[1496054]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:19 ispc sshd[1496056]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:20 ispc sshd[1496058]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:21 ispc sshd[1496060]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:22 ispc sshd[1496062]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:23 ispc sshd[1496064]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:23 ispc sshd[1496066]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:24 ispc postfix/smtpd[1496072]: sql auxprop plugin using mysql engine Dec 14 04:31:24 ispc sshd[1496069]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:24 ispc CRON[1494474]: pam_unix(cron:session): session closed for user root Dec 14 04:31:25 ispc sshd[1496078]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:25 ispc sshd[1496080]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:26 ispc sshd[1496082]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:26 ispc sshd[1496082]: Invalid user Antminer from 179.43.184.242 Dec 14 04:31:27 ispc sshd[1496084]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:27 ispc sshd[1496084]: Invalid user Antminer from 179.43.184.242 Dec 14 04:31:27 ispc sshd[1496086]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:28 ispc sshd[1496088]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:29 ispc sshd[1496091]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:29 ispc sshd[1496093]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:30 ispc sshd[1496095]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:31 ispc sshd[1496097]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:31 ispc sshd[1496097]: Invalid user admin from 179.43.184.242 Dec 14 04:31:31 ispc sshd[1496099]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:31:31 ispc sshd[1496099]: Invalid user baikal from 179.43.184.242 Dec 14 04:32:01 ispc CRON[1496102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:32:02 ispc CRON[1496102]: pam_unix(cron:session): session closed for user root Dec 14 04:32:16 ispc saslauthd[1496116]: pam_mysql - SELECT returned no result. Dec 14 04:32:16 ispc saslauthd[1496116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:32:16 ispc saslauthd[1496116]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:32:40 ispc postfix/smtpd[1496127]: sql auxprop plugin using mysql engine Dec 14 04:32:43 ispc saslauthd[1496128]: pam_mysql - SELECT returned no result. Dec 14 04:32:43 ispc saslauthd[1496128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:32:43 ispc saslauthd[1496128]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:33:01 ispc CRON[1496130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:33:01 ispc CRON[1496130]: pam_unix(cron:session): session closed for user root Dec 14 04:33:11 ispc sshd[1496142]: Invalid user martof from 61.183.86.2 Dec 14 04:33:18 ispc sshd[1496144]: Invalid user solv from 80.94.92.182 Dec 14 04:34:01 ispc CRON[1496148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:34:02 ispc CRON[1496148]: pam_unix(cron:session): session closed for user root Dec 14 04:34:33 ispc saslauthd[1496161]: pam_mysql - SELECT returned no result. Dec 14 04:34:33 ispc saslauthd[1496161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:34:33 ispc saslauthd[1496161]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:35:01 ispc CRON[1496169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:35:01 ispc CRON[1496170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:35:01 ispc CRON[1496171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:35:01 ispc CRON[1496172]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:35:01 ispc CRON[1496170]: pam_unix(cron:session): session closed for user root Dec 14 04:35:01 ispc CRON[1496172]: pam_unix(cron:session): session closed for user getmail Dec 14 04:35:02 ispc CRON[1496169]: pam_unix(cron:session): session closed for user root Dec 14 04:35:02 ispc sshd[1496168]: Invalid user klape from 70.37.89.177 Dec 14 04:35:03 ispc sshd[1496267]: Invalid user ubuntu from 70.37.89.177 Dec 14 04:35:07 ispc sshd[1496280]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:35:07 ispc sshd[1496280]: Invalid user blceu from 103.91.189.70 Dec 14 04:35:33 ispc CRON[1496171]: pam_unix(cron:session): session closed for user root Dec 14 04:35:36 ispc sshd[1496285]: Invalid user martof from 5.133.121.104 Dec 14 04:35:42 ispc sshd[1496287]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:35:42 ispc sshd[1496287]: Invalid user martof from 103.28.37.227 Dec 14 04:36:01 ispc CRON[1496292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:36:48 ispc saslauthd[1496325]: pam_mysql - SELECT returned no result. Dec 14 04:36:48 ispc saslauthd[1496325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:36:48 ispc saslauthd[1496325]: do_auth : auth failure: [user=none] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:37:01 ispc CRON[1496333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:37:01 ispc CRON[1496333]: pam_unix(cron:session): session closed for user root Dec 14 04:37:32 ispc saslauthd[1496362]: pam_mysql - SELECT returned no result. Dec 14 04:37:32 ispc saslauthd[1496362]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:37:32 ispc saslauthd[1496362]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:01 ispc CRON[1496382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:38:01 ispc CRON[1496382]: pam_unix(cron:session): session closed for user root Dec 14 04:38:11 ispc saslauthd[1496398]: pam_mysql - SELECT returned no result. Dec 14 04:38:11 ispc saslauthd[1496398]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:11 ispc saslauthd[1496398]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:13 ispc saslauthd[1496403]: pam_mysql - SELECT returned no result. Dec 14 04:38:13 ispc saslauthd[1496403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:13 ispc saslauthd[1496403]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:18 ispc saslauthd[1496406]: pam_mysql - SELECT returned no result. Dec 14 04:38:18 ispc saslauthd[1496406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:18 ispc saslauthd[1496406]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:33 ispc saslauthd[1496415]: pam_mysql - SELECT returned no result. Dec 14 04:38:33 ispc saslauthd[1496415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:33 ispc saslauthd[1496415]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:36 ispc saslauthd[1496416]: pam_mysql - SELECT returned no result. Dec 14 04:38:36 ispc saslauthd[1496416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:36 ispc saslauthd[1496416]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:37 ispc saslauthd[1496417]: pam_mysql - SELECT returned no result. Dec 14 04:38:37 ispc saslauthd[1496417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:37 ispc saslauthd[1496417]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:41 ispc saslauthd[1496420]: pam_mysql - SELECT returned no result. Dec 14 04:38:41 ispc saslauthd[1496420]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:41 ispc saslauthd[1496420]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:41 ispc postfix/smtpd[1496418]: sql auxprop plugin using mysql engine Dec 14 04:38:41 ispc postfix/smtpd[1496421]: sql auxprop plugin using mysql engine Dec 14 04:38:41 ispc postfix/smtpd[1496422]: sql auxprop plugin using mysql engine Dec 14 04:38:41 ispc saslauthd[1496423]: pam_mysql - SELECT returned no result. Dec 14 04:38:41 ispc saslauthd[1496423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:41 ispc saslauthd[1496423]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:41 ispc saslauthd[1496424]: pam_mysql - SELECT returned no result. Dec 14 04:38:41 ispc saslauthd[1496424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:41 ispc saslauthd[1496424]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:42 ispc saslauthd[1496425]: pam_mysql - SELECT returned no result. Dec 14 04:38:42 ispc saslauthd[1496425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:42 ispc saslauthd[1496425]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:42 ispc saslauthd[1496426]: pam_mysql - SELECT returned no result. Dec 14 04:38:42 ispc saslauthd[1496426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:42 ispc saslauthd[1496426]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:44 ispc saslauthd[1496431]: pam_mysql - SELECT returned no result. Dec 14 04:38:44 ispc saslauthd[1496431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:44 ispc saslauthd[1496431]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:44 ispc saslauthd[1496432]: pam_mysql - SELECT returned no result. Dec 14 04:38:44 ispc saslauthd[1496432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:44 ispc saslauthd[1496432]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:38:46 ispc saslauthd[1496434]: pam_mysql - SELECT returned no result. Dec 14 04:38:46 ispc saslauthd[1496434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:38:46 ispc saslauthd[1496434]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:39:01 ispc postfix/smtpd[1496439]: sql auxprop plugin using mysql engine Dec 14 04:39:01 ispc CRON[1496440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:39:01 ispc CRON[1496441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:39:01 ispc CRON[1496440]: pam_unix(cron:session): session closed for user root Dec 14 04:39:02 ispc postfix/smtpd[1496459]: sql auxprop plugin using mysql engine Dec 14 04:39:02 ispc CRON[1496441]: pam_unix(cron:session): session closed for user root Dec 14 04:39:07 ispc sshd[1496463]: Invalid user ziplines from 61.183.86.2 Dec 14 04:39:12 ispc saslauthd[1496469]: pam_mysql - SELECT returned no result. Dec 14 04:39:12 ispc saslauthd[1496469]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:39:12 ispc saslauthd[1496469]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:39:20 ispc saslauthd[1496475]: pam_mysql - SELECT returned no result. Dec 14 04:39:20 ispc saslauthd[1496475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:39:20 ispc saslauthd[1496475]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:39:23 ispc sshd[1496476]: Invalid user sol from 80.94.92.182 Dec 14 04:39:24 ispc postfix/smtpd[1496482]: sql auxprop plugin using mysql engine Dec 14 04:39:25 ispc saslauthd[1496483]: pam_mysql - SELECT returned no result. Dec 14 04:39:25 ispc saslauthd[1496483]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:39:25 ispc saslauthd[1496483]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:40:00 ispc sshd[1496498]: Invalid user klape from 2.57.217.229 Dec 14 04:40:01 ispc sshd[1496500]: Invalid user ubuntu from 2.57.217.229 Dec 14 04:40:01 ispc CRON[1496502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:40:01 ispc CRON[1496503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:40:01 ispc CRON[1496504]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 04:40:01 ispc CRON[1496505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:40:01 ispc CRON[1496506]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:40:01 ispc CRON[1496504]: pam_unix(cron:session): session closed for user www-data Dec 14 04:40:01 ispc CRON[1496503]: pam_unix(cron:session): session closed for user root Dec 14 04:40:01 ispc CRON[1496506]: pam_unix(cron:session): session closed for user getmail Dec 14 04:40:02 ispc CRON[1496505]: pam_unix(cron:session): session closed for user root Dec 14 04:40:02 ispc CRON[1496502]: pam_unix(cron:session): session closed for user root Dec 14 04:40:38 ispc saslauthd[1496600]: pam_mysql - SELECT returned no result. Dec 14 04:40:38 ispc saslauthd[1496600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:40:38 ispc saslauthd[1496600]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:41:01 ispc CRON[1496677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:41:02 ispc CRON[1496677]: pam_unix(cron:session): session closed for user root Dec 14 04:42:01 ispc CRON[1496714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:42:01 ispc CRON[1496714]: pam_unix(cron:session): session closed for user root Dec 14 04:42:03 ispc saslauthd[1496725]: pam_mysql - SELECT returned no result. Dec 14 04:42:03 ispc saslauthd[1496725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:42:03 ispc saslauthd[1496725]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:42:31 ispc sshd[1496739]: Invalid user martof from 51.91.247.10 Dec 14 04:43:01 ispc CRON[1496764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:43:02 ispc CRON[1496764]: pam_unix(cron:session): session closed for user root Dec 14 04:43:07 ispc sshd[1496776]: Invalid user martof from 211.110.229.128 Dec 14 04:43:13 ispc saslauthd[1496784]: pam_mysql - SELECT returned no result. Dec 14 04:43:13 ispc saslauthd[1496784]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:43:13 ispc saslauthd[1496784]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:43:46 ispc saslauthd[1496797]: pam_mysql - SELECT returned no result. Dec 14 04:43:46 ispc saslauthd[1496797]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:43:46 ispc saslauthd[1496797]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:44:01 ispc CRON[1496803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:44:01 ispc CRON[1496803]: pam_unix(cron:session): session closed for user root Dec 14 04:44:06 ispc saslauthd[1496818]: pam_mysql - SELECT returned no result. Dec 14 04:44:06 ispc saslauthd[1496818]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:44:06 ispc saslauthd[1496818]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:45:01 ispc CRON[1496844]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:45:02 ispc CRON[1496841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:45:02 ispc CRON[1496843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:45:02 ispc CRON[1496842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:45:02 ispc CRON[1496842]: pam_unix(cron:session): session closed for user root Dec 14 04:45:02 ispc CRON[1496844]: pam_unix(cron:session): session closed for user getmail Dec 14 04:45:02 ispc CRON[1496841]: pam_unix(cron:session): session closed for user root Dec 14 04:45:03 ispc CRON[1496843]: pam_unix(cron:session): session closed for user root Dec 14 04:45:24 ispc saslauthd[1496927]: pam_mysql - SELECT returned no result. Dec 14 04:45:24 ispc saslauthd[1496927]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:45:24 ispc saslauthd[1496927]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:46:01 ispc CRON[1496950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:46:01 ispc CRON[1496950]: pam_unix(cron:session): session closed for user root Dec 14 04:46:01 ispc postfix/smtpd[1496961]: sql auxprop plugin using mysql engine Dec 14 04:46:05 ispc saslauthd[1496963]: pam_mysql - SELECT returned no result. Dec 14 04:46:05 ispc saslauthd[1496963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:46:05 ispc saslauthd[1496963]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:46:46 ispc sshd[1496984]: Invalid user admin from 116.110.12.1 Dec 14 04:46:51 ispc sshd[1496990]: Invalid user admin from 116.110.153.144 Dec 14 04:46:53 ispc sshd[1496991]: Invalid user config from 116.110.153.144 Dec 14 04:46:53 ispc sshd[1496994]: Invalid user user from 116.110.12.1 Dec 14 04:46:55 ispc sshd[1496998]: Invalid user installer from 116.110.12.1 Dec 14 04:46:55 ispc sshd[1496996]: Invalid user ubnt from 116.110.153.144 Dec 14 04:46:59 ispc sshd[1497002]: Invalid user operator from 116.110.153.144 Dec 14 04:47:01 ispc CRON[1497009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:47:01 ispc CRON[1497009]: pam_unix(cron:session): session closed for user root Dec 14 04:47:08 ispc sshd[1497020]: Invalid user admin from 116.110.12.1 Dec 14 04:47:11 ispc sshd[1497022]: Invalid user ftp from 116.110.153.144 Dec 14 04:47:13 ispc sshd[1497030]: Invalid user admin from 116.110.12.1 Dec 14 04:47:25 ispc sshd[1497038]: Invalid user user from 116.110.12.1 Dec 14 04:47:52 ispc sshd[1497068]: Invalid user guest from 116.110.153.144 Dec 14 04:48:01 ispc CRON[1497082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:48:02 ispc CRON[1497082]: pam_unix(cron:session): session closed for user root Dec 14 04:48:06 ispc sshd[1497095]: Invalid user klape from 187.190.35.163 Dec 14 04:48:07 ispc sshd[1497099]: Invalid user ubuntu from 187.190.35.163 Dec 14 04:48:07 ispc sshd[1497097]: Invalid user blceu from 211.45.175.153 Dec 14 04:48:49 ispc sshd[1497118]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:48:49 ispc sshd[1497118]: Invalid user martof from 103.91.189.70 Dec 14 04:49:01 ispc CRON[1497130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:49:02 ispc CRON[1497130]: pam_unix(cron:session): session closed for user root Dec 14 04:49:50 ispc sshd[1497162]: Invalid user klape from 36.50.177.171 Dec 14 04:49:52 ispc sshd[1497164]: Invalid user ubuntu from 36.50.177.171 Dec 14 04:50:01 ispc CRON[1497174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:50:01 ispc CRON[1497175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:50:01 ispc CRON[1497176]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 04:50:01 ispc CRON[1497177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:50:01 ispc CRON[1497178]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:50:01 ispc CRON[1497175]: pam_unix(cron:session): session closed for user root Dec 14 04:50:01 ispc CRON[1497176]: pam_unix(cron:session): session closed for user www-data Dec 14 04:50:01 ispc CRON[1497178]: pam_unix(cron:session): session closed for user getmail Dec 14 04:50:02 ispc CRON[1497174]: pam_unix(cron:session): session closed for user root Dec 14 04:50:02 ispc CRON[1497177]: pam_unix(cron:session): session closed for user root Dec 14 04:50:03 ispc sshd[1497233]: Invalid user ziplines from 43.135.130.196 Dec 14 04:50:14 ispc postfix/smtpd[1497259]: sql auxprop plugin using mysql engine Dec 14 04:50:14 ispc postfix/smtpd[1497261]: sql auxprop plugin using mysql engine Dec 14 04:50:14 ispc saslauthd[1497263]: pam_mysql - SELECT returned no result. Dec 14 04:50:14 ispc saslauthd[1497263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:50:14 ispc saslauthd[1497263]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:50:14 ispc saslauthd[1497264]: pam_mysql - SELECT returned no result. Dec 14 04:50:14 ispc saslauthd[1497264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:50:14 ispc saslauthd[1497264]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:50:32 ispc saslauthd[1497277]: pam_mysql - SELECT returned no result. Dec 14 04:50:32 ispc saslauthd[1497277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:50:32 ispc saslauthd[1497277]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:51:01 ispc CRON[1497290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:51:03 ispc CRON[1497290]: pam_unix(cron:session): session closed for user root Dec 14 04:51:06 ispc saslauthd[1497308]: pam_mysql - SELECT returned no result. Dec 14 04:51:06 ispc saslauthd[1497308]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:51:06 ispc saslauthd[1497308]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:51:07 ispc sshd[1497306]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:51:53 ispc saslauthd[1497332]: pam_mysql - SELECT returned no result. Dec 14 04:51:53 ispc saslauthd[1497332]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:51:53 ispc saslauthd[1497332]: do_auth : auth failure: [user=nsroot] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:52:01 ispc CRON[1497335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:52:01 ispc CRON[1497335]: pam_unix(cron:session): session closed for user root Dec 14 04:52:44 ispc postfix/smtpd[1497370]: sql auxprop plugin using mysql engine Dec 14 04:52:46 ispc saslauthd[1497376]: pam_mysql - SELECT returned no result. Dec 14 04:52:46 ispc saslauthd[1497376]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:52:46 ispc saslauthd[1497376]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:53:01 ispc CRON[1497382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:53:03 ispc CRON[1497382]: pam_unix(cron:session): session closed for user root Dec 14 04:54:01 ispc CRON[1497426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:54:02 ispc CRON[1497426]: pam_unix(cron:session): session closed for user root Dec 14 04:54:02 ispc sshd[1497433]: Invalid user blceu from 202.46.29.79 Dec 14 04:54:05 ispc sshd[1497439]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:54:05 ispc sshd[1497439]: Invalid user blceu from 103.28.37.227 Dec 14 04:54:13 ispc sshd[1497448]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 04:54:13 ispc sshd[1497448]: Invalid user admin from 78.128.112.74 Dec 14 04:55:01 ispc CRON[1497474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:55:01 ispc CRON[1497475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:55:01 ispc CRON[1497476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:55:01 ispc CRON[1497477]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 04:55:01 ispc CRON[1497475]: pam_unix(cron:session): session closed for user root Dec 14 04:55:01 ispc CRON[1497477]: pam_unix(cron:session): session closed for user getmail Dec 14 04:55:02 ispc CRON[1497476]: pam_unix(cron:session): session closed for user root Dec 14 04:55:02 ispc CRON[1497474]: pam_unix(cron:session): session closed for user root Dec 14 04:56:00 ispc sshd[1497577]: Invalid user blceu from 118.218.219.250 Dec 14 04:56:01 ispc CRON[1497580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:56:02 ispc CRON[1497580]: pam_unix(cron:session): session closed for user root Dec 14 04:56:06 ispc sshd[1497591]: Invalid user blceu from 43.135.148.156 Dec 14 04:56:27 ispc postfix/smtpd[1497604]: sql auxprop plugin using mysql engine Dec 14 04:56:27 ispc CRON[1496292]: pam_unix(cron:session): session closed for user root Dec 14 04:56:36 ispc saslauthd[1497609]: pam_mysql - SELECT returned no result. Dec 14 04:56:36 ispc saslauthd[1497609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:56:36 ispc saslauthd[1497609]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 04:57:01 ispc CRON[1497610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:57:03 ispc CRON[1497610]: pam_unix(cron:session): session closed for user root Dec 14 04:57:07 ispc sshd[1497622]: Invalid user martof from 211.57.200.145 Dec 14 04:57:28 ispc sshd[1497630]: Invalid user klape from 200.32.52.150 Dec 14 04:57:29 ispc sshd[1497632]: Invalid user ubuntu from 200.32.52.150 Dec 14 04:58:01 ispc CRON[1497645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:58:01 ispc CRON[1497645]: pam_unix(cron:session): session closed for user root Dec 14 04:59:01 ispc CRON[1497659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 04:59:02 ispc CRON[1497659]: pam_unix(cron:session): session closed for user root Dec 14 04:59:12 ispc postfix/smtpd[1497672]: sql auxprop plugin using mysql engine Dec 14 04:59:15 ispc saslauthd[1497674]: pam_mysql - SELECT returned no result. Dec 14 04:59:15 ispc saslauthd[1497674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 04:59:15 ispc saslauthd[1497674]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 04:59:46 ispc sshd[1497676]: Invalid user blceu from 45.119.213.109 Dec 14 05:00:01 ispc CRON[1497679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:00:01 ispc CRON[1497680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:00:01 ispc CRON[1497681]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:00:01 ispc CRON[1497682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:00:01 ispc CRON[1497683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:00:01 ispc CRON[1497684]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:00:01 ispc CRON[1497681]: pam_unix(cron:session): session closed for user www-data Dec 14 05:00:01 ispc CRON[1497680]: pam_unix(cron:session): session closed for user root Dec 14 05:00:01 ispc CRON[1497684]: pam_unix(cron:session): session closed for user getmail Dec 14 05:00:02 ispc CRON[1497682]: pam_unix(cron:session): session closed for user root Dec 14 05:00:02 ispc CRON[1497679]: pam_unix(cron:session): session closed for user root Dec 14 05:00:21 ispc saslauthd[1497953]: pam_mysql - SELECT returned no result. Dec 14 05:00:21 ispc saslauthd[1497953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:00:21 ispc saslauthd[1497953]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:00:53 ispc CRON[1497683]: pam_unix(cron:session): session closed for user root Dec 14 05:01:01 ispc CRON[1497959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:01:12 ispc sshd[1497972]: Invalid user admin from 52.232.19.79 Dec 14 05:01:44 ispc saslauthd[1497990]: pam_mysql - SELECT returned no result. Dec 14 05:01:44 ispc saslauthd[1497990]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:01:44 ispc saslauthd[1497990]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:02:01 ispc CRON[1497997]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 05:02:01 ispc CRON[1497998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:02:01 ispc CRON[1497998]: pam_unix(cron:session): session closed for user root Dec 14 05:03:01 ispc CRON[1498844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:03:02 ispc CRON[1498844]: pam_unix(cron:session): session closed for user root Dec 14 05:03:38 ispc CRON[1497997]: pam_unix(cron:session): session closed for user logcheck Dec 14 05:03:45 ispc postfix/smtpd[1499104]: sql auxprop plugin using mysql engine Dec 14 05:04:01 ispc CRON[1499113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:04:05 ispc CRON[1499113]: pam_unix(cron:session): session closed for user root Dec 14 05:04:20 ispc sshd[1499132]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:04:20 ispc sshd[1499132]: Invalid user ziplines from 103.91.189.70 Dec 14 05:04:50 ispc sshd[1499152]: Invalid user diamantdi from 51.159.18.215 Dec 14 05:05:01 ispc CRON[1499161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:05:01 ispc CRON[1499162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:05:01 ispc CRON[1499163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:05:01 ispc CRON[1499164]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:05:01 ispc CRON[1499162]: pam_unix(cron:session): session closed for user root Dec 14 05:05:01 ispc CRON[1499164]: pam_unix(cron:session): session closed for user getmail Dec 14 05:05:01 ispc CRON[1499163]: pam_unix(cron:session): session closed for user root Dec 14 05:05:02 ispc CRON[1499161]: pam_unix(cron:session): session closed for user root Dec 14 05:06:01 ispc CRON[1499264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:06:02 ispc CRON[1499264]: pam_unix(cron:session): session closed for user root Dec 14 05:06:06 ispc postfix/smtpd[1499275]: sql auxprop plugin using mysql engine Dec 14 05:06:06 ispc saslauthd[1499278]: pam_mysql - SELECT returned no result. Dec 14 05:06:06 ispc saslauthd[1499278]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:06:06 ispc saslauthd[1499278]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:06:24 ispc postfix/smtpd[1499287]: sql auxprop plugin using mysql engine Dec 14 05:06:25 ispc saslauthd[1499289]: pam_mysql - SELECT returned no result. Dec 14 05:06:25 ispc saslauthd[1499289]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:06:25 ispc saslauthd[1499289]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:06:51 ispc saslauthd[1499303]: pam_mysql - SELECT returned no result. Dec 14 05:06:51 ispc saslauthd[1499303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:06:51 ispc saslauthd[1499303]: do_auth : auth failure: [user=ntpupdate] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:07:01 ispc CRON[1499310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:07:01 ispc CRON[1499310]: pam_unix(cron:session): session closed for user root Dec 14 05:08:01 ispc CRON[1499356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:08:02 ispc CRON[1499356]: pam_unix(cron:session): session closed for user root Dec 14 05:09:01 ispc CRON[1499391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:09:01 ispc CRON[1499392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:09:01 ispc CRON[1499391]: pam_unix(cron:session): session closed for user root Dec 14 05:09:02 ispc CRON[1499392]: pam_unix(cron:session): session closed for user root Dec 14 05:09:58 ispc sshd[1499440]: Invalid user martof from 61.183.86.2 Dec 14 05:10:01 ispc CRON[1499442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:10:01 ispc CRON[1499443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:10:01 ispc CRON[1499444]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:10:01 ispc CRON[1499445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:10:01 ispc CRON[1499446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:10:01 ispc CRON[1499444]: pam_unix(cron:session): session closed for user www-data Dec 14 05:10:01 ispc CRON[1499443]: pam_unix(cron:session): session closed for user root Dec 14 05:10:01 ispc CRON[1499446]: pam_unix(cron:session): session closed for user getmail Dec 14 05:10:02 ispc CRON[1499445]: pam_unix(cron:session): session closed for user root Dec 14 05:10:03 ispc CRON[1499442]: pam_unix(cron:session): session closed for user root Dec 14 05:10:34 ispc sshd[1499535]: Invalid user from 134.199.205.242 Dec 14 05:11:01 ispc CRON[1499549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:11:02 ispc CRON[1499549]: pam_unix(cron:session): session closed for user root Dec 14 05:12:01 ispc CRON[1499589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:12:01 ispc CRON[1499589]: pam_unix(cron:session): session closed for user root Dec 14 05:12:08 ispc sshd[1499604]: Invalid user ziplines from 51.79.36.60 Dec 14 05:13:01 ispc CRON[1499637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:13:03 ispc CRON[1499637]: pam_unix(cron:session): session closed for user root Dec 14 05:13:06 ispc postfix/smtpd[1499648]: sql auxprop plugin using mysql engine Dec 14 05:13:10 ispc saslauthd[1499655]: pam_mysql - SELECT returned no result. Dec 14 05:13:10 ispc saslauthd[1499655]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:13:10 ispc saslauthd[1499655]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:13:15 ispc postfix/smtpd[1499656]: sql auxprop plugin using mysql engine Dec 14 05:13:16 ispc saslauthd[1499658]: pam_mysql - SELECT returned no result. Dec 14 05:13:16 ispc saslauthd[1499658]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:13:16 ispc saslauthd[1499658]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:14:01 ispc CRON[1499683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:14:02 ispc CRON[1499683]: pam_unix(cron:session): session closed for user root Dec 14 05:14:11 ispc sshd[1499699]: Did not receive identification string from 45.140.17.97 Dec 14 05:15:01 ispc CRON[1499724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:15:01 ispc CRON[1499725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:15:01 ispc CRON[1499726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:15:01 ispc CRON[1499727]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:15:01 ispc CRON[1499725]: pam_unix(cron:session): session closed for user root Dec 14 05:15:02 ispc CRON[1499727]: pam_unix(cron:session): session closed for user getmail Dec 14 05:15:02 ispc CRON[1499726]: pam_unix(cron:session): session closed for user root Dec 14 05:15:04 ispc postfix/smtpd[1499787]: sql auxprop plugin using mysql engine Dec 14 05:15:04 ispc CRON[1499724]: pam_unix(cron:session): session closed for user root Dec 14 05:15:53 ispc postfix/smtpd[1499823]: sql auxprop plugin using mysql engine Dec 14 05:15:54 ispc saslauthd[1499825]: pam_mysql - SELECT returned no result. Dec 14 05:15:54 ispc saslauthd[1499825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:15:54 ispc saslauthd[1499825]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:15:54 ispc saslauthd[1499826]: pam_mysql - SELECT returned no result. Dec 14 05:15:54 ispc saslauthd[1499826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:15:54 ispc saslauthd[1499826]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:16:01 ispc CRON[1499831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:16:01 ispc CRON[1499831]: pam_unix(cron:session): session closed for user root Dec 14 05:16:42 ispc sshd[1499862]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:17:01 ispc CRON[1499873]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:17:01 ispc CRON[1499874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:17:03 ispc CRON[1499874]: pam_unix(cron:session): session closed for user root Dec 14 05:17:03 ispc CRON[1499873]: pam_unix(cron:session): session closed for user www-data Dec 14 05:17:09 ispc saslauthd[1499887]: pam_mysql - SELECT returned no result. Dec 14 05:17:09 ispc saslauthd[1499887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:17:09 ispc saslauthd[1499887]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:17:42 ispc sshd[1499910]: Invalid user martof from 202.46.29.79 Dec 14 05:18:01 ispc CRON[1499925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:18:02 ispc CRON[1499925]: pam_unix(cron:session): session closed for user root Dec 14 05:18:25 ispc sshd[1499946]: Invalid user blceu from 51.159.18.215 Dec 14 05:19:01 ispc CRON[1499965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:19:02 ispc CRON[1499965]: pam_unix(cron:session): session closed for user root Dec 14 05:19:13 ispc postfix/smtpd[1499985]: sql auxprop plugin using mysql engine Dec 14 05:19:14 ispc saslauthd[1499987]: pam_mysql - SELECT returned no result. Dec 14 05:19:14 ispc saslauthd[1499987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:19:14 ispc saslauthd[1499987]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:19:31 ispc postfix/smtpd[1499997]: sql auxprop plugin using mysql engine Dec 14 05:19:32 ispc saslauthd[1499999]: pam_mysql - SELECT returned no result. Dec 14 05:19:32 ispc saslauthd[1499999]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:19:32 ispc saslauthd[1499999]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:19:50 ispc postfix/smtpd[1500004]: sql auxprop plugin using mysql engine Dec 14 05:19:50 ispc saslauthd[1500006]: pam_mysql - SELECT returned no result. Dec 14 05:19:50 ispc saslauthd[1500006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:19:50 ispc saslauthd[1500006]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:19:50 ispc saslauthd[1500007]: pam_mysql - SELECT returned no result. Dec 14 05:19:50 ispc saslauthd[1500007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:19:50 ispc saslauthd[1500007]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:19:52 ispc saslauthd[1500012]: pam_mysql - SELECT returned no result. Dec 14 05:19:52 ispc saslauthd[1500012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:19:52 ispc saslauthd[1500012]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:20:01 ispc CRON[1500013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:20:01 ispc CRON[1500017]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:20:01 ispc CRON[1500016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:20:01 ispc CRON[1500015]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:20:01 ispc CRON[1500014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:20:01 ispc CRON[1500014]: pam_unix(cron:session): session closed for user root Dec 14 05:20:01 ispc CRON[1500015]: pam_unix(cron:session): session closed for user www-data Dec 14 05:20:01 ispc CRON[1500017]: pam_unix(cron:session): session closed for user getmail Dec 14 05:20:01 ispc CRON[1500016]: pam_unix(cron:session): session closed for user root Dec 14 05:20:03 ispc CRON[1500013]: pam_unix(cron:session): session closed for user root Dec 14 05:21:01 ispc CRON[1500122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:21:01 ispc CRON[1500123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:21:01 ispc CRON[1500122]: pam_unix(cron:session): session closed for user root Dec 14 05:21:01 ispc CRON[1500123]: pam_unix(cron:session): session closed for user root Dec 14 05:21:07 ispc sshd[1500140]: Invalid user blceu from 103.77.207.53 Dec 14 05:21:17 ispc saslauthd[1500146]: pam_mysql - SELECT returned no result. Dec 14 05:21:17 ispc saslauthd[1500146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:21:17 ispc saslauthd[1500146]: do_auth : auth failure: [user=nuucp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:21:24 ispc CRON[1497959]: pam_unix(cron:session): session closed for user root Dec 14 05:22:01 ispc CRON[1500159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:22:02 ispc CRON[1500159]: pam_unix(cron:session): session closed for user root Dec 14 05:22:19 ispc sshd[1500171]: Did not receive identification string from 159.223.13.60 Dec 14 05:23:01 ispc CRON[1500187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:23:02 ispc CRON[1500187]: pam_unix(cron:session): session closed for user root Dec 14 05:23:04 ispc saslauthd[1500202]: pam_mysql - SELECT returned no result. Dec 14 05:23:04 ispc saslauthd[1500202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:23:04 ispc saslauthd[1500202]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:23:18 ispc sshd[1500203]: Invalid user ziplines from 61.183.86.2 Dec 14 05:24:01 ispc CRON[1500211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:24:03 ispc CRON[1500211]: pam_unix(cron:session): session closed for user root Dec 14 05:24:50 ispc sshd[1500227]: Invalid user blceu from 51.91.247.10 Dec 14 05:25:01 ispc CRON[1500229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:25:01 ispc CRON[1500230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:25:01 ispc CRON[1500231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:25:01 ispc CRON[1500232]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:25:01 ispc CRON[1500230]: pam_unix(cron:session): session closed for user root Dec 14 05:25:01 ispc CRON[1500232]: pam_unix(cron:session): session closed for user getmail Dec 14 05:25:04 ispc CRON[1500229]: pam_unix(cron:session): session closed for user root Dec 14 05:25:43 ispc CRON[1500231]: pam_unix(cron:session): session closed for user root Dec 14 05:26:00 ispc postfix/smtpd[1500348]: sql auxprop plugin using mysql engine Dec 14 05:26:01 ispc CRON[1500351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:26:02 ispc saslauthd[1500362]: pam_mysql - SELECT returned no result. Dec 14 05:26:02 ispc saslauthd[1500362]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:26:02 ispc saslauthd[1500362]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:27:01 ispc CRON[1500390]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:27:01 ispc CRON[1500391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:27:02 ispc CRON[1500391]: pam_unix(cron:session): session closed for user root Dec 14 05:27:05 ispc sshd[1500410]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:27:59 ispc postfix/smtpd[1500457]: sql auxprop plugin using mysql engine Dec 14 05:28:00 ispc CRON[1500390]: pam_unix(cron:session): session closed for user www-data Dec 14 05:28:00 ispc CRON[1500462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:28:01 ispc CRON[1500462]: pam_unix(cron:session): session closed for user root Dec 14 05:29:01 ispc CRON[1500503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:29:02 ispc CRON[1500503]: pam_unix(cron:session): session closed for user root Dec 14 05:29:10 ispc postfix/smtpd[1500520]: sql auxprop plugin using mysql engine Dec 14 05:29:11 ispc saslauthd[1500522]: pam_mysql - SELECT returned no result. Dec 14 05:29:11 ispc saslauthd[1500522]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:29:11 ispc saslauthd[1500522]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:30:01 ispc CRON[1500553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:30:01 ispc CRON[1500554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:30:01 ispc CRON[1500555]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:30:01 ispc CRON[1500556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:30:01 ispc CRON[1500557]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:30:01 ispc CRON[1500555]: pam_unix(cron:session): session closed for user www-data Dec 14 05:30:01 ispc CRON[1500554]: pam_unix(cron:session): session closed for user root Dec 14 05:30:01 ispc CRON[1500557]: pam_unix(cron:session): session closed for user getmail Dec 14 05:30:01 ispc CRON[1500556]: pam_unix(cron:session): session closed for user root Dec 14 05:30:02 ispc CRON[1500553]: pam_unix(cron:session): session closed for user root Dec 14 05:30:02 ispc sshd[1500551]: Invalid user martof from 221.156.137.103 Dec 14 05:30:50 ispc saslauthd[1500656]: pam_mysql - SELECT returned no result. Dec 14 05:30:50 ispc saslauthd[1500656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:30:50 ispc saslauthd[1500656]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:31:01 ispc CRON[1500665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:31:02 ispc CRON[1500665]: pam_unix(cron:session): session closed for user root Dec 14 05:31:39 ispc sshd[1500695]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:31:56 ispc sshd[1500703]: Invalid user martof from 43.135.130.196 Dec 14 05:32:01 ispc CRON[1500709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:32:02 ispc CRON[1500709]: pam_unix(cron:session): session closed for user root Dec 14 05:32:04 ispc sshd[1500720]: Invalid user ziplines from 211.23.78.98 Dec 14 05:32:16 ispc postfix/smtpd[1500729]: sql auxprop plugin using mysql engine Dec 14 05:32:22 ispc saslauthd[1500736]: pam_mysql - SELECT returned no result. Dec 14 05:32:22 ispc saslauthd[1500736]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:22 ispc saslauthd[1500736]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:32:26 ispc sshd[1500737]: Invalid user pronajemplosin from 120.48.125.223 Dec 14 05:32:38 ispc postfix/smtpd[1500747]: sql auxprop plugin using mysql engine Dec 14 05:32:39 ispc postfix/smtpd[1500753]: sql auxprop plugin using mysql engine Dec 14 05:32:39 ispc saslauthd[1500757]: pam_mysql - SELECT returned no result. Dec 14 05:32:39 ispc saslauthd[1500757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:39 ispc saslauthd[1500757]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:32:39 ispc saslauthd[1500759]: pam_mysql - SELECT returned no result. Dec 14 05:32:39 ispc saslauthd[1500759]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:39 ispc saslauthd[1500759]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:32:56 ispc saslauthd[1500769]: pam_mysql - SELECT returned no result. Dec 14 05:32:56 ispc saslauthd[1500769]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:56 ispc saslauthd[1500769]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:32:57 ispc saslauthd[1500770]: pam_mysql - SELECT returned no result. Dec 14 05:32:57 ispc saslauthd[1500770]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:57 ispc saslauthd[1500770]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:32:58 ispc saslauthd[1500775]: pam_mysql - SELECT returned no result. Dec 14 05:32:58 ispc saslauthd[1500775]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:58 ispc saslauthd[1500775]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:32:58 ispc postfix/smtpd[1500776]: sql auxprop plugin using mysql engine Dec 14 05:32:58 ispc saslauthd[1500778]: pam_mysql - SELECT returned no result. Dec 14 05:32:58 ispc saslauthd[1500778]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:32:58 ispc saslauthd[1500778]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:00 ispc saslauthd[1500779]: pam_mysql - SELECT returned no result. Dec 14 05:33:00 ispc saslauthd[1500779]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:00 ispc saslauthd[1500779]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:00 ispc saslauthd[1500780]: pam_mysql - SELECT returned no result. Dec 14 05:33:00 ispc saslauthd[1500780]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:00 ispc saslauthd[1500780]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:01 ispc saslauthd[1500781]: pam_mysql - SELECT returned no result. Dec 14 05:33:01 ispc saslauthd[1500781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:01 ispc saslauthd[1500781]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:01 ispc saslauthd[1500782]: pam_mysql - SELECT returned no result. Dec 14 05:33:01 ispc saslauthd[1500782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:01 ispc saslauthd[1500782]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:01 ispc CRON[1500783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:33:02 ispc CRON[1500783]: pam_unix(cron:session): session closed for user root Dec 14 05:33:02 ispc saslauthd[1500794]: pam_mysql - SELECT returned no result. Dec 14 05:33:02 ispc saslauthd[1500794]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:02 ispc saslauthd[1500794]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:05 ispc saslauthd[1500795]: pam_mysql - SELECT returned no result. Dec 14 05:33:05 ispc saslauthd[1500795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:05 ispc saslauthd[1500795]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:07 ispc saslauthd[1500796]: pam_mysql - SELECT returned no result. Dec 14 05:33:07 ispc saslauthd[1500796]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:07 ispc saslauthd[1500796]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:31 ispc saslauthd[1500812]: pam_mysql - SELECT returned no result. Dec 14 05:33:31 ispc saslauthd[1500812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:33:31 ispc saslauthd[1500812]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:33:33 ispc sshd[1500813]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:33:33 ispc sshd[1500813]: Invalid user blceu from 157.245.115.125 Dec 14 05:33:45 ispc postfix/smtpd[1500819]: sql auxprop plugin using mysql engine Dec 14 05:34:01 ispc CRON[1500832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:34:01 ispc CRON[1500832]: pam_unix(cron:session): session closed for user root Dec 14 05:34:05 ispc saslauthd[1500843]: pam_mysql - SELECT returned no result. Dec 14 05:34:05 ispc saslauthd[1500843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:34:05 ispc saslauthd[1500843]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:35:01 ispc CRON[1500876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:35:01 ispc CRON[1500874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:35:01 ispc CRON[1500875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:35:01 ispc CRON[1500877]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:35:01 ispc CRON[1500875]: pam_unix(cron:session): session closed for user root Dec 14 05:35:01 ispc CRON[1500877]: pam_unix(cron:session): session closed for user getmail Dec 14 05:35:02 ispc CRON[1500876]: pam_unix(cron:session): session closed for user root Dec 14 05:35:03 ispc CRON[1500874]: pam_unix(cron:session): session closed for user root Dec 14 05:35:18 ispc saslauthd[1500956]: pam_mysql - SELECT returned no result. Dec 14 05:35:18 ispc saslauthd[1500956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:35:18 ispc saslauthd[1500956]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:35:29 ispc sshd[1500962]: Invalid user ziplines from 202.46.29.79 Dec 14 05:36:01 ispc CRON[1500982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:36:02 ispc CRON[1500982]: pam_unix(cron:session): session closed for user root Dec 14 05:36:15 ispc saslauthd[1500998]: pam_mysql - SELECT returned no result. Dec 14 05:36:15 ispc saslauthd[1500998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:36:15 ispc saslauthd[1500998]: do_auth : auth failure: [user=ods] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:37:01 ispc CRON[1501028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:37:01 ispc CRON[1501028]: pam_unix(cron:session): session closed for user root Dec 14 05:37:26 ispc saslauthd[1501048]: pam_mysql - SELECT returned no result. Dec 14 05:37:26 ispc saslauthd[1501048]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:37:26 ispc saslauthd[1501048]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:37:35 ispc sshd[1501054]: Invalid user admin from 159.223.13.60 Dec 14 05:38:01 ispc CRON[1501078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:38:02 ispc CRON[1501078]: pam_unix(cron:session): session closed for user root Dec 14 05:38:14 ispc sshd[1501095]: Invalid user admin from 159.223.13.60 Dec 14 05:38:14 ispc postfix/smtpd[1501097]: sql auxprop plugin using mysql engine Dec 14 05:38:16 ispc saslauthd[1501099]: pam_mysql - SELECT returned no result. Dec 14 05:38:16 ispc saslauthd[1501099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:38:16 ispc saslauthd[1501099]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:38:54 ispc sshd[1501119]: Invalid user admin from 159.223.13.60 Dec 14 05:39:01 ispc CRON[1501122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:39:01 ispc CRON[1501121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:39:01 ispc CRON[1501121]: pam_unix(cron:session): session closed for user root Dec 14 05:39:02 ispc CRON[1501122]: pam_unix(cron:session): session closed for user root Dec 14 05:39:28 ispc postfix/smtpd[1501158]: sql auxprop plugin using mysql engine Dec 14 05:39:28 ispc saslauthd[1501160]: pam_mysql - SELECT returned no result. Dec 14 05:39:28 ispc saslauthd[1501160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:39:28 ispc saslauthd[1501160]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:39:31 ispc sshd[1501161]: Invalid user admin from 159.223.13.60 Dec 14 05:40:01 ispc CRON[1501176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:40:01 ispc CRON[1501175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:40:01 ispc CRON[1501179]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:40:01 ispc CRON[1501177]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:40:01 ispc CRON[1501178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:40:01 ispc CRON[1501176]: pam_unix(cron:session): session closed for user root Dec 14 05:40:01 ispc CRON[1501177]: pam_unix(cron:session): session closed for user www-data Dec 14 05:40:01 ispc CRON[1501179]: pam_unix(cron:session): session closed for user getmail Dec 14 05:40:02 ispc CRON[1501178]: pam_unix(cron:session): session closed for user root Dec 14 05:40:03 ispc CRON[1501175]: pam_unix(cron:session): session closed for user root Dec 14 05:40:08 ispc sshd[1501257]: Invalid user admin from 159.223.13.60 Dec 14 05:40:37 ispc saslauthd[1501272]: pam_mysql - SELECT returned no result. Dec 14 05:40:37 ispc saslauthd[1501272]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:40:37 ispc saslauthd[1501272]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:40:44 ispc sshd[1501277]: Invalid user admin from 159.223.13.60 Dec 14 05:41:01 ispc CRON[1501292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:41:02 ispc CRON[1501292]: pam_unix(cron:session): session closed for user root Dec 14 05:41:05 ispc saslauthd[1501307]: pam_mysql - SELECT returned no result. Dec 14 05:41:05 ispc saslauthd[1501307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:41:05 ispc saslauthd[1501307]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:41:08 ispc sshd[1501308]: Invalid user martof from 103.77.207.53 Dec 14 05:41:54 ispc saslauthd[1501330]: pam_mysql - SELECT returned no result. Dec 14 05:41:54 ispc saslauthd[1501330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:41:54 ispc saslauthd[1501330]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:42:01 ispc CRON[1501335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:42:01 ispc CRON[1501335]: pam_unix(cron:session): session closed for user root Dec 14 05:43:01 ispc CRON[1501385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:43:01 ispc CRON[1501385]: pam_unix(cron:session): session closed for user root Dec 14 05:44:01 ispc CRON[1501422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:44:02 ispc CRON[1501422]: pam_unix(cron:session): session closed for user root Dec 14 05:44:14 ispc sshd[1501437]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:44:23 ispc postfix/smtpd[1501443]: sql auxprop plugin using mysql engine Dec 14 05:44:27 ispc saslauthd[1501449]: pam_mysql - SELECT returned no result. Dec 14 05:44:27 ispc saslauthd[1501449]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:44:27 ispc saslauthd[1501449]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:45:01 ispc CRON[1501464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:45:01 ispc CRON[1501465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:45:01 ispc CRON[1501466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:45:01 ispc CRON[1501467]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:45:01 ispc CRON[1501467]: pam_unix(cron:session): session closed for user getmail Dec 14 05:45:01 ispc CRON[1501465]: pam_unix(cron:session): session closed for user root Dec 14 05:45:01 ispc CRON[1501466]: pam_unix(cron:session): session closed for user root Dec 14 05:45:02 ispc CRON[1501464]: pam_unix(cron:session): session closed for user root Dec 14 05:45:11 ispc postfix/smtpd[1501544]: sql auxprop plugin using mysql engine Dec 14 05:45:11 ispc saslauthd[1501546]: pam_mysql - SELECT returned no result. Dec 14 05:45:11 ispc saslauthd[1501546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:45:11 ispc saslauthd[1501546]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:45:17 ispc sshd[1501548]: Invalid user ziplines from 5.133.121.104 Dec 14 05:46:01 ispc CRON[1501572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:46:01 ispc CRON[1501572]: pam_unix(cron:session): session closed for user root Dec 14 05:46:18 ispc CRON[1500351]: pam_unix(cron:session): session closed for user root Dec 14 05:46:23 ispc sshd[1501592]: Invalid user blceu from 5.133.121.104 Dec 14 05:47:00 ispc sshd[1501598]: Invalid user klape from 103.164.20.29 Dec 14 05:47:01 ispc CRON[1501602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:47:01 ispc sshd[1501600]: Invalid user ubuntu from 103.164.20.29 Dec 14 05:47:02 ispc CRON[1501602]: pam_unix(cron:session): session closed for user root Dec 14 05:47:12 ispc saslauthd[1501616]: pam_mysql - SELECT returned no result. Dec 14 05:47:12 ispc saslauthd[1501616]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:47:12 ispc saslauthd[1501616]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:47:18 ispc saslauthd[1501617]: pam_mysql - SELECT returned no result. Dec 14 05:47:18 ispc saslauthd[1501617]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:47:18 ispc saslauthd[1501617]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:47:47 ispc saslauthd[1501625]: pam_mysql - SELECT returned no result. Dec 14 05:47:47 ispc saslauthd[1501625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:47:47 ispc saslauthd[1501625]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:47:52 ispc saslauthd[1501631]: pam_mysql - SELECT returned no result. Dec 14 05:47:52 ispc saslauthd[1501631]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:47:52 ispc saslauthd[1501631]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:47:57 ispc sshd[1501633]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:47:57 ispc sshd[1501633]: Invalid user ziplines from 157.245.115.125 Dec 14 05:48:01 ispc CRON[1501635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:48:02 ispc CRON[1501635]: pam_unix(cron:session): session closed for user root Dec 14 05:48:23 ispc sshd[1501648]: Invalid user martof from 51.159.91.86 Dec 14 05:49:01 ispc CRON[1501653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:49:02 ispc CRON[1501653]: pam_unix(cron:session): session closed for user root Dec 14 05:49:04 ispc sshd[1501665]: Invalid user ziplines from 211.110.229.128 Dec 14 05:49:11 ispc saslauthd[1501668]: pam_mysql - SELECT returned no result. Dec 14 05:49:11 ispc saslauthd[1501668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:49:11 ispc saslauthd[1501668]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:50:01 ispc CRON[1501675]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 05:50:01 ispc CRON[1501676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:50:01 ispc CRON[1501677]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:50:01 ispc CRON[1501673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:50:01 ispc CRON[1501674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:50:01 ispc CRON[1501674]: pam_unix(cron:session): session closed for user root Dec 14 05:50:01 ispc CRON[1501675]: pam_unix(cron:session): session closed for user www-data Dec 14 05:50:01 ispc CRON[1501677]: pam_unix(cron:session): session closed for user getmail Dec 14 05:50:02 ispc CRON[1501673]: pam_unix(cron:session): session closed for user root Dec 14 05:50:45 ispc saslauthd[1501787]: pam_mysql - SELECT returned no result. Dec 14 05:50:45 ispc saslauthd[1501787]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:50:45 ispc saslauthd[1501787]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:50:46 ispc CRON[1501676]: pam_unix(cron:session): session closed for user root Dec 14 05:50:57 ispc saslauthd[1501788]: pam_mysql - SELECT returned no result. Dec 14 05:50:57 ispc saslauthd[1501788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:50:57 ispc saslauthd[1501788]: do_auth : auth failure: [user=purchasing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:51:01 ispc CRON[1501789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:51:03 ispc saslauthd[1501801]: pam_mysql - SELECT returned no result. Dec 14 05:51:03 ispc saslauthd[1501801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:51:03 ispc saslauthd[1501801]: do_auth : auth failure: [user=onlime_r] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:51:03 ispc postfix/smtpd[1501802]: sql auxprop plugin using mysql engine Dec 14 05:51:04 ispc saslauthd[1501804]: pam_mysql - SELECT returned no result. Dec 14 05:51:04 ispc saslauthd[1501804]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:51:04 ispc saslauthd[1501804]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:52:01 ispc CRON[1501828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:52:01 ispc CRON[1501828]: pam_unix(cron:session): session closed for user root Dec 14 05:52:37 ispc sshd[1501857]: Invalid user blceu from 49.247.24.89 Dec 14 05:53:01 ispc CRON[1501877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:53:02 ispc CRON[1501877]: pam_unix(cron:session): session closed for user root Dec 14 05:53:11 ispc postfix/smtpd[1501893]: sql auxprop plugin using mysql engine Dec 14 05:53:12 ispc saslauthd[1501895]: pam_mysql - SELECT returned no result. Dec 14 05:53:12 ispc saslauthd[1501895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:53:12 ispc saslauthd[1501895]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:53:15 ispc sshd[1501900]: Invalid user martof from 49.247.24.89 Dec 14 05:54:01 ispc CRON[1501920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:54:01 ispc CRON[1501920]: pam_unix(cron:session): session closed for user root Dec 14 05:54:14 ispc sshd[1501936]: Invalid user ziplines from 211.57.200.145 Dec 14 05:55:01 ispc CRON[1501965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:55:01 ispc CRON[1501966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:55:01 ispc CRON[1501967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:55:01 ispc CRON[1501968]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 05:55:02 ispc CRON[1501966]: pam_unix(cron:session): session closed for user root Dec 14 05:55:02 ispc CRON[1501968]: pam_unix(cron:session): session closed for user getmail Dec 14 05:55:02 ispc sshd[1501963]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:55:02 ispc CRON[1501967]: pam_unix(cron:session): session closed for user root Dec 14 05:55:03 ispc CRON[1501965]: pam_unix(cron:session): session closed for user root Dec 14 05:55:05 ispc postfix/smtpd[1502041]: sql auxprop plugin using mysql engine Dec 14 05:55:06 ispc saslauthd[1502043]: pam_mysql - SELECT returned no result. Dec 14 05:55:06 ispc saslauthd[1502043]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:55:06 ispc saslauthd[1502043]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:56:01 ispc CRON[1502071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:56:02 ispc CRON[1502071]: pam_unix(cron:session): session closed for user root Dec 14 05:56:12 ispc sshd[1502086]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 05:56:39 ispc sshd[1502097]: Invalid user ubuntu from 117.50.70.169 Dec 14 05:57:01 ispc CRON[1502113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:57:02 ispc CRON[1502113]: pam_unix(cron:session): session closed for user root Dec 14 05:57:41 ispc postfix/smtpd[1502149]: sql auxprop plugin using mysql engine Dec 14 05:57:43 ispc postfix/smtpd[1502150]: sql auxprop plugin using mysql engine Dec 14 05:57:43 ispc saslauthd[1502151]: pam_mysql - SELECT returned no result. Dec 14 05:57:43 ispc saslauthd[1502151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:57:43 ispc saslauthd[1502151]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 05:57:44 ispc saslauthd[1502152]: pam_mysql - SELECT returned no result. Dec 14 05:57:44 ispc saslauthd[1502152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:57:44 ispc saslauthd[1502152]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:58:01 ispc CRON[1502165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:58:02 ispc CRON[1502165]: pam_unix(cron:session): session closed for user root Dec 14 05:59:01 ispc CRON[1502198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 05:59:02 ispc CRON[1502198]: pam_unix(cron:session): session closed for user root Dec 14 05:59:21 ispc saslauthd[1502221]: pam_mysql - SELECT returned no result. Dec 14 05:59:21 ispc saslauthd[1502221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 05:59:21 ispc saslauthd[1502221]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 05:59:22 ispc sshd[1502219]: Invalid user blceu from 220.196.191.58 Dec 14 05:59:29 ispc postfix/smtpd[1502226]: sql auxprop plugin using mysql engine Dec 14 06:00:01 ispc CRON[1502241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:00:01 ispc CRON[1502242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:00:01 ispc CRON[1502243]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:00:01 ispc CRON[1502244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:00:01 ispc CRON[1502245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:00:01 ispc CRON[1502246]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:00:01 ispc CRON[1502242]: pam_unix(cron:session): session closed for user root Dec 14 06:00:01 ispc CRON[1502243]: pam_unix(cron:session): session closed for user www-data Dec 14 06:00:01 ispc CRON[1502246]: pam_unix(cron:session): session closed for user getmail Dec 14 06:00:02 ispc CRON[1502245]: pam_unix(cron:session): session closed for user root Dec 14 06:00:02 ispc CRON[1502244]: pam_unix(cron:session): session closed for user root Dec 14 06:00:03 ispc CRON[1502241]: pam_unix(cron:session): session closed for user root Dec 14 06:00:28 ispc sshd[1502411]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:00:47 ispc postfix/smtpd[1502421]: sql auxprop plugin using mysql engine Dec 14 06:00:48 ispc postfix/smtpd[1502423]: sql auxprop plugin using mysql engine Dec 14 06:00:51 ispc saslauthd[1502424]: pam_mysql - SELECT returned no result. Dec 14 06:00:51 ispc saslauthd[1502424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:00:51 ispc saslauthd[1502424]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:01:01 ispc CRON[1502430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:01:02 ispc sshd[1502429]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:01:02 ispc sshd[1502429]: Invalid user ziplines from 103.28.37.227 Dec 14 06:01:03 ispc CRON[1502430]: pam_unix(cron:session): session closed for user root Dec 14 06:01:34 ispc sshd[1502456]: Invalid user martof from 175.125.92.77 Dec 14 06:02:01 ispc CRON[1502472]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 06:02:01 ispc CRON[1502473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:02:02 ispc CRON[1502473]: pam_unix(cron:session): session closed for user root Dec 14 06:03:01 ispc CRON[1503335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:03:01 ispc CRON[1503335]: pam_unix(cron:session): session closed for user root Dec 14 06:03:28 ispc CRON[1502472]: pam_unix(cron:session): session closed for user logcheck Dec 14 06:03:33 ispc postfix/smtpd[1503558]: sql auxprop plugin using mysql engine Dec 14 06:03:59 ispc postfix/smtpd[1503574]: sql auxprop plugin using mysql engine Dec 14 06:04:01 ispc CRON[1503576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:04:02 ispc CRON[1503576]: pam_unix(cron:session): session closed for user root Dec 14 06:04:14 ispc saslauthd[1503597]: pam_mysql - SELECT returned no result. Dec 14 06:04:14 ispc saslauthd[1503597]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:04:14 ispc saslauthd[1503597]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:05:01 ispc CRON[1503624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:05:01 ispc CRON[1503625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:05:01 ispc CRON[1503626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:05:01 ispc CRON[1503627]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:05:01 ispc CRON[1503625]: pam_unix(cron:session): session closed for user root Dec 14 06:05:01 ispc CRON[1503627]: pam_unix(cron:session): session closed for user getmail Dec 14 06:05:01 ispc CRON[1503626]: pam_unix(cron:session): session closed for user root Dec 14 06:05:01 ispc CRON[1503624]: pam_unix(cron:session): session closed for user root Dec 14 06:05:58 ispc postfix/smtpd[1503721]: sql auxprop plugin using mysql engine Dec 14 06:06:00 ispc saslauthd[1503723]: pam_mysql - SELECT returned no result. Dec 14 06:06:00 ispc saslauthd[1503723]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:06:00 ispc saslauthd[1503723]: do_auth : auth failure: [user=op] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:06:01 ispc CRON[1503724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:06:02 ispc CRON[1503724]: pam_unix(cron:session): session closed for user root Dec 14 06:06:30 ispc sshd[1503747]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:07:01 ispc CRON[1503767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:07:02 ispc CRON[1503767]: pam_unix(cron:session): session closed for user root Dec 14 06:08:01 ispc CRON[1503814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:08:02 ispc CRON[1503814]: pam_unix(cron:session): session closed for user root Dec 14 06:08:41 ispc postfix/smtpd[1503841]: sql auxprop plugin using mysql engine Dec 14 06:08:42 ispc saslauthd[1503843]: pam_mysql - SELECT returned no result. Dec 14 06:08:42 ispc saslauthd[1503843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:08:42 ispc saslauthd[1503843]: do_auth : auth failure: [user=sybase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:09:01 ispc CRON[1503852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:09:01 ispc CRON[1503853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:09:02 ispc CRON[1503852]: pam_unix(cron:session): session closed for user root Dec 14 06:09:02 ispc CRON[1503853]: pam_unix(cron:session): session closed for user root Dec 14 06:09:03 ispc sshd[1503871]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:09:03 ispc sshd[1503871]: Invalid user martof from 103.28.37.227 Dec 14 06:09:05 ispc postfix/smtpd[1503881]: sql auxprop plugin using mysql engine Dec 14 06:10:01 ispc CRON[1503914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:10:01 ispc CRON[1503915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:10:01 ispc CRON[1503916]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:10:01 ispc CRON[1503917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:10:01 ispc CRON[1503918]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:10:01 ispc CRON[1503916]: pam_unix(cron:session): session closed for user www-data Dec 14 06:10:01 ispc CRON[1503915]: pam_unix(cron:session): session closed for user root Dec 14 06:10:01 ispc CRON[1503918]: pam_unix(cron:session): session closed for user getmail Dec 14 06:10:02 ispc CRON[1503914]: pam_unix(cron:session): session closed for user root Dec 14 06:10:02 ispc CRON[1503917]: pam_unix(cron:session): session closed for user root Dec 14 06:11:01 ispc CRON[1504016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:11:02 ispc CRON[1504016]: pam_unix(cron:session): session closed for user root Dec 14 06:11:26 ispc postfix/smtpd[1504038]: sql auxprop plugin using mysql engine Dec 14 06:11:26 ispc CRON[1501789]: pam_unix(cron:session): session closed for user root Dec 14 06:11:35 ispc postfix/smtpd[1504044]: sql auxprop plugin using mysql engine Dec 14 06:11:36 ispc saslauthd[1504046]: pam_mysql - SELECT returned no result. Dec 14 06:11:36 ispc saslauthd[1504046]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:11:36 ispc saslauthd[1504046]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:12:01 ispc CRON[1504050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:12:02 ispc CRON[1504050]: pam_unix(cron:session): session closed for user root Dec 14 06:12:34 ispc sshd[1504067]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:12:34 ispc sshd[1504067]: Invalid user blceu from 114.7.163.154 Dec 14 06:12:38 ispc sshd[1504069]: Invalid user blceu from 51.79.36.60 Dec 14 06:12:50 ispc saslauthd[1504080]: pam_mysql - SELECT returned no result. Dec 14 06:12:50 ispc saslauthd[1504080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:12:50 ispc saslauthd[1504080]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:12:53 ispc saslauthd[1504081]: pam_mysql - SELECT returned no result. Dec 14 06:12:53 ispc saslauthd[1504081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:12:53 ispc saslauthd[1504081]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:13:01 ispc CRON[1504082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:13:03 ispc CRON[1504082]: pam_unix(cron:session): session closed for user root Dec 14 06:13:44 ispc saslauthd[1504100]: pam_mysql - SELECT returned no result. Dec 14 06:13:44 ispc saslauthd[1504100]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:13:44 ispc saslauthd[1504100]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:13:44 ispc sshd[1504098]: Invalid user admin from 116.120.58.228 Dec 14 06:14:01 ispc CRON[1504103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:14:01 ispc CRON[1504103]: pam_unix(cron:session): session closed for user root Dec 14 06:15:01 ispc CRON[1504124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:15:01 ispc CRON[1504125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:15:01 ispc CRON[1504126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:15:01 ispc CRON[1504127]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:15:01 ispc CRON[1504125]: pam_unix(cron:session): session closed for user root Dec 14 06:15:02 ispc CRON[1504127]: pam_unix(cron:session): session closed for user getmail Dec 14 06:15:03 ispc CRON[1504124]: pam_unix(cron:session): session closed for user root Dec 14 06:15:32 ispc sshd[1504309]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:15:32 ispc sshd[1504309]: Invalid user blceu from 103.91.189.70 Dec 14 06:15:51 ispc CRON[1504126]: pam_unix(cron:session): session closed for user root Dec 14 06:15:51 ispc saslauthd[1504314]: pam_mysql - SELECT returned no result. Dec 14 06:15:51 ispc saslauthd[1504314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:15:51 ispc saslauthd[1504314]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:16:01 ispc CRON[1504316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:16:27 ispc saslauthd[1504338]: pam_mysql - SELECT returned no result. Dec 14 06:16:27 ispc saslauthd[1504338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:16:27 ispc saslauthd[1504338]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:16:27 ispc saslauthd[1504339]: pam_mysql - SELECT returned no result. Dec 14 06:16:27 ispc saslauthd[1504339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:16:27 ispc saslauthd[1504339]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:16:29 ispc saslauthd[1504340]: pam_mysql - SELECT returned no result. Dec 14 06:16:29 ispc saslauthd[1504340]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:16:29 ispc saslauthd[1504340]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:17:01 ispc CRON[1504354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:17:02 ispc CRON[1504354]: pam_unix(cron:session): session closed for user root Dec 14 06:17:40 ispc postfix/smtpd[1504387]: sql auxprop plugin using mysql engine Dec 14 06:17:43 ispc saslauthd[1504393]: pam_mysql - SELECT returned no result. Dec 14 06:17:43 ispc saslauthd[1504393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:17:43 ispc saslauthd[1504393]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:18:01 ispc CRON[1504404]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 06:18:01 ispc CRON[1504405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:18:01 ispc CRON[1504405]: pam_unix(cron:session): session closed for user root Dec 14 06:18:06 ispc CRON[1504404]: pam_unix(cron:session): session closed for user amavis Dec 14 06:18:07 ispc postfix/smtpd[1504432]: sql auxprop plugin using mysql engine Dec 14 06:19:01 ispc CRON[1504459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:19:02 ispc CRON[1504459]: pam_unix(cron:session): session closed for user root Dec 14 06:20:01 ispc CRON[1504498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:20:01 ispc CRON[1504499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:20:01 ispc CRON[1504501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:20:01 ispc CRON[1504500]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:20:01 ispc CRON[1504502]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:20:01 ispc CRON[1504500]: pam_unix(cron:session): session closed for user www-data Dec 14 06:20:01 ispc CRON[1504502]: pam_unix(cron:session): session closed for user getmail Dec 14 06:20:01 ispc CRON[1504499]: pam_unix(cron:session): session closed for user root Dec 14 06:20:02 ispc CRON[1504501]: pam_unix(cron:session): session closed for user root Dec 14 06:20:02 ispc CRON[1504498]: pam_unix(cron:session): session closed for user root Dec 14 06:20:17 ispc postfix/smtpd[1504584]: sql auxprop plugin using mysql engine Dec 14 06:20:17 ispc saslauthd[1504586]: pam_mysql - SELECT returned no result. Dec 14 06:20:17 ispc saslauthd[1504586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:20:17 ispc saslauthd[1504586]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:20:23 ispc sshd[1504587]: Invalid user martof from 5.133.121.104 Dec 14 06:21:01 ispc CRON[1504610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:21:01 ispc CRON[1504609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:21:01 ispc CRON[1504609]: pam_unix(cron:session): session closed for user root Dec 14 06:21:01 ispc saslauthd[1504619]: pam_mysql - SELECT returned no result. Dec 14 06:21:01 ispc saslauthd[1504619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:21:01 ispc saslauthd[1504619]: do_auth : auth failure: [user=openfiler] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:21:02 ispc CRON[1504610]: pam_unix(cron:session): session closed for user root Dec 14 06:22:01 ispc CRON[1504655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:22:01 ispc CRON[1504655]: pam_unix(cron:session): session closed for user root Dec 14 06:22:05 ispc postfix/smtpd[1504666]: sql auxprop plugin using mysql engine Dec 14 06:22:38 ispc sshd[1504688]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:22:38 ispc sshd[1504688]: Invalid user admin from 78.128.112.74 Dec 14 06:23:01 ispc CRON[1504710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:23:02 ispc CRON[1504710]: pam_unix(cron:session): session closed for user root Dec 14 06:24:01 ispc CRON[1504750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:24:02 ispc CRON[1504750]: pam_unix(cron:session): session closed for user root Dec 14 06:24:57 ispc postfix/smtpd[1504784]: sql auxprop plugin using mysql engine Dec 14 06:24:58 ispc saslauthd[1504790]: pam_mysql - SELECT returned no result. Dec 14 06:24:58 ispc saslauthd[1504790]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:24:58 ispc saslauthd[1504790]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:25:01 ispc CRON[1504793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:25:01 ispc CRON[1504792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:25:01 ispc CRON[1504794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:25:01 ispc CRON[1504795]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:25:01 ispc CRON[1504793]: pam_unix(cron:session): session closed for user root Dec 14 06:25:01 ispc CRON[1504795]: pam_unix(cron:session): session closed for user getmail Dec 14 06:25:02 ispc CRON[1504794]: pam_unix(cron:session): session closed for user root Dec 14 06:25:02 ispc CRON[1504792]: pam_unix(cron:session): session closed for user root Dec 14 06:25:08 ispc saslauthd[1504872]: pam_mysql - SELECT returned no result. Dec 14 06:25:08 ispc saslauthd[1504872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:25:08 ispc saslauthd[1504872]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:26:01 ispc CRON[1504897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:26:02 ispc CRON[1504897]: pam_unix(cron:session): session closed for user root Dec 14 06:26:59 ispc sshd[1504931]: Invalid user martof from 211.45.175.153 Dec 14 06:27:00 ispc sshd[1504933]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:27:00 ispc sshd[1504933]: Invalid user martof from 193.110.157.47 Dec 14 06:27:00 ispc postfix/smtpd[1504939]: sql auxprop plugin using mysql engine Dec 14 06:27:01 ispc saslauthd[1504941]: pam_mysql - SELECT returned no result. Dec 14 06:27:01 ispc saslauthd[1504941]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:01 ispc saslauthd[1504941]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:01 ispc CRON[1504942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:27:02 ispc saslauthd[1504949]: pam_mysql - SELECT returned no result. Dec 14 06:27:02 ispc saslauthd[1504949]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:02 ispc saslauthd[1504949]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:02 ispc CRON[1504942]: pam_unix(cron:session): session closed for user root Dec 14 06:27:05 ispc sshd[1504954]: Invalid user blceu from 175.125.92.77 Dec 14 06:27:09 ispc saslauthd[1504956]: pam_mysql - SELECT returned no result. Dec 14 06:27:09 ispc saslauthd[1504956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:09 ispc saslauthd[1504956]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:18 ispc saslauthd[1504961]: pam_mysql - SELECT returned no result. Dec 14 06:27:18 ispc saslauthd[1504961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:18 ispc saslauthd[1504961]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:19 ispc saslauthd[1504962]: pam_mysql - SELECT returned no result. Dec 14 06:27:19 ispc saslauthd[1504962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:19 ispc saslauthd[1504962]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:21 ispc postfix/smtpd[1504967]: sql auxprop plugin using mysql engine Dec 14 06:27:21 ispc saslauthd[1504969]: pam_mysql - SELECT returned no result. Dec 14 06:27:21 ispc saslauthd[1504969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:21 ispc saslauthd[1504969]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:24 ispc saslauthd[1504970]: pam_mysql - SELECT returned no result. Dec 14 06:27:24 ispc saslauthd[1504970]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:24 ispc saslauthd[1504970]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:25 ispc saslauthd[1504971]: pam_mysql - SELECT returned no result. Dec 14 06:27:25 ispc saslauthd[1504971]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:25 ispc saslauthd[1504971]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:26 ispc saslauthd[1504972]: pam_mysql - SELECT returned no result. Dec 14 06:27:26 ispc saslauthd[1504972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:26 ispc saslauthd[1504972]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:26 ispc postfix/smtpd[1504975]: sql auxprop plugin using mysql engine Dec 14 06:27:27 ispc saslauthd[1504976]: pam_mysql - SELECT returned no result. Dec 14 06:27:27 ispc saslauthd[1504976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:27 ispc saslauthd[1504976]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:27 ispc saslauthd[1504977]: pam_mysql - SELECT returned no result. Dec 14 06:27:27 ispc saslauthd[1504977]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:27 ispc saslauthd[1504977]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:28 ispc sshd[1504973]: Invalid user ziplines from 118.218.219.250 Dec 14 06:27:29 ispc saslauthd[1504978]: pam_mysql - SELECT returned no result. Dec 14 06:27:29 ispc saslauthd[1504978]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:29 ispc saslauthd[1504978]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:32 ispc saslauthd[1504983]: pam_mysql - SELECT returned no result. Dec 14 06:27:32 ispc saslauthd[1504983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:32 ispc saslauthd[1504983]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:32 ispc saslauthd[1504984]: pam_mysql - SELECT returned no result. Dec 14 06:27:32 ispc saslauthd[1504984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:32 ispc saslauthd[1504984]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:33 ispc saslauthd[1504985]: pam_mysql - SELECT returned no result. Dec 14 06:27:33 ispc saslauthd[1504985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:33 ispc saslauthd[1504985]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:27:55 ispc sshd[1505005]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:27:56 ispc saslauthd[1505007]: pam_mysql - SELECT returned no result. Dec 14 06:27:56 ispc saslauthd[1505007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:27:56 ispc saslauthd[1505007]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:28:01 ispc CRON[1505013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:28:02 ispc CRON[1505013]: pam_unix(cron:session): session closed for user root Dec 14 06:28:04 ispc sshd[1505024]: Invalid user ziplines from 175.125.92.77 Dec 14 06:28:59 ispc saslauthd[1505052]: pam_mysql - SELECT returned no result. Dec 14 06:28:59 ispc saslauthd[1505052]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:28:59 ispc saslauthd[1505052]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:29:01 ispc CRON[1505054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:29:01 ispc CRON[1505054]: pam_unix(cron:session): session closed for user root Dec 14 06:29:11 ispc sshd[1505070]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:29:11 ispc sshd[1505070]: Invalid user martof from 103.91.189.70 Dec 14 06:29:14 ispc sshd[1505077]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:29:14 ispc sshd[1505077]: Invalid user blceu from 123.253.61.95 Dec 14 06:29:30 ispc sshd[1505084]: Invalid user blceu from 211.110.229.128 Dec 14 06:30:01 ispc CRON[1505101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:30:01 ispc CRON[1505098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:30:01 ispc CRON[1505099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:30:01 ispc CRON[1505100]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:30:01 ispc CRON[1505102]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:30:01 ispc CRON[1505100]: pam_unix(cron:session): session closed for user www-data Dec 14 06:30:01 ispc CRON[1505099]: pam_unix(cron:session): session closed for user root Dec 14 06:30:01 ispc CRON[1505102]: pam_unix(cron:session): session closed for user getmail Dec 14 06:30:02 ispc CRON[1505098]: pam_unix(cron:session): session closed for user root Dec 14 06:30:02 ispc CRON[1505101]: pam_unix(cron:session): session closed for user root Dec 14 06:30:48 ispc saslauthd[1505200]: pam_mysql - SELECT returned no result. Dec 14 06:30:48 ispc saslauthd[1505200]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:30:48 ispc saslauthd[1505200]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:31:01 ispc CRON[1505205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:31:02 ispc CRON[1505205]: pam_unix(cron:session): session closed for user root Dec 14 06:31:53 ispc sshd[1505238]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:31:53 ispc sshd[1505238]: Invalid user ftp from 157.245.115.125 Dec 14 06:31:59 ispc sshd[1505244]: Invalid user ziplines from 51.91.247.10 Dec 14 06:32:01 ispc CRON[1505246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:32:01 ispc CRON[1505246]: pam_unix(cron:session): session closed for user root Dec 14 06:32:43 ispc sshd[1505286]: Invalid user martof from 118.218.219.250 Dec 14 06:32:45 ispc postfix/smtpd[1505288]: sql auxprop plugin using mysql engine Dec 14 06:32:45 ispc saslauthd[1505290]: pam_mysql - SELECT returned no result. Dec 14 06:32:45 ispc saslauthd[1505290]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:32:45 ispc saslauthd[1505290]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:32:57 ispc postfix/smtpd[1505300]: sql auxprop plugin using mysql engine Dec 14 06:33:01 ispc CRON[1505303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:33:02 ispc CRON[1505303]: pam_unix(cron:session): session closed for user root Dec 14 06:33:04 ispc saslauthd[1505314]: pam_mysql - SELECT returned no result. Dec 14 06:33:04 ispc saslauthd[1505314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:33:04 ispc saslauthd[1505314]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:33:08 ispc sshd[1505319]: Invalid user blceu from 211.57.200.145 Dec 14 06:33:38 ispc sshd[1505331]: Invalid user admin from 61.183.86.2 Dec 14 06:34:01 ispc CRON[1505346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:34:02 ispc CRON[1505346]: pam_unix(cron:session): session closed for user root Dec 14 06:35:01 ispc CRON[1505385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:35:01 ispc CRON[1505386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:35:01 ispc CRON[1505387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:35:01 ispc CRON[1505388]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:35:01 ispc CRON[1505386]: pam_unix(cron:session): session closed for user root Dec 14 06:35:01 ispc CRON[1505388]: pam_unix(cron:session): session closed for user getmail Dec 14 06:35:02 ispc CRON[1505385]: pam_unix(cron:session): session closed for user root Dec 14 06:35:02 ispc CRON[1505387]: pam_unix(cron:session): session closed for user root Dec 14 06:35:54 ispc postfix/smtpd[1505484]: sql auxprop plugin using mysql engine Dec 14 06:35:55 ispc saslauthd[1505486]: pam_mysql - SELECT returned no result. Dec 14 06:35:55 ispc saslauthd[1505486]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:35:55 ispc saslauthd[1505486]: do_auth : auth failure: [user=operator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:36:01 ispc CRON[1505489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:36:01 ispc CRON[1505489]: pam_unix(cron:session): session closed for user root Dec 14 06:36:22 ispc CRON[1504316]: pam_unix(cron:session): session closed for user root Dec 14 06:37:01 ispc CRON[1505516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:37:02 ispc CRON[1505516]: pam_unix(cron:session): session closed for user root Dec 14 06:37:05 ispc saslauthd[1505529]: pam_mysql - SELECT returned no result. Dec 14 06:37:05 ispc saslauthd[1505529]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:37:05 ispc saslauthd[1505529]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:37:42 ispc sshd[1505537]: Invalid user martof from 43.135.148.156 Dec 14 06:38:01 ispc CRON[1505548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:38:02 ispc CRON[1505548]: pam_unix(cron:session): session closed for user root Dec 14 06:38:17 ispc saslauthd[1505561]: pam_mysql - SELECT returned no result. Dec 14 06:38:17 ispc saslauthd[1505561]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:38:17 ispc saslauthd[1505561]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:38:53 ispc saslauthd[1505564]: pam_mysql - SELECT returned no result. Dec 14 06:38:53 ispc saslauthd[1505564]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:38:53 ispc saslauthd[1505564]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:39:01 ispc CRON[1505565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:39:01 ispc CRON[1505566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:39:01 ispc CRON[1505565]: pam_unix(cron:session): session closed for user root Dec 14 06:39:02 ispc CRON[1505566]: pam_unix(cron:session): session closed for user root Dec 14 06:39:35 ispc sshd[1505589]: Invalid user ziplines from 221.156.137.103 Dec 14 06:39:43 ispc saslauthd[1505591]: pam_mysql - SELECT returned no result. Dec 14 06:39:43 ispc saslauthd[1505591]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:39:43 ispc saslauthd[1505591]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:39:48 ispc saslauthd[1505592]: pam_mysql - SELECT returned no result. Dec 14 06:39:48 ispc saslauthd[1505592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:39:48 ispc saslauthd[1505592]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:39:59 ispc sshd[1505594]: Invalid user admin from 61.183.86.2 Dec 14 06:40:01 ispc CRON[1505607]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:40:01 ispc CRON[1505604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:40:01 ispc CRON[1505605]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:40:01 ispc CRON[1505606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:40:01 ispc CRON[1505603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:40:01 ispc CRON[1505604]: pam_unix(cron:session): session closed for user root Dec 14 06:40:01 ispc CRON[1505605]: pam_unix(cron:session): session closed for user www-data Dec 14 06:40:01 ispc CRON[1505607]: pam_unix(cron:session): session closed for user getmail Dec 14 06:40:01 ispc CRON[1505603]: pam_unix(cron:session): session closed for user root Dec 14 06:40:34 ispc postfix/smtpd[1505713]: sql auxprop plugin using mysql engine Dec 14 06:40:35 ispc saslauthd[1505716]: pam_mysql - SELECT returned no result. Dec 14 06:40:35 ispc saslauthd[1505716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:40:35 ispc saslauthd[1505716]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:40:35 ispc CRON[1505606]: pam_unix(cron:session): session closed for user root Dec 14 06:41:01 ispc CRON[1505719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:42:01 ispc CRON[1505755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:42:02 ispc CRON[1505755]: pam_unix(cron:session): session closed for user root Dec 14 06:42:30 ispc sshd[1505781]: Invalid user blceu from 221.156.137.103 Dec 14 06:43:01 ispc CRON[1505808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:43:02 ispc CRON[1505808]: pam_unix(cron:session): session closed for user root Dec 14 06:43:23 ispc sshd[1505830]: Invalid user blceu from 43.135.130.196 Dec 14 06:44:01 ispc CRON[1505854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:44:02 ispc CRON[1505854]: pam_unix(cron:session): session closed for user root Dec 14 06:44:20 ispc sshd[1505876]: Invalid user klape from 51.77.222.24 Dec 14 06:44:21 ispc sshd[1505878]: Invalid user ubuntu from 51.77.222.24 Dec 14 06:44:28 ispc postfix/smtpd[1505884]: sql auxprop plugin using mysql engine Dec 14 06:44:29 ispc saslauthd[1505887]: pam_mysql - SELECT returned no result. Dec 14 06:44:29 ispc saslauthd[1505887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:44:29 ispc saslauthd[1505887]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:45:00 ispc saslauthd[1505900]: pam_mysql - SELECT returned no result. Dec 14 06:45:00 ispc saslauthd[1505900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:45:00 ispc saslauthd[1505900]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:45:01 ispc CRON[1505901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:45:01 ispc CRON[1505902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:45:01 ispc CRON[1505903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:45:01 ispc CRON[1505904]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:45:01 ispc CRON[1505902]: pam_unix(cron:session): session closed for user root Dec 14 06:45:01 ispc CRON[1505904]: pam_unix(cron:session): session closed for user getmail Dec 14 06:45:01 ispc CRON[1505901]: pam_unix(cron:session): session closed for user root Dec 14 06:45:01 ispc CRON[1505903]: pam_unix(cron:session): session closed for user root Dec 14 06:45:01 ispc saslauthd[1505977]: pam_mysql - SELECT returned no result. Dec 14 06:45:01 ispc saslauthd[1505977]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:45:01 ispc saslauthd[1505977]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:45:17 ispc sshd[1505984]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:46:01 ispc CRON[1506009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:46:02 ispc CRON[1506009]: pam_unix(cron:session): session closed for user root Dec 14 06:47:01 ispc CRON[1506048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:47:01 ispc CRON[1506048]: pam_unix(cron:session): session closed for user root Dec 14 06:47:03 ispc postfix/smtpd[1506059]: sql auxprop plugin using mysql engine Dec 14 06:48:01 ispc CRON[1506099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:48:02 ispc CRON[1506099]: pam_unix(cron:session): session closed for user root Dec 14 06:48:07 ispc postfix/smtpd[1506110]: sql auxprop plugin using mysql engine Dec 14 06:48:10 ispc saslauthd[1506112]: pam_mysql - SELECT returned no result. Dec 14 06:48:10 ispc saslauthd[1506112]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:48:10 ispc saslauthd[1506112]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:49:01 ispc CRON[1506138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:49:02 ispc CRON[1506138]: pam_unix(cron:session): session closed for user root Dec 14 06:49:51 ispc postfix/smtpd[1506170]: sql auxprop plugin using mysql engine Dec 14 06:49:51 ispc saslauthd[1506172]: pam_mysql - SELECT returned no result. Dec 14 06:49:51 ispc saslauthd[1506172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:49:51 ispc saslauthd[1506172]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:50:01 ispc CRON[1506177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:50:01 ispc CRON[1506178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:50:01 ispc CRON[1506179]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 06:50:01 ispc CRON[1506180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:50:01 ispc CRON[1506181]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:50:01 ispc CRON[1506178]: pam_unix(cron:session): session closed for user root Dec 14 06:50:01 ispc CRON[1506179]: pam_unix(cron:session): session closed for user www-data Dec 14 06:50:01 ispc CRON[1506181]: pam_unix(cron:session): session closed for user getmail Dec 14 06:50:02 ispc CRON[1506180]: pam_unix(cron:session): session closed for user root Dec 14 06:50:02 ispc CRON[1506177]: pam_unix(cron:session): session closed for user root Dec 14 06:50:53 ispc saslauthd[1506279]: pam_mysql - SELECT returned no result. Dec 14 06:50:53 ispc saslauthd[1506279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:50:53 ispc saslauthd[1506279]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 06:51:01 ispc CRON[1506284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:51:01 ispc CRON[1506284]: pam_unix(cron:session): session closed for user root Dec 14 06:51:41 ispc sshd[1506312]: Invalid user martof from 119.205.233.162 Dec 14 06:52:01 ispc CRON[1506325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:52:01 ispc CRON[1506326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:52:03 ispc CRON[1506326]: pam_unix(cron:session): session closed for user root Dec 14 06:53:01 ispc CRON[1506378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:53:01 ispc CRON[1506378]: pam_unix(cron:session): session closed for user root Dec 14 06:53:30 ispc sshd[1506403]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:53:33 ispc sshd[1506405]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:53:35 ispc sshd[1506407]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:53:35 ispc sshd[1506407]: Invalid user klape from 189.89.20.45 Dec 14 06:53:37 ispc sshd[1506409]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 06:53:37 ispc sshd[1506409]: Invalid user ubuntu from 189.89.20.45 Dec 14 06:54:01 ispc CRON[1506424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:54:02 ispc CRON[1506424]: pam_unix(cron:session): session closed for user root Dec 14 06:55:01 ispc CRON[1506464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:55:01 ispc CRON[1506465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:55:01 ispc CRON[1506467]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 06:55:01 ispc CRON[1506466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:55:01 ispc CRON[1506465]: pam_unix(cron:session): session closed for user root Dec 14 06:55:01 ispc CRON[1506467]: pam_unix(cron:session): session closed for user getmail Dec 14 06:55:02 ispc CRON[1506466]: pam_unix(cron:session): session closed for user root Dec 14 06:55:03 ispc CRON[1506464]: pam_unix(cron:session): session closed for user root Dec 14 06:55:04 ispc sshd[1506544]: Invalid user klape from 67.205.163.146 Dec 14 06:55:05 ispc sshd[1506546]: Invalid user ubuntu from 67.205.163.146 Dec 14 06:55:19 ispc CRON[1506325]: pam_unix(cron:session): session closed for user root Dec 14 06:55:30 ispc sshd[1506563]: Invalid user martof from 148.216.54.17 Dec 14 06:55:48 ispc postfix/smtpd[1506571]: sql auxprop plugin using mysql engine Dec 14 06:55:49 ispc saslauthd[1506578]: pam_mysql - SELECT returned no result. Dec 14 06:55:49 ispc saslauthd[1506578]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:55:49 ispc saslauthd[1506578]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 06:56:01 ispc CRON[1506583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:56:03 ispc CRON[1506583]: pam_unix(cron:session): session closed for user root Dec 14 06:57:01 ispc CRON[1506625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:57:01 ispc CRON[1506625]: pam_unix(cron:session): session closed for user root Dec 14 06:58:01 ispc CRON[1506667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:58:03 ispc CRON[1506667]: pam_unix(cron:session): session closed for user root Dec 14 06:59:01 ispc CRON[1506708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 06:59:02 ispc CRON[1506708]: pam_unix(cron:session): session closed for user root Dec 14 06:59:12 ispc postfix/smtpd[1506723]: sql auxprop plugin using mysql engine Dec 14 06:59:12 ispc saslauthd[1506726]: pam_mysql - SELECT returned no result. Dec 14 06:59:12 ispc saslauthd[1506726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 06:59:12 ispc saslauthd[1506726]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:00:01 ispc CRON[1506747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:00:01 ispc CRON[1506748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:00:01 ispc CRON[1506749]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:00:01 ispc CRON[1506750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:00:01 ispc CRON[1506751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:00:01 ispc CRON[1506752]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:00:01 ispc CRON[1506748]: pam_unix(cron:session): session closed for user root Dec 14 07:00:01 ispc CRON[1506749]: pam_unix(cron:session): session closed for user www-data Dec 14 07:00:01 ispc CRON[1506752]: pam_unix(cron:session): session closed for user getmail Dec 14 07:00:02 ispc CRON[1506750]: pam_unix(cron:session): session closed for user root Dec 14 07:00:02 ispc CRON[1506751]: pam_unix(cron:session): session closed for user root Dec 14 07:00:03 ispc CRON[1506747]: pam_unix(cron:session): session closed for user root Dec 14 07:00:04 ispc sshd[1506793]: Invalid user ziplines from 45.119.213.109 Dec 14 07:01:01 ispc CRON[1506935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:01:03 ispc CRON[1506935]: pam_unix(cron:session): session closed for user root Dec 14 07:01:25 ispc CRON[1505719]: pam_unix(cron:session): session closed for user root Dec 14 07:01:25 ispc postfix/smtpd[1506957]: sql auxprop plugin using mysql engine Dec 14 07:02:01 ispc CRON[1506961]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 07:02:01 ispc CRON[1506962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:02:02 ispc CRON[1506962]: pam_unix(cron:session): session closed for user root Dec 14 07:02:08 ispc saslauthd[1507027]: pam_mysql - SELECT returned no result. Dec 14 07:02:08 ispc saslauthd[1507027]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:02:08 ispc saslauthd[1507027]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:02:50 ispc sshd[1507621]: Invalid user martof from 45.119.213.109 Dec 14 07:03:01 ispc sshd[1507745]: Did not receive identification string from 45.140.17.97 Dec 14 07:03:01 ispc CRON[1507746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:03:02 ispc CRON[1507746]: pam_unix(cron:session): session closed for user root Dec 14 07:03:26 ispc postfix/smtpd[1507941]: sql auxprop plugin using mysql engine Dec 14 07:03:27 ispc sshd[1507949]: Invalid user blceu from 211.45.175.153 Dec 14 07:03:29 ispc saslauthd[1507976]: pam_mysql - SELECT returned no result. Dec 14 07:03:29 ispc saslauthd[1507976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:03:29 ispc saslauthd[1507976]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:03:35 ispc CRON[1506961]: pam_unix(cron:session): session closed for user logcheck Dec 14 07:03:41 ispc postfix/smtpd[1508026]: sql auxprop plugin using mysql engine Dec 14 07:04:01 ispc CRON[1508030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:04:02 ispc CRON[1508030]: pam_unix(cron:session): session closed for user root Dec 14 07:05:01 ispc CRON[1508046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:05:01 ispc CRON[1508047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:05:01 ispc CRON[1508048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:05:01 ispc CRON[1508049]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:05:01 ispc CRON[1508047]: pam_unix(cron:session): session closed for user root Dec 14 07:05:01 ispc CRON[1508049]: pam_unix(cron:session): session closed for user getmail Dec 14 07:05:03 ispc CRON[1508046]: pam_unix(cron:session): session closed for user root Dec 14 07:05:38 ispc CRON[1508048]: pam_unix(cron:session): session closed for user root Dec 14 07:05:51 ispc saslauthd[1508155]: pam_mysql - SELECT returned no result. Dec 14 07:05:51 ispc saslauthd[1508155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:05:51 ispc saslauthd[1508155]: do_auth : auth failure: [user=overseer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:06:01 ispc CRON[1508159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:06:19 ispc sshd[1508175]: Invalid user martof from 103.100.209.172 Dec 14 07:07:01 ispc CRON[1508198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:07:02 ispc CRON[1508198]: pam_unix(cron:session): session closed for user root Dec 14 07:08:01 ispc CRON[1508241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:08:01 ispc CRON[1508241]: pam_unix(cron:session): session closed for user root Dec 14 07:09:01 ispc CRON[1508286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:09:01 ispc CRON[1508287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:09:02 ispc CRON[1508286]: pam_unix(cron:session): session closed for user root Dec 14 07:09:03 ispc CRON[1508287]: pam_unix(cron:session): session closed for user root Dec 14 07:09:17 ispc sshd[1508321]: Invalid user ziplines from 43.135.148.156 Dec 14 07:09:48 ispc postfix/smtpd[1508337]: sql auxprop plugin using mysql engine Dec 14 07:09:49 ispc postfix/smtpd[1508339]: sql auxprop plugin using mysql engine Dec 14 07:09:49 ispc saslauthd[1508341]: pam_mysql - SELECT returned no result. Dec 14 07:09:49 ispc saslauthd[1508341]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:09:49 ispc saslauthd[1508341]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:09:49 ispc saslauthd[1508342]: pam_mysql - SELECT returned no result. Dec 14 07:09:49 ispc saslauthd[1508342]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:09:49 ispc saslauthd[1508342]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:10:01 ispc CRON[1508351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:10:01 ispc CRON[1508352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:10:01 ispc CRON[1508353]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:10:01 ispc CRON[1508354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:10:01 ispc CRON[1508355]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:10:01 ispc CRON[1508352]: pam_unix(cron:session): session closed for user root Dec 14 07:10:01 ispc CRON[1508353]: pam_unix(cron:session): session closed for user www-data Dec 14 07:10:01 ispc CRON[1508355]: pam_unix(cron:session): session closed for user getmail Dec 14 07:10:02 ispc CRON[1508354]: pam_unix(cron:session): session closed for user root Dec 14 07:10:03 ispc CRON[1508351]: pam_unix(cron:session): session closed for user root Dec 14 07:10:19 ispc saslauthd[1508437]: pam_mysql - SELECT returned no result. Dec 14 07:10:19 ispc saslauthd[1508437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:10:19 ispc saslauthd[1508437]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:11:01 ispc CRON[1508457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:11:02 ispc CRON[1508457]: pam_unix(cron:session): session closed for user root Dec 14 07:11:07 ispc postfix/smtpd[1508473]: sql auxprop plugin using mysql engine Dec 14 07:11:10 ispc saslauthd[1508475]: pam_mysql - SELECT returned no result. Dec 14 07:11:10 ispc saslauthd[1508475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:11:10 ispc saslauthd[1508475]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:12:01 ispc CRON[1508498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:12:01 ispc CRON[1508498]: pam_unix(cron:session): session closed for user root Dec 14 07:12:27 ispc sshd[1508528]: Invalid user klape from 77.241.18.2 Dec 14 07:12:28 ispc postfix/smtpd[1508532]: sql auxprop plugin using mysql engine Dec 14 07:12:28 ispc sshd[1508530]: Invalid user ubuntu from 77.241.18.2 Dec 14 07:12:28 ispc saslauthd[1508534]: pam_mysql - SELECT returned no result. Dec 14 07:12:28 ispc saslauthd[1508534]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:12:28 ispc saslauthd[1508534]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:13:01 ispc CRON[1508561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:13:02 ispc CRON[1508561]: pam_unix(cron:session): session closed for user root Dec 14 07:13:05 ispc saslauthd[1508572]: pam_mysql - SELECT returned no result. Dec 14 07:13:05 ispc saslauthd[1508572]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:13:05 ispc saslauthd[1508572]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:13:06 ispc postfix/smtpd[1508573]: sql auxprop plugin using mysql engine Dec 14 07:13:06 ispc saslauthd[1508575]: pam_mysql - SELECT returned no result. Dec 14 07:13:06 ispc saslauthd[1508575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:13:06 ispc saslauthd[1508575]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:13:09 ispc saslauthd[1508580]: pam_mysql - SELECT returned no result. Dec 14 07:13:09 ispc saslauthd[1508580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:13:09 ispc saslauthd[1508580]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:14:01 ispc sshd[1508604]: Invalid user blceu from 203.146.21.153 Dec 14 07:14:01 ispc CRON[1508606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:14:02 ispc CRON[1508606]: pam_unix(cron:session): session closed for user root Dec 14 07:15:01 ispc CRON[1508645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:15:01 ispc CRON[1508646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:15:01 ispc CRON[1508647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:15:01 ispc CRON[1508648]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:15:01 ispc CRON[1508646]: pam_unix(cron:session): session closed for user root Dec 14 07:15:01 ispc CRON[1508648]: pam_unix(cron:session): session closed for user getmail Dec 14 07:15:02 ispc CRON[1508647]: pam_unix(cron:session): session closed for user root Dec 14 07:15:03 ispc CRON[1508645]: pam_unix(cron:session): session closed for user root Dec 14 07:16:01 ispc CRON[1508743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:16:02 ispc CRON[1508743]: pam_unix(cron:session): session closed for user root Dec 14 07:17:01 ispc CRON[1508784]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:17:02 ispc CRON[1508784]: pam_unix(cron:session): session closed for user root Dec 14 07:17:33 ispc sshd[1508808]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:17:33 ispc sshd[1508808]: Invalid user ziplines from 103.146.203.212 Dec 14 07:18:01 ispc CRON[1508832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:18:01 ispc CRON[1508832]: pam_unix(cron:session): session closed for user root Dec 14 07:18:11 ispc sshd[1508848]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:18:11 ispc sshd[1508848]: Invalid user ziplines from 193.110.157.47 Dec 14 07:18:29 ispc postfix/smtpd[1508860]: sql auxprop plugin using mysql engine Dec 14 07:18:30 ispc saslauthd[1508863]: pam_mysql - SELECT returned no result. Dec 14 07:18:30 ispc saslauthd[1508863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:18:30 ispc saslauthd[1508863]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:19:01 ispc CRON[1508879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:19:02 ispc CRON[1508879]: pam_unix(cron:session): session closed for user root Dec 14 07:20:01 ispc CRON[1508918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:20:01 ispc CRON[1508920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:20:01 ispc CRON[1508919]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:20:01 ispc CRON[1508917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:20:01 ispc CRON[1508921]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:20:01 ispc CRON[1508919]: pam_unix(cron:session): session closed for user www-data Dec 14 07:20:01 ispc CRON[1508918]: pam_unix(cron:session): session closed for user root Dec 14 07:20:01 ispc CRON[1508921]: pam_unix(cron:session): session closed for user getmail Dec 14 07:20:02 ispc CRON[1508920]: pam_unix(cron:session): session closed for user root Dec 14 07:20:02 ispc CRON[1508917]: pam_unix(cron:session): session closed for user root Dec 14 07:20:54 ispc postfix/smtpd[1509019]: sql auxprop plugin using mysql engine Dec 14 07:20:55 ispc saslauthd[1509021]: pam_mysql - SELECT returned no result. Dec 14 07:20:55 ispc saslauthd[1509021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:20:55 ispc saslauthd[1509021]: do_auth : auth failure: [user=piranha] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:01 ispc CRON[1509026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:21:01 ispc CRON[1509027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:21:01 ispc CRON[1509026]: pam_unix(cron:session): session closed for user root Dec 14 07:21:01 ispc CRON[1509027]: pam_unix(cron:session): session closed for user root Dec 14 07:21:15 ispc saslauthd[1509045]: pam_mysql - SELECT returned no result. Dec 14 07:21:15 ispc saslauthd[1509045]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:15 ispc saslauthd[1509045]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:17 ispc saslauthd[1509046]: pam_mysql - SELECT returned no result. Dec 14 07:21:17 ispc saslauthd[1509046]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:17 ispc saslauthd[1509046]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:31 ispc sshd[1509055]: Invalid user martof from 211.57.200.145 Dec 14 07:21:34 ispc saslauthd[1509057]: pam_mysql - SELECT returned no result. Dec 14 07:21:34 ispc saslauthd[1509057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:34 ispc saslauthd[1509057]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:36 ispc saslauthd[1509059]: pam_mysql - SELECT returned no result. Dec 14 07:21:36 ispc saslauthd[1509059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:36 ispc saslauthd[1509059]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:37 ispc saslauthd[1509060]: pam_mysql - SELECT returned no result. Dec 14 07:21:37 ispc saslauthd[1509060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:37 ispc saslauthd[1509060]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:41 ispc saslauthd[1509065]: pam_mysql - SELECT returned no result. Dec 14 07:21:41 ispc saslauthd[1509065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:41 ispc saslauthd[1509065]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:44 ispc postfix/smtpd[1509066]: sql auxprop plugin using mysql engine Dec 14 07:21:44 ispc saslauthd[1509068]: pam_mysql - SELECT returned no result. Dec 14 07:21:44 ispc saslauthd[1509068]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:44 ispc saslauthd[1509068]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:44 ispc saslauthd[1509069]: pam_mysql - SELECT returned no result. Dec 14 07:21:44 ispc saslauthd[1509069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:44 ispc saslauthd[1509069]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:47 ispc saslauthd[1509070]: pam_mysql - SELECT returned no result. Dec 14 07:21:47 ispc saslauthd[1509070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:47 ispc saslauthd[1509070]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:48 ispc saslauthd[1509071]: pam_mysql - SELECT returned no result. Dec 14 07:21:48 ispc saslauthd[1509071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:48 ispc saslauthd[1509071]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:49 ispc saslauthd[1509072]: pam_mysql - SELECT returned no result. Dec 14 07:21:49 ispc saslauthd[1509072]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:49 ispc saslauthd[1509072]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:51 ispc saslauthd[1509077]: pam_mysql - SELECT returned no result. Dec 14 07:21:51 ispc saslauthd[1509077]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:51 ispc saslauthd[1509077]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:21:56 ispc saslauthd[1509079]: pam_mysql - SELECT returned no result. Dec 14 07:21:56 ispc saslauthd[1509079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:21:56 ispc saslauthd[1509079]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:22:01 ispc CRON[1509086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:22:02 ispc CRON[1509086]: pam_unix(cron:session): session closed for user root Dec 14 07:22:16 ispc saslauthd[1509103]: pam_mysql - SELECT returned no result. Dec 14 07:22:16 ispc saslauthd[1509103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:22:16 ispc saslauthd[1509103]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:23:01 ispc CRON[1509131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:23:02 ispc CRON[1509131]: pam_unix(cron:session): session closed for user root Dec 14 07:23:53 ispc saslauthd[1509169]: pam_mysql - SELECT returned no result. Dec 14 07:23:53 ispc saslauthd[1509169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:23:53 ispc saslauthd[1509169]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:24:01 ispc CRON[1509170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:24:02 ispc CRON[1509170]: pam_unix(cron:session): session closed for user root Dec 14 07:24:56 ispc sshd[1509209]: Invalid user martof from 203.146.21.153 Dec 14 07:25:01 ispc CRON[1509211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:25:01 ispc CRON[1509212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:25:01 ispc CRON[1509213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:25:01 ispc CRON[1509214]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:25:01 ispc CRON[1509212]: pam_unix(cron:session): session closed for user root Dec 14 07:25:01 ispc CRON[1509214]: pam_unix(cron:session): session closed for user getmail Dec 14 07:25:02 ispc CRON[1509213]: pam_unix(cron:session): session closed for user root Dec 14 07:25:03 ispc CRON[1509211]: pam_unix(cron:session): session closed for user root Dec 14 07:25:08 ispc sshd[1509291]: Invalid user ziplines from 103.100.209.172 Dec 14 07:26:01 ispc CRON[1509320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:26:01 ispc postfix/smtpd[1509327]: sql auxprop plugin using mysql engine Dec 14 07:26:02 ispc CRON[1509320]: pam_unix(cron:session): session closed for user root Dec 14 07:26:05 ispc saslauthd[1509337]: pam_mysql - SELECT returned no result. Dec 14 07:26:05 ispc saslauthd[1509337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:26:05 ispc saslauthd[1509337]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:26:25 ispc postfix/smtpd[1509345]: sql auxprop plugin using mysql engine Dec 14 07:26:25 ispc CRON[1508159]: pam_unix(cron:session): session closed for user root Dec 14 07:27:01 ispc CRON[1509351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:27:02 ispc CRON[1509351]: pam_unix(cron:session): session closed for user root Dec 14 07:28:01 ispc CRON[1509379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:28:02 ispc CRON[1509379]: pam_unix(cron:session): session closed for user root Dec 14 07:29:01 ispc CRON[1509397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:29:02 ispc CRON[1509397]: pam_unix(cron:session): session closed for user root Dec 14 07:30:01 ispc CRON[1509410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:30:01 ispc CRON[1509411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:30:01 ispc CRON[1509412]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:30:01 ispc CRON[1509413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:30:01 ispc CRON[1509414]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:30:01 ispc CRON[1509412]: pam_unix(cron:session): session closed for user www-data Dec 14 07:30:01 ispc CRON[1509411]: pam_unix(cron:session): session closed for user root Dec 14 07:30:02 ispc CRON[1509414]: pam_unix(cron:session): session closed for user getmail Dec 14 07:30:02 ispc CRON[1509410]: pam_unix(cron:session): session closed for user root Dec 14 07:30:07 ispc saslauthd[1509545]: pam_mysql - SELECT returned no result. Dec 14 07:30:07 ispc saslauthd[1509545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:30:07 ispc saslauthd[1509545]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:30:10 ispc saslauthd[1509552]: pam_mysql - SELECT returned no result. Dec 14 07:30:10 ispc saslauthd[1509552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:30:10 ispc saslauthd[1509552]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:30:26 ispc sshd[1509606]: Invalid user ziplines from 5.133.121.104 Dec 14 07:30:46 ispc CRON[1509413]: pam_unix(cron:session): session closed for user root Dec 14 07:31:01 ispc CRON[1509608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:31:16 ispc saslauthd[1509625]: pam_mysql - SELECT returned no result. Dec 14 07:31:16 ispc saslauthd[1509625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:31:16 ispc saslauthd[1509625]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:31:32 ispc sshd[1509630]: Invalid user blceu from 5.133.121.104 Dec 14 07:32:01 ispc CRON[1509653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:32:02 ispc CRON[1509653]: pam_unix(cron:session): session closed for user root Dec 14 07:33:01 ispc CRON[1509697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:33:03 ispc CRON[1509697]: pam_unix(cron:session): session closed for user root Dec 14 07:33:04 ispc sshd[1509704]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:33:30 ispc postfix/smtpd[1509724]: sql auxprop plugin using mysql engine Dec 14 07:33:47 ispc postfix/smtpd[1509731]: sql auxprop plugin using mysql engine Dec 14 07:33:57 ispc saslauthd[1509738]: pam_mysql - SELECT returned no result. Dec 14 07:33:57 ispc saslauthd[1509738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:33:57 ispc saslauthd[1509738]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:34:01 ispc CRON[1509743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:34:02 ispc CRON[1509743]: pam_unix(cron:session): session closed for user root Dec 14 07:34:40 ispc postfix/smtpd[1509774]: sql auxprop plugin using mysql engine Dec 14 07:34:41 ispc saslauthd[1509776]: pam_mysql - SELECT returned no result. Dec 14 07:34:41 ispc saslauthd[1509776]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:34:41 ispc saslauthd[1509776]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:34:54 ispc sshd[1509781]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:34:54 ispc sshd[1509781]: Invalid user martof from 123.253.61.95 Dec 14 07:35:01 ispc CRON[1509787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:35:01 ispc CRON[1509788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:35:01 ispc CRON[1509789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:35:01 ispc CRON[1509790]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:35:01 ispc CRON[1509788]: pam_unix(cron:session): session closed for user root Dec 14 07:35:01 ispc CRON[1509790]: pam_unix(cron:session): session closed for user getmail Dec 14 07:35:01 ispc CRON[1509787]: pam_unix(cron:session): session closed for user root Dec 14 07:35:02 ispc CRON[1509789]: pam_unix(cron:session): session closed for user root Dec 14 07:35:39 ispc sshd[1509877]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:35:39 ispc sshd[1509877]: Invalid user ftp from 157.245.115.125 Dec 14 07:35:56 ispc saslauthd[1509891]: pam_mysql - SELECT returned no result. Dec 14 07:35:56 ispc saslauthd[1509891]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:35:56 ispc saslauthd[1509891]: do_auth : auth failure: [user=pnadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:36:01 ispc sshd[1509892]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:36:01 ispc sshd[1509892]: Invalid user martof from 103.146.203.212 Dec 14 07:36:01 ispc CRON[1509894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:36:02 ispc CRON[1509894]: pam_unix(cron:session): session closed for user root Dec 14 07:36:18 ispc sshd[1509914]: Invalid user blceu from 148.216.54.17 Dec 14 07:36:19 ispc saslauthd[1509916]: pam_mysql - SELECT returned no result. Dec 14 07:36:19 ispc saslauthd[1509916]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:36:19 ispc saslauthd[1509916]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:36:43 ispc sshd[1509928]: Invalid user ziplines from 203.146.21.153 Dec 14 07:37:01 ispc CRON[1509939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:37:02 ispc CRON[1509939]: pam_unix(cron:session): session closed for user root Dec 14 07:37:19 ispc saslauthd[1509959]: pam_mysql - SELECT returned no result. Dec 14 07:37:19 ispc saslauthd[1509959]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:37:19 ispc saslauthd[1509959]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:38:01 ispc CRON[1509987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:38:02 ispc CRON[1509987]: pam_unix(cron:session): session closed for user root Dec 14 07:39:01 ispc CRON[1510028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:39:01 ispc CRON[1510029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:39:01 ispc CRON[1510028]: pam_unix(cron:session): session closed for user root Dec 14 07:39:02 ispc CRON[1510029]: pam_unix(cron:session): session closed for user root Dec 14 07:40:01 ispc CRON[1510079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:40:01 ispc CRON[1510080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:40:01 ispc CRON[1510081]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:40:01 ispc CRON[1510082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:40:01 ispc CRON[1510083]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:40:01 ispc CRON[1510080]: pam_unix(cron:session): session closed for user root Dec 14 07:40:01 ispc CRON[1510081]: pam_unix(cron:session): session closed for user www-data Dec 14 07:40:01 ispc CRON[1510083]: pam_unix(cron:session): session closed for user getmail Dec 14 07:40:02 ispc CRON[1510082]: pam_unix(cron:session): session closed for user root Dec 14 07:40:02 ispc CRON[1510079]: pam_unix(cron:session): session closed for user root Dec 14 07:40:25 ispc sshd[1510168]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:40:25 ispc sshd[1510168]: Invalid user ziplines from 123.253.61.95 Dec 14 07:40:53 ispc sshd[1510183]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:41:01 ispc CRON[1510189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:41:02 ispc CRON[1510189]: pam_unix(cron:session): session closed for user root Dec 14 07:41:17 ispc sshd[1510206]: Invalid user martof from 211.110.229.128 Dec 14 07:41:38 ispc sshd[1510224]: Invalid user bluecap from 120.48.125.223 Dec 14 07:41:50 ispc postfix/smtpd[1510230]: sql auxprop plugin using mysql engine Dec 14 07:41:50 ispc saslauthd[1510233]: pam_mysql - SELECT returned no result. Dec 14 07:41:50 ispc saslauthd[1510233]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:41:50 ispc saslauthd[1510233]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:41:55 ispc postfix/smtpd[1510238]: sql auxprop plugin using mysql engine Dec 14 07:41:58 ispc saslauthd[1510239]: pam_mysql - SELECT returned no result. Dec 14 07:41:58 ispc saslauthd[1510239]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:41:58 ispc saslauthd[1510239]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:42:01 ispc CRON[1510245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:42:02 ispc CRON[1510245]: pam_unix(cron:session): session closed for user root Dec 14 07:42:20 ispc saslauthd[1510262]: pam_mysql - SELECT returned no result. Dec 14 07:42:20 ispc saslauthd[1510262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:42:20 ispc saslauthd[1510262]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:42:36 ispc saslauthd[1510271]: pam_mysql - SELECT returned no result. Dec 14 07:42:36 ispc saslauthd[1510271]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:42:36 ispc saslauthd[1510271]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:43:01 ispc CRON[1510288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:43:02 ispc CRON[1510288]: pam_unix(cron:session): session closed for user root Dec 14 07:44:01 ispc CRON[1510327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:44:01 ispc CRON[1510327]: pam_unix(cron:session): session closed for user root Dec 14 07:45:01 ispc CRON[1510365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:45:01 ispc CRON[1510366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:45:01 ispc CRON[1510367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:45:01 ispc CRON[1510368]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:45:01 ispc CRON[1510366]: pam_unix(cron:session): session closed for user root Dec 14 07:45:01 ispc CRON[1510368]: pam_unix(cron:session): session closed for user getmail Dec 14 07:45:02 ispc sshd[1510374]: Did not receive identification string from 124.193.236.130 Dec 14 07:45:02 ispc CRON[1510367]: pam_unix(cron:session): session closed for user root Dec 14 07:45:03 ispc CRON[1510365]: pam_unix(cron:session): session closed for user root Dec 14 07:46:01 ispc CRON[1510472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:46:01 ispc CRON[1510472]: pam_unix(cron:session): session closed for user root Dec 14 07:46:24 ispc sshd[1510495]: Invalid user klape from 36.50.177.171 Dec 14 07:46:26 ispc sshd[1510501]: Invalid user ubuntu from 36.50.177.171 Dec 14 07:46:37 ispc postfix/smtpd[1510508]: sql auxprop plugin using mysql engine Dec 14 07:46:37 ispc saslauthd[1510511]: pam_mysql - SELECT returned no result. Dec 14 07:46:37 ispc saslauthd[1510511]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:46:37 ispc saslauthd[1510511]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:47:01 ispc CRON[1510521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:47:02 ispc CRON[1510521]: pam_unix(cron:session): session closed for user root Dec 14 07:48:01 ispc CRON[1510568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:48:02 ispc CRON[1510568]: pam_unix(cron:session): session closed for user root Dec 14 07:49:01 ispc CRON[1510606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:49:01 ispc CRON[1510606]: pam_unix(cron:session): session closed for user root Dec 14 07:49:22 ispc sshd[1510625]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:49:22 ispc sshd[1510625]: Invalid user admin from 78.128.112.74 Dec 14 07:49:54 ispc postfix/smtpd[1510641]: sql auxprop plugin using mysql engine Dec 14 07:49:59 ispc saslauthd[1510644]: pam_mysql - SELECT returned no result. Dec 14 07:49:59 ispc saslauthd[1510644]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:49:59 ispc saslauthd[1510644]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:50:01 ispc CRON[1510649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:50:01 ispc CRON[1510650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:50:01 ispc CRON[1510651]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 07:50:01 ispc CRON[1510652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:50:01 ispc CRON[1510653]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:50:02 ispc CRON[1510651]: pam_unix(cron:session): session closed for user www-data Dec 14 07:50:02 ispc CRON[1510650]: pam_unix(cron:session): session closed for user root Dec 14 07:50:02 ispc CRON[1510653]: pam_unix(cron:session): session closed for user getmail Dec 14 07:50:03 ispc CRON[1510652]: pam_unix(cron:session): session closed for user root Dec 14 07:50:04 ispc CRON[1510649]: pam_unix(cron:session): session closed for user root Dec 14 07:50:17 ispc sshd[1510733]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:50:17 ispc sshd[1510733]: Invalid user ftp from 157.245.115.125 Dec 14 07:50:58 ispc postfix/smtpd[1510761]: sql auxprop plugin using mysql engine Dec 14 07:51:00 ispc saslauthd[1510763]: pam_mysql - SELECT returned no result. Dec 14 07:51:00 ispc saslauthd[1510763]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:51:00 ispc saslauthd[1510763]: do_auth : auth failure: [user=politically] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 07:51:01 ispc CRON[1510768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:51:02 ispc CRON[1510768]: pam_unix(cron:session): session closed for user root Dec 14 07:51:32 ispc CRON[1509608]: pam_unix(cron:session): session closed for user root Dec 14 07:51:43 ispc postfix/smtpd[1510803]: sql auxprop plugin using mysql engine Dec 14 07:52:01 ispc CRON[1510816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:52:02 ispc CRON[1510816]: pam_unix(cron:session): session closed for user root Dec 14 07:53:01 ispc CRON[1510845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:53:02 ispc CRON[1510845]: pam_unix(cron:session): session closed for user root Dec 14 07:54:01 ispc CRON[1510864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:54:02 ispc CRON[1510864]: pam_unix(cron:session): session closed for user root Dec 14 07:54:09 ispc sshd[1510876]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:54:09 ispc sshd[1510876]: Invalid user martof from 114.7.163.154 Dec 14 07:55:01 ispc CRON[1510884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:55:01 ispc CRON[1510885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:55:01 ispc CRON[1510886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:55:01 ispc CRON[1510887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 07:55:02 ispc CRON[1510885]: pam_unix(cron:session): session closed for user root Dec 14 07:55:02 ispc CRON[1510887]: pam_unix(cron:session): session closed for user getmail Dec 14 07:55:02 ispc CRON[1510884]: pam_unix(cron:session): session closed for user root Dec 14 07:55:38 ispc CRON[1510886]: pam_unix(cron:session): session closed for user root Dec 14 07:56:00 ispc sshd[1510994]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:56:01 ispc CRON[1510996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:57:01 ispc CRON[1511033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:57:02 ispc CRON[1511033]: pam_unix(cron:session): session closed for user root Dec 14 07:57:47 ispc postfix/smtpd[1511072]: sql auxprop plugin using mysql engine Dec 14 07:57:49 ispc saslauthd[1511080]: pam_mysql - SELECT returned no result. Dec 14 07:57:49 ispc saslauthd[1511080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 07:57:49 ispc saslauthd[1511080]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 07:58:01 ispc CRON[1511085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:58:02 ispc CRON[1511085]: pam_unix(cron:session): session closed for user root Dec 14 07:58:32 ispc sshd[1511112]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 07:58:56 ispc sshd[1511125]: Did not receive identification string from 64.225.76.213 Dec 14 07:59:01 ispc CRON[1511131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 07:59:02 ispc CRON[1511131]: pam_unix(cron:session): session closed for user root Dec 14 07:59:15 ispc sshd[1511149]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:00:01 ispc CRON[1511176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:00:01 ispc CRON[1511177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:00:01 ispc CRON[1511178]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:00:01 ispc CRON[1511179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:00:01 ispc CRON[1511180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:00:01 ispc CRON[1511181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:00:01 ispc CRON[1511182]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:00:01 ispc CRON[1511178]: pam_unix(cron:session): session closed for user www-data Dec 14 08:00:01 ispc CRON[1511177]: pam_unix(cron:session): session closed for user root Dec 14 08:00:01 ispc CRON[1511182]: pam_unix(cron:session): session closed for user getmail Dec 14 08:00:01 ispc CRON[1511180]: pam_unix(cron:session): session closed for user root Dec 14 08:00:02 ispc CRON[1511181]: pam_unix(cron:session): session closed for user root Dec 14 08:00:02 ispc CRON[1511179]: pam_unix(cron:session): session closed for user root Dec 14 08:00:03 ispc CRON[1511176]: pam_unix(cron:session): session closed for user root Dec 14 08:00:04 ispc sshd[1511336]: Invalid user admin from 64.225.76.213 Dec 14 08:00:13 ispc postfix/smtpd[1511343]: sql auxprop plugin using mysql engine Dec 14 08:00:21 ispc sshd[1511349]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:00:21 ispc sshd[1511349]: Invalid user blceu from 103.146.203.212 Dec 14 08:00:48 ispc sshd[1511365]: Invalid user admin from 64.225.76.213 Dec 14 08:01:01 ispc CRON[1511377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:01:02 ispc CRON[1511377]: pam_unix(cron:session): session closed for user root Dec 14 08:01:30 ispc sshd[1511396]: Invalid user admin from 64.225.76.213 Dec 14 08:02:01 ispc CRON[1511412]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 08:02:01 ispc CRON[1511413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:02:02 ispc CRON[1511413]: pam_unix(cron:session): session closed for user root Dec 14 08:02:08 ispc sshd[1511497]: Invalid user admin from 64.225.76.213 Dec 14 08:02:44 ispc sshd[1512032]: Invalid user admin from 64.225.76.213 Dec 14 08:03:01 ispc CRON[1512210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:03:02 ispc CRON[1512210]: pam_unix(cron:session): session closed for user root Dec 14 08:03:19 ispc sshd[1512315]: Invalid user admin from 64.225.76.213 Dec 14 08:03:25 ispc postfix/smtpd[1512329]: sql auxprop plugin using mysql engine Dec 14 08:03:26 ispc saslauthd[1512331]: pam_mysql - SELECT returned no result. Dec 14 08:03:26 ispc saslauthd[1512331]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:03:26 ispc saslauthd[1512331]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:03:49 ispc CRON[1511412]: pam_unix(cron:session): session closed for user logcheck Dec 14 08:03:54 ispc postfix/smtpd[1512521]: sql auxprop plugin using mysql engine Dec 14 08:04:01 ispc CRON[1512528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:04:02 ispc CRON[1512528]: pam_unix(cron:session): session closed for user root Dec 14 08:04:51 ispc sshd[1512560]: Invalid user blceu from 106.12.215.233 Dec 14 08:05:01 ispc CRON[1512567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:05:01 ispc CRON[1512568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:05:01 ispc CRON[1512569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:05:01 ispc CRON[1512570]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:05:01 ispc CRON[1512568]: pam_unix(cron:session): session closed for user root Dec 14 08:05:01 ispc CRON[1512570]: pam_unix(cron:session): session closed for user getmail Dec 14 08:05:01 ispc CRON[1512569]: pam_unix(cron:session): session closed for user root Dec 14 08:05:02 ispc CRON[1512567]: pam_unix(cron:session): session closed for user root Dec 14 08:05:52 ispc postfix/smtpd[1512666]: sql auxprop plugin using mysql engine Dec 14 08:05:54 ispc saslauthd[1512668]: pam_mysql - SELECT returned no result. Dec 14 08:05:54 ispc saslauthd[1512668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:05:54 ispc saslauthd[1512668]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:05:56 ispc postfix/smtpd[1512669]: sql auxprop plugin using mysql engine Dec 14 08:05:57 ispc saslauthd[1512670]: pam_mysql - SELECT returned no result. Dec 14 08:05:57 ispc saslauthd[1512670]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:05:57 ispc saslauthd[1512670]: do_auth : auth failure: [user=poll] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:06:01 ispc CRON[1512675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:06:01 ispc CRON[1512675]: pam_unix(cron:session): session closed for user root Dec 14 08:06:51 ispc saslauthd[1512708]: pam_mysql - SELECT returned no result. Dec 14 08:06:51 ispc saslauthd[1512708]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:06:51 ispc saslauthd[1512708]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:06:52 ispc saslauthd[1512709]: pam_mysql - SELECT returned no result. Dec 14 08:06:52 ispc saslauthd[1512709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:06:52 ispc saslauthd[1512709]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:07:01 ispc CRON[1512714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:07:02 ispc CRON[1512714]: pam_unix(cron:session): session closed for user root Dec 14 08:07:05 ispc saslauthd[1512726]: pam_mysql - SELECT returned no result. Dec 14 08:07:05 ispc saslauthd[1512726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:07:05 ispc saslauthd[1512726]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:08:01 ispc CRON[1512762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:08:02 ispc CRON[1512762]: pam_unix(cron:session): session closed for user root Dec 14 08:08:03 ispc sshd[1512777]: Invalid user ziplines from 148.216.54.17 Dec 14 08:08:11 ispc sshd[1512779]: Invalid user blceu from 119.205.233.162 Dec 14 08:09:01 ispc CRON[1512807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:09:01 ispc CRON[1512808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:09:01 ispc CRON[1512807]: pam_unix(cron:session): session closed for user root Dec 14 08:09:01 ispc CRON[1512808]: pam_unix(cron:session): session closed for user root Dec 14 08:09:16 ispc postfix/smtpd[1512844]: sql auxprop plugin using mysql engine Dec 14 08:09:16 ispc saslauthd[1512846]: pam_mysql - SELECT returned no result. Dec 14 08:09:16 ispc saslauthd[1512846]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:09:16 ispc saslauthd[1512846]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:09:36 ispc sshd[1512855]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:09:39 ispc sshd[1512859]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:09:49 ispc saslauthd[1512866]: pam_mysql - SELECT returned no result. Dec 14 08:09:49 ispc saslauthd[1512866]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:09:49 ispc saslauthd[1512866]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:09:49 ispc saslauthd[1512867]: pam_mysql - SELECT returned no result. Dec 14 08:09:49 ispc saslauthd[1512867]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:09:49 ispc saslauthd[1512867]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:09:52 ispc saslauthd[1512868]: pam_mysql - SELECT returned no result. Dec 14 08:09:52 ispc saslauthd[1512868]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:09:52 ispc saslauthd[1512868]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:10:01 ispc CRON[1512874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:10:01 ispc CRON[1512875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:10:01 ispc CRON[1512876]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:10:01 ispc CRON[1512877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:10:01 ispc CRON[1512878]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:10:01 ispc CRON[1512876]: pam_unix(cron:session): session closed for user www-data Dec 14 08:10:01 ispc CRON[1512875]: pam_unix(cron:session): session closed for user root Dec 14 08:10:01 ispc CRON[1512878]: pam_unix(cron:session): session closed for user getmail Dec 14 08:10:02 ispc CRON[1512877]: pam_unix(cron:session): session closed for user root Dec 14 08:10:03 ispc CRON[1512874]: pam_unix(cron:session): session closed for user root Dec 14 08:11:01 ispc CRON[1512982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:11:02 ispc CRON[1512982]: pam_unix(cron:session): session closed for user root Dec 14 08:11:27 ispc sshd[1513006]: Invalid user admin from 139.19.117.197 Dec 14 08:12:01 ispc CRON[1513021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:12:01 ispc CRON[1513021]: pam_unix(cron:session): session closed for user root Dec 14 08:13:01 ispc CRON[1513068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:13:02 ispc CRON[1513068]: pam_unix(cron:session): session closed for user root Dec 14 08:13:28 ispc postfix/smtpd[1513092]: sql auxprop plugin using mysql engine Dec 14 08:13:32 ispc saslauthd[1513095]: pam_mysql - SELECT returned no result. Dec 14 08:13:32 ispc saslauthd[1513095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:13:32 ispc saslauthd[1513095]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:14:01 ispc sshd[1513110]: Invalid user klape from 2.57.217.229 Dec 14 08:14:01 ispc sshd[1513112]: Invalid user ubuntu from 2.57.217.229 Dec 14 08:14:01 ispc CRON[1513114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:14:02 ispc CRON[1513114]: pam_unix(cron:session): session closed for user root Dec 14 08:15:01 ispc CRON[1513154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:15:01 ispc CRON[1513155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:15:01 ispc CRON[1513156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:15:01 ispc CRON[1513157]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:15:01 ispc CRON[1513155]: pam_unix(cron:session): session closed for user root Dec 14 08:15:01 ispc CRON[1513157]: pam_unix(cron:session): session closed for user getmail Dec 14 08:15:02 ispc CRON[1513156]: pam_unix(cron:session): session closed for user root Dec 14 08:15:02 ispc CRON[1513154]: pam_unix(cron:session): session closed for user root Dec 14 08:15:23 ispc postfix/smtpd[1513238]: sql auxprop plugin using mysql engine Dec 14 08:15:42 ispc saslauthd[1513248]: pam_mysql - SELECT returned no result. Dec 14 08:15:42 ispc saslauthd[1513248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:15:42 ispc saslauthd[1513248]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:15:44 ispc saslauthd[1513249]: pam_mysql - SELECT returned no result. Dec 14 08:15:44 ispc saslauthd[1513249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:15:44 ispc saslauthd[1513249]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:15:46 ispc sshd[1513250]: Invalid user ziplines from 211.45.175.153 Dec 14 08:16:01 ispc CRON[1513262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:16:02 ispc postfix/smtpd[1513269]: sql auxprop plugin using mysql engine Dec 14 08:16:02 ispc CRON[1513262]: pam_unix(cron:session): session closed for user root Dec 14 08:16:02 ispc saslauthd[1513275]: pam_mysql - SELECT returned no result. Dec 14 08:16:02 ispc saslauthd[1513275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:02 ispc saslauthd[1513275]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:02 ispc saslauthd[1513276]: pam_mysql - SELECT returned no result. Dec 14 08:16:02 ispc saslauthd[1513276]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:02 ispc saslauthd[1513276]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:05 ispc saslauthd[1513277]: pam_mysql - SELECT returned no result. Dec 14 08:16:05 ispc saslauthd[1513277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:05 ispc saslauthd[1513277]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:10 ispc saslauthd[1513283]: pam_mysql - SELECT returned no result. Dec 14 08:16:10 ispc saslauthd[1513283]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:10 ispc saslauthd[1513283]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:15 ispc postfix/smtpd[1513284]: sql auxprop plugin using mysql engine Dec 14 08:16:15 ispc saslauthd[1513286]: pam_mysql - SELECT returned no result. Dec 14 08:16:15 ispc saslauthd[1513286]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:15 ispc saslauthd[1513286]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:15 ispc saslauthd[1513287]: pam_mysql - SELECT returned no result. Dec 14 08:16:15 ispc saslauthd[1513287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:15 ispc saslauthd[1513287]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:16 ispc postfix/smtpd[1513288]: sql auxprop plugin using mysql engine Dec 14 08:16:16 ispc saslauthd[1513289]: pam_mysql - SELECT returned no result. Dec 14 08:16:16 ispc saslauthd[1513289]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:16 ispc saslauthd[1513289]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:17 ispc saslauthd[1513290]: pam_mysql - SELECT returned no result. Dec 14 08:16:17 ispc saslauthd[1513290]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:17 ispc saslauthd[1513290]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:17 ispc saslauthd[1513291]: pam_mysql - SELECT returned no result. Dec 14 08:16:17 ispc saslauthd[1513291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:17 ispc saslauthd[1513291]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:18 ispc saslauthd[1513292]: pam_mysql - SELECT returned no result. Dec 14 08:16:18 ispc saslauthd[1513292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:18 ispc saslauthd[1513292]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:24 ispc saslauthd[1513297]: pam_mysql - SELECT returned no result. Dec 14 08:16:24 ispc saslauthd[1513297]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:24 ispc saslauthd[1513297]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:16:33 ispc CRON[1510996]: pam_unix(cron:session): session closed for user root Dec 14 08:16:46 ispc saslauthd[1513303]: pam_mysql - SELECT returned no result. Dec 14 08:16:46 ispc saslauthd[1513303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:16:46 ispc saslauthd[1513303]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:17:01 ispc CRON[1513305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:17:05 ispc saslauthd[1513313]: pam_mysql - SELECT returned no result. Dec 14 08:17:05 ispc saslauthd[1513313]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:17:05 ispc saslauthd[1513313]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:17:07 ispc CRON[1513305]: pam_unix(cron:session): session closed for user root Dec 14 08:18:02 ispc CRON[1513336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:18:03 ispc CRON[1513336]: pam_unix(cron:session): session closed for user root Dec 14 08:18:30 ispc sshd[1513352]: Invalid user ziplines from 211.57.200.145 Dec 14 08:19:01 ispc CRON[1513361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:19:01 ispc CRON[1513361]: pam_unix(cron:session): session closed for user root Dec 14 08:19:05 ispc saslauthd[1513373]: pam_mysql - SELECT returned no result. Dec 14 08:19:05 ispc saslauthd[1513373]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:19:05 ispc saslauthd[1513373]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:19:51 ispc postfix/smtpd[1513376]: sql auxprop plugin using mysql engine Dec 14 08:19:55 ispc sshd[1513382]: Invalid user klape from 70.37.89.177 Dec 14 08:19:56 ispc sshd[1513384]: Invalid user ubuntu from 70.37.89.177 Dec 14 08:20:01 ispc CRON[1513386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:20:01 ispc CRON[1513387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:20:01 ispc CRON[1513388]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:20:01 ispc CRON[1513389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:20:01 ispc CRON[1513390]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:20:02 ispc CRON[1513387]: pam_unix(cron:session): session closed for user root Dec 14 08:20:02 ispc CRON[1513388]: pam_unix(cron:session): session closed for user www-data Dec 14 08:20:02 ispc CRON[1513390]: pam_unix(cron:session): session closed for user getmail Dec 14 08:20:04 ispc CRON[1513386]: pam_unix(cron:session): session closed for user root Dec 14 08:20:32 ispc CRON[1513389]: pam_unix(cron:session): session closed for user root Dec 14 08:20:37 ispc postfix/smtpd[1513495]: sql auxprop plugin using mysql engine Dec 14 08:20:40 ispc sshd[1513500]: Invalid user klape from 103.164.20.29 Dec 14 08:20:41 ispc saslauthd[1513504]: pam_mysql - SELECT returned no result. Dec 14 08:20:41 ispc saslauthd[1513504]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:20:41 ispc saslauthd[1513504]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:20:41 ispc sshd[1513502]: Invalid user ubuntu from 103.164.20.29 Dec 14 08:21:01 ispc saslauthd[1513505]: pam_mysql - SELECT returned no result. Dec 14 08:21:01 ispc saslauthd[1513505]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:21:01 ispc saslauthd[1513505]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:21:01 ispc CRON[1513506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:21:01 ispc CRON[1513507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:21:02 ispc CRON[1513506]: pam_unix(cron:session): session closed for user root Dec 14 08:22:01 ispc CRON[1513547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:22:01 ispc CRON[1513547]: pam_unix(cron:session): session closed for user root Dec 14 08:23:01 ispc CRON[1513590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:23:02 ispc CRON[1513590]: pam_unix(cron:session): session closed for user root Dec 14 08:24:01 ispc CRON[1513631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:24:02 ispc CRON[1513631]: pam_unix(cron:session): session closed for user root Dec 14 08:25:01 ispc CRON[1513667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:25:01 ispc CRON[1513668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:25:01 ispc CRON[1513669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:25:01 ispc CRON[1513670]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:25:01 ispc CRON[1513668]: pam_unix(cron:session): session closed for user root Dec 14 08:25:01 ispc CRON[1513670]: pam_unix(cron:session): session closed for user getmail Dec 14 08:25:02 ispc CRON[1513669]: pam_unix(cron:session): session closed for user root Dec 14 08:25:02 ispc CRON[1513667]: pam_unix(cron:session): session closed for user root Dec 14 08:25:21 ispc postfix/smtpd[1513754]: sql auxprop plugin using mysql engine Dec 14 08:25:37 ispc sshd[1513765]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:26:01 ispc CRON[1513777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:26:01 ispc CRON[1513777]: pam_unix(cron:session): session closed for user root Dec 14 08:26:48 ispc sshd[1513816]: Invalid user klape from 187.190.35.163 Dec 14 08:26:49 ispc sshd[1513818]: Invalid user ubuntu from 187.190.35.163 Dec 14 08:27:01 ispc CRON[1513824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:27:02 ispc CRON[1513824]: pam_unix(cron:session): session closed for user root Dec 14 08:27:43 ispc postfix/smtpd[1513859]: sql auxprop plugin using mysql engine Dec 14 08:27:44 ispc saslauthd[1513860]: pam_mysql - SELECT returned no result. Dec 14 08:27:44 ispc saslauthd[1513860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:27:44 ispc saslauthd[1513860]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:28:01 ispc CRON[1513875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:28:01 ispc CRON[1513875]: pam_unix(cron:session): session closed for user root Dec 14 08:28:22 ispc postfix/smtpd[1513897]: sql auxprop plugin using mysql engine Dec 14 08:28:27 ispc saslauthd[1513903]: pam_mysql - SELECT returned no result. Dec 14 08:28:27 ispc saslauthd[1513903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:28:27 ispc saslauthd[1513903]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:29:01 ispc CRON[1513916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:29:02 ispc CRON[1513916]: pam_unix(cron:session): session closed for user root Dec 14 08:29:07 ispc sshd[1513927]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:29:38 ispc sshd[1513942]: Invalid user ziplines from 119.205.233.162 Dec 14 08:30:01 ispc CRON[1513959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:30:01 ispc CRON[1513956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:30:01 ispc CRON[1513958]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:30:01 ispc CRON[1513957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:30:01 ispc CRON[1513960]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:30:01 ispc CRON[1513958]: pam_unix(cron:session): session closed for user www-data Dec 14 08:30:01 ispc CRON[1513957]: pam_unix(cron:session): session closed for user root Dec 14 08:30:01 ispc CRON[1513960]: pam_unix(cron:session): session closed for user getmail Dec 14 08:30:01 ispc CRON[1513959]: pam_unix(cron:session): session closed for user root Dec 14 08:30:02 ispc CRON[1513956]: pam_unix(cron:session): session closed for user root Dec 14 08:31:02 ispc CRON[1514062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:31:02 ispc CRON[1514062]: pam_unix(cron:session): session closed for user root Dec 14 08:32:01 ispc CRON[1514104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:32:01 ispc CRON[1514104]: pam_unix(cron:session): session closed for user root Dec 14 08:32:17 ispc postfix/smtpd[1514120]: sql auxprop plugin using mysql engine Dec 14 08:32:18 ispc saslauthd[1514123]: pam_mysql - SELECT returned no result. Dec 14 08:32:18 ispc saslauthd[1514123]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:32:18 ispc saslauthd[1514123]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:33:01 ispc CRON[1514153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:33:01 ispc CRON[1514153]: pam_unix(cron:session): session closed for user root Dec 14 08:33:39 ispc sshd[1514179]: Invalid user klape from 67.205.163.146 Dec 14 08:33:40 ispc sshd[1514181]: Invalid user ubuntu from 67.205.163.146 Dec 14 08:34:01 ispc CRON[1514195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:34:02 ispc CRON[1514195]: pam_unix(cron:session): session closed for user root Dec 14 08:34:06 ispc saslauthd[1514207]: pam_mysql - SELECT returned no result. Dec 14 08:34:06 ispc saslauthd[1514207]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:34:06 ispc saslauthd[1514207]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:35:01 ispc CRON[1514231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:35:01 ispc CRON[1514232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:35:01 ispc CRON[1514233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:35:01 ispc CRON[1514234]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:35:01 ispc CRON[1514232]: pam_unix(cron:session): session closed for user root Dec 14 08:35:01 ispc CRON[1514234]: pam_unix(cron:session): session closed for user getmail Dec 14 08:35:02 ispc CRON[1514233]: pam_unix(cron:session): session closed for user root Dec 14 08:35:02 ispc CRON[1514231]: pam_unix(cron:session): session closed for user root Dec 14 08:35:08 ispc saslauthd[1514311]: pam_mysql - SELECT returned no result. Dec 14 08:35:08 ispc saslauthd[1514311]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:35:08 ispc saslauthd[1514311]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:35:39 ispc saslauthd[1514325]: pam_mysql - SELECT returned no result. Dec 14 08:35:39 ispc saslauthd[1514325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:35:39 ispc saslauthd[1514325]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:36:01 ispc CRON[1514334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:36:02 ispc CRON[1514334]: pam_unix(cron:session): session closed for user root Dec 14 08:36:02 ispc saslauthd[1514349]: pam_mysql - SELECT returned no result. Dec 14 08:36:02 ispc saslauthd[1514349]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:36:02 ispc saslauthd[1514349]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:36:32 ispc postfix/smtpd[1514359]: sql auxprop plugin using mysql engine Dec 14 08:36:34 ispc saslauthd[1514365]: pam_mysql - SELECT returned no result. Dec 14 08:36:34 ispc saslauthd[1514365]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:36:34 ispc saslauthd[1514365]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:37:01 ispc CRON[1514376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:37:01 ispc CRON[1514376]: pam_unix(cron:session): session closed for user root Dec 14 08:37:02 ispc sshd[1514375]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:37:02 ispc sshd[1514375]: Invalid user ziplines from 114.7.163.154 Dec 14 08:38:01 ispc CRON[1514427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:38:01 ispc CRON[1514427]: pam_unix(cron:session): session closed for user root Dec 14 08:39:01 ispc CRON[1514464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:39:01 ispc CRON[1514465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:39:01 ispc CRON[1514464]: pam_unix(cron:session): session closed for user root Dec 14 08:39:02 ispc CRON[1514465]: pam_unix(cron:session): session closed for user root Dec 14 08:39:29 ispc postfix/smtpd[1514498]: sql auxprop plugin using mysql engine Dec 14 08:39:30 ispc saslauthd[1514500]: pam_mysql - SELECT returned no result. Dec 14 08:39:30 ispc saslauthd[1514500]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:39:30 ispc saslauthd[1514500]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:40:01 ispc CRON[1514516]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:40:01 ispc CRON[1514514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:40:01 ispc CRON[1514515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:40:01 ispc CRON[1514517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:40:01 ispc CRON[1514518]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:40:01 ispc CRON[1514516]: pam_unix(cron:session): session closed for user www-data Dec 14 08:40:01 ispc CRON[1514515]: pam_unix(cron:session): session closed for user root Dec 14 08:40:01 ispc CRON[1514518]: pam_unix(cron:session): session closed for user getmail Dec 14 08:40:01 ispc CRON[1514517]: pam_unix(cron:session): session closed for user root Dec 14 08:40:01 ispc CRON[1514514]: pam_unix(cron:session): session closed for user root Dec 14 08:40:03 ispc saslauthd[1514592]: pam_mysql - SELECT returned no result. Dec 14 08:40:03 ispc saslauthd[1514592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:40:03 ispc saslauthd[1514592]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:40:34 ispc saslauthd[1514607]: pam_mysql - SELECT returned no result. Dec 14 08:40:34 ispc saslauthd[1514607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:40:34 ispc saslauthd[1514607]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:41:01 ispc CRON[1514621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:41:02 ispc CRON[1514621]: pam_unix(cron:session): session closed for user root Dec 14 08:41:15 ispc CRON[1513507]: pam_unix(cron:session): session closed for user root Dec 14 08:42:01 ispc CRON[1514643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:42:02 ispc CRON[1514643]: pam_unix(cron:session): session closed for user root Dec 14 08:42:44 ispc sshd[1514667]: Invalid user martof from 211.45.175.153 Dec 14 08:43:01 ispc CRON[1514675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:43:01 ispc CRON[1514675]: pam_unix(cron:session): session closed for user root Dec 14 08:43:22 ispc saslauthd[1514689]: pam_mysql - SELECT returned no result. Dec 14 08:43:22 ispc saslauthd[1514689]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:43:22 ispc saslauthd[1514689]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:43:31 ispc sshd[1514690]: Did not receive identification string from 64.225.70.87 Dec 14 08:43:42 ispc sshd[1514691]: Invalid user ziplines from 51.159.91.86 Dec 14 08:44:01 ispc CRON[1514694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:44:02 ispc CRON[1514694]: pam_unix(cron:session): session closed for user root Dec 14 08:44:26 ispc postfix/smtpd[1514706]: sql auxprop plugin using mysql engine Dec 14 08:44:27 ispc saslauthd[1514709]: pam_mysql - SELECT returned no result. Dec 14 08:44:27 ispc saslauthd[1514709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:44:27 ispc saslauthd[1514709]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:45:01 ispc CRON[1514714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:45:01 ispc CRON[1514715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:45:01 ispc CRON[1514716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:45:01 ispc CRON[1514717]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:45:01 ispc CRON[1514715]: pam_unix(cron:session): session closed for user root Dec 14 08:45:01 ispc CRON[1514717]: pam_unix(cron:session): session closed for user getmail Dec 14 08:45:02 ispc CRON[1514714]: pam_unix(cron:session): session closed for user root Dec 14 08:45:40 ispc CRON[1514716]: pam_unix(cron:session): session closed for user root Dec 14 08:46:01 ispc CRON[1514909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:46:39 ispc sshd[1514936]: Invalid user martof from 175.125.92.77 Dec 14 08:47:01 ispc CRON[1514946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:47:01 ispc CRON[1514946]: pam_unix(cron:session): session closed for user root Dec 14 08:48:01 ispc CRON[1514997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:48:02 ispc CRON[1514997]: pam_unix(cron:session): session closed for user root Dec 14 08:48:32 ispc sshd[1515024]: Invalid user blceu from 51.159.91.86 Dec 14 08:49:01 ispc CRON[1515041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:49:01 ispc CRON[1515041]: pam_unix(cron:session): session closed for user root Dec 14 08:50:01 ispc CRON[1515083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:50:01 ispc CRON[1515084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:50:01 ispc CRON[1515085]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 08:50:01 ispc CRON[1515086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:50:01 ispc CRON[1515087]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:50:01 ispc CRON[1515085]: pam_unix(cron:session): session closed for user www-data Dec 14 08:50:01 ispc CRON[1515084]: pam_unix(cron:session): session closed for user root Dec 14 08:50:01 ispc CRON[1515087]: pam_unix(cron:session): session closed for user getmail Dec 14 08:50:02 ispc CRON[1515086]: pam_unix(cron:session): session closed for user root Dec 14 08:50:02 ispc CRON[1515083]: pam_unix(cron:session): session closed for user root Dec 14 08:51:01 ispc CRON[1515192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:51:02 ispc CRON[1515192]: pam_unix(cron:session): session closed for user root Dec 14 08:51:04 ispc postfix/smtpd[1515203]: sql auxprop plugin using mysql engine Dec 14 08:51:06 ispc saslauthd[1515206]: pam_mysql - SELECT returned no result. Dec 14 08:51:06 ispc saslauthd[1515206]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:51:06 ispc saslauthd[1515206]: do_auth : auth failure: [user=powerdown] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 08:51:30 ispc sshd[1515215]: Invalid user blceu from 221.156.137.104 Dec 14 08:51:55 ispc sshd[1515234]: Did not receive identification string from 45.140.17.97 Dec 14 08:52:01 ispc CRON[1515239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:52:01 ispc CRON[1515239]: pam_unix(cron:session): session closed for user root Dec 14 08:52:16 ispc postfix/smtpd[1515258]: sql auxprop plugin using mysql engine Dec 14 08:52:19 ispc saslauthd[1515260]: pam_mysql - SELECT returned no result. Dec 14 08:52:19 ispc saslauthd[1515260]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:52:19 ispc saslauthd[1515260]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 08:53:01 ispc CRON[1515295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:53:02 ispc CRON[1515295]: pam_unix(cron:session): session closed for user root Dec 14 08:53:31 ispc sshd[1515319]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 08:53:31 ispc sshd[1515319]: Invalid user blceu from 114.7.163.154 Dec 14 08:54:01 ispc CRON[1515342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:54:01 ispc CRON[1515342]: pam_unix(cron:session): session closed for user root Dec 14 08:55:01 ispc CRON[1515375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:55:01 ispc CRON[1515378]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 08:55:01 ispc CRON[1515376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:55:01 ispc CRON[1515377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:55:01 ispc CRON[1515376]: pam_unix(cron:session): session closed for user root Dec 14 08:55:01 ispc CRON[1515378]: pam_unix(cron:session): session closed for user getmail Dec 14 08:55:01 ispc CRON[1515377]: pam_unix(cron:session): session closed for user root Dec 14 08:55:02 ispc CRON[1515375]: pam_unix(cron:session): session closed for user root Dec 14 08:55:29 ispc sshd[1515470]: Invalid user ubuntu from 200.32.52.150 Dec 14 08:55:29 ispc sshd[1515468]: Invalid user klape from 200.32.52.150 Dec 14 08:55:30 ispc sshd[1515472]: Bad protocol version identification '\026\003\001' from 74.82.47.2 Dec 14 08:56:01 ispc CRON[1515489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:56:02 ispc CRON[1515489]: pam_unix(cron:session): session closed for user root Dec 14 08:56:55 ispc sshd[1515530]: Invalid user martof from 210.114.18.123 Dec 14 08:56:59 ispc sshd[1515532]: Invalid user martof from 211.23.78.98 Dec 14 08:57:01 ispc CRON[1515534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:57:01 ispc CRON[1515534]: pam_unix(cron:session): session closed for user root Dec 14 08:58:01 ispc CRON[1515584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:58:02 ispc CRON[1515584]: pam_unix(cron:session): session closed for user root Dec 14 08:58:31 ispc postfix/smtpd[1515610]: sql auxprop plugin using mysql engine Dec 14 08:58:49 ispc sshd[1515622]: Invalid user blceu from 103.110.84.105 Dec 14 08:59:01 ispc CRON[1515631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 08:59:02 ispc CRON[1515631]: pam_unix(cron:session): session closed for user root Dec 14 08:59:09 ispc saslauthd[1515647]: pam_mysql - SELECT returned no result. Dec 14 08:59:09 ispc saslauthd[1515647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 08:59:09 ispc saslauthd[1515647]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:00:01 ispc CRON[1515672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:00:01 ispc CRON[1515673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:00:01 ispc CRON[1515674]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:00:01 ispc CRON[1515675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:00:01 ispc CRON[1515676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:00:01 ispc CRON[1515677]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:00:01 ispc CRON[1515673]: pam_unix(cron:session): session closed for user root Dec 14 09:00:01 ispc CRON[1515674]: pam_unix(cron:session): session closed for user www-data Dec 14 09:00:01 ispc CRON[1515677]: pam_unix(cron:session): session closed for user getmail Dec 14 09:00:01 ispc CRON[1515676]: pam_unix(cron:session): session closed for user root Dec 14 09:00:01 ispc CRON[1515675]: pam_unix(cron:session): session closed for user root Dec 14 09:00:01 ispc CRON[1515672]: pam_unix(cron:session): session closed for user root Dec 14 09:00:45 ispc sshd[1515847]: Invalid user blceu from 211.23.78.98 Dec 14 09:01:01 ispc CRON[1515859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:01:03 ispc CRON[1515859]: pam_unix(cron:session): session closed for user root Dec 14 09:01:55 ispc postfix/smtpd[1515894]: sql auxprop plugin using mysql engine Dec 14 09:01:55 ispc saslauthd[1515896]: pam_mysql - SELECT returned no result. Dec 14 09:01:55 ispc saslauthd[1515896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:01:55 ispc saslauthd[1515896]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:02:01 ispc CRON[1515901]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 09:02:01 ispc CRON[1515902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:02:01 ispc CRON[1515902]: pam_unix(cron:session): session closed for user root Dec 14 09:03:01 ispc CRON[1516755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:03:02 ispc CRON[1516755]: pam_unix(cron:session): session closed for user root Dec 14 09:03:32 ispc CRON[1515901]: pam_unix(cron:session): session closed for user logcheck Dec 14 09:03:37 ispc postfix/smtpd[1516989]: sql auxprop plugin using mysql engine Dec 14 09:03:53 ispc postfix/smtpd[1517009]: sql auxprop plugin using mysql engine Dec 14 09:03:53 ispc saslauthd[1517011]: pam_mysql - SELECT returned no result. Dec 14 09:03:53 ispc saslauthd[1517011]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:03:53 ispc saslauthd[1517011]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:04:01 ispc CRON[1517017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:04:03 ispc CRON[1517017]: pam_unix(cron:session): session closed for user root Dec 14 09:04:10 ispc saslauthd[1517034]: pam_mysql - SELECT returned no result. Dec 14 09:04:10 ispc saslauthd[1517034]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:04:10 ispc saslauthd[1517034]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:04:12 ispc saslauthd[1517037]: pam_mysql - SELECT returned no result. Dec 14 09:04:12 ispc saslauthd[1517037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:04:12 ispc saslauthd[1517037]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:04:41 ispc sshd[1517052]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:04:59 ispc sshd[1517059]: Did not receive identification string from 101.89.148.7 Dec 14 09:05:01 ispc sshd[1517066]: Did not receive identification string from 198.235.24.202 Dec 14 09:05:01 ispc CRON[1517067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:05:01 ispc CRON[1517068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:05:01 ispc CRON[1517069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:05:01 ispc CRON[1517070]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:05:01 ispc CRON[1517068]: pam_unix(cron:session): session closed for user root Dec 14 09:05:01 ispc CRON[1517070]: pam_unix(cron:session): session closed for user getmail Dec 14 09:05:02 ispc CRON[1517069]: pam_unix(cron:session): session closed for user root Dec 14 09:05:03 ispc CRON[1517067]: pam_unix(cron:session): session closed for user root Dec 14 09:06:01 ispc CRON[1517169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:06:01 ispc CRON[1517169]: pam_unix(cron:session): session closed for user root Dec 14 09:06:04 ispc postfix/smtpd[1517184]: sql auxprop plugin using mysql engine Dec 14 09:06:04 ispc saslauthd[1517186]: pam_mysql - SELECT returned no result. Dec 14 09:06:04 ispc saslauthd[1517186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:04 ispc saslauthd[1517186]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:08 ispc saslauthd[1517187]: pam_mysql - SELECT returned no result. Dec 14 09:06:08 ispc saslauthd[1517187]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:08 ispc saslauthd[1517187]: do_auth : auth failure: [user=prime] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:24 ispc CRON[1514909]: pam_unix(cron:session): session closed for user root Dec 14 09:06:39 ispc postfix/smtpd[1517202]: sql auxprop plugin using mysql engine Dec 14 09:06:39 ispc saslauthd[1517205]: pam_mysql - SELECT returned no result. Dec 14 09:06:39 ispc saslauthd[1517205]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:39 ispc saslauthd[1517205]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:39 ispc saslauthd[1517206]: pam_mysql - SELECT returned no result. Dec 14 09:06:39 ispc saslauthd[1517206]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:39 ispc saslauthd[1517206]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:40 ispc saslauthd[1517207]: pam_mysql - SELECT returned no result. Dec 14 09:06:40 ispc saslauthd[1517207]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:40 ispc saslauthd[1517207]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:42 ispc saslauthd[1517208]: pam_mysql - SELECT returned no result. Dec 14 09:06:42 ispc saslauthd[1517208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:06:42 ispc saslauthd[1517208]: do_auth : auth failure: [user=report] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:06:51 ispc postfix/smtpd[1517209]: sql auxprop plugin using mysql engine Dec 14 09:07:00 ispc sshd[1517213]: Invalid user admin from 139.19.117.197 Dec 14 09:07:01 ispc CRON[1517215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:07:02 ispc CRON[1517215]: pam_unix(cron:session): session closed for user root Dec 14 09:07:03 ispc postfix/smtpd[1517226]: sql auxprop plugin using mysql engine Dec 14 09:07:05 ispc saslauthd[1517227]: pam_mysql - SELECT returned no result. Dec 14 09:07:05 ispc saslauthd[1517227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:07:05 ispc saslauthd[1517227]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:07:07 ispc saslauthd[1517228]: pam_mysql - SELECT returned no result. Dec 14 09:07:07 ispc saslauthd[1517228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:07:07 ispc saslauthd[1517228]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:07:53 ispc sshd[1517242]: Invalid user martof from 51.79.36.60 Dec 14 09:07:55 ispc saslauthd[1517244]: pam_mysql - SELECT returned no result. Dec 14 09:07:55 ispc saslauthd[1517244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:07:55 ispc saslauthd[1517244]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:08:01 ispc CRON[1517245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:08:03 ispc CRON[1517245]: pam_unix(cron:session): session closed for user root Dec 14 09:09:01 ispc CRON[1517262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:09:01 ispc CRON[1517263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:09:01 ispc CRON[1517262]: pam_unix(cron:session): session closed for user root Dec 14 09:09:03 ispc CRON[1517263]: pam_unix(cron:session): session closed for user root Dec 14 09:10:01 ispc CRON[1517292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:10:01 ispc CRON[1517293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:10:01 ispc CRON[1517294]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:10:01 ispc CRON[1517295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:10:01 ispc CRON[1517296]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:10:01 ispc CRON[1517294]: pam_unix(cron:session): session closed for user www-data Dec 14 09:10:01 ispc CRON[1517293]: pam_unix(cron:session): session closed for user root Dec 14 09:10:01 ispc CRON[1517296]: pam_unix(cron:session): session closed for user getmail Dec 14 09:10:02 ispc sshd[1517310]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:10:02 ispc sshd[1517310]: Invalid user blceu from 193.110.157.47 Dec 14 09:10:02 ispc CRON[1517292]: pam_unix(cron:session): session closed for user root Dec 14 09:10:06 ispc postfix/smtpd[1517404]: sql auxprop plugin using mysql engine Dec 14 09:10:08 ispc saslauthd[1517409]: pam_mysql - SELECT returned no result. Dec 14 09:10:08 ispc saslauthd[1517409]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:08 ispc saslauthd[1517409]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:10 ispc saslauthd[1517412]: pam_mysql - SELECT returned no result. Dec 14 09:10:10 ispc saslauthd[1517412]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:10 ispc saslauthd[1517412]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:25 ispc saslauthd[1517413]: pam_mysql - SELECT returned no result. Dec 14 09:10:25 ispc saslauthd[1517413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:25 ispc saslauthd[1517413]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:30 ispc saslauthd[1517416]: pam_mysql - SELECT returned no result. Dec 14 09:10:30 ispc saslauthd[1517416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:30 ispc saslauthd[1517416]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:32 ispc saslauthd[1517417]: pam_mysql - SELECT returned no result. Dec 14 09:10:32 ispc saslauthd[1517417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:32 ispc saslauthd[1517417]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:34 ispc saslauthd[1517420]: pam_mysql - SELECT returned no result. Dec 14 09:10:34 ispc saslauthd[1517420]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:34 ispc saslauthd[1517420]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:35 ispc sshd[1517418]: Invalid user blceu from 203.146.21.153 Dec 14 09:10:38 ispc CRON[1517295]: pam_unix(cron:session): session closed for user root Dec 14 09:10:39 ispc saslauthd[1517422]: pam_mysql - SELECT returned no result. Dec 14 09:10:39 ispc saslauthd[1517422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:39 ispc saslauthd[1517422]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:39 ispc postfix/smtpd[1517424]: sql auxprop plugin using mysql engine Dec 14 09:10:39 ispc saslauthd[1517423]: pam_mysql - SELECT returned no result. Dec 14 09:10:39 ispc saslauthd[1517423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:39 ispc saslauthd[1517423]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:39 ispc saslauthd[1517427]: pam_mysql - SELECT returned no result. Dec 14 09:10:39 ispc saslauthd[1517427]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:39 ispc saslauthd[1517427]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:40 ispc saslauthd[1517428]: pam_mysql - SELECT returned no result. Dec 14 09:10:40 ispc saslauthd[1517428]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:40 ispc saslauthd[1517428]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:40 ispc saslauthd[1517429]: pam_mysql - SELECT returned no result. Dec 14 09:10:40 ispc saslauthd[1517429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:40 ispc saslauthd[1517429]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:41 ispc saslauthd[1517430]: pam_mysql - SELECT returned no result. Dec 14 09:10:41 ispc saslauthd[1517430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:41 ispc saslauthd[1517430]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:48 ispc saslauthd[1517431]: pam_mysql - SELECT returned no result. Dec 14 09:10:48 ispc saslauthd[1517431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:48 ispc saslauthd[1517431]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:10:52 ispc saslauthd[1517432]: pam_mysql - SELECT returned no result. Dec 14 09:10:52 ispc saslauthd[1517432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:10:52 ispc saslauthd[1517432]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:10:59 ispc postfix/smtpd[1517433]: sql auxprop plugin using mysql engine Dec 14 09:11:01 ispc CRON[1517438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:11:11 ispc saslauthd[1517450]: pam_mysql - SELECT returned no result. Dec 14 09:11:11 ispc saslauthd[1517450]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:11:11 ispc saslauthd[1517450]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:12:01 ispc CRON[1517477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:12:02 ispc CRON[1517477]: pam_unix(cron:session): session closed for user root Dec 14 09:12:08 ispc saslauthd[1517493]: pam_mysql - SELECT returned no result. Dec 14 09:12:08 ispc saslauthd[1517493]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:12:08 ispc saslauthd[1517493]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:12:25 ispc sshd[1517506]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:12:25 ispc sshd[1517506]: Invalid user admin from 103.146.203.212 Dec 14 09:12:28 ispc sshd[1517508]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:12:42 ispc sshd[1517521]: Invalid user blceu from 175.125.92.77 Dec 14 09:13:01 ispc saslauthd[1517535]: pam_mysql - SELECT returned no result. Dec 14 09:13:01 ispc saslauthd[1517535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:13:01 ispc saslauthd[1517535]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:13:01 ispc CRON[1517536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:13:02 ispc CRON[1517536]: pam_unix(cron:session): session closed for user root Dec 14 09:13:09 ispc sshd[1517551]: Invalid user blceu from 139.59.66.222 Dec 14 09:13:43 ispc sshd[1517569]: Invalid user ziplines from 175.125.92.77 Dec 14 09:13:49 ispc postfix/smtpd[1517575]: sql auxprop plugin using mysql engine Dec 14 09:13:53 ispc saslauthd[1517579]: pam_mysql - SELECT returned no result. Dec 14 09:13:53 ispc saslauthd[1517579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:13:53 ispc saslauthd[1517579]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:13:58 ispc saslauthd[1517584]: pam_mysql - SELECT returned no result. Dec 14 09:13:58 ispc saslauthd[1517584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:13:58 ispc saslauthd[1517584]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:14:01 ispc CRON[1517586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:14:01 ispc CRON[1517586]: pam_unix(cron:session): session closed for user root Dec 14 09:14:18 ispc saslauthd[1517605]: pam_mysql - SELECT returned no result. Dec 14 09:14:18 ispc saslauthd[1517605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:14:18 ispc saslauthd[1517605]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:14:56 ispc saslauthd[1517626]: pam_mysql - SELECT returned no result. Dec 14 09:14:56 ispc saslauthd[1517626]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:14:56 ispc saslauthd[1517626]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:15:01 ispc CRON[1517629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:15:01 ispc CRON[1517630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:15:01 ispc CRON[1517631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:15:01 ispc CRON[1517632]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:15:02 ispc CRON[1517630]: pam_unix(cron:session): session closed for user root Dec 14 09:15:02 ispc CRON[1517632]: pam_unix(cron:session): session closed for user getmail Dec 14 09:15:02 ispc CRON[1517631]: pam_unix(cron:session): session closed for user root Dec 14 09:15:04 ispc CRON[1517629]: pam_unix(cron:session): session closed for user root Dec 14 09:15:09 ispc sshd[1517709]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:15:56 ispc saslauthd[1517736]: pam_mysql - SELECT returned no result. Dec 14 09:15:56 ispc saslauthd[1517736]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:15:56 ispc saslauthd[1517736]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:16:01 ispc CRON[1517739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:16:02 ispc sshd[1517737]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:16:02 ispc sshd[1517737]: Invalid user admin from 78.128.112.74 Dec 14 09:16:02 ispc CRON[1517739]: pam_unix(cron:session): session closed for user root Dec 14 09:17:01 ispc CRON[1517781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:17:02 ispc CRON[1517781]: pam_unix(cron:session): session closed for user root Dec 14 09:17:47 ispc sshd[1517817]: Invalid user admin from 64.225.70.87 Dec 14 09:18:01 ispc CRON[1517836]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 09:18:01 ispc CRON[1517837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:18:02 ispc CRON[1517837]: pam_unix(cron:session): session closed for user root Dec 14 09:18:06 ispc CRON[1517836]: pam_unix(cron:session): session closed for user amavis Dec 14 09:18:07 ispc postfix/smtpd[1517860]: sql auxprop plugin using mysql engine Dec 14 09:18:18 ispc sshd[1517868]: Invalid user admin from 64.225.70.87 Dec 14 09:18:49 ispc sshd[1517882]: Invalid user admin from 64.225.70.87 Dec 14 09:19:01 ispc CRON[1517893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:19:01 ispc CRON[1517893]: pam_unix(cron:session): session closed for user root Dec 14 09:19:05 ispc postfix/smtpd[1517904]: sql auxprop plugin using mysql engine Dec 14 09:19:10 ispc saslauthd[1517910]: pam_mysql - SELECT returned no result. Dec 14 09:19:10 ispc saslauthd[1517910]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:19:10 ispc saslauthd[1517910]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:19:20 ispc sshd[1517911]: Invalid user admin from 64.225.70.87 Dec 14 09:19:53 ispc sshd[1517930]: Invalid user admin from 64.225.70.87 Dec 14 09:20:01 ispc CRON[1517933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:20:01 ispc CRON[1517934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:20:01 ispc CRON[1517935]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:20:01 ispc CRON[1517936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:20:01 ispc CRON[1517937]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:20:01 ispc CRON[1517934]: pam_unix(cron:session): session closed for user root Dec 14 09:20:01 ispc CRON[1517935]: pam_unix(cron:session): session closed for user www-data Dec 14 09:20:01 ispc CRON[1517937]: pam_unix(cron:session): session closed for user getmail Dec 14 09:20:02 ispc CRON[1517936]: pam_unix(cron:session): session closed for user root Dec 14 09:20:03 ispc CRON[1517933]: pam_unix(cron:session): session closed for user root Dec 14 09:20:27 ispc sshd[1518024]: Invalid user admin from 64.225.70.87 Dec 14 09:20:38 ispc sshd[1518036]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:21:01 ispc CRON[1518046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:21:01 ispc CRON[1518047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:21:01 ispc CRON[1518046]: pam_unix(cron:session): session closed for user root Dec 14 09:21:01 ispc CRON[1518047]: pam_unix(cron:session): session closed for user root Dec 14 09:21:07 ispc postfix/smtpd[1518064]: sql auxprop plugin using mysql engine Dec 14 09:21:08 ispc saslauthd[1518066]: pam_mysql - SELECT returned no result. Dec 14 09:21:08 ispc saslauthd[1518066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:21:08 ispc saslauthd[1518066]: do_auth : auth failure: [user=primenet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:21:26 ispc postfix/smtpd[1518076]: sql auxprop plugin using mysql engine Dec 14 09:21:29 ispc saslauthd[1518078]: pam_mysql - SELECT returned no result. Dec 14 09:21:29 ispc saslauthd[1518078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:21:29 ispc saslauthd[1518078]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:21:35 ispc saslauthd[1518083]: pam_mysql - SELECT returned no result. Dec 14 09:21:35 ispc saslauthd[1518083]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:21:35 ispc saslauthd[1518083]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:21:56 ispc sshd[1518088]: Invalid user martof from 203.146.21.153 Dec 14 09:22:02 ispc CRON[1518094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:22:03 ispc CRON[1518094]: pam_unix(cron:session): session closed for user root Dec 14 09:22:52 ispc saslauthd[1518136]: pam_mysql - SELECT returned no result. Dec 14 09:22:52 ispc saslauthd[1518136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:22:52 ispc saslauthd[1518136]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:23:01 ispc CRON[1518142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:23:01 ispc CRON[1518142]: pam_unix(cron:session): session closed for user root Dec 14 09:23:56 ispc saslauthd[1518174]: pam_mysql - SELECT returned no result. Dec 14 09:23:56 ispc saslauthd[1518174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:23:56 ispc saslauthd[1518174]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:24:01 ispc CRON[1518179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:24:03 ispc CRON[1518179]: pam_unix(cron:session): session closed for user root Dec 14 09:24:07 ispc sshd[1518190]: Invalid user ziplines from 139.59.66.222 Dec 14 09:25:01 ispc CRON[1518236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:25:01 ispc CRON[1518237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:25:01 ispc CRON[1518238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:25:01 ispc CRON[1518239]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:25:01 ispc CRON[1518237]: pam_unix(cron:session): session closed for user root Dec 14 09:25:01 ispc CRON[1518239]: pam_unix(cron:session): session closed for user getmail Dec 14 09:25:02 ispc CRON[1518238]: pam_unix(cron:session): session closed for user root Dec 14 09:25:02 ispc CRON[1518236]: pam_unix(cron:session): session closed for user root Dec 14 09:25:14 ispc saslauthd[1518318]: pam_mysql - SELECT returned no result. Dec 14 09:25:14 ispc saslauthd[1518318]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:25:14 ispc saslauthd[1518318]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:25:28 ispc saslauthd[1518323]: pam_mysql - SELECT returned no result. Dec 14 09:25:28 ispc saslauthd[1518323]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:25:28 ispc saslauthd[1518323]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:26:01 ispc CRON[1518341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:26:02 ispc CRON[1518341]: pam_unix(cron:session): session closed for user root Dec 14 09:27:01 ispc CRON[1518375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:27:02 ispc CRON[1518375]: pam_unix(cron:session): session closed for user root Dec 14 09:28:01 ispc CRON[1518425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:28:01 ispc sshd[1518423]: Invalid user blceu from 43.135.148.156 Dec 14 09:28:01 ispc CRON[1518425]: pam_unix(cron:session): session closed for user root Dec 14 09:28:04 ispc postfix/smtpd[1518436]: sql auxprop plugin using mysql engine Dec 14 09:28:08 ispc saslauthd[1518443]: pam_mysql - SELECT returned no result. Dec 14 09:28:08 ispc saslauthd[1518443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:28:08 ispc saslauthd[1518443]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:28:09 ispc postfix/smtpd[1518444]: sql auxprop plugin using mysql engine Dec 14 09:28:10 ispc saslauthd[1518445]: pam_mysql - SELECT returned no result. Dec 14 09:28:10 ispc saslauthd[1518445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:28:10 ispc saslauthd[1518445]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:29:01 ispc CRON[1518472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:29:02 ispc CRON[1518472]: pam_unix(cron:session): session closed for user root Dec 14 09:30:01 ispc CRON[1518511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:30:01 ispc CRON[1518512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:30:01 ispc CRON[1518513]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:30:01 ispc CRON[1518514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:30:01 ispc CRON[1518515]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:30:01 ispc CRON[1518515]: pam_unix(cron:session): session closed for user getmail Dec 14 09:30:01 ispc CRON[1518512]: pam_unix(cron:session): session closed for user root Dec 14 09:30:01 ispc CRON[1518513]: pam_unix(cron:session): session closed for user www-data Dec 14 09:30:02 ispc CRON[1518511]: pam_unix(cron:session): session closed for user root Dec 14 09:30:02 ispc CRON[1518514]: pam_unix(cron:session): session closed for user root Dec 14 09:30:05 ispc postfix/smtpd[1518589]: sql auxprop plugin using mysql engine Dec 14 09:30:05 ispc saslauthd[1518591]: pam_mysql - SELECT returned no result. Dec 14 09:30:05 ispc saslauthd[1518591]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:30:05 ispc saslauthd[1518591]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:30:54 ispc sshd[1518615]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:30:54 ispc sshd[1518615]: Invalid user blceu from 103.28.37.227 Dec 14 09:30:59 ispc sshd[1518617]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:30:59 ispc sshd[1518617]: Invalid user admin from 103.146.203.212 Dec 14 09:31:01 ispc CRON[1518623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:31:03 ispc CRON[1518623]: pam_unix(cron:session): session closed for user root Dec 14 09:31:26 ispc saslauthd[1518642]: pam_mysql - SELECT returned no result. Dec 14 09:31:26 ispc saslauthd[1518642]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:31:26 ispc saslauthd[1518642]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:31:29 ispc CRON[1517438]: pam_unix(cron:session): session closed for user root Dec 14 09:31:37 ispc saslauthd[1518647]: pam_mysql - SELECT returned no result. Dec 14 09:31:37 ispc saslauthd[1518647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:31:37 ispc saslauthd[1518647]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:32:01 ispc CRON[1518650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:32:02 ispc CRON[1518650]: pam_unix(cron:session): session closed for user root Dec 14 09:32:47 ispc saslauthd[1518673]: pam_mysql - SELECT returned no result. Dec 14 09:32:47 ispc saslauthd[1518673]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:32:47 ispc saslauthd[1518673]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:32:54 ispc saslauthd[1518676]: pam_mysql - SELECT returned no result. Dec 14 09:32:54 ispc saslauthd[1518676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:32:54 ispc saslauthd[1518676]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:33:01 ispc CRON[1518678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:33:02 ispc CRON[1518678]: pam_unix(cron:session): session closed for user root Dec 14 09:33:08 ispc saslauthd[1518693]: pam_mysql - SELECT returned no result. Dec 14 09:33:08 ispc saslauthd[1518693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:33:08 ispc saslauthd[1518693]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:33:50 ispc sshd[1518694]: Invalid user ziplines from 203.146.21.153 Dec 14 09:34:01 ispc CRON[1518711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:34:02 ispc CRON[1518711]: pam_unix(cron:session): session closed for user root Dec 14 09:34:09 ispc saslauthd[1518722]: pam_mysql - SELECT returned no result. Dec 14 09:34:09 ispc saslauthd[1518722]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:34:09 ispc saslauthd[1518722]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:35:01 ispc CRON[1518729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:35:01 ispc CRON[1518730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:35:01 ispc CRON[1518731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:35:01 ispc CRON[1518732]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:35:01 ispc CRON[1518730]: pam_unix(cron:session): session closed for user root Dec 14 09:35:01 ispc CRON[1518732]: pam_unix(cron:session): session closed for user getmail Dec 14 09:35:02 ispc CRON[1518729]: pam_unix(cron:session): session closed for user root Dec 14 09:35:19 ispc saslauthd[1518841]: pam_mysql - SELECT returned no result. Dec 14 09:35:19 ispc saslauthd[1518841]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:35:19 ispc saslauthd[1518841]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:35:21 ispc postfix/smtpd[1518842]: sql auxprop plugin using mysql engine Dec 14 09:35:23 ispc saslauthd[1518845]: pam_mysql - SELECT returned no result. Dec 14 09:35:23 ispc saslauthd[1518845]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:35:23 ispc saslauthd[1518845]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:35:33 ispc CRON[1518731]: pam_unix(cron:session): session closed for user root Dec 14 09:35:45 ispc sshd[1518848]: Invalid user blceu from 210.114.18.123 Dec 14 09:36:01 ispc CRON[1518850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:36:09 ispc saslauthd[1518862]: pam_mysql - SELECT returned no result. Dec 14 09:36:09 ispc saslauthd[1518862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:36:09 ispc saslauthd[1518862]: do_auth : auth failure: [user=primeos] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:36:53 ispc sshd[1518882]: Did not receive identification string from 80.94.92.182 Dec 14 09:37:01 ispc CRON[1518889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:37:01 ispc sshd[1518887]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:37:02 ispc CRON[1518889]: pam_unix(cron:session): session closed for user root Dec 14 09:37:22 ispc saslauthd[1518908]: pam_mysql - SELECT returned no result. Dec 14 09:37:22 ispc saslauthd[1518908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:37:22 ispc saslauthd[1518908]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:37:43 ispc saslauthd[1518921]: pam_mysql - SELECT returned no result. Dec 14 09:37:43 ispc saslauthd[1518921]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:37:43 ispc saslauthd[1518921]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:37:44 ispc saslauthd[1518922]: pam_mysql - SELECT returned no result. Dec 14 09:37:44 ispc saslauthd[1518922]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:37:44 ispc saslauthd[1518922]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:38:01 ispc CRON[1518945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:38:01 ispc CRON[1518945]: pam_unix(cron:session): session closed for user root Dec 14 09:38:30 ispc saslauthd[1518969]: pam_mysql - SELECT returned no result. Dec 14 09:38:30 ispc saslauthd[1518969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:38:30 ispc saslauthd[1518969]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:39:01 ispc CRON[1518982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:39:01 ispc CRON[1518983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:39:02 ispc CRON[1518982]: pam_unix(cron:session): session closed for user root Dec 14 09:39:02 ispc CRON[1518983]: pam_unix(cron:session): session closed for user root Dec 14 09:40:01 ispc CRON[1519036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:40:01 ispc CRON[1519037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:40:01 ispc CRON[1519038]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:40:01 ispc CRON[1519039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:40:01 ispc CRON[1519040]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:40:01 ispc CRON[1519038]: pam_unix(cron:session): session closed for user www-data Dec 14 09:40:01 ispc CRON[1519037]: pam_unix(cron:session): session closed for user root Dec 14 09:40:01 ispc CRON[1519040]: pam_unix(cron:session): session closed for user getmail Dec 14 09:40:01 ispc CRON[1519039]: pam_unix(cron:session): session closed for user root Dec 14 09:40:03 ispc CRON[1519036]: pam_unix(cron:session): session closed for user root Dec 14 09:40:12 ispc postfix/smtpd[1519118]: sql auxprop plugin using mysql engine Dec 14 09:40:13 ispc saslauthd[1519120]: pam_mysql - SELECT returned no result. Dec 14 09:40:13 ispc saslauthd[1519120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:40:13 ispc saslauthd[1519120]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:40:17 ispc saslauthd[1519121]: pam_mysql - SELECT returned no result. Dec 14 09:40:17 ispc saslauthd[1519121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:40:17 ispc saslauthd[1519121]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:41:01 ispc CRON[1519146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:41:02 ispc CRON[1519146]: pam_unix(cron:session): session closed for user root Dec 14 09:41:03 ispc saslauthd[1519157]: pam_mysql - SELECT returned no result. Dec 14 09:41:03 ispc saslauthd[1519157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:41:03 ispc saslauthd[1519157]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:42:01 ispc CRON[1519180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:42:02 ispc CRON[1519180]: pam_unix(cron:session): session closed for user root Dec 14 09:42:12 ispc postfix/smtpd[1519197]: sql auxprop plugin using mysql engine Dec 14 09:42:19 ispc saslauthd[1519204]: pam_mysql - SELECT returned no result. Dec 14 09:42:19 ispc saslauthd[1519204]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:42:19 ispc saslauthd[1519204]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:42:39 ispc saslauthd[1519220]: pam_mysql - SELECT returned no result. Dec 14 09:42:39 ispc saslauthd[1519220]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:42:39 ispc saslauthd[1519220]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:43:01 ispc CRON[1519229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:43:01 ispc CRON[1519229]: pam_unix(cron:session): session closed for user root Dec 14 09:43:52 ispc saslauthd[1519263]: pam_mysql - SELECT returned no result. Dec 14 09:43:52 ispc saslauthd[1519263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:43:52 ispc saslauthd[1519263]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:44:01 ispc CRON[1519268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:44:02 ispc CRON[1519268]: pam_unix(cron:session): session closed for user root Dec 14 09:44:38 ispc sshd[1519293]: Invalid user ziplines from 103.77.207.53 Dec 14 09:45:01 ispc CRON[1519307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:45:01 ispc CRON[1519308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:45:01 ispc CRON[1519309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:45:01 ispc CRON[1519310]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:45:01 ispc CRON[1519308]: pam_unix(cron:session): session closed for user root Dec 14 09:45:01 ispc CRON[1519310]: pam_unix(cron:session): session closed for user getmail Dec 14 09:45:02 ispc CRON[1519309]: pam_unix(cron:session): session closed for user root Dec 14 09:45:03 ispc CRON[1519307]: pam_unix(cron:session): session closed for user root Dec 14 09:45:07 ispc saslauthd[1519383]: pam_mysql - SELECT returned no result. Dec 14 09:45:07 ispc saslauthd[1519383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:45:07 ispc saslauthd[1519383]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:45:40 ispc sshd[1519401]: Invalid user blceu from 202.46.29.79 Dec 14 09:46:01 ispc CRON[1519411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:46:02 ispc CRON[1519411]: pam_unix(cron:session): session closed for user root Dec 14 09:47:01 ispc CRON[1519450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:47:02 ispc CRON[1519450]: pam_unix(cron:session): session closed for user root Dec 14 09:47:24 ispc postfix/smtpd[1519473]: sql auxprop plugin using mysql engine Dec 14 09:47:24 ispc saslauthd[1519475]: pam_mysql - SELECT returned no result. Dec 14 09:47:24 ispc saslauthd[1519475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:47:24 ispc saslauthd[1519475]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:47:38 ispc sshd[1519480]: Invalid user sol from 80.94.92.182 Dec 14 09:48:01 ispc CRON[1519501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:48:02 ispc CRON[1519501]: pam_unix(cron:session): session closed for user root Dec 14 09:49:01 ispc CRON[1519537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:49:02 ispc CRON[1519537]: pam_unix(cron:session): session closed for user root Dec 14 09:49:13 ispc postfix/smtpd[1519553]: sql auxprop plugin using mysql engine Dec 14 09:49:17 ispc saslauthd[1519555]: pam_mysql - SELECT returned no result. Dec 14 09:49:17 ispc saslauthd[1519555]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:49:17 ispc saslauthd[1519555]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:49:28 ispc sshd[1519560]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:49:28 ispc sshd[1519560]: Invalid user blceu from 123.253.61.95 Dec 14 09:50:01 ispc CRON[1519580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:50:01 ispc CRON[1519581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:50:01 ispc CRON[1519582]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 09:50:01 ispc CRON[1519583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:50:01 ispc CRON[1519584]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:50:01 ispc CRON[1519582]: pam_unix(cron:session): session closed for user www-data Dec 14 09:50:01 ispc CRON[1519581]: pam_unix(cron:session): session closed for user root Dec 14 09:50:01 ispc CRON[1519584]: pam_unix(cron:session): session closed for user getmail Dec 14 09:50:01 ispc CRON[1519583]: pam_unix(cron:session): session closed for user root Dec 14 09:50:03 ispc CRON[1519580]: pam_unix(cron:session): session closed for user root Dec 14 09:50:29 ispc postfix/smtpd[1519668]: sql auxprop plugin using mysql engine Dec 14 09:50:32 ispc saslauthd[1519676]: pam_mysql - SELECT returned no result. Dec 14 09:50:32 ispc saslauthd[1519676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:50:32 ispc saslauthd[1519676]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:50:32 ispc sshd[1519671]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:50:36 ispc sshd[1519677]: Invalid user blceu from 45.119.213.109 Dec 14 09:51:01 ispc CRON[1519687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:51:02 ispc CRON[1519687]: pam_unix(cron:session): session closed for user root Dec 14 09:51:12 ispc saslauthd[1519706]: pam_mysql - SELECT returned no result. Dec 14 09:51:12 ispc saslauthd[1519706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:51:12 ispc saslauthd[1519706]: do_auth : auth failure: [user=prtgadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 09:52:01 ispc CRON[1519726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:52:01 ispc CRON[1519727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:52:02 ispc CRON[1519727]: pam_unix(cron:session): session closed for user root Dec 14 09:52:07 ispc sshd[1519746]: Invalid user martof from 139.59.66.222 Dec 14 09:52:13 ispc saslauthd[1519752]: pam_mysql - SELECT returned no result. Dec 14 09:52:13 ispc saslauthd[1519752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:52:13 ispc saslauthd[1519752]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:53:01 ispc CRON[1519777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:53:01 ispc CRON[1519777]: pam_unix(cron:session): session closed for user root Dec 14 09:53:19 ispc saslauthd[1519797]: pam_mysql - SELECT returned no result. Dec 14 09:53:19 ispc saslauthd[1519797]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:53:19 ispc saslauthd[1519797]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:53:38 ispc postfix/smtpd[1519807]: sql auxprop plugin using mysql engine Dec 14 09:53:41 ispc sshd[1519809]: Invalid user klape from 13.93.203.231 Dec 14 09:53:43 ispc sshd[1519811]: Invalid user ubuntu from 13.93.203.231 Dec 14 09:54:01 ispc CRON[1519821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:54:03 ispc CRON[1519821]: pam_unix(cron:session): session closed for user root Dec 14 09:54:04 ispc sshd[1519836]: Invalid user solana from 80.94.92.182 Dec 14 09:54:31 ispc saslauthd[1519848]: pam_mysql - SELECT returned no result. Dec 14 09:54:31 ispc saslauthd[1519848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:54:31 ispc saslauthd[1519848]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:55:01 ispc CRON[1519867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:55:01 ispc CRON[1519868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:55:01 ispc CRON[1519869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:55:01 ispc CRON[1519870]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 09:55:01 ispc CRON[1519868]: pam_unix(cron:session): session closed for user root Dec 14 09:55:01 ispc CRON[1519870]: pam_unix(cron:session): session closed for user getmail Dec 14 09:55:01 ispc CRON[1519867]: pam_unix(cron:session): session closed for user root Dec 14 09:55:01 ispc CRON[1519869]: pam_unix(cron:session): session closed for user root Dec 14 09:55:18 ispc CRON[1519726]: pam_unix(cron:session): session closed for user root Dec 14 09:55:27 ispc postfix/smtpd[1519955]: sql auxprop plugin using mysql engine Dec 14 09:55:31 ispc saslauthd[1519957]: pam_mysql - SELECT returned no result. Dec 14 09:55:31 ispc saslauthd[1519957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:55:31 ispc saslauthd[1519957]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:55:38 ispc sshd[1519963]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 09:55:38 ispc sshd[1519963]: Invalid user admin from 103.146.203.212 Dec 14 09:56:01 ispc CRON[1519980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:56:02 ispc CRON[1519980]: pam_unix(cron:session): session closed for user root Dec 14 09:56:10 ispc saslauthd[1519996]: pam_mysql - SELECT returned no result. Dec 14 09:56:10 ispc saslauthd[1519996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:56:10 ispc saslauthd[1519996]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 09:56:19 ispc sshd[1520001]: Invalid user martof from 52.232.19.79 Dec 14 09:56:24 ispc CRON[1518850]: pam_unix(cron:session): session closed for user root Dec 14 09:57:01 ispc CRON[1520008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:57:03 ispc CRON[1520008]: pam_unix(cron:session): session closed for user root Dec 14 09:57:08 ispc sshd[1520021]: Invalid user martof from 119.205.233.162 Dec 14 09:57:31 ispc postfix/smtpd[1520026]: sql auxprop plugin using mysql engine Dec 14 09:58:01 ispc CRON[1520038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:58:02 ispc CRON[1520038]: pam_unix(cron:session): session closed for user root Dec 14 09:58:11 ispc sshd[1520050]: Invalid user ziplines from 103.110.84.105 Dec 14 09:58:21 ispc sshd[1520052]: Invalid user martof from 221.156.137.104 Dec 14 09:59:01 ispc CRON[1520056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 09:59:03 ispc CRON[1520056]: pam_unix(cron:session): session closed for user root Dec 14 09:59:26 ispc saslauthd[1520068]: pam_mysql - SELECT returned no result. Dec 14 09:59:26 ispc saslauthd[1520068]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 09:59:26 ispc saslauthd[1520068]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:00:01 ispc CRON[1520071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:00:01 ispc CRON[1520072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:00:01 ispc CRON[1520073]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:00:01 ispc CRON[1520074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:00:01 ispc CRON[1520075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:00:01 ispc CRON[1520076]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:00:01 ispc CRON[1520072]: pam_unix(cron:session): session closed for user root Dec 14 10:00:01 ispc CRON[1520073]: pam_unix(cron:session): session closed for user www-data Dec 14 10:00:01 ispc CRON[1520076]: pam_unix(cron:session): session closed for user getmail Dec 14 10:00:02 ispc CRON[1520071]: pam_unix(cron:session): session closed for user root Dec 14 10:00:02 ispc CRON[1520074]: pam_unix(cron:session): session closed for user root Dec 14 10:00:20 ispc sshd[1520338]: Invalid user solv from 80.94.92.182 Dec 14 10:00:40 ispc CRON[1520075]: pam_unix(cron:session): session closed for user root Dec 14 10:00:57 ispc saslauthd[1520340]: pam_mysql - SELECT returned no result. Dec 14 10:00:57 ispc saslauthd[1520340]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:00:57 ispc saslauthd[1520340]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:01:01 ispc CRON[1520341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:01:19 ispc sshd[1520358]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:01:21 ispc sshd[1520360]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:01:21 ispc sshd[1520360]: Invalid user klape from 189.89.20.45 Dec 14 10:01:23 ispc sshd[1520367]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:01:23 ispc sshd[1520367]: Invalid user ubuntu from 189.89.20.45 Dec 14 10:01:41 ispc saslauthd[1520373]: pam_mysql - SELECT returned no result. Dec 14 10:01:41 ispc saslauthd[1520373]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:01:41 ispc saslauthd[1520373]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:01:46 ispc saslauthd[1520378]: pam_mysql - SELECT returned no result. Dec 14 10:01:46 ispc saslauthd[1520378]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:01:46 ispc saslauthd[1520378]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:02:01 ispc CRON[1520383]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 10:02:01 ispc CRON[1520384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:02:02 ispc sshd[1520392]: Invalid user ziplines from 51.79.36.60 Dec 14 10:02:02 ispc CRON[1520384]: pam_unix(cron:session): session closed for user root Dec 14 10:02:08 ispc saslauthd[1520498]: pam_mysql - SELECT returned no result. Dec 14 10:02:08 ispc saslauthd[1520498]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:02:08 ispc saslauthd[1520498]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:02:19 ispc postfix/smtpd[1520770]: sql auxprop plugin using mysql engine Dec 14 10:02:21 ispc saslauthd[1520848]: pam_mysql - SELECT returned no result. Dec 14 10:02:21 ispc saslauthd[1520848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:02:21 ispc saslauthd[1520848]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:02:59 ispc sshd[1521245]: Invalid user ziplines from 221.156.137.104 Dec 14 10:03:01 ispc CRON[1521268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:03:02 ispc CRON[1521268]: pam_unix(cron:session): session closed for user root Dec 14 10:03:06 ispc saslauthd[1521284]: pam_mysql - SELECT returned no result. Dec 14 10:03:06 ispc saslauthd[1521284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:03:06 ispc saslauthd[1521284]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:03:28 ispc CRON[1520383]: pam_unix(cron:session): session closed for user logcheck Dec 14 10:03:33 ispc postfix/smtpd[1521478]: sql auxprop plugin using mysql engine Dec 14 10:03:39 ispc saslauthd[1521482]: pam_mysql - SELECT returned no result. Dec 14 10:03:39 ispc saslauthd[1521482]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:03:39 ispc saslauthd[1521482]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:03:43 ispc postfix/smtpd[1521483]: sql auxprop plugin using mysql engine Dec 14 10:03:43 ispc saslauthd[1521489]: pam_mysql - SELECT returned no result. Dec 14 10:03:43 ispc saslauthd[1521489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:03:43 ispc saslauthd[1521489]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:03:44 ispc saslauthd[1521490]: pam_mysql - SELECT returned no result. Dec 14 10:03:44 ispc saslauthd[1521490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:03:44 ispc saslauthd[1521490]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:03:44 ispc saslauthd[1521491]: pam_mysql - SELECT returned no result. Dec 14 10:03:44 ispc saslauthd[1521491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:03:44 ispc saslauthd[1521491]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:04:01 ispc CRON[1521496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:04:02 ispc CRON[1521496]: pam_unix(cron:session): session closed for user root Dec 14 10:04:18 ispc sshd[1521519]: Invalid user klape from 51.77.222.24 Dec 14 10:04:18 ispc sshd[1521521]: Invalid user ubuntu from 51.77.222.24 Dec 14 10:04:31 ispc saslauthd[1521528]: pam_mysql - SELECT returned no result. Dec 14 10:04:31 ispc saslauthd[1521528]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:04:31 ispc saslauthd[1521528]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:04:33 ispc saslauthd[1521530]: pam_mysql - SELECT returned no result. Dec 14 10:04:33 ispc saslauthd[1521530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:04:33 ispc saslauthd[1521530]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:04:34 ispc sshd[1521535]: Invalid user ziplines from 52.232.19.79 Dec 14 10:04:51 ispc saslauthd[1521544]: pam_mysql - SELECT returned no result. Dec 14 10:04:51 ispc saslauthd[1521544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:04:51 ispc saslauthd[1521544]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:04:53 ispc sshd[1521545]: Invalid user racingkennel from 185.12.204.239 Dec 14 10:04:54 ispc saslauthd[1521552]: pam_mysql - SELECT returned no result. Dec 14 10:04:54 ispc saslauthd[1521552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:04:54 ispc saslauthd[1521552]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:04:57 ispc saslauthd[1521553]: pam_mysql - SELECT returned no result. Dec 14 10:04:57 ispc saslauthd[1521553]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:04:57 ispc saslauthd[1521553]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:01 ispc CRON[1521554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:05:01 ispc CRON[1521555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:05:01 ispc CRON[1521556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:05:01 ispc CRON[1521557]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:05:01 ispc CRON[1521555]: pam_unix(cron:session): session closed for user root Dec 14 10:05:01 ispc CRON[1521557]: pam_unix(cron:session): session closed for user getmail Dec 14 10:05:01 ispc saslauthd[1521593]: pam_mysql - SELECT returned no result. Dec 14 10:05:01 ispc saslauthd[1521593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:01 ispc saslauthd[1521593]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:02 ispc CRON[1521556]: pam_unix(cron:session): session closed for user root Dec 14 10:05:02 ispc CRON[1521554]: pam_unix(cron:session): session closed for user root Dec 14 10:05:05 ispc saslauthd[1521636]: pam_mysql - SELECT returned no result. Dec 14 10:05:05 ispc saslauthd[1521636]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:05 ispc saslauthd[1521636]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:07 ispc saslauthd[1521637]: pam_mysql - SELECT returned no result. Dec 14 10:05:07 ispc saslauthd[1521637]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:07 ispc saslauthd[1521637]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:08 ispc saslauthd[1521638]: pam_mysql - SELECT returned no result. Dec 14 10:05:08 ispc saslauthd[1521638]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:08 ispc saslauthd[1521638]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:09 ispc saslauthd[1521639]: pam_mysql - SELECT returned no result. Dec 14 10:05:09 ispc saslauthd[1521639]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:09 ispc saslauthd[1521639]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:09 ispc saslauthd[1521640]: pam_mysql - SELECT returned no result. Dec 14 10:05:09 ispc saslauthd[1521640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:09 ispc saslauthd[1521640]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:11 ispc saslauthd[1521641]: pam_mysql - SELECT returned no result. Dec 14 10:05:11 ispc saslauthd[1521641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:11 ispc saslauthd[1521641]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:18 ispc saslauthd[1521648]: pam_mysql - SELECT returned no result. Dec 14 10:05:18 ispc saslauthd[1521648]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:18 ispc saslauthd[1521648]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:05:21 ispc saslauthd[1521649]: pam_mysql - SELECT returned no result. Dec 14 10:05:21 ispc saslauthd[1521649]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:21 ispc saslauthd[1521649]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:05:41 ispc saslauthd[1521658]: pam_mysql - SELECT returned no result. Dec 14 10:05:41 ispc saslauthd[1521658]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:05:41 ispc saslauthd[1521658]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:06:01 ispc CRON[1521667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:06:02 ispc CRON[1521667]: pam_unix(cron:session): session closed for user root Dec 14 10:06:14 ispc saslauthd[1521684]: pam_mysql - SELECT returned no result. Dec 14 10:06:14 ispc saslauthd[1521684]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:06:14 ispc saslauthd[1521684]: do_auth : auth failure: [user=pw] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:06:20 ispc sshd[1521689]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:06:20 ispc sshd[1521689]: Invalid user ziplines from 103.91.189.70 Dec 14 10:06:45 ispc sshd[1521701]: Invalid user sol from 80.94.92.182 Dec 14 10:06:53 ispc sshd[1521707]: Invalid user admin from 139.19.117.197 Dec 14 10:07:01 ispc CRON[1521713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:07:02 ispc CRON[1521713]: pam_unix(cron:session): session closed for user root Dec 14 10:07:43 ispc sshd[1521746]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:08:01 ispc CRON[1521760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:08:02 ispc CRON[1521760]: pam_unix(cron:session): session closed for user root Dec 14 10:08:07 ispc postfix/smtpd[1521777]: sql auxprop plugin using mysql engine Dec 14 10:08:07 ispc saslauthd[1521779]: pam_mysql - SELECT returned no result. Dec 14 10:08:07 ispc saslauthd[1521779]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:08:07 ispc saslauthd[1521779]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:08:22 ispc sshd[1521781]: Invalid user vps from 193.32.162.157 Dec 14 10:08:47 ispc sshd[1521797]: Invalid user rust from 193.32.162.157 Dec 14 10:08:59 ispc postfix/smtpd[1521812]: sql auxprop plugin using mysql engine Dec 14 10:09:01 ispc CRON[1521815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:09:01 ispc CRON[1521816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:09:01 ispc CRON[1521815]: pam_unix(cron:session): session closed for user root Dec 14 10:09:01 ispc saslauthd[1521837]: pam_mysql - SELECT returned no result. Dec 14 10:09:01 ispc saslauthd[1521837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:09:01 ispc saslauthd[1521837]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:09:01 ispc CRON[1521816]: pam_unix(cron:session): session closed for user root Dec 14 10:09:20 ispc sshd[1521851]: Invalid user martof from 202.46.29.79 Dec 14 10:09:21 ispc sshd[1521845]: Invalid user eric from 193.32.162.157 Dec 14 10:09:31 ispc saslauthd[1521859]: pam_mysql - SELECT returned no result. Dec 14 10:09:31 ispc saslauthd[1521859]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:09:31 ispc saslauthd[1521859]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:09:44 ispc sshd[1521860]: Invalid user admin from 193.32.162.157 Dec 14 10:09:56 ispc sshd[1521871]: Invalid user test3 from 193.32.162.157 Dec 14 10:10:01 ispc CRON[1521880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:10:01 ispc CRON[1521881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:10:01 ispc CRON[1521882]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:10:01 ispc CRON[1521883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:10:01 ispc CRON[1521884]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:10:01 ispc CRON[1521881]: pam_unix(cron:session): session closed for user root Dec 14 10:10:01 ispc CRON[1521882]: pam_unix(cron:session): session closed for user www-data Dec 14 10:10:01 ispc CRON[1521884]: pam_unix(cron:session): session closed for user getmail Dec 14 10:10:02 ispc CRON[1521883]: pam_unix(cron:session): session closed for user root Dec 14 10:10:03 ispc CRON[1521880]: pam_unix(cron:session): session closed for user root Dec 14 10:10:08 ispc sshd[1521878]: Invalid user centos from 193.32.162.157 Dec 14 10:10:57 ispc saslauthd[1521989]: pam_mysql - SELECT returned no result. Dec 14 10:10:57 ispc saslauthd[1521989]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:10:57 ispc saslauthd[1521989]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:11:01 ispc CRON[1521992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:11:01 ispc CRON[1521992]: pam_unix(cron:session): session closed for user root Dec 14 10:11:20 ispc sshd[1522012]: Invalid user ziplines from 210.114.18.123 Dec 14 10:12:01 ispc CRON[1522032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:12:02 ispc CRON[1522032]: pam_unix(cron:session): session closed for user root Dec 14 10:12:28 ispc saslauthd[1522057]: pam_mysql - SELECT returned no result. Dec 14 10:12:28 ispc saslauthd[1522057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:12:28 ispc saslauthd[1522057]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:12:45 ispc saslauthd[1522069]: pam_mysql - SELECT returned no result. Dec 14 10:12:45 ispc saslauthd[1522069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:12:45 ispc saslauthd[1522069]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:13:01 ispc CRON[1522080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:13:02 ispc CRON[1522080]: pam_unix(cron:session): session closed for user root Dec 14 10:13:55 ispc sshd[1522112]: Invalid user ziplines from 211.23.78.98 Dec 14 10:14:01 ispc CRON[1522118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:14:02 ispc CRON[1522118]: pam_unix(cron:session): session closed for user root Dec 14 10:14:13 ispc sshd[1522133]: Invalid user blceu from 118.218.219.250 Dec 14 10:14:15 ispc saslauthd[1522135]: pam_mysql - SELECT returned no result. Dec 14 10:14:15 ispc saslauthd[1522135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:14:15 ispc saslauthd[1522135]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:14:52 ispc postfix/smtpd[1522153]: sql auxprop plugin using mysql engine Dec 14 10:14:54 ispc saslauthd[1522155]: pam_mysql - SELECT returned no result. Dec 14 10:14:54 ispc saslauthd[1522155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:14:54 ispc saslauthd[1522155]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:15:01 ispc CRON[1522161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:15:01 ispc CRON[1522162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:15:01 ispc CRON[1522163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:15:01 ispc CRON[1522164]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:15:01 ispc CRON[1522162]: pam_unix(cron:session): session closed for user root Dec 14 10:15:01 ispc CRON[1522164]: pam_unix(cron:session): session closed for user getmail Dec 14 10:15:02 ispc CRON[1522163]: pam_unix(cron:session): session closed for user root Dec 14 10:15:03 ispc CRON[1522161]: pam_unix(cron:session): session closed for user root Dec 14 10:15:33 ispc sshd[1522251]: Invalid user klape from 13.93.203.231 Dec 14 10:15:37 ispc sshd[1522254]: Invalid user blceu from 220.196.191.58 Dec 14 10:16:01 ispc CRON[1522270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:16:01 ispc CRON[1522270]: pam_unix(cron:session): session closed for user root Dec 14 10:16:09 ispc postfix/smtpd[1522281]: sql auxprop plugin using mysql engine Dec 14 10:16:10 ispc saslauthd[1522287]: pam_mysql - SELECT returned no result. Dec 14 10:16:10 ispc saslauthd[1522287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:16:10 ispc saslauthd[1522287]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:17:01 ispc CRON[1522310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:17:03 ispc CRON[1522310]: pam_unix(cron:session): session closed for user root Dec 14 10:18:01 ispc CRON[1522351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:18:02 ispc CRON[1522351]: pam_unix(cron:session): session closed for user root Dec 14 10:18:20 ispc sshd[1522372]: Invalid user martof from 103.100.209.172 Dec 14 10:19:01 ispc CRON[1522393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:19:01 ispc CRON[1522393]: pam_unix(cron:session): session closed for user root Dec 14 10:19:10 ispc postfix/smtpd[1522408]: sql auxprop plugin using mysql engine Dec 14 10:19:10 ispc saslauthd[1522410]: pam_mysql - SELECT returned no result. Dec 14 10:19:10 ispc saslauthd[1522410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:19:10 ispc saslauthd[1522410]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:20:01 ispc CRON[1522434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:20:01 ispc CRON[1522435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:20:01 ispc CRON[1522436]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:20:01 ispc CRON[1522437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:20:01 ispc CRON[1522438]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:20:01 ispc CRON[1522435]: pam_unix(cron:session): session closed for user root Dec 14 10:20:01 ispc CRON[1522436]: pam_unix(cron:session): session closed for user www-data Dec 14 10:20:02 ispc CRON[1522438]: pam_unix(cron:session): session closed for user getmail Dec 14 10:20:02 ispc CRON[1522437]: pam_unix(cron:session): session closed for user root Dec 14 10:20:03 ispc CRON[1522434]: pam_unix(cron:session): session closed for user root Dec 14 10:20:49 ispc postfix/smtpd[1522573]: sql auxprop plugin using mysql engine Dec 14 10:20:54 ispc saslauthd[1522575]: pam_mysql - SELECT returned no result. Dec 14 10:20:54 ispc saslauthd[1522575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:20:54 ispc saslauthd[1522575]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:21:01 ispc CRON[1522580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:21:01 ispc CRON[1522581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:21:01 ispc CRON[1522580]: pam_unix(cron:session): session closed for user root Dec 14 10:21:01 ispc CRON[1522581]: pam_unix(cron:session): session closed for user root Dec 14 10:21:08 ispc postfix/smtpd[1522598]: sql auxprop plugin using mysql engine Dec 14 10:21:12 ispc saslauthd[1522600]: pam_mysql - SELECT returned no result. Dec 14 10:21:12 ispc saslauthd[1522600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:21:12 ispc saslauthd[1522600]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:21:18 ispc CRON[1520341]: pam_unix(cron:session): session closed for user root Dec 14 10:21:19 ispc saslauthd[1522605]: pam_mysql - SELECT returned no result. Dec 14 10:21:19 ispc saslauthd[1522605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:21:19 ispc saslauthd[1522605]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:22:01 ispc CRON[1522608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:22:01 ispc CRON[1522608]: pam_unix(cron:session): session closed for user root Dec 14 10:23:01 ispc CRON[1522631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:23:02 ispc CRON[1522631]: pam_unix(cron:session): session closed for user root Dec 14 10:23:02 ispc postfix/smtpd[1522641]: sql auxprop plugin using mysql engine Dec 14 10:23:04 ispc saslauthd[1522645]: pam_mysql - SELECT returned no result. Dec 14 10:23:04 ispc saslauthd[1522645]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:23:04 ispc saslauthd[1522645]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:23:32 ispc saslauthd[1522647]: pam_mysql - SELECT returned no result. Dec 14 10:23:32 ispc saslauthd[1522647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:23:32 ispc saslauthd[1522647]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:24:01 ispc CRON[1522650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:24:02 ispc CRON[1522650]: pam_unix(cron:session): session closed for user root Dec 14 10:24:48 ispc saslauthd[1522665]: pam_mysql - SELECT returned no result. Dec 14 10:24:48 ispc saslauthd[1522665]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:24:48 ispc saslauthd[1522665]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:25:01 ispc CRON[1522666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:25:01 ispc CRON[1522667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:25:01 ispc CRON[1522668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:25:01 ispc CRON[1522669]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:25:01 ispc CRON[1522667]: pam_unix(cron:session): session closed for user root Dec 14 10:25:01 ispc CRON[1522669]: pam_unix(cron:session): session closed for user getmail Dec 14 10:25:03 ispc CRON[1522666]: pam_unix(cron:session): session closed for user root Dec 14 10:25:13 ispc postfix/smtpd[1522775]: sql auxprop plugin using mysql engine Dec 14 10:25:14 ispc saslauthd[1522777]: pam_mysql - SELECT returned no result. Dec 14 10:25:14 ispc saslauthd[1522777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:25:14 ispc saslauthd[1522777]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:25:37 ispc CRON[1522668]: pam_unix(cron:session): session closed for user root Dec 14 10:26:01 ispc CRON[1522779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:27:01 ispc CRON[1522815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:27:01 ispc sshd[1522813]: Invalid user ziplines from 202.46.29.79 Dec 14 10:27:02 ispc CRON[1522815]: pam_unix(cron:session): session closed for user root Dec 14 10:27:16 ispc postfix/smtpd[1522838]: sql auxprop plugin using mysql engine Dec 14 10:27:17 ispc saslauthd[1522840]: pam_mysql - SELECT returned no result. Dec 14 10:27:17 ispc saslauthd[1522840]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:27:17 ispc saslauthd[1522840]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:27:36 ispc sshd[1522851]: Invalid user martof from 103.110.84.105 Dec 14 10:28:01 ispc CRON[1522872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:28:02 ispc CRON[1522872]: pam_unix(cron:session): session closed for user root Dec 14 10:28:27 ispc saslauthd[1522899]: pam_mysql - SELECT returned no result. Dec 14 10:28:27 ispc saslauthd[1522899]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:28:27 ispc saslauthd[1522899]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:28:56 ispc sshd[1522909]: Invalid user diamantdi from 36.134.126.74 Dec 14 10:29:01 ispc CRON[1522917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:29:02 ispc CRON[1522917]: pam_unix(cron:session): session closed for user root Dec 14 10:30:01 ispc CRON[1522956]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:30:01 ispc CRON[1522955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:30:01 ispc CRON[1522957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:30:01 ispc CRON[1522954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:30:01 ispc CRON[1522958]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:30:01 ispc CRON[1522955]: pam_unix(cron:session): session closed for user root Dec 14 10:30:01 ispc CRON[1522956]: pam_unix(cron:session): session closed for user www-data Dec 14 10:30:01 ispc CRON[1522958]: pam_unix(cron:session): session closed for user getmail Dec 14 10:30:02 ispc CRON[1522957]: pam_unix(cron:session): session closed for user root Dec 14 10:30:02 ispc CRON[1522954]: pam_unix(cron:session): session closed for user root Dec 14 10:30:26 ispc postfix/smtpd[1523045]: sql auxprop plugin using mysql engine Dec 14 10:30:29 ispc saslauthd[1523047]: pam_mysql - SELECT returned no result. Dec 14 10:30:29 ispc saslauthd[1523047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:30:29 ispc saslauthd[1523047]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:30:29 ispc postfix/smtpd[1523048]: sql auxprop plugin using mysql engine Dec 14 10:30:30 ispc saslauthd[1523049]: pam_mysql - SELECT returned no result. Dec 14 10:30:30 ispc saslauthd[1523049]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:30:30 ispc saslauthd[1523049]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:30:50 ispc postfix/smtpd[1523062]: sql auxprop plugin using mysql engine Dec 14 10:30:51 ispc saslauthd[1523063]: pam_mysql - SELECT returned no result. Dec 14 10:30:51 ispc saslauthd[1523063]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:30:51 ispc saslauthd[1523063]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:31:01 ispc CRON[1523068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:31:02 ispc CRON[1523068]: pam_unix(cron:session): session closed for user root Dec 14 10:31:15 ispc saslauthd[1523084]: pam_mysql - SELECT returned no result. Dec 14 10:31:15 ispc saslauthd[1523084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:31:15 ispc saslauthd[1523084]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:32:01 ispc CRON[1523107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:32:01 ispc CRON[1523107]: pam_unix(cron:session): session closed for user root Dec 14 10:32:48 ispc saslauthd[1523150]: pam_mysql - SELECT returned no result. Dec 14 10:32:48 ispc saslauthd[1523150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:32:48 ispc saslauthd[1523150]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:32:54 ispc sshd[1523151]: Invalid user ziplines from 49.247.24.89 Dec 14 10:33:01 ispc CRON[1523157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:33:02 ispc CRON[1523157]: pam_unix(cron:session): session closed for user root Dec 14 10:34:01 ispc CRON[1523194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:34:01 ispc CRON[1523194]: pam_unix(cron:session): session closed for user root Dec 14 10:34:33 ispc postfix/smtpd[1523219]: sql auxprop plugin using mysql engine Dec 14 10:34:34 ispc saslauthd[1523221]: pam_mysql - SELECT returned no result. Dec 14 10:34:34 ispc saslauthd[1523221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:34:34 ispc saslauthd[1523221]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:34:40 ispc saslauthd[1523227]: pam_mysql - SELECT returned no result. Dec 14 10:34:40 ispc saslauthd[1523227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:34:40 ispc saslauthd[1523227]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:34:42 ispc sshd[1523228]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:34:42 ispc sshd[1523228]: Invalid user martof from 114.7.163.154 Dec 14 10:35:01 ispc CRON[1523239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:35:01 ispc CRON[1523240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:35:01 ispc CRON[1523241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:35:01 ispc CRON[1523242]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:35:01 ispc CRON[1523240]: pam_unix(cron:session): session closed for user root Dec 14 10:35:01 ispc CRON[1523242]: pam_unix(cron:session): session closed for user getmail Dec 14 10:35:02 ispc CRON[1523241]: pam_unix(cron:session): session closed for user root Dec 14 10:35:02 ispc CRON[1523239]: pam_unix(cron:session): session closed for user root Dec 14 10:35:08 ispc sshd[1523317]: Invalid user martof from 51.159.91.86 Dec 14 10:35:26 ispc saslauthd[1523326]: pam_mysql - SELECT returned no result. Dec 14 10:35:26 ispc saslauthd[1523326]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:35:26 ispc saslauthd[1523326]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:35:38 ispc saslauthd[1523335]: pam_mysql - SELECT returned no result. Dec 14 10:35:38 ispc saslauthd[1523335]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:35:38 ispc saslauthd[1523335]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:36:01 ispc CRON[1523344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:36:03 ispc CRON[1523344]: pam_unix(cron:session): session closed for user root Dec 14 10:36:13 ispc saslauthd[1523361]: pam_mysql - SELECT returned no result. Dec 14 10:36:13 ispc saslauthd[1523361]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:36:13 ispc saslauthd[1523361]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:36:21 ispc saslauthd[1523366]: pam_mysql - SELECT returned no result. Dec 14 10:36:21 ispc saslauthd[1523366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:36:21 ispc saslauthd[1523366]: do_auth : auth failure: [user=qpgmr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:36:45 ispc saslauthd[1523381]: pam_mysql - SELECT returned no result. Dec 14 10:36:45 ispc saslauthd[1523381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:36:45 ispc saslauthd[1523381]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:37:01 ispc CRON[1523390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:37:01 ispc CRON[1523390]: pam_unix(cron:session): session closed for user root Dec 14 10:37:26 ispc saslauthd[1523415]: pam_mysql - SELECT returned no result. Dec 14 10:37:26 ispc saslauthd[1523415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:37:26 ispc saslauthd[1523415]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:37:49 ispc sshd[1523428]: Invalid user ziplines from 103.100.209.172 Dec 14 10:37:51 ispc sshd[1523435]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:37:51 ispc sshd[1523435]: Invalid user ziplines from 103.28.37.227 Dec 14 10:38:01 ispc CRON[1523445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:38:03 ispc CRON[1523445]: pam_unix(cron:session): session closed for user root Dec 14 10:39:01 ispc CRON[1523482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:39:01 ispc CRON[1523483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:39:01 ispc CRON[1523482]: pam_unix(cron:session): session closed for user root Dec 14 10:39:02 ispc CRON[1523483]: pam_unix(cron:session): session closed for user root Dec 14 10:39:02 ispc postfix/smtpd[1523504]: sql auxprop plugin using mysql engine Dec 14 10:39:02 ispc saslauthd[1523506]: pam_mysql - SELECT returned no result. Dec 14 10:39:02 ispc saslauthd[1523506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:39:02 ispc saslauthd[1523506]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:39:45 ispc postfix/smtpd[1523527]: sql auxprop plugin using mysql engine Dec 14 10:39:48 ispc saslauthd[1523530]: pam_mysql - SELECT returned no result. Dec 14 10:39:48 ispc saslauthd[1523530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:39:48 ispc saslauthd[1523530]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:40:01 ispc CRON[1523537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:40:01 ispc CRON[1523538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:40:01 ispc CRON[1523539]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:40:01 ispc CRON[1523540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:40:01 ispc CRON[1523541]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:40:01 ispc CRON[1523538]: pam_unix(cron:session): session closed for user root Dec 14 10:40:01 ispc CRON[1523539]: pam_unix(cron:session): session closed for user www-data Dec 14 10:40:01 ispc CRON[1523541]: pam_unix(cron:session): session closed for user getmail Dec 14 10:40:01 ispc CRON[1523540]: pam_unix(cron:session): session closed for user root Dec 14 10:40:01 ispc CRON[1523537]: pam_unix(cron:session): session closed for user root Dec 14 10:40:06 ispc sshd[1523619]: Invalid user anoraksro from 185.12.204.239 Dec 14 10:40:28 ispc postfix/smtpd[1523630]: sql auxprop plugin using mysql engine Dec 14 10:40:56 ispc sshd[1523647]: Did not receive identification string from 45.140.17.97 Dec 14 10:41:01 ispc CRON[1523648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:41:03 ispc CRON[1523648]: pam_unix(cron:session): session closed for user root Dec 14 10:41:24 ispc postfix/smtpd[1523672]: sql auxprop plugin using mysql engine Dec 14 10:41:27 ispc saslauthd[1523674]: pam_mysql - SELECT returned no result. Dec 14 10:41:27 ispc saslauthd[1523674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:41:27 ispc saslauthd[1523674]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:41:53 ispc saslauthd[1523686]: pam_mysql - SELECT returned no result. Dec 14 10:41:53 ispc saslauthd[1523686]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:41:53 ispc saslauthd[1523686]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:41:53 ispc sshd[1523684]: Invalid user test from 221.151.181.65 Dec 14 10:42:01 ispc CRON[1523692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:42:02 ispc CRON[1523692]: pam_unix(cron:session): session closed for user root Dec 14 10:42:40 ispc sshd[1523730]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:42:40 ispc sshd[1523730]: Invalid user admin from 78.128.112.74 Dec 14 10:43:01 ispc CRON[1523749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:43:02 ispc CRON[1523749]: pam_unix(cron:session): session closed for user root Dec 14 10:43:26 ispc saslauthd[1523769]: pam_mysql - SELECT returned no result. Dec 14 10:43:26 ispc saslauthd[1523769]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:43:26 ispc saslauthd[1523769]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:43:32 ispc postfix/smtpd[1523774]: sql auxprop plugin using mysql engine Dec 14 10:43:35 ispc saslauthd[1523776]: pam_mysql - SELECT returned no result. Dec 14 10:43:35 ispc saslauthd[1523776]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:43:35 ispc saslauthd[1523776]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:44:01 ispc CRON[1523791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:44:02 ispc CRON[1523791]: pam_unix(cron:session): session closed for user root Dec 14 10:44:45 ispc saslauthd[1523821]: pam_mysql - SELECT returned no result. Dec 14 10:44:45 ispc saslauthd[1523821]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:44:45 ispc saslauthd[1523821]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:44:52 ispc saslauthd[1523827]: pam_mysql - SELECT returned no result. Dec 14 10:44:52 ispc saslauthd[1523827]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:44:52 ispc saslauthd[1523827]: do_auth : auth failure: [user=info@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:44:56 ispc sshd[1523828]: Invalid user blceu from 103.77.207.53 Dec 14 10:44:58 ispc saslauthd[1523830]: pam_mysql - SELECT returned no result. Dec 14 10:44:58 ispc saslauthd[1523830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:44:58 ispc saslauthd[1523830]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:45:01 ispc CRON[1523835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:45:01 ispc CRON[1523836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:45:01 ispc CRON[1523837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:45:01 ispc CRON[1523838]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:45:01 ispc CRON[1523836]: pam_unix(cron:session): session closed for user root Dec 14 10:45:01 ispc CRON[1523838]: pam_unix(cron:session): session closed for user getmail Dec 14 10:45:01 ispc CRON[1523837]: pam_unix(cron:session): session closed for user root Dec 14 10:45:02 ispc CRON[1523835]: pam_unix(cron:session): session closed for user root Dec 14 10:45:38 ispc sshd[1523927]: Invalid user klape from 77.241.18.2 Dec 14 10:45:38 ispc sshd[1523930]: Invalid user ubuntu from 77.241.18.2 Dec 14 10:45:49 ispc sshd[1523936]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:45:49 ispc sshd[1523936]: Invalid user martof from 103.28.37.227 Dec 14 10:46:01 ispc CRON[1523943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:46:02 ispc CRON[1523943]: pam_unix(cron:session): session closed for user root Dec 14 10:46:23 ispc CRON[1522779]: pam_unix(cron:session): session closed for user root Dec 14 10:46:37 ispc saslauthd[1523969]: pam_mysql - SELECT returned no result. Dec 14 10:46:37 ispc saslauthd[1523969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:46:37 ispc saslauthd[1523969]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:47:01 ispc CRON[1523971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:47:02 ispc CRON[1523971]: pam_unix(cron:session): session closed for user root Dec 14 10:47:29 ispc saslauthd[1523985]: pam_mysql - SELECT returned no result. Dec 14 10:47:29 ispc saslauthd[1523985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:47:29 ispc saslauthd[1523985]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:48:01 ispc CRON[1523998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:48:02 ispc CRON[1523998]: pam_unix(cron:session): session closed for user root Dec 14 10:49:01 ispc CRON[1524012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:49:02 ispc CRON[1524012]: pam_unix(cron:session): session closed for user root Dec 14 10:49:45 ispc sshd[1524026]: Invalid user blceu from 52.232.19.79 Dec 14 10:50:01 ispc CRON[1524028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:50:01 ispc CRON[1524029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:50:01 ispc CRON[1524030]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 10:50:01 ispc CRON[1524031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:50:01 ispc CRON[1524032]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:50:01 ispc CRON[1524029]: pam_unix(cron:session): session closed for user root Dec 14 10:50:01 ispc CRON[1524030]: pam_unix(cron:session): session closed for user www-data Dec 14 10:50:02 ispc CRON[1524032]: pam_unix(cron:session): session closed for user getmail Dec 14 10:50:03 ispc CRON[1524028]: pam_unix(cron:session): session closed for user root Dec 14 10:50:33 ispc CRON[1524031]: pam_unix(cron:session): session closed for user root Dec 14 10:50:39 ispc saslauthd[1524142]: pam_mysql - SELECT returned no result. Dec 14 10:50:39 ispc saslauthd[1524142]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:50:39 ispc saslauthd[1524142]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:51:02 ispc CRON[1524143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:51:22 ispc saslauthd[1524161]: pam_mysql - SELECT returned no result. Dec 14 10:51:22 ispc saslauthd[1524161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:51:22 ispc saslauthd[1524161]: do_auth : auth failure: [user=qsecofr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:51:30 ispc sshd[1524167]: Invalid user klape from 36.50.177.171 Dec 14 10:51:35 ispc sshd[1524170]: Invalid user ubuntu from 36.50.177.171 Dec 14 10:52:01 ispc CRON[1524186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:52:02 ispc CRON[1524186]: pam_unix(cron:session): session closed for user root Dec 14 10:52:15 ispc sshd[1524207]: Invalid user klape from 103.164.20.29 Dec 14 10:52:17 ispc sshd[1524209]: Invalid user ubuntu from 103.164.20.29 Dec 14 10:52:55 ispc saslauthd[1524234]: pam_mysql - SELECT returned no result. Dec 14 10:52:55 ispc saslauthd[1524234]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:52:55 ispc saslauthd[1524234]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:53:01 ispc CRON[1524239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:53:02 ispc CRON[1524239]: pam_unix(cron:session): session closed for user root Dec 14 10:53:56 ispc sshd[1524273]: Invalid user test from 221.151.181.65 Dec 14 10:54:01 ispc CRON[1524279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:54:01 ispc CRON[1524279]: pam_unix(cron:session): session closed for user root Dec 14 10:54:17 ispc sshd[1524295]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:54:17 ispc sshd[1524295]: Invalid user martof from 123.253.61.95 Dec 14 10:54:55 ispc postfix/smtpd[1524315]: sql auxprop plugin using mysql engine Dec 14 10:55:00 ispc saslauthd[1524321]: pam_mysql - SELECT returned no result. Dec 14 10:55:00 ispc saslauthd[1524321]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:55:00 ispc saslauthd[1524321]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:55:01 ispc CRON[1524322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:55:01 ispc CRON[1524323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:55:01 ispc CRON[1524324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:55:01 ispc CRON[1524325]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 10:55:01 ispc CRON[1524323]: pam_unix(cron:session): session closed for user root Dec 14 10:55:01 ispc CRON[1524325]: pam_unix(cron:session): session closed for user getmail Dec 14 10:55:02 ispc CRON[1524324]: pam_unix(cron:session): session closed for user root Dec 14 10:55:02 ispc CRON[1524322]: pam_unix(cron:session): session closed for user root Dec 14 10:55:13 ispc sshd[1524402]: Invalid user test from 221.151.181.65 Dec 14 10:56:01 ispc CRON[1524428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:56:03 ispc CRON[1524428]: pam_unix(cron:session): session closed for user root Dec 14 10:57:01 ispc CRON[1524465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:57:02 ispc CRON[1524465]: pam_unix(cron:session): session closed for user root Dec 14 10:57:14 ispc sshd[1524483]: Invalid user test from 221.151.181.65 Dec 14 10:57:36 ispc postfix/smtpd[1524494]: sql auxprop plugin using mysql engine Dec 14 10:57:39 ispc saslauthd[1524503]: pam_mysql - SELECT returned no result. Dec 14 10:57:39 ispc saslauthd[1524503]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:57:39 ispc saslauthd[1524503]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 10:58:01 ispc CRON[1524517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:58:01 ispc saslauthd[1524524]: pam_mysql - SELECT returned no result. Dec 14 10:58:01 ispc saslauthd[1524524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:58:01 ispc saslauthd[1524524]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:58:02 ispc CRON[1524517]: pam_unix(cron:session): session closed for user root Dec 14 10:58:56 ispc saslauthd[1524553]: pam_mysql - SELECT returned no result. Dec 14 10:58:56 ispc saslauthd[1524553]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:58:56 ispc saslauthd[1524553]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:58:57 ispc saslauthd[1524554]: pam_mysql - SELECT returned no result. Dec 14 10:58:57 ispc saslauthd[1524554]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:58:57 ispc saslauthd[1524554]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:01 ispc CRON[1524559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 10:59:01 ispc CRON[1524559]: pam_unix(cron:session): session closed for user root Dec 14 10:59:10 ispc saslauthd[1524574]: pam_mysql - SELECT returned no result. Dec 14 10:59:10 ispc saslauthd[1524574]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:10 ispc saslauthd[1524574]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:16 ispc saslauthd[1524575]: pam_mysql - SELECT returned no result. Dec 14 10:59:16 ispc saslauthd[1524575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:16 ispc saslauthd[1524575]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:16 ispc saslauthd[1524576]: pam_mysql - SELECT returned no result. Dec 14 10:59:16 ispc saslauthd[1524576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:16 ispc saslauthd[1524576]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:21 ispc saslauthd[1524581]: pam_mysql - SELECT returned no result. Dec 14 10:59:21 ispc saslauthd[1524581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:21 ispc saslauthd[1524581]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:22 ispc sshd[1524582]: Invalid user ubuntu from 13.93.203.231 Dec 14 10:59:24 ispc saslauthd[1524584]: pam_mysql - SELECT returned no result. Dec 14 10:59:24 ispc saslauthd[1524584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:24 ispc saslauthd[1524584]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:28 ispc saslauthd[1524585]: pam_mysql - SELECT returned no result. Dec 14 10:59:28 ispc saslauthd[1524585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:28 ispc saslauthd[1524585]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:35 ispc saslauthd[1524592]: pam_mysql - SELECT returned no result. Dec 14 10:59:35 ispc saslauthd[1524592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:35 ispc saslauthd[1524592]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:35 ispc postfix/smtpd[1524590]: sql auxprop plugin using mysql engine Dec 14 10:59:35 ispc saslauthd[1524593]: pam_mysql - SELECT returned no result. Dec 14 10:59:35 ispc saslauthd[1524593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:35 ispc saslauthd[1524593]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:37 ispc saslauthd[1524594]: pam_mysql - SELECT returned no result. Dec 14 10:59:37 ispc saslauthd[1524594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:37 ispc saslauthd[1524594]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:38 ispc saslauthd[1524595]: pam_mysql - SELECT returned no result. Dec 14 10:59:38 ispc saslauthd[1524595]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:38 ispc saslauthd[1524595]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:38 ispc saslauthd[1524596]: pam_mysql - SELECT returned no result. Dec 14 10:59:38 ispc saslauthd[1524596]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:38 ispc saslauthd[1524596]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:39 ispc saslauthd[1524597]: pam_mysql - SELECT returned no result. Dec 14 10:59:39 ispc saslauthd[1524597]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:39 ispc saslauthd[1524597]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:46 ispc saslauthd[1524604]: pam_mysql - SELECT returned no result. Dec 14 10:59:46 ispc saslauthd[1524604]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 10:59:46 ispc saslauthd[1524604]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 10:59:47 ispc sshd[1524602]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 10:59:47 ispc sshd[1524602]: Invalid user ziplines from 123.253.61.95 Dec 14 11:00:01 ispc CRON[1524614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:00:01 ispc CRON[1524615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:00:01 ispc CRON[1524616]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:00:01 ispc CRON[1524617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:00:01 ispc CRON[1524618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:00:01 ispc CRON[1524619]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:00:01 ispc CRON[1524616]: pam_unix(cron:session): session closed for user www-data Dec 14 11:00:01 ispc CRON[1524615]: pam_unix(cron:session): session closed for user root Dec 14 11:00:01 ispc CRON[1524619]: pam_unix(cron:session): session closed for user getmail Dec 14 11:00:02 ispc CRON[1524618]: pam_unix(cron:session): session closed for user root Dec 14 11:00:02 ispc CRON[1524617]: pam_unix(cron:session): session closed for user root Dec 14 11:00:03 ispc CRON[1524614]: pam_unix(cron:session): session closed for user root Dec 14 11:00:07 ispc saslauthd[1524771]: pam_mysql - SELECT returned no result. Dec 14 11:00:07 ispc saslauthd[1524771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:07 ispc saslauthd[1524771]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:00:08 ispc saslauthd[1524772]: pam_mysql - SELECT returned no result. Dec 14 11:00:08 ispc saslauthd[1524772]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:08 ispc saslauthd[1524772]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:00:29 ispc saslauthd[1524782]: pam_mysql - SELECT returned no result. Dec 14 11:00:29 ispc saslauthd[1524782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:29 ispc saslauthd[1524782]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:00:43 ispc saslauthd[1524791]: pam_mysql - SELECT returned no result. Dec 14 11:00:43 ispc saslauthd[1524791]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:43 ispc saslauthd[1524791]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:00:45 ispc saslauthd[1524792]: pam_mysql - SELECT returned no result. Dec 14 11:00:45 ispc saslauthd[1524792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:45 ispc saslauthd[1524792]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:00:47 ispc sshd[1524793]: Invalid user blceu from 51.79.36.60 Dec 14 11:00:48 ispc saslauthd[1524795]: pam_mysql - SELECT returned no result. Dec 14 11:00:48 ispc saslauthd[1524795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:00:48 ispc saslauthd[1524795]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:01:01 ispc CRON[1524801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:01:02 ispc CRON[1524801]: pam_unix(cron:session): session closed for user root Dec 14 11:02:01 ispc CRON[1524841]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 11:02:01 ispc CRON[1524842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:02:02 ispc CRON[1524842]: pam_unix(cron:session): session closed for user root Dec 14 11:02:08 ispc saslauthd[1524995]: pam_mysql - SELECT returned no result. Dec 14 11:02:08 ispc saslauthd[1524995]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:02:08 ispc saslauthd[1524995]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:02:11 ispc saslauthd[1525031]: pam_mysql - SELECT returned no result. Dec 14 11:02:11 ispc saslauthd[1525031]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:02:11 ispc saslauthd[1525031]: do_auth : auth failure: [user=info@matl-bula.org] [service=smtp] [realm=matl-bula.org] [mech=pam] [reason=PAM auth error] Dec 14 11:02:35 ispc saslauthd[1525544]: pam_mysql - SELECT returned no result. Dec 14 11:02:35 ispc saslauthd[1525544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:02:35 ispc saslauthd[1525544]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:03:01 ispc CRON[1525720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:03:01 ispc CRON[1525720]: pam_unix(cron:session): session closed for user root Dec 14 11:03:13 ispc CRON[1524841]: pam_unix(cron:session): session closed for user logcheck Dec 14 11:03:18 ispc postfix/smtpd[1525922]: sql auxprop plugin using mysql engine Dec 14 11:04:01 ispc CRON[1525945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:04:02 ispc CRON[1525945]: pam_unix(cron:session): session closed for user root Dec 14 11:04:12 ispc saslauthd[1525961]: pam_mysql - SELECT returned no result. Dec 14 11:04:12 ispc saslauthd[1525961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:04:12 ispc saslauthd[1525961]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:04:17 ispc sshd[1525966]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:04:41 ispc saslauthd[1525976]: pam_mysql - SELECT returned no result. Dec 14 11:04:41 ispc saslauthd[1525976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:04:41 ispc saslauthd[1525976]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:05:01 ispc CRON[1525985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:05:01 ispc CRON[1525986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:05:01 ispc CRON[1525987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:05:01 ispc CRON[1525988]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:05:01 ispc CRON[1525986]: pam_unix(cron:session): session closed for user root Dec 14 11:05:01 ispc CRON[1525988]: pam_unix(cron:session): session closed for user getmail Dec 14 11:05:02 ispc CRON[1525987]: pam_unix(cron:session): session closed for user root Dec 14 11:05:02 ispc CRON[1525985]: pam_unix(cron:session): session closed for user root Dec 14 11:05:10 ispc sshd[1526065]: Invalid user martof from 103.77.207.53 Dec 14 11:06:01 ispc CRON[1526091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:06:02 ispc CRON[1526091]: pam_unix(cron:session): session closed for user root Dec 14 11:06:15 ispc saslauthd[1526106]: pam_mysql - SELECT returned no result. Dec 14 11:06:15 ispc saslauthd[1526106]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:06:15 ispc saslauthd[1526106]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:06:46 ispc saslauthd[1526120]: pam_mysql - SELECT returned no result. Dec 14 11:06:46 ispc saslauthd[1526120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:06:46 ispc saslauthd[1526120]: do_auth : auth failure: [user=qserv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:06:57 ispc sshd[1526126]: Invalid user admin from 139.19.117.197 Dec 14 11:07:01 ispc CRON[1526132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:07:01 ispc CRON[1526132]: pam_unix(cron:session): session closed for user root Dec 14 11:08:01 ispc CRON[1526179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:08:02 ispc CRON[1526179]: pam_unix(cron:session): session closed for user root Dec 14 11:09:01 ispc CRON[1526216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:09:01 ispc CRON[1526215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:09:01 ispc CRON[1526215]: pam_unix(cron:session): session closed for user root Dec 14 11:09:02 ispc CRON[1526216]: pam_unix(cron:session): session closed for user root Dec 14 11:09:16 ispc postfix/smtpd[1526245]: sql auxprop plugin using mysql engine Dec 14 11:09:17 ispc saslauthd[1526247]: pam_mysql - SELECT returned no result. Dec 14 11:09:17 ispc saslauthd[1526247]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:09:17 ispc saslauthd[1526247]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:09:50 ispc sshd[1526261]: Invalid user martof from 43.135.148.156 Dec 14 11:10:01 ispc CRON[1526276]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:10:01 ispc CRON[1526272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:10:01 ispc CRON[1526273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:10:01 ispc CRON[1526274]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:10:01 ispc CRON[1526275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:10:01 ispc CRON[1526274]: pam_unix(cron:session): session closed for user www-data Dec 14 11:10:01 ispc CRON[1526273]: pam_unix(cron:session): session closed for user root Dec 14 11:10:01 ispc CRON[1526276]: pam_unix(cron:session): session closed for user getmail Dec 14 11:10:01 ispc CRON[1526275]: pam_unix(cron:session): session closed for user root Dec 14 11:10:02 ispc CRON[1526272]: pam_unix(cron:session): session closed for user root Dec 14 11:11:01 ispc CRON[1526375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:11:02 ispc CRON[1526375]: pam_unix(cron:session): session closed for user root Dec 14 11:11:26 ispc postfix/smtpd[1526398]: sql auxprop plugin using mysql engine Dec 14 11:11:27 ispc CRON[1524143]: pam_unix(cron:session): session closed for user root Dec 14 11:11:29 ispc saslauthd[1526402]: pam_mysql - SELECT returned no result. Dec 14 11:11:29 ispc saslauthd[1526402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:11:29 ispc saslauthd[1526402]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:12:01 ispc CRON[1526404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:12:01 ispc CRON[1526404]: pam_unix(cron:session): session closed for user root Dec 14 11:13:01 ispc saslauthd[1526431]: pam_mysql - SELECT returned no result. Dec 14 11:13:01 ispc saslauthd[1526431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:13:01 ispc saslauthd[1526431]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:13:01 ispc CRON[1526432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:13:02 ispc CRON[1526432]: pam_unix(cron:session): session closed for user root Dec 14 11:14:01 ispc CRON[1526451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:14:02 ispc CRON[1526451]: pam_unix(cron:session): session closed for user root Dec 14 11:14:14 ispc sshd[1526465]: Invalid user blceu from 119.205.233.162 Dec 14 11:14:42 ispc saslauthd[1526469]: pam_mysql - SELECT returned no result. Dec 14 11:14:42 ispc saslauthd[1526469]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:14:42 ispc saslauthd[1526469]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:15:01 ispc CRON[1526471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:15:01 ispc CRON[1526472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:15:01 ispc CRON[1526473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:15:01 ispc CRON[1526474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:15:01 ispc CRON[1526472]: pam_unix(cron:session): session closed for user root Dec 14 11:15:01 ispc CRON[1526474]: pam_unix(cron:session): session closed for user getmail Dec 14 11:15:01 ispc CRON[1526471]: pam_unix(cron:session): session closed for user root Dec 14 11:15:38 ispc CRON[1526473]: pam_unix(cron:session): session closed for user root Dec 14 11:16:01 ispc CRON[1526658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:16:19 ispc sshd[1526675]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:16:19 ispc sshd[1526675]: Invalid user ziplines from 114.7.163.154 Dec 14 11:16:32 ispc saslauthd[1526688]: pam_mysql - SELECT returned no result. Dec 14 11:16:32 ispc saslauthd[1526688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:16:32 ispc saslauthd[1526688]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:17:01 ispc CRON[1526703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:17:02 ispc CRON[1526703]: pam_unix(cron:session): session closed for user root Dec 14 11:17:06 ispc saslauthd[1526719]: pam_mysql - SELECT returned no result. Dec 14 11:17:06 ispc saslauthd[1526719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:17:06 ispc saslauthd[1526719]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:17:45 ispc sshd[1526739]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:17:45 ispc sshd[1526739]: Invalid user blceu from 103.91.189.70 Dec 14 11:18:01 ispc CRON[1526754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:18:02 ispc CRON[1526754]: pam_unix(cron:session): session closed for user root Dec 14 11:18:27 ispc postfix/smtpd[1526777]: sql auxprop plugin using mysql engine Dec 14 11:19:01 ispc CRON[1526794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:19:01 ispc CRON[1526794]: pam_unix(cron:session): session closed for user root Dec 14 11:19:24 ispc postfix/smtpd[1526814]: sql auxprop plugin using mysql engine Dec 14 11:19:25 ispc saslauthd[1526816]: pam_mysql - SELECT returned no result. Dec 14 11:19:25 ispc saslauthd[1526816]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:19:25 ispc saslauthd[1526816]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:19:56 ispc sshd[1526829]: Invalid user tshombeknife from 185.12.204.239 Dec 14 11:20:01 ispc CRON[1526835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:20:01 ispc CRON[1526836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:20:01 ispc CRON[1526838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:20:01 ispc CRON[1526839]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:20:01 ispc CRON[1526837]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:20:01 ispc CRON[1526837]: pam_unix(cron:session): session closed for user www-data Dec 14 11:20:01 ispc CRON[1526836]: pam_unix(cron:session): session closed for user root Dec 14 11:20:02 ispc CRON[1526839]: pam_unix(cron:session): session closed for user getmail Dec 14 11:20:02 ispc CRON[1526838]: pam_unix(cron:session): session closed for user root Dec 14 11:20:03 ispc CRON[1526835]: pam_unix(cron:session): session closed for user root Dec 14 11:20:52 ispc sshd[1526937]: Invalid user martof from 211.23.78.98 Dec 14 11:21:01 ispc CRON[1526944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:21:01 ispc CRON[1526945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:21:01 ispc CRON[1526944]: pam_unix(cron:session): session closed for user root Dec 14 11:21:01 ispc CRON[1526945]: pam_unix(cron:session): session closed for user root Dec 14 11:21:15 ispc postfix/smtpd[1526962]: sql auxprop plugin using mysql engine Dec 14 11:21:17 ispc saslauthd[1526964]: pam_mysql - SELECT returned no result. Dec 14 11:21:17 ispc saslauthd[1526964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:21:17 ispc saslauthd[1526964]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:21:31 ispc saslauthd[1526974]: pam_mysql - SELECT returned no result. Dec 14 11:21:31 ispc saslauthd[1526974]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:21:31 ispc saslauthd[1526974]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:21:45 ispc sshd[1526979]: Did not receive identification string from 134.122.57.181 Dec 14 11:21:52 ispc saslauthd[1526984]: pam_mysql - SELECT returned no result. Dec 14 11:21:52 ispc saslauthd[1526984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:21:52 ispc saslauthd[1526984]: do_auth : auth failure: [user=qsrv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:22:01 ispc CRON[1526989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:22:02 ispc CRON[1526989]: pam_unix(cron:session): session closed for user root Dec 14 11:22:47 ispc saslauthd[1527028]: pam_mysql - SELECT returned no result. Dec 14 11:22:47 ispc saslauthd[1527028]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:22:47 ispc saslauthd[1527028]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:22:56 ispc sshd[1527033]: Did not receive identification string from 167.99.43.112 Dec 14 11:23:01 ispc CRON[1527038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:23:02 ispc CRON[1527038]: pam_unix(cron:session): session closed for user root Dec 14 11:24:01 ispc CRON[1527074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:24:01 ispc CRON[1527074]: pam_unix(cron:session): session closed for user root Dec 14 11:24:12 ispc saslauthd[1527090]: pam_mysql - SELECT returned no result. Dec 14 11:24:12 ispc saslauthd[1527090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:24:12 ispc saslauthd[1527090]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:24:14 ispc sshd[1527097]: Invalid user klape from 67.205.163.146 Dec 14 11:24:14 ispc sshd[1527099]: Invalid user ubuntu from 67.205.163.146 Dec 14 11:24:25 ispc sshd[1527107]: Did not receive identification string from 161.35.144.171 Dec 14 11:24:41 ispc sshd[1527114]: Invalid user blceu from 211.23.78.98 Dec 14 11:25:01 ispc CRON[1527126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:25:01 ispc CRON[1527127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:25:01 ispc CRON[1527128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:25:01 ispc CRON[1527129]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:25:01 ispc CRON[1527127]: pam_unix(cron:session): session closed for user root Dec 14 11:25:02 ispc CRON[1527129]: pam_unix(cron:session): session closed for user getmail Dec 14 11:25:02 ispc CRON[1527128]: pam_unix(cron:session): session closed for user root Dec 14 11:25:04 ispc CRON[1527126]: pam_unix(cron:session): session closed for user root Dec 14 11:25:29 ispc postfix/smtpd[1527217]: sql auxprop plugin using mysql engine Dec 14 11:25:37 ispc sshd[1527223]: Invalid user test1 from 161.35.144.171 Dec 14 11:25:44 ispc saslauthd[1527229]: pam_mysql - SELECT returned no result. Dec 14 11:25:44 ispc saslauthd[1527229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:25:44 ispc saslauthd[1527229]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:25:52 ispc saslauthd[1527231]: pam_mysql - SELECT returned no result. Dec 14 11:25:52 ispc saslauthd[1527231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:25:52 ispc saslauthd[1527231]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:26:01 ispc CRON[1527238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:26:02 ispc CRON[1527238]: pam_unix(cron:session): session closed for user root Dec 14 11:26:05 ispc sshd[1527253]: Invalid user matlbula from 51.159.18.215 Dec 14 11:26:28 ispc sshd[1527265]: Invalid user test2 from 161.35.144.171 Dec 14 11:27:01 ispc CRON[1527285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:27:02 ispc CRON[1527285]: pam_unix(cron:session): session closed for user root Dec 14 11:27:20 ispc sshd[1527307]: Invalid user test3 from 161.35.144.171 Dec 14 11:27:41 ispc postfix/smtpd[1527326]: sql auxprop plugin using mysql engine Dec 14 11:27:58 ispc postfix/smtpd[1527343]: sql auxprop plugin using mysql engine Dec 14 11:27:59 ispc saslauthd[1527345]: pam_mysql - SELECT returned no result. Dec 14 11:27:59 ispc saslauthd[1527345]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:27:59 ispc saslauthd[1527345]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:28:01 ispc CRON[1527347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:28:01 ispc CRON[1527347]: pam_unix(cron:session): session closed for user root Dec 14 11:28:30 ispc sshd[1527375]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:28:30 ispc sshd[1527375]: Invalid user blceu from 123.253.61.95 Dec 14 11:28:30 ispc saslauthd[1527379]: pam_mysql - SELECT returned no result. Dec 14 11:28:30 ispc saslauthd[1527379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:28:30 ispc saslauthd[1527379]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:28:54 ispc saslauthd[1527393]: pam_mysql - SELECT returned no result. Dec 14 11:28:54 ispc saslauthd[1527393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:28:54 ispc saslauthd[1527393]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:29:01 ispc CRON[1527398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:29:02 ispc CRON[1527398]: pam_unix(cron:session): session closed for user root Dec 14 11:29:47 ispc sshd[1527434]: Invalid user admin from 167.99.43.112 Dec 14 11:30:01 ispc CRON[1527446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:30:01 ispc CRON[1527447]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:30:01 ispc CRON[1527448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:30:01 ispc CRON[1527449]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:30:01 ispc CRON[1527445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:30:01 ispc CRON[1527446]: pam_unix(cron:session): session closed for user root Dec 14 11:30:01 ispc CRON[1527447]: pam_unix(cron:session): session closed for user www-data Dec 14 11:30:01 ispc CRON[1527449]: pam_unix(cron:session): session closed for user getmail Dec 14 11:30:02 ispc CRON[1527448]: pam_unix(cron:session): session closed for user root Dec 14 11:30:03 ispc CRON[1527445]: pam_unix(cron:session): session closed for user root Dec 14 11:30:23 ispc sshd[1527537]: Invalid user admin from 167.99.43.112 Dec 14 11:30:53 ispc postfix/smtpd[1527553]: sql auxprop plugin using mysql engine Dec 14 11:30:55 ispc saslauthd[1527557]: pam_mysql - SELECT returned no result. Dec 14 11:30:55 ispc saslauthd[1527557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:30:55 ispc saslauthd[1527557]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:31:00 ispc sshd[1527560]: Invalid user admin from 167.99.43.112 Dec 14 11:31:01 ispc CRON[1527566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:31:02 ispc CRON[1527566]: pam_unix(cron:session): session closed for user root Dec 14 11:31:10 ispc sshd[1527577]: Invalid user martof from 51.79.36.60 Dec 14 11:31:22 ispc sshd[1527587]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:31:22 ispc sshd[1527587]: Invalid user martof from 103.91.189.70 Dec 14 11:31:36 ispc sshd[1527596]: Invalid user admin from 167.99.43.112 Dec 14 11:32:01 ispc CRON[1527615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:32:02 ispc CRON[1527615]: pam_unix(cron:session): session closed for user root Dec 14 11:32:09 ispc sshd[1527628]: Invalid user admin from 167.99.43.112 Dec 14 11:32:38 ispc postfix/smtpd[1527651]: sql auxprop plugin using mysql engine Dec 14 11:32:39 ispc saslauthd[1527660]: pam_mysql - SELECT returned no result. Dec 14 11:32:39 ispc saslauthd[1527660]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:32:39 ispc saslauthd[1527660]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:32:42 ispc sshd[1527665]: Invalid user admin from 167.99.43.112 Dec 14 11:32:58 ispc saslauthd[1527679]: pam_mysql - SELECT returned no result. Dec 14 11:32:58 ispc saslauthd[1527679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:32:58 ispc saslauthd[1527679]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:33:01 ispc CRON[1527680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:33:02 ispc CRON[1527680]: pam_unix(cron:session): session closed for user root Dec 14 11:33:23 ispc saslauthd[1527709]: pam_mysql - SELECT returned no result. Dec 14 11:33:23 ispc saslauthd[1527709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:33:23 ispc saslauthd[1527709]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:33:30 ispc saslauthd[1527710]: pam_mysql - SELECT returned no result. Dec 14 11:33:30 ispc saslauthd[1527710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:33:30 ispc saslauthd[1527710]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:33:46 ispc sshd[1527723]: Invalid user postgres from 161.35.144.171 Dec 14 11:33:58 ispc saslauthd[1527729]: pam_mysql - SELECT returned no result. Dec 14 11:33:58 ispc saslauthd[1527729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:33:58 ispc saslauthd[1527729]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:34:01 ispc CRON[1527730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:34:01 ispc CRON[1527730]: pam_unix(cron:session): session closed for user root Dec 14 11:34:16 ispc sshd[1527749]: Invalid user ziplines from 103.77.207.53 Dec 14 11:34:29 ispc sshd[1527757]: Invalid user oracle from 161.35.144.171 Dec 14 11:34:32 ispc saslauthd[1527759]: pam_mysql - SELECT returned no result. Dec 14 11:34:32 ispc saslauthd[1527759]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:34:32 ispc saslauthd[1527759]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:34:33 ispc sshd[1527760]: Invalid user blceu from 139.59.66.222 Dec 14 11:35:01 ispc CRON[1527778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:35:01 ispc CRON[1527779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:35:01 ispc CRON[1527780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:35:01 ispc CRON[1527781]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:35:01 ispc CRON[1527779]: pam_unix(cron:session): session closed for user root Dec 14 11:35:02 ispc CRON[1527781]: pam_unix(cron:session): session closed for user getmail Dec 14 11:35:02 ispc CRON[1527778]: pam_unix(cron:session): session closed for user root Dec 14 11:35:02 ispc CRON[1527780]: pam_unix(cron:session): session closed for user root Dec 14 11:35:11 ispc sshd[1527859]: Invalid user user from 161.35.144.171 Dec 14 11:35:40 ispc saslauthd[1527882]: pam_mysql - SELECT returned no result. Dec 14 11:35:40 ispc saslauthd[1527882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:35:40 ispc saslauthd[1527882]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:35:52 ispc sshd[1527887]: Invalid user ziplines from 119.205.233.162 Dec 14 11:36:01 ispc CRON[1527899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:36:02 ispc CRON[1527899]: pam_unix(cron:session): session closed for user root Dec 14 11:36:25 ispc CRON[1526658]: pam_unix(cron:session): session closed for user root Dec 14 11:36:51 ispc saslauthd[1527928]: pam_mysql - SELECT returned no result. Dec 14 11:36:51 ispc saslauthd[1527928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:36:51 ispc saslauthd[1527928]: do_auth : auth failure: [user=qsrvbas] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:37:01 ispc CRON[1527929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:37:02 ispc CRON[1527929]: pam_unix(cron:session): session closed for user root Dec 14 11:38:01 ispc CRON[1527963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:38:02 ispc CRON[1527963]: pam_unix(cron:session): session closed for user root Dec 14 11:38:15 ispc saslauthd[1527975]: pam_mysql - SELECT returned no result. Dec 14 11:38:15 ispc saslauthd[1527975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:38:15 ispc saslauthd[1527975]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:39:01 ispc CRON[1527980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:39:01 ispc CRON[1527981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:39:01 ispc CRON[1527980]: pam_unix(cron:session): session closed for user root Dec 14 11:39:02 ispc CRON[1527981]: pam_unix(cron:session): session closed for user root Dec 14 11:39:57 ispc sshd[1528006]: Invalid user admin from 134.122.57.181 Dec 14 11:40:01 ispc CRON[1528008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:40:01 ispc CRON[1528009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:40:01 ispc CRON[1528011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:40:01 ispc CRON[1528012]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:40:01 ispc CRON[1528010]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:40:01 ispc CRON[1528010]: pam_unix(cron:session): session closed for user www-data Dec 14 11:40:01 ispc CRON[1528009]: pam_unix(cron:session): session closed for user root Dec 14 11:40:01 ispc CRON[1528012]: pam_unix(cron:session): session closed for user getmail Dec 14 11:40:02 ispc CRON[1528008]: pam_unix(cron:session): session closed for user root Dec 14 11:40:14 ispc saslauthd[1528118]: pam_mysql - SELECT returned no result. Dec 14 11:40:14 ispc saslauthd[1528118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:40:14 ispc saslauthd[1528118]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:40:32 ispc sshd[1528121]: Invalid user admin from 134.122.57.181 Dec 14 11:40:38 ispc CRON[1528011]: pam_unix(cron:session): session closed for user root Dec 14 11:40:50 ispc sshd[1528125]: Invalid user ziplines from 43.135.148.156 Dec 14 11:41:01 ispc CRON[1528128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:41:07 ispc sshd[1528141]: Invalid user admin from 134.122.57.181 Dec 14 11:41:27 ispc saslauthd[1528151]: pam_mysql - SELECT returned no result. Dec 14 11:41:27 ispc saslauthd[1528151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:41:27 ispc saslauthd[1528151]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:41:40 ispc sshd[1528156]: Invalid user admin from 134.122.57.181 Dec 14 11:41:42 ispc sshd[1528158]: Invalid user pronajemplosin from 36.50.176.13 Dec 14 11:42:01 ispc CRON[1528168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:42:01 ispc CRON[1528168]: pam_unix(cron:session): session closed for user root Dec 14 11:42:15 ispc sshd[1528189]: Invalid user admin from 134.122.57.181 Dec 14 11:42:39 ispc saslauthd[1528206]: pam_mysql - SELECT returned no result. Dec 14 11:42:39 ispc saslauthd[1528206]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:42:39 ispc saslauthd[1528206]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:42:45 ispc sshd[1528212]: Invalid user admin from 134.122.57.181 Dec 14 11:43:01 ispc CRON[1528224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:43:03 ispc CRON[1528224]: pam_unix(cron:session): session closed for user root Dec 14 11:43:38 ispc saslauthd[1528255]: pam_mysql - SELECT returned no result. Dec 14 11:43:38 ispc saslauthd[1528255]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:43:38 ispc saslauthd[1528255]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:44:01 ispc CRON[1528269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:44:01 ispc CRON[1528269]: pam_unix(cron:session): session closed for user root Dec 14 11:44:11 ispc sshd[1528284]: Invalid user test from 221.151.181.65 Dec 14 11:44:38 ispc saslauthd[1528298]: pam_mysql - SELECT returned no result. Dec 14 11:44:38 ispc saslauthd[1528298]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:44:38 ispc saslauthd[1528298]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:45:01 ispc CRON[1528309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:45:01 ispc CRON[1528310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:45:01 ispc CRON[1528311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:45:01 ispc CRON[1528312]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:45:02 ispc CRON[1528310]: pam_unix(cron:session): session closed for user root Dec 14 11:45:02 ispc CRON[1528312]: pam_unix(cron:session): session closed for user getmail Dec 14 11:45:02 ispc CRON[1528311]: pam_unix(cron:session): session closed for user root Dec 14 11:45:03 ispc CRON[1528309]: pam_unix(cron:session): session closed for user root Dec 14 11:45:35 ispc sshd[1528398]: Invalid user ziplines from 139.59.66.222 Dec 14 11:45:41 ispc saslauthd[1528404]: pam_mysql - SELECT returned no result. Dec 14 11:45:41 ispc saslauthd[1528404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:45:41 ispc saslauthd[1528404]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:46:01 ispc CRON[1528414]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:46:02 ispc CRON[1528414]: pam_unix(cron:session): session closed for user root Dec 14 11:47:01 ispc CRON[1528454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:47:02 ispc CRON[1528454]: pam_unix(cron:session): session closed for user root Dec 14 11:47:06 ispc sshd[1528467]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:47:15 ispc saslauthd[1528474]: pam_mysql - SELECT returned no result. Dec 14 11:47:15 ispc saslauthd[1528474]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:47:15 ispc saslauthd[1528474]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:47:45 ispc sshd[1528491]: Invalid user ziplines from 118.218.219.250 Dec 14 11:48:01 ispc CRON[1528505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:48:02 ispc CRON[1528505]: pam_unix(cron:session): session closed for user root Dec 14 11:48:02 ispc sshd[1528518]: Invalid user klape from 2.57.217.229 Dec 14 11:48:03 ispc sshd[1528520]: Invalid user ubuntu from 2.57.217.229 Dec 14 11:48:06 ispc sshd[1528522]: Invalid user ziplines from 43.135.130.196 Dec 14 11:49:01 ispc CRON[1528551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:49:02 ispc CRON[1528551]: pam_unix(cron:session): session closed for user root Dec 14 11:49:03 ispc postfix/smtpd[1528562]: sql auxprop plugin using mysql engine Dec 14 11:49:03 ispc saslauthd[1528564]: pam_mysql - SELECT returned no result. Dec 14 11:49:03 ispc saslauthd[1528564]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:49:03 ispc saslauthd[1528564]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:49:12 ispc sshd[1528570]: Invalid user blceu from 103.100.209.172 Dec 14 11:49:26 ispc saslauthd[1528576]: pam_mysql - SELECT returned no result. Dec 14 11:49:26 ispc saslauthd[1528576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:49:26 ispc saslauthd[1528576]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:49:31 ispc sshd[1528581]: Did not receive identification string from 113.47.9.97 Dec 14 11:49:57 ispc saslauthd[1528593]: pam_mysql - SELECT returned no result. Dec 14 11:49:57 ispc saslauthd[1528593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:49:57 ispc saslauthd[1528593]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:50:01 ispc CRON[1528599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:50:01 ispc CRON[1528601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:50:01 ispc CRON[1528598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:50:01 ispc CRON[1528600]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 11:50:01 ispc CRON[1528602]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:50:01 ispc CRON[1528600]: pam_unix(cron:session): session closed for user www-data Dec 14 11:50:01 ispc CRON[1528599]: pam_unix(cron:session): session closed for user root Dec 14 11:50:01 ispc CRON[1528602]: pam_unix(cron:session): session closed for user getmail Dec 14 11:50:01 ispc CRON[1528601]: pam_unix(cron:session): session closed for user root Dec 14 11:50:01 ispc CRON[1528598]: pam_unix(cron:session): session closed for user root Dec 14 11:50:35 ispc sshd[1528689]: Invalid user matlbula from 185.12.204.239 Dec 14 11:50:50 ispc saslauthd[1528695]: pam_mysql - SELECT returned no result. Dec 14 11:50:50 ispc saslauthd[1528695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:50:50 ispc saslauthd[1528695]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:51:01 ispc CRON[1528704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:51:02 ispc CRON[1528704]: pam_unix(cron:session): session closed for user root Dec 14 11:51:44 ispc saslauthd[1528735]: pam_mysql - SELECT returned no result. Dec 14 11:51:44 ispc saslauthd[1528735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:51:44 ispc saslauthd[1528735]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:51:50 ispc saslauthd[1528737]: pam_mysql - SELECT returned no result. Dec 14 11:51:50 ispc saslauthd[1528737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:51:50 ispc saslauthd[1528737]: do_auth : auth failure: [user=qsvr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:52:01 ispc CRON[1528742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:52:01 ispc CRON[1528742]: pam_unix(cron:session): session closed for user root Dec 14 11:52:35 ispc saslauthd[1528770]: pam_mysql - SELECT returned no result. Dec 14 11:52:35 ispc saslauthd[1528770]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:52:35 ispc saslauthd[1528770]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:53:01 ispc CRON[1528786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:53:01 ispc CRON[1528786]: pam_unix(cron:session): session closed for user root Dec 14 11:53:07 ispc sshd[1528801]: Invalid user martof from 118.218.219.250 Dec 14 11:53:22 ispc saslauthd[1528807]: pam_mysql - SELECT returned no result. Dec 14 11:53:22 ispc saslauthd[1528807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:22 ispc saslauthd[1528807]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:53:34 ispc saslauthd[1528819]: pam_mysql - SELECT returned no result. Dec 14 11:53:34 ispc saslauthd[1528819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:34 ispc saslauthd[1528819]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:53:35 ispc saslauthd[1528820]: pam_mysql - SELECT returned no result. Dec 14 11:53:35 ispc saslauthd[1528820]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:35 ispc saslauthd[1528820]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:53:53 ispc saslauthd[1528825]: pam_mysql - SELECT returned no result. Dec 14 11:53:53 ispc saslauthd[1528825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:53 ispc saslauthd[1528825]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:53:56 ispc saslauthd[1528831]: pam_mysql - SELECT returned no result. Dec 14 11:53:56 ispc saslauthd[1528831]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:56 ispc saslauthd[1528831]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:53:59 ispc saslauthd[1528832]: pam_mysql - SELECT returned no result. Dec 14 11:53:59 ispc saslauthd[1528832]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:53:59 ispc saslauthd[1528832]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:01 ispc CRON[1528833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:54:02 ispc CRON[1528833]: pam_unix(cron:session): session closed for user root Dec 14 11:54:06 ispc saslauthd[1528848]: pam_mysql - SELECT returned no result. Dec 14 11:54:06 ispc saslauthd[1528848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:06 ispc saslauthd[1528848]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:54:07 ispc saslauthd[1528849]: pam_mysql - SELECT returned no result. Dec 14 11:54:07 ispc saslauthd[1528849]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:07 ispc saslauthd[1528849]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:08 ispc saslauthd[1528850]: pam_mysql - SELECT returned no result. Dec 14 11:54:08 ispc saslauthd[1528850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:08 ispc saslauthd[1528850]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:14 ispc postfix/smtpd[1528856]: sql auxprop plugin using mysql engine Dec 14 11:54:14 ispc postfix/smtpd[1528858]: sql auxprop plugin using mysql engine Dec 14 11:54:15 ispc saslauthd[1528859]: pam_mysql - SELECT returned no result. Dec 14 11:54:15 ispc saslauthd[1528859]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:15 ispc saslauthd[1528859]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:15 ispc saslauthd[1528861]: pam_mysql - SELECT returned no result. Dec 14 11:54:15 ispc saslauthd[1528861]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:15 ispc saslauthd[1528861]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:15 ispc saslauthd[1528860]: pam_mysql - SELECT returned no result. Dec 14 11:54:15 ispc saslauthd[1528860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:15 ispc saslauthd[1528860]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:16 ispc saslauthd[1528862]: pam_mysql - SELECT returned no result. Dec 14 11:54:16 ispc saslauthd[1528862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:16 ispc saslauthd[1528862]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:17 ispc saslauthd[1528863]: pam_mysql - SELECT returned no result. Dec 14 11:54:17 ispc saslauthd[1528863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:17 ispc saslauthd[1528863]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:23 ispc saslauthd[1528869]: pam_mysql - SELECT returned no result. Dec 14 11:54:23 ispc saslauthd[1528869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:23 ispc saslauthd[1528869]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:54:32 ispc sshd[1528871]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 11:54:42 ispc saslauthd[1528877]: pam_mysql - SELECT returned no result. Dec 14 11:54:42 ispc saslauthd[1528877]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:42 ispc saslauthd[1528877]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:54:43 ispc saslauthd[1528878]: pam_mysql - SELECT returned no result. Dec 14 11:54:43 ispc saslauthd[1528878]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:54:43 ispc saslauthd[1528878]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:55:01 ispc CRON[1528888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:55:01 ispc CRON[1528889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:55:01 ispc CRON[1528890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:55:01 ispc CRON[1528891]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 11:55:01 ispc CRON[1528889]: pam_unix(cron:session): session closed for user root Dec 14 11:55:01 ispc CRON[1528891]: pam_unix(cron:session): session closed for user getmail Dec 14 11:55:02 ispc CRON[1528890]: pam_unix(cron:session): session closed for user root Dec 14 11:55:03 ispc CRON[1528888]: pam_unix(cron:session): session closed for user root Dec 14 11:55:16 ispc saslauthd[1528972]: pam_mysql - SELECT returned no result. Dec 14 11:55:16 ispc saslauthd[1528972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:55:16 ispc saslauthd[1528972]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:55:22 ispc saslauthd[1528973]: pam_mysql - SELECT returned no result. Dec 14 11:55:22 ispc saslauthd[1528973]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:55:22 ispc saslauthd[1528973]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:55:35 ispc sshd[1528978]: Invalid user ziplines from 45.119.213.109 Dec 14 11:55:53 ispc saslauthd[1528988]: pam_mysql - SELECT returned no result. Dec 14 11:55:53 ispc saslauthd[1528988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:55:53 ispc saslauthd[1528988]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:56:01 ispc CRON[1528993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:56:02 ispc CRON[1528993]: pam_unix(cron:session): session closed for user root Dec 14 11:56:53 ispc saslauthd[1529029]: pam_mysql - SELECT returned no result. Dec 14 11:56:53 ispc saslauthd[1529029]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:56:53 ispc saslauthd[1529029]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:56:57 ispc saslauthd[1529034]: pam_mysql - SELECT returned no result. Dec 14 11:56:57 ispc saslauthd[1529034]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:56:57 ispc saslauthd[1529034]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:57:01 ispc CRON[1529035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:57:02 ispc CRON[1529035]: pam_unix(cron:session): session closed for user root Dec 14 11:57:09 ispc saslauthd[1529050]: pam_mysql - SELECT returned no result. Dec 14 11:57:09 ispc saslauthd[1529050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:57:09 ispc saslauthd[1529050]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:57:27 ispc saslauthd[1529059]: pam_mysql - SELECT returned no result. Dec 14 11:57:27 ispc saslauthd[1529059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:57:27 ispc saslauthd[1529059]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:58:01 ispc CRON[1529083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:58:02 ispc CRON[1529083]: pam_unix(cron:session): session closed for user root Dec 14 11:58:04 ispc saslauthd[1529094]: pam_mysql - SELECT returned no result. Dec 14 11:58:04 ispc saslauthd[1529094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:58:04 ispc saslauthd[1529094]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:58:05 ispc saslauthd[1529095]: pam_mysql - SELECT returned no result. Dec 14 11:58:05 ispc saslauthd[1529095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:58:05 ispc saslauthd[1529095]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:58:06 ispc saslauthd[1529100]: pam_mysql - SELECT returned no result. Dec 14 11:58:06 ispc saslauthd[1529100]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:58:06 ispc saslauthd[1529100]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 11:58:41 ispc sshd[1529117]: Invalid user martof from 45.119.213.109 Dec 14 11:59:01 ispc CRON[1529129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 11:59:02 ispc CRON[1529129]: pam_unix(cron:session): session closed for user root Dec 14 11:59:11 ispc saslauthd[1529144]: pam_mysql - SELECT returned no result. Dec 14 11:59:11 ispc saslauthd[1529144]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:59:11 ispc saslauthd[1529144]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:59:29 ispc saslauthd[1529156]: pam_mysql - SELECT returned no result. Dec 14 11:59:29 ispc saslauthd[1529156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:59:29 ispc saslauthd[1529156]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:59:45 ispc saslauthd[1529164]: pam_mysql - SELECT returned no result. Dec 14 11:59:45 ispc saslauthd[1529164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:59:45 ispc saslauthd[1529164]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 11:59:45 ispc saslauthd[1529165]: pam_mysql - SELECT returned no result. Dec 14 11:59:45 ispc saslauthd[1529165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 11:59:45 ispc saslauthd[1529165]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:00:01 ispc saslauthd[1529176]: pam_mysql - SELECT returned no result. Dec 14 12:00:01 ispc saslauthd[1529176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:00:01 ispc saslauthd[1529176]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 12:00:01 ispc CRON[1529177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:00:01 ispc CRON[1529178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:00:01 ispc CRON[1529179]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:00:01 ispc CRON[1529180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:00:01 ispc CRON[1529181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:00:01 ispc CRON[1529182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:00:01 ispc CRON[1529183]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:00:01 ispc CRON[1529179]: pam_unix(cron:session): session closed for user www-data Dec 14 12:00:01 ispc CRON[1529178]: pam_unix(cron:session): session closed for user root Dec 14 12:00:01 ispc CRON[1529181]: pam_unix(cron:session): session closed for user root Dec 14 12:00:01 ispc CRON[1529183]: pam_unix(cron:session): session closed for user getmail Dec 14 12:00:02 ispc CRON[1529180]: pam_unix(cron:session): session closed for user root Dec 14 12:00:02 ispc CRON[1529182]: pam_unix(cron:session): session closed for user root Dec 14 12:00:03 ispc CRON[1529177]: pam_unix(cron:session): session closed for user root Dec 14 12:00:18 ispc saslauthd[1529345]: pam_mysql - SELECT returned no result. Dec 14 12:00:18 ispc saslauthd[1529345]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:00:18 ispc saslauthd[1529345]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 12:00:23 ispc sshd[1529346]: Bad protocol version identification 'GET / HTTP/1.1' from 64.62.156.80 Dec 14 12:00:33 ispc saslauthd[1529351]: pam_mysql - SELECT returned no result. Dec 14 12:00:33 ispc saslauthd[1529351]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:00:33 ispc saslauthd[1529351]: do_auth : auth failure: [user=info@combilift.cz] [service=smtp] [realm=combilift.cz] [mech=pam] [reason=PAM auth error] Dec 14 12:01:01 ispc CRON[1529367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:01:02 ispc CRON[1529367]: pam_unix(cron:session): session closed for user root Dec 14 12:01:18 ispc CRON[1528128]: pam_unix(cron:session): session closed for user root Dec 14 12:01:33 ispc saslauthd[1529392]: pam_mysql - SELECT returned no result. Dec 14 12:01:33 ispc saslauthd[1529392]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:01:33 ispc saslauthd[1529392]: do_auth : auth failure: [user=shop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:02:01 ispc CRON[1529393]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 12:02:01 ispc CRON[1529394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:02:03 ispc CRON[1529394]: pam_unix(cron:session): session closed for user root Dec 14 12:02:18 ispc sshd[1529651]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:03:01 ispc CRON[1530345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:03:02 ispc CRON[1530345]: pam_unix(cron:session): session closed for user root Dec 14 12:03:09 ispc CRON[1529393]: pam_unix(cron:session): session closed for user logcheck Dec 14 12:03:20 ispc postfix/smtpd[1530449]: sql auxprop plugin using mysql engine Dec 14 12:03:28 ispc sshd[1530458]: Invalid user klape from 187.190.35.163 Dec 14 12:03:29 ispc sshd[1530460]: Invalid user ubuntu from 187.190.35.163 Dec 14 12:04:01 ispc CRON[1530463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:04:01 ispc CRON[1530463]: pam_unix(cron:session): session closed for user root Dec 14 12:04:46 ispc sshd[1530479]: Invalid user ubuntu from 70.37.89.177 Dec 14 12:04:48 ispc sshd[1530477]: Invalid user klape from 70.37.89.177 Dec 14 12:05:01 ispc CRON[1530483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:05:01 ispc CRON[1530484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:05:01 ispc CRON[1530485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:05:01 ispc CRON[1530486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:05:01 ispc CRON[1530487]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:05:02 ispc CRON[1530485]: pam_unix(cron:session): session closed for user root Dec 14 12:05:02 ispc CRON[1530487]: pam_unix(cron:session): session closed for user getmail Dec 14 12:05:04 ispc CRON[1530484]: pam_unix(cron:session): session closed for user root Dec 14 12:05:05 ispc CRON[1530483]: pam_unix(cron:session): session closed for user root Dec 14 12:05:38 ispc CRON[1530486]: pam_unix(cron:session): session closed for user root Dec 14 12:06:01 ispc CRON[1530604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:06:49 ispc postfix/smtpd[1530632]: sql auxprop plugin using mysql engine Dec 14 12:06:51 ispc saslauthd[1530634]: pam_mysql - SELECT returned no result. Dec 14 12:06:51 ispc saslauthd[1530634]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:06:51 ispc saslauthd[1530634]: do_auth : auth failure: [user=qsysopr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:06:52 ispc postfix/smtpd[1530635]: sql auxprop plugin using mysql engine Dec 14 12:06:59 ispc sshd[1530640]: Invalid user admin from 139.19.117.197 Dec 14 12:07:01 ispc CRON[1530642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:07:03 ispc CRON[1530642]: pam_unix(cron:session): session closed for user root Dec 14 12:08:01 ispc CRON[1530694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:08:02 ispc CRON[1530694]: pam_unix(cron:session): session closed for user root Dec 14 12:09:01 ispc CRON[1530732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:09:01 ispc CRON[1530733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:09:01 ispc CRON[1530732]: pam_unix(cron:session): session closed for user root Dec 14 12:09:02 ispc CRON[1530733]: pam_unix(cron:session): session closed for user root Dec 14 12:09:39 ispc sshd[1530773]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:10:01 ispc CRON[1530786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:10:01 ispc CRON[1530787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:10:01 ispc CRON[1530788]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:10:01 ispc CRON[1530789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:10:01 ispc CRON[1530790]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:10:01 ispc CRON[1530788]: pam_unix(cron:session): session closed for user www-data Dec 14 12:10:01 ispc CRON[1530787]: pam_unix(cron:session): session closed for user root Dec 14 12:10:01 ispc CRON[1530790]: pam_unix(cron:session): session closed for user getmail Dec 14 12:10:02 ispc CRON[1530789]: pam_unix(cron:session): session closed for user root Dec 14 12:10:02 ispc CRON[1530786]: pam_unix(cron:session): session closed for user root Dec 14 12:10:51 ispc sshd[1530887]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:11:01 ispc CRON[1530894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:11:02 ispc CRON[1530894]: pam_unix(cron:session): session closed for user root Dec 14 12:12:01 ispc CRON[1530933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:12:01 ispc CRON[1530933]: pam_unix(cron:session): session closed for user root Dec 14 12:13:01 ispc CRON[1530977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:13:02 ispc CRON[1530977]: pam_unix(cron:session): session closed for user root Dec 14 12:13:42 ispc sshd[1531008]: Invalid user martof from 139.59.66.222 Dec 14 12:14:01 ispc CRON[1531025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:14:02 ispc CRON[1531025]: pam_unix(cron:session): session closed for user root Dec 14 12:14:25 ispc sshd[1531044]: Invalid user user from 36.37.244.244 Dec 14 12:14:27 ispc sshd[1531047]: Invalid user blceu from 49.247.24.89 Dec 14 12:15:01 ispc CRON[1531068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:15:01 ispc CRON[1531069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:15:01 ispc CRON[1531070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:15:01 ispc CRON[1531071]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:15:01 ispc CRON[1531069]: pam_unix(cron:session): session closed for user root Dec 14 12:15:01 ispc CRON[1531071]: pam_unix(cron:session): session closed for user getmail Dec 14 12:15:02 ispc CRON[1531070]: pam_unix(cron:session): session closed for user root Dec 14 12:15:03 ispc sshd[1531095]: Invalid user martof from 49.247.24.89 Dec 14 12:15:04 ispc CRON[1531068]: pam_unix(cron:session): session closed for user root Dec 14 12:16:01 ispc CRON[1531171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:16:01 ispc CRON[1531171]: pam_unix(cron:session): session closed for user root Dec 14 12:16:34 ispc postfix/smtpd[1531196]: sql auxprop plugin using mysql engine Dec 14 12:17:01 ispc CRON[1531214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:17:02 ispc CRON[1531214]: pam_unix(cron:session): session closed for user root Dec 14 12:17:23 ispc sshd[1531234]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:18:01 ispc CRON[1531261]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 12:18:01 ispc CRON[1531262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:18:02 ispc CRON[1531262]: pam_unix(cron:session): session closed for user root Dec 14 12:18:06 ispc CRON[1531261]: pam_unix(cron:session): session closed for user amavis Dec 14 12:18:07 ispc postfix/smtpd[1531285]: sql auxprop plugin using mysql engine Dec 14 12:19:01 ispc CRON[1531311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:19:01 ispc CRON[1531311]: pam_unix(cron:session): session closed for user root Dec 14 12:19:32 ispc postfix/smtpd[1531338]: sql auxprop plugin using mysql engine Dec 14 12:19:33 ispc saslauthd[1531340]: pam_mysql - SELECT returned no result. Dec 14 12:19:33 ispc saslauthd[1531340]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:19:33 ispc saslauthd[1531340]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:19:46 ispc sshd[1531348]: Invalid user test from 221.151.181.65 Dec 14 12:20:01 ispc CRON[1531361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:20:01 ispc CRON[1531362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:20:01 ispc CRON[1531363]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:20:01 ispc CRON[1531364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:20:01 ispc CRON[1531365]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:20:01 ispc CRON[1531362]: pam_unix(cron:session): session closed for user root Dec 14 12:20:01 ispc CRON[1531363]: pam_unix(cron:session): session closed for user www-data Dec 14 12:20:01 ispc CRON[1531365]: pam_unix(cron:session): session closed for user getmail Dec 14 12:20:02 ispc CRON[1531364]: pam_unix(cron:session): session closed for user root Dec 14 12:20:02 ispc CRON[1531361]: pam_unix(cron:session): session closed for user root Dec 14 12:21:01 ispc CRON[1531467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:21:01 ispc CRON[1531468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:21:01 ispc CRON[1531467]: pam_unix(cron:session): session closed for user root Dec 14 12:21:02 ispc CRON[1531468]: pam_unix(cron:session): session closed for user root Dec 14 12:21:45 ispc postfix/smtpd[1531503]: sql auxprop plugin using mysql engine Dec 14 12:21:45 ispc saslauthd[1531505]: pam_mysql - SELECT returned no result. Dec 14 12:21:45 ispc saslauthd[1531505]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:21:45 ispc saslauthd[1531505]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:21:52 ispc saslauthd[1531506]: pam_mysql - SELECT returned no result. Dec 14 12:21:52 ispc saslauthd[1531506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:21:52 ispc saslauthd[1531506]: do_auth : auth failure: [user=questra] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:22:01 ispc CRON[1531511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:22:02 ispc CRON[1531511]: pam_unix(cron:session): session closed for user root Dec 14 12:22:42 ispc sshd[1531548]: Invalid user ubuntu from 115.190.171.196 Dec 14 12:23:01 ispc CRON[1531561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:23:02 ispc CRON[1531561]: pam_unix(cron:session): session closed for user root Dec 14 12:23:37 ispc postfix/smtpd[1531590]: sql auxprop plugin using mysql engine Dec 14 12:23:38 ispc saslauthd[1531592]: pam_mysql - SELECT returned no result. Dec 14 12:23:38 ispc saslauthd[1531592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:23:38 ispc saslauthd[1531592]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:24:01 ispc CRON[1531602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:24:02 ispc CRON[1531602]: pam_unix(cron:session): session closed for user root Dec 14 12:24:05 ispc saslauthd[1531618]: pam_mysql - SELECT returned no result. Dec 14 12:24:05 ispc saslauthd[1531618]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:24:05 ispc saslauthd[1531618]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:25:01 ispc CRON[1531640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:25:01 ispc CRON[1531641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:25:01 ispc CRON[1531642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:25:01 ispc CRON[1531643]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:25:01 ispc CRON[1531641]: pam_unix(cron:session): session closed for user root Dec 14 12:25:01 ispc CRON[1531643]: pam_unix(cron:session): session closed for user getmail Dec 14 12:25:01 ispc CRON[1531642]: pam_unix(cron:session): session closed for user root Dec 14 12:25:03 ispc CRON[1531640]: pam_unix(cron:session): session closed for user root Dec 14 12:25:30 ispc sshd[1531732]: Invalid user ziplines from 51.79.36.60 Dec 14 12:25:36 ispc saslauthd[1531738]: pam_mysql - SELECT returned no result. Dec 14 12:25:36 ispc saslauthd[1531738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:25:36 ispc saslauthd[1531738]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:26:01 ispc CRON[1531747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:26:02 ispc CRON[1531747]: pam_unix(cron:session): session closed for user root Dec 14 12:26:15 ispc CRON[1530604]: pam_unix(cron:session): session closed for user root Dec 14 12:27:01 ispc saslauthd[1531770]: pam_mysql - SELECT returned no result. Dec 14 12:27:01 ispc saslauthd[1531770]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:27:01 ispc saslauthd[1531770]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:27:01 ispc CRON[1531771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:27:02 ispc CRON[1531771]: pam_unix(cron:session): session closed for user root Dec 14 12:28:01 ispc CRON[1531799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:28:03 ispc CRON[1531799]: pam_unix(cron:session): session closed for user root Dec 14 12:29:01 ispc CRON[1531814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:29:02 ispc CRON[1531814]: pam_unix(cron:session): session closed for user root Dec 14 12:29:34 ispc sshd[1531827]: Invalid user martof from 43.135.130.196 Dec 14 12:29:54 ispc sshd[1531833]: Did not receive identification string from 45.140.17.97 Dec 14 12:30:01 ispc CRON[1531835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:30:01 ispc CRON[1531836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:30:01 ispc CRON[1531837]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:30:01 ispc CRON[1531838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:30:01 ispc CRON[1531839]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:30:01 ispc CRON[1531837]: pam_unix(cron:session): session closed for user www-data Dec 14 12:30:01 ispc CRON[1531836]: pam_unix(cron:session): session closed for user root Dec 14 12:30:01 ispc CRON[1531839]: pam_unix(cron:session): session closed for user getmail Dec 14 12:30:02 ispc CRON[1531835]: pam_unix(cron:session): session closed for user root Dec 14 12:30:24 ispc saslauthd[1532021]: pam_mysql - SELECT returned no result. Dec 14 12:30:24 ispc saslauthd[1532021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:30:24 ispc saslauthd[1532021]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:30:37 ispc CRON[1531838]: pam_unix(cron:session): session closed for user root Dec 14 12:30:43 ispc saslauthd[1532023]: pam_mysql - SELECT returned no result. Dec 14 12:30:43 ispc saslauthd[1532023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:30:43 ispc saslauthd[1532023]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:31:01 ispc CRON[1532025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:31:32 ispc saslauthd[1532047]: pam_mysql - SELECT returned no result. Dec 14 12:31:32 ispc saslauthd[1532047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:31:32 ispc saslauthd[1532047]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:31:35 ispc saslauthd[1532052]: pam_mysql - SELECT returned no result. Dec 14 12:31:35 ispc saslauthd[1532052]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:31:35 ispc saslauthd[1532052]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:32:01 ispc CRON[1532061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:32:02 ispc CRON[1532061]: pam_unix(cron:session): session closed for user root Dec 14 12:33:01 ispc CRON[1532106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:33:02 ispc CRON[1532106]: pam_unix(cron:session): session closed for user root Dec 14 12:33:20 ispc sshd[1532129]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:33:20 ispc sshd[1532129]: Invalid user martof from 123.253.61.95 Dec 14 12:34:01 ispc CRON[1532152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:34:02 ispc CRON[1532152]: pam_unix(cron:session): session closed for user root Dec 14 12:34:33 ispc sshd[1532177]: Invalid user blceu from 103.77.207.53 Dec 14 12:35:01 ispc CRON[1532191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:35:01 ispc CRON[1532192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:35:01 ispc CRON[1532193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:35:01 ispc CRON[1532194]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:35:01 ispc CRON[1532192]: pam_unix(cron:session): session closed for user root Dec 14 12:35:01 ispc CRON[1532194]: pam_unix(cron:session): session closed for user getmail Dec 14 12:35:01 ispc CRON[1532193]: pam_unix(cron:session): session closed for user root Dec 14 12:35:02 ispc CRON[1532191]: pam_unix(cron:session): session closed for user root Dec 14 12:35:29 ispc sshd[1532279]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:36:01 ispc CRON[1532297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:36:01 ispc CRON[1532297]: pam_unix(cron:session): session closed for user root Dec 14 12:36:38 ispc postfix/smtpd[1532327]: sql auxprop plugin using mysql engine Dec 14 12:36:40 ispc saslauthd[1532330]: pam_mysql - SELECT returned no result. Dec 14 12:36:40 ispc saslauthd[1532330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:36:40 ispc saslauthd[1532330]: do_auth : auth failure: [user=quser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:37:01 ispc CRON[1532342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:37:02 ispc CRON[1532342]: pam_unix(cron:session): session closed for user root Dec 14 12:37:41 ispc sshd[1532375]: Invalid user ziplines from 211.23.78.98 Dec 14 12:38:01 ispc CRON[1532404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:38:01 ispc CRON[1532404]: pam_unix(cron:session): session closed for user root Dec 14 12:38:51 ispc sshd[1532436]: reverse mapping checking getaddrinfo for 123-253-61-95.colodee.net [123.253.61.95] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:38:51 ispc sshd[1532436]: Invalid user ziplines from 123.253.61.95 Dec 14 12:39:01 ispc CRON[1532449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:39:01 ispc CRON[1532450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:39:02 ispc CRON[1532449]: pam_unix(cron:session): session closed for user root Dec 14 12:39:03 ispc CRON[1532450]: pam_unix(cron:session): session closed for user root Dec 14 12:40:01 ispc CRON[1532496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:40:01 ispc CRON[1532497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:40:01 ispc CRON[1532498]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:40:01 ispc CRON[1532500]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:40:01 ispc CRON[1532499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:40:01 ispc CRON[1532498]: pam_unix(cron:session): session closed for user www-data Dec 14 12:40:01 ispc CRON[1532497]: pam_unix(cron:session): session closed for user root Dec 14 12:40:01 ispc CRON[1532500]: pam_unix(cron:session): session closed for user getmail Dec 14 12:40:01 ispc CRON[1532499]: pam_unix(cron:session): session closed for user root Dec 14 12:40:01 ispc CRON[1532496]: pam_unix(cron:session): session closed for user root Dec 14 12:41:01 ispc CRON[1532598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:41:03 ispc CRON[1532598]: pam_unix(cron:session): session closed for user root Dec 14 12:42:01 ispc CRON[1532637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:42:02 ispc CRON[1532637]: pam_unix(cron:session): session closed for user root Dec 14 12:43:01 ispc CRON[1532683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:43:02 ispc CRON[1532683]: pam_unix(cron:session): session closed for user root Dec 14 12:44:01 ispc CRON[1532723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:44:02 ispc CRON[1532723]: pam_unix(cron:session): session closed for user root Dec 14 12:44:33 ispc sshd[1532747]: Invalid user martof from 148.216.54.17 Dec 14 12:45:01 ispc CRON[1532765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:45:01 ispc CRON[1532766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:45:01 ispc CRON[1532767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:45:01 ispc CRON[1532768]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:45:01 ispc CRON[1532766]: pam_unix(cron:session): session closed for user root Dec 14 12:45:01 ispc CRON[1532768]: pam_unix(cron:session): session closed for user getmail Dec 14 12:45:02 ispc CRON[1532767]: pam_unix(cron:session): session closed for user root Dec 14 12:45:03 ispc CRON[1532765]: pam_unix(cron:session): session closed for user root Dec 14 12:46:01 ispc CRON[1532871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:46:02 ispc CRON[1532871]: pam_unix(cron:session): session closed for user root Dec 14 12:47:01 ispc CRON[1532904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:47:01 ispc CRON[1532904]: pam_unix(cron:session): session closed for user root Dec 14 12:48:01 ispc CRON[1532954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:48:02 ispc CRON[1532954]: pam_unix(cron:session): session closed for user root Dec 14 12:48:10 ispc postfix/smtpd[1532970]: sql auxprop plugin using mysql engine Dec 14 12:48:10 ispc saslauthd[1532973]: pam_mysql - SELECT returned no result. Dec 14 12:48:10 ispc saslauthd[1532973]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:10 ispc saslauthd[1532973]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:14 ispc saslauthd[1532980]: pam_mysql - SELECT returned no result. Dec 14 12:48:14 ispc saslauthd[1532980]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:14 ispc saslauthd[1532980]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:34 ispc saslauthd[1532990]: pam_mysql - SELECT returned no result. Dec 14 12:48:34 ispc saslauthd[1532990]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:34 ispc saslauthd[1532990]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:36 ispc saslauthd[1532991]: pam_mysql - SELECT returned no result. Dec 14 12:48:36 ispc saslauthd[1532991]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:36 ispc saslauthd[1532991]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:38 ispc saslauthd[1532992]: pam_mysql - SELECT returned no result. Dec 14 12:48:38 ispc saslauthd[1532992]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:38 ispc saslauthd[1532992]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:42 ispc saslauthd[1532993]: pam_mysql - SELECT returned no result. Dec 14 12:48:42 ispc saslauthd[1532993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:42 ispc saslauthd[1532993]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:51 ispc saslauthd[1532998]: pam_mysql - SELECT returned no result. Dec 14 12:48:51 ispc saslauthd[1532998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:51 ispc saslauthd[1532998]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:53 ispc saslauthd[1532999]: pam_mysql - SELECT returned no result. Dec 14 12:48:53 ispc saslauthd[1532999]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:53 ispc saslauthd[1532999]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:55 ispc saslauthd[1533004]: pam_mysql - SELECT returned no result. Dec 14 12:48:55 ispc saslauthd[1533004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:55 ispc saslauthd[1533004]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:57 ispc saslauthd[1533005]: pam_mysql - SELECT returned no result. Dec 14 12:48:57 ispc saslauthd[1533005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:57 ispc saslauthd[1533005]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:57 ispc postfix/smtpd[1533006]: sql auxprop plugin using mysql engine Dec 14 12:48:58 ispc saslauthd[1533009]: pam_mysql - SELECT returned no result. Dec 14 12:48:58 ispc saslauthd[1533009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:58 ispc saslauthd[1533009]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:48:58 ispc saslauthd[1533010]: pam_mysql - SELECT returned no result. Dec 14 12:48:58 ispc saslauthd[1533010]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:48:58 ispc saslauthd[1533010]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:49:01 ispc CRON[1533011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:49:02 ispc CRON[1533011]: pam_unix(cron:session): session closed for user root Dec 14 12:49:04 ispc saslauthd[1533023]: pam_mysql - SELECT returned no result. Dec 14 12:49:04 ispc saslauthd[1533023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:49:04 ispc saslauthd[1533023]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:49:32 ispc saslauthd[1533036]: pam_mysql - SELECT returned no result. Dec 14 12:49:32 ispc saslauthd[1533036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:49:32 ispc saslauthd[1533036]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:50:01 ispc CRON[1533050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:50:01 ispc CRON[1533052]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 12:50:01 ispc CRON[1533053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:50:01 ispc CRON[1533054]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:50:01 ispc CRON[1533051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:50:01 ispc CRON[1533051]: pam_unix(cron:session): session closed for user root Dec 14 12:50:01 ispc CRON[1533052]: pam_unix(cron:session): session closed for user www-data Dec 14 12:50:01 ispc CRON[1533054]: pam_unix(cron:session): session closed for user getmail Dec 14 12:50:01 ispc CRON[1533053]: pam_unix(cron:session): session closed for user root Dec 14 12:50:02 ispc CRON[1533050]: pam_unix(cron:session): session closed for user root Dec 14 12:51:01 ispc CRON[1533167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:51:01 ispc CRON[1533167]: pam_unix(cron:session): session closed for user root Dec 14 12:51:20 ispc sshd[1533188]: Invalid user klape from 200.32.52.150 Dec 14 12:51:22 ispc sshd[1533190]: Invalid user ubuntu from 200.32.52.150 Dec 14 12:51:29 ispc postfix/smtpd[1533196]: sql auxprop plugin using mysql engine Dec 14 12:51:29 ispc CRON[1532025]: pam_unix(cron:session): session closed for user root Dec 14 12:51:37 ispc saslauthd[1533199]: pam_mysql - SELECT returned no result. Dec 14 12:51:37 ispc saslauthd[1533199]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:51:37 ispc saslauthd[1533199]: do_auth : auth failure: [user=rainer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:52:01 ispc CRON[1533202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:52:01 ispc CRON[1533203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:52:02 ispc CRON[1533203]: pam_unix(cron:session): session closed for user root Dec 14 12:52:07 ispc sshd[1533200]: Invalid user blceu from 36.134.126.74 Dec 14 12:52:31 ispc saslauthd[1533222]: pam_mysql - SELECT returned no result. Dec 14 12:52:31 ispc saslauthd[1533222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:52:31 ispc saslauthd[1533222]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:53:01 ispc CRON[1533234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:53:02 ispc CRON[1533234]: pam_unix(cron:session): session closed for user root Dec 14 12:54:01 ispc CRON[1533250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:54:03 ispc CRON[1533250]: pam_unix(cron:session): session closed for user root Dec 14 12:54:08 ispc saslauthd[1533262]: pam_mysql - SELECT returned no result. Dec 14 12:54:08 ispc saslauthd[1533262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:54:08 ispc saslauthd[1533262]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:54:26 ispc saslauthd[1533265]: pam_mysql - SELECT returned no result. Dec 14 12:54:26 ispc saslauthd[1533265]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:54:26 ispc saslauthd[1533265]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:54:29 ispc saslauthd[1533266]: pam_mysql - SELECT returned no result. Dec 14 12:54:29 ispc saslauthd[1533266]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:54:29 ispc saslauthd[1533266]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:54:42 ispc saslauthd[1533267]: pam_mysql - SELECT returned no result. Dec 14 12:54:42 ispc saslauthd[1533267]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:54:42 ispc saslauthd[1533267]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:54:52 ispc sshd[1533268]: Invalid user martof from 103.77.207.53 Dec 14 12:55:01 ispc CRON[1533277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:55:01 ispc CRON[1533278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:55:01 ispc CRON[1533279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:55:01 ispc CRON[1533280]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 12:55:01 ispc CRON[1533278]: pam_unix(cron:session): session closed for user root Dec 14 12:55:01 ispc CRON[1533280]: pam_unix(cron:session): session closed for user getmail Dec 14 12:55:03 ispc CRON[1533277]: pam_unix(cron:session): session closed for user root Dec 14 12:55:05 ispc saslauthd[1533381]: pam_mysql - SELECT returned no result. Dec 14 12:55:05 ispc saslauthd[1533381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:55:05 ispc saslauthd[1533381]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:55:19 ispc CRON[1533202]: pam_unix(cron:session): session closed for user root Dec 14 12:55:20 ispc saslauthd[1533386]: pam_mysql - SELECT returned no result. Dec 14 12:55:20 ispc saslauthd[1533386]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:55:20 ispc saslauthd[1533386]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:55:20 ispc postfix/smtpd[1533385]: sql auxprop plugin using mysql engine Dec 14 12:55:21 ispc saslauthd[1533388]: pam_mysql - SELECT returned no result. Dec 14 12:55:21 ispc saslauthd[1533388]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:55:21 ispc saslauthd[1533388]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:55:21 ispc saslauthd[1533389]: pam_mysql - SELECT returned no result. Dec 14 12:55:21 ispc saslauthd[1533389]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 12:55:21 ispc saslauthd[1533389]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 12:55:43 ispc CRON[1533279]: pam_unix(cron:session): session closed for user root Dec 14 12:56:01 ispc CRON[1533392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:56:53 ispc sshd[1533425]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 12:57:01 ispc CRON[1533431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:57:03 ispc CRON[1533431]: pam_unix(cron:session): session closed for user root Dec 14 12:57:43 ispc sshd[1533463]: Did not receive identification string from 64.225.75.170 Dec 14 12:57:58 ispc sshd[1533474]: Invalid user blceu from 118.218.219.250 Dec 14 12:58:01 ispc CRON[1533480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:58:02 ispc CRON[1533480]: pam_unix(cron:session): session closed for user root Dec 14 12:59:01 ispc CRON[1533516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 12:59:01 ispc CRON[1533516]: pam_unix(cron:session): session closed for user root Dec 14 12:59:35 ispc sshd[1533545]: Did not receive identification string from 142.93.130.136 Dec 14 13:00:01 ispc CRON[1533560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:00:01 ispc CRON[1533561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:00:01 ispc CRON[1533562]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:00:01 ispc CRON[1533563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:00:01 ispc CRON[1533564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:00:01 ispc CRON[1533565]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:00:02 ispc CRON[1533562]: pam_unix(cron:session): session closed for user www-data Dec 14 13:00:02 ispc CRON[1533561]: pam_unix(cron:session): session closed for user root Dec 14 13:00:02 ispc CRON[1533565]: pam_unix(cron:session): session closed for user getmail Dec 14 13:00:02 ispc CRON[1533564]: pam_unix(cron:session): session closed for user root Dec 14 13:00:02 ispc CRON[1533560]: pam_unix(cron:session): session closed for user root Dec 14 13:00:02 ispc CRON[1533563]: pam_unix(cron:session): session closed for user root Dec 14 13:00:47 ispc sshd[1533734]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:01:01 ispc CRON[1533745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:01:03 ispc CRON[1533745]: pam_unix(cron:session): session closed for user root Dec 14 13:01:08 ispc postfix/smtpd[1533756]: sql auxprop plugin using mysql engine Dec 14 13:01:51 ispc saslauthd[1533781]: pam_mysql - SELECT returned no result. Dec 14 13:01:51 ispc saslauthd[1533781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:01:51 ispc saslauthd[1533781]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:01:59 ispc saslauthd[1533786]: pam_mysql - SELECT returned no result. Dec 14 13:01:59 ispc saslauthd[1533786]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:01:59 ispc saslauthd[1533786]: do_auth : auth failure: [user=sales@pronajemplosin.com] [service=smtp] [realm=pronajemplosin.com] [mech=pam] [reason=PAM auth error] Dec 14 13:02:01 ispc CRON[1533787]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 13:02:01 ispc CRON[1533788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:02:02 ispc CRON[1533788]: pam_unix(cron:session): session closed for user root Dec 14 13:03:01 ispc CRON[1534672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:03:02 ispc CRON[1534672]: pam_unix(cron:session): session closed for user root Dec 14 13:03:12 ispc postfix/smtpd[1534793]: sql auxprop plugin using mysql engine Dec 14 13:03:16 ispc CRON[1533787]: pam_unix(cron:session): session closed for user logcheck Dec 14 13:03:25 ispc postfix/smtpd[1534875]: sql auxprop plugin using mysql engine Dec 14 13:04:01 ispc CRON[1534901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:04:01 ispc CRON[1534901]: pam_unix(cron:session): session closed for user root Dec 14 13:05:01 ispc CRON[1534942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:05:01 ispc CRON[1534943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:05:01 ispc CRON[1534944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:05:01 ispc CRON[1534945]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:05:01 ispc CRON[1534943]: pam_unix(cron:session): session closed for user root Dec 14 13:05:02 ispc CRON[1534945]: pam_unix(cron:session): session closed for user getmail Dec 14 13:05:02 ispc CRON[1534944]: pam_unix(cron:session): session closed for user root Dec 14 13:05:02 ispc CRON[1534942]: pam_unix(cron:session): session closed for user root Dec 14 13:05:22 ispc sshd[1535030]: Invalid user admin from 139.19.117.197 Dec 14 13:06:01 ispc CRON[1535056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:06:02 ispc CRON[1535056]: pam_unix(cron:session): session closed for user root Dec 14 13:06:30 ispc postfix/smtpd[1535084]: sql auxprop plugin using mysql engine Dec 14 13:06:31 ispc saslauthd[1535086]: pam_mysql - SELECT returned no result. Dec 14 13:06:31 ispc saslauthd[1535086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:06:31 ispc saslauthd[1535086]: do_auth : auth failure: [user=rapport] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:07:01 ispc CRON[1535105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:07:02 ispc CRON[1535105]: pam_unix(cron:session): session closed for user root Dec 14 13:07:21 ispc sshd[1535124]: Invalid user klape from 13.70.185.98 Dec 14 13:07:29 ispc sshd[1535126]: Invalid user ubuntu from 13.70.185.98 Dec 14 13:08:01 ispc CRON[1535156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:08:02 ispc CRON[1535156]: pam_unix(cron:session): session closed for user root Dec 14 13:08:42 ispc sshd[1535192]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:08:44 ispc sshd[1535194]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:08:44 ispc sshd[1535194]: Invalid user klape from 189.89.20.45 Dec 14 13:08:46 ispc sshd[1535201]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:08:46 ispc sshd[1535201]: Invalid user ubuntu from 189.89.20.45 Dec 14 13:09:01 ispc CRON[1535209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:09:01 ispc CRON[1535210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:09:01 ispc CRON[1535209]: pam_unix(cron:session): session closed for user root Dec 14 13:09:02 ispc CRON[1535210]: pam_unix(cron:session): session closed for user root Dec 14 13:10:01 ispc CRON[1535259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:10:01 ispc CRON[1535260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:10:01 ispc CRON[1535261]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:10:01 ispc CRON[1535262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:10:01 ispc CRON[1535263]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:10:01 ispc CRON[1535261]: pam_unix(cron:session): session closed for user www-data Dec 14 13:10:01 ispc CRON[1535260]: pam_unix(cron:session): session closed for user root Dec 14 13:10:01 ispc CRON[1535263]: pam_unix(cron:session): session closed for user getmail Dec 14 13:10:02 ispc CRON[1535262]: pam_unix(cron:session): session closed for user root Dec 14 13:10:03 ispc CRON[1535259]: pam_unix(cron:session): session closed for user root Dec 14 13:10:25 ispc sshd[1535346]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:11:01 ispc CRON[1535366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:11:02 ispc CRON[1535366]: pam_unix(cron:session): session closed for user root Dec 14 13:12:01 ispc CRON[1535410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:12:01 ispc CRON[1535410]: pam_unix(cron:session): session closed for user root Dec 14 13:13:01 ispc CRON[1535456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:13:02 ispc CRON[1535456]: pam_unix(cron:session): session closed for user root Dec 14 13:14:01 ispc CRON[1535498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:14:02 ispc CRON[1535498]: pam_unix(cron:session): session closed for user root Dec 14 13:14:35 ispc sshd[1535522]: Invalid user admin from 142.93.130.136 Dec 14 13:15:01 ispc CRON[1535543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:15:01 ispc CRON[1535544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:15:01 ispc CRON[1535545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:15:01 ispc CRON[1535546]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:15:01 ispc CRON[1535544]: pam_unix(cron:session): session closed for user root Dec 14 13:15:01 ispc CRON[1535546]: pam_unix(cron:session): session closed for user getmail Dec 14 13:15:02 ispc CRON[1535545]: pam_unix(cron:session): session closed for user root Dec 14 13:15:03 ispc CRON[1535543]: pam_unix(cron:session): session closed for user root Dec 14 13:15:11 ispc sshd[1535619]: Invalid user admin from 142.93.130.136 Dec 14 13:15:48 ispc sshd[1535637]: Invalid user admin from 142.93.130.136 Dec 14 13:16:01 ispc CRON[1535644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:16:02 ispc CRON[1535644]: pam_unix(cron:session): session closed for user root Dec 14 13:16:23 ispc postfix/smtpd[1535670]: sql auxprop plugin using mysql engine Dec 14 13:16:23 ispc CRON[1533392]: pam_unix(cron:session): session closed for user root Dec 14 13:16:27 ispc sshd[1535674]: Invalid user admin from 142.93.130.136 Dec 14 13:16:40 ispc saslauthd[1535682]: pam_mysql - SELECT returned no result. Dec 14 13:16:40 ispc saslauthd[1535682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:16:40 ispc saslauthd[1535682]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:17:01 ispc CRON[1535685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:17:02 ispc CRON[1535685]: pam_unix(cron:session): session closed for user root Dec 14 13:17:05 ispc sshd[1535697]: Invalid user admin from 142.93.130.136 Dec 14 13:17:33 ispc saslauthd[1535704]: pam_mysql - SELECT returned no result. Dec 14 13:17:33 ispc saslauthd[1535704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:17:33 ispc saslauthd[1535704]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:17:42 ispc sshd[1535710]: Invalid user admin from 142.93.130.136 Dec 14 13:18:01 ispc CRON[1535725]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 14 13:18:01 ispc CRON[1535726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:18:02 ispc CRON[1535726]: pam_unix(cron:session): session closed for user root Dec 14 13:18:03 ispc CRON[1535725]: pam_unix(cron:session): session closed for user web324 Dec 14 13:19:01 ispc CRON[1535750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:19:02 ispc CRON[1535750]: pam_unix(cron:session): session closed for user root Dec 14 13:20:01 ispc CRON[1535763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:20:01 ispc CRON[1535764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:20:01 ispc CRON[1535765]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:20:01 ispc CRON[1535766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:20:01 ispc CRON[1535767]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:20:02 ispc CRON[1535764]: pam_unix(cron:session): session closed for user root Dec 14 13:20:02 ispc CRON[1535765]: pam_unix(cron:session): session closed for user www-data Dec 14 13:20:02 ispc CRON[1535767]: pam_unix(cron:session): session closed for user getmail Dec 14 13:20:04 ispc CRON[1535763]: pam_unix(cron:session): session closed for user root Dec 14 13:20:33 ispc CRON[1535766]: pam_unix(cron:session): session closed for user root Dec 14 13:20:53 ispc saslauthd[1535877]: pam_mysql - SELECT returned no result. Dec 14 13:20:53 ispc saslauthd[1535877]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:20:53 ispc saslauthd[1535877]: do_auth : auth failure: [user=rcust] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:21:01 ispc CRON[1535880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:21:01 ispc CRON[1535879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:21:01 ispc CRON[1535879]: pam_unix(cron:session): session closed for user root Dec 14 13:21:06 ispc saslauthd[1535896]: pam_mysql - SELECT returned no result. Dec 14 13:21:06 ispc saslauthd[1535896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:21:06 ispc saslauthd[1535896]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:22:01 ispc CRON[1535921]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:22:02 ispc CRON[1535921]: pam_unix(cron:session): session closed for user root Dec 14 13:23:01 ispc CRON[1535965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:23:02 ispc CRON[1535965]: pam_unix(cron:session): session closed for user root Dec 14 13:23:33 ispc sshd[1535990]: Invalid user klape from 51.77.222.24 Dec 14 13:23:33 ispc sshd[1535992]: Invalid user ubuntu from 51.77.222.24 Dec 14 13:23:37 ispc sshd[1536000]: Invalid user klape from 103.164.20.29 Dec 14 13:23:38 ispc sshd[1536002]: Invalid user ubuntu from 103.164.20.29 Dec 14 13:24:00 ispc postfix/smtpd[1536013]: sql auxprop plugin using mysql engine Dec 14 13:24:01 ispc CRON[1536015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:24:01 ispc saslauthd[1536023]: pam_mysql - SELECT returned no result. Dec 14 13:24:01 ispc saslauthd[1536023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:24:01 ispc saslauthd[1536023]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:24:01 ispc CRON[1536015]: pam_unix(cron:session): session closed for user root Dec 14 13:24:53 ispc sshd[1536051]: Invalid user blceu from 51.79.36.60 Dec 14 13:25:01 ispc CRON[1536064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:25:01 ispc CRON[1536065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:25:01 ispc CRON[1536066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:25:01 ispc CRON[1536067]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:25:02 ispc CRON[1536065]: pam_unix(cron:session): session closed for user root Dec 14 13:25:02 ispc CRON[1536067]: pam_unix(cron:session): session closed for user getmail Dec 14 13:25:03 ispc CRON[1536066]: pam_unix(cron:session): session closed for user root Dec 14 13:25:04 ispc CRON[1536064]: pam_unix(cron:session): session closed for user root Dec 14 13:25:38 ispc saslauthd[1536157]: pam_mysql - SELECT returned no result. Dec 14 13:25:38 ispc saslauthd[1536157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:25:38 ispc saslauthd[1536157]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:26:01 ispc CRON[1536169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:26:01 ispc CRON[1536169]: pam_unix(cron:session): session closed for user root Dec 14 13:26:26 ispc sshd[1536189]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:26:26 ispc sshd[1536189]: Invalid user ziplines from 103.91.189.70 Dec 14 13:26:27 ispc sshd[1536191]: Invalid user blceu from 148.216.54.17 Dec 14 13:26:31 ispc saslauthd[1536197]: pam_mysql - SELECT returned no result. Dec 14 13:26:31 ispc saslauthd[1536197]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:26:31 ispc saslauthd[1536197]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:27:01 ispc CRON[1536210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:27:02 ispc CRON[1536210]: pam_unix(cron:session): session closed for user root Dec 14 13:27:54 ispc saslauthd[1536255]: pam_mysql - SELECT returned no result. Dec 14 13:27:54 ispc saslauthd[1536255]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:27:54 ispc saslauthd[1536255]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:27:55 ispc saslauthd[1536256]: pam_mysql - SELECT returned no result. Dec 14 13:27:55 ispc saslauthd[1536256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:27:55 ispc saslauthd[1536256]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:28:01 ispc CRON[1536261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:28:02 ispc CRON[1536261]: pam_unix(cron:session): session closed for user root Dec 14 13:28:48 ispc saslauthd[1536291]: pam_mysql - SELECT returned no result. Dec 14 13:28:48 ispc saslauthd[1536291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:28:48 ispc saslauthd[1536291]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:29:01 ispc CRON[1536301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:29:01 ispc CRON[1536301]: pam_unix(cron:session): session closed for user root Dec 14 13:29:36 ispc saslauthd[1536325]: pam_mysql - SELECT returned no result. Dec 14 13:29:36 ispc saslauthd[1536325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:29:36 ispc saslauthd[1536325]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:30:01 ispc CRON[1536339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:30:01 ispc CRON[1536340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:30:01 ispc CRON[1536341]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:30:01 ispc CRON[1536342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:30:01 ispc CRON[1536343]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:30:01 ispc CRON[1536341]: pam_unix(cron:session): session closed for user www-data Dec 14 13:30:01 ispc CRON[1536340]: pam_unix(cron:session): session closed for user root Dec 14 13:30:01 ispc CRON[1536343]: pam_unix(cron:session): session closed for user getmail Dec 14 13:30:02 ispc CRON[1536342]: pam_unix(cron:session): session closed for user root Dec 14 13:30:02 ispc CRON[1536339]: pam_unix(cron:session): session closed for user root Dec 14 13:31:01 ispc CRON[1536443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:31:01 ispc CRON[1536443]: pam_unix(cron:session): session closed for user root Dec 14 13:32:01 ispc CRON[1536479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:32:02 ispc CRON[1536479]: pam_unix(cron:session): session closed for user root Dec 14 13:32:39 ispc sshd[1536517]: Invalid user ziplines from 51.159.91.86 Dec 14 13:33:01 ispc CRON[1536529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:33:02 ispc CRON[1536529]: pam_unix(cron:session): session closed for user root Dec 14 13:34:01 ispc CRON[1536572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:34:02 ispc CRON[1536572]: pam_unix(cron:session): session closed for user root Dec 14 13:35:01 ispc CRON[1536615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:35:01 ispc CRON[1536617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:35:01 ispc CRON[1536618]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:35:01 ispc CRON[1536616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:35:01 ispc postfix/smtpd[1536613]: sql auxprop plugin using mysql engine Dec 14 13:35:01 ispc CRON[1536616]: pam_unix(cron:session): session closed for user root Dec 14 13:35:01 ispc CRON[1536618]: pam_unix(cron:session): session closed for user getmail Dec 14 13:35:02 ispc CRON[1536617]: pam_unix(cron:session): session closed for user root Dec 14 13:35:02 ispc CRON[1536615]: pam_unix(cron:session): session closed for user root Dec 14 13:35:53 ispc postfix/smtpd[1536713]: sql auxprop plugin using mysql engine Dec 14 13:35:54 ispc saslauthd[1536715]: pam_mysql - SELECT returned no result. Dec 14 13:35:54 ispc saslauthd[1536715]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:35:54 ispc saslauthd[1536715]: do_auth : auth failure: [user=rdc123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:36:01 ispc CRON[1536720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:36:02 ispc CRON[1536720]: pam_unix(cron:session): session closed for user root Dec 14 13:36:12 ispc sshd[1536731]: Invalid user martof from 103.100.209.172 Dec 14 13:37:01 ispc CRON[1536754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:37:01 ispc CRON[1536754]: pam_unix(cron:session): session closed for user root Dec 14 13:37:37 ispc sshd[1536781]: Invalid user blceu from 51.159.91.86 Dec 14 13:38:01 ispc CRON[1536804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:38:01 ispc postfix/smtpd[1536806]: sql auxprop plugin using mysql engine Dec 14 13:38:02 ispc CRON[1536804]: pam_unix(cron:session): session closed for user root Dec 14 13:39:01 ispc CRON[1536843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:39:01 ispc CRON[1536844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:39:01 ispc CRON[1536843]: pam_unix(cron:session): session closed for user root Dec 14 13:39:01 ispc CRON[1536844]: pam_unix(cron:session): session closed for user root Dec 14 13:39:16 ispc sshd[1536873]: Invalid user blceu from 43.135.130.196 Dec 14 13:40:01 ispc CRON[1536893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:40:01 ispc CRON[1536894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:40:01 ispc CRON[1536895]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:40:01 ispc CRON[1536896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:40:01 ispc CRON[1536897]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:40:01 ispc CRON[1536894]: pam_unix(cron:session): session closed for user root Dec 14 13:40:01 ispc CRON[1536895]: pam_unix(cron:session): session closed for user www-data Dec 14 13:40:02 ispc CRON[1536897]: pam_unix(cron:session): session closed for user getmail Dec 14 13:40:02 ispc CRON[1536896]: pam_unix(cron:session): session closed for user root Dec 14 13:40:03 ispc CRON[1536893]: pam_unix(cron:session): session closed for user root Dec 14 13:40:48 ispc sshd[1536992]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:41:01 ispc CRON[1537003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:41:02 ispc CRON[1537003]: pam_unix(cron:session): session closed for user root Dec 14 13:41:27 ispc postfix/smtpd[1537026]: sql auxprop plugin using mysql engine Dec 14 13:41:27 ispc CRON[1535880]: pam_unix(cron:session): session closed for user root Dec 14 13:42:01 ispc CRON[1537030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:42:02 ispc CRON[1537030]: pam_unix(cron:session): session closed for user root Dec 14 13:42:52 ispc saslauthd[1537051]: pam_mysql - SELECT returned no result. Dec 14 13:42:52 ispc saslauthd[1537051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:42:52 ispc saslauthd[1537051]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:42:58 ispc saslauthd[1537052]: pam_mysql - SELECT returned no result. Dec 14 13:42:58 ispc saslauthd[1537052]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:42:58 ispc saslauthd[1537052]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:01 ispc CRON[1537053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:43:02 ispc CRON[1537053]: pam_unix(cron:session): session closed for user root Dec 14 13:43:21 ispc saslauthd[1537065]: pam_mysql - SELECT returned no result. Dec 14 13:43:21 ispc saslauthd[1537065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:21 ispc saslauthd[1537065]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:21 ispc saslauthd[1537067]: pam_mysql - SELECT returned no result. Dec 14 13:43:21 ispc saslauthd[1537067]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:21 ispc saslauthd[1537067]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:25 ispc saslauthd[1537068]: pam_mysql - SELECT returned no result. Dec 14 13:43:25 ispc saslauthd[1537068]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:25 ispc saslauthd[1537068]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:28 ispc saslauthd[1537069]: pam_mysql - SELECT returned no result. Dec 14 13:43:28 ispc saslauthd[1537069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:28 ispc saslauthd[1537069]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:30 ispc postfix/smtpd[1537072]: sql auxprop plugin using mysql engine Dec 14 13:43:41 ispc saslauthd[1537077]: pam_mysql - SELECT returned no result. Dec 14 13:43:41 ispc saslauthd[1537077]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:41 ispc saslauthd[1537077]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:42 ispc saslauthd[1537078]: pam_mysql - SELECT returned no result. Dec 14 13:43:42 ispc saslauthd[1537078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:42 ispc saslauthd[1537078]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:45 ispc saslauthd[1537079]: pam_mysql - SELECT returned no result. Dec 14 13:43:45 ispc saslauthd[1537079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:45 ispc saslauthd[1537079]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:47 ispc saslauthd[1537081]: pam_mysql - SELECT returned no result. Dec 14 13:43:47 ispc saslauthd[1537081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:47 ispc saslauthd[1537081]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:50 ispc postfix/smtpd[1537082]: sql auxprop plugin using mysql engine Dec 14 13:43:50 ispc saslauthd[1537085]: pam_mysql - SELECT returned no result. Dec 14 13:43:50 ispc saslauthd[1537085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:50 ispc saslauthd[1537085]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:52 ispc saslauthd[1537086]: pam_mysql - SELECT returned no result. Dec 14 13:43:52 ispc saslauthd[1537086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:52 ispc saslauthd[1537086]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:43:54 ispc saslauthd[1537087]: pam_mysql - SELECT returned no result. Dec 14 13:43:54 ispc saslauthd[1537087]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:43:54 ispc saslauthd[1537087]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:44:01 ispc CRON[1537088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:44:02 ispc CRON[1537088]: pam_unix(cron:session): session closed for user root Dec 14 13:44:24 ispc saslauthd[1537099]: pam_mysql - SELECT returned no result. Dec 14 13:44:24 ispc saslauthd[1537099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:44:24 ispc saslauthd[1537099]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:45:01 ispc CRON[1537103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:45:01 ispc CRON[1537104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:45:01 ispc CRON[1537105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:45:01 ispc CRON[1537106]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:45:01 ispc CRON[1537104]: pam_unix(cron:session): session closed for user root Dec 14 13:45:01 ispc CRON[1537106]: pam_unix(cron:session): session closed for user getmail Dec 14 13:45:03 ispc CRON[1537103]: pam_unix(cron:session): session closed for user root Dec 14 13:45:50 ispc CRON[1537105]: pam_unix(cron:session): session closed for user root Dec 14 13:46:01 ispc CRON[1537289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:47:01 ispc CRON[1537326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:47:02 ispc CRON[1537326]: pam_unix(cron:session): session closed for user root Dec 14 13:48:01 ispc CRON[1537376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:48:02 ispc CRON[1537376]: pam_unix(cron:session): session closed for user root Dec 14 13:48:26 ispc sshd[1537399]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:49:01 ispc CRON[1537417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:49:02 ispc CRON[1537417]: pam_unix(cron:session): session closed for user root Dec 14 13:50:00 ispc postfix/smtpd[1537456]: sql auxprop plugin using mysql engine Dec 14 13:50:00 ispc postfix/smtpd[1537458]: sql auxprop plugin using mysql engine Dec 14 13:50:00 ispc saslauthd[1537460]: pam_mysql - SELECT returned no result. Dec 14 13:50:00 ispc saslauthd[1537460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:50:00 ispc saslauthd[1537460]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:50:01 ispc CRON[1537461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:50:01 ispc CRON[1537462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:50:01 ispc CRON[1537463]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 13:50:01 ispc CRON[1537464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:50:01 ispc CRON[1537465]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:50:01 ispc CRON[1537463]: pam_unix(cron:session): session closed for user www-data Dec 14 13:50:01 ispc CRON[1537462]: pam_unix(cron:session): session closed for user root Dec 14 13:50:01 ispc CRON[1537465]: pam_unix(cron:session): session closed for user getmail Dec 14 13:50:01 ispc CRON[1537464]: pam_unix(cron:session): session closed for user root Dec 14 13:50:01 ispc CRON[1537461]: pam_unix(cron:session): session closed for user root Dec 14 13:50:27 ispc saslauthd[1537554]: pam_mysql - SELECT returned no result. Dec 14 13:50:27 ispc saslauthd[1537554]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:50:27 ispc saslauthd[1537554]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:50:35 ispc sshd[1537556]: Invalid user from 62.60.131.157 Dec 14 13:51:01 ispc CRON[1537572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:51:02 ispc saslauthd[1537579]: pam_mysql - SELECT returned no result. Dec 14 13:51:02 ispc saslauthd[1537579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:51:02 ispc saslauthd[1537579]: do_auth : auth failure: [user=read] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:51:02 ispc CRON[1537572]: pam_unix(cron:session): session closed for user root Dec 14 13:52:01 ispc CRON[1537612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:52:02 ispc saslauthd[1537623]: pam_mysql - SELECT returned no result. Dec 14 13:52:02 ispc saslauthd[1537623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:02 ispc CRON[1537612]: pam_unix(cron:session): session closed for user root Dec 14 13:52:02 ispc saslauthd[1537623]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:52:11 ispc saslauthd[1537628]: pam_mysql - SELECT returned no result. Dec 14 13:52:11 ispc saslauthd[1537628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:11 ispc saslauthd[1537628]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:52:11 ispc saslauthd[1537629]: pam_mysql - SELECT returned no result. Dec 14 13:52:11 ispc saslauthd[1537629]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:11 ispc saslauthd[1537629]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:52:39 ispc sshd[1537645]: Invalid user klape from 36.50.177.171 Dec 14 13:52:41 ispc sshd[1537655]: Invalid user ubuntu from 36.50.177.171 Dec 14 13:52:45 ispc saslauthd[1537661]: pam_mysql - SELECT returned no result. Dec 14 13:52:45 ispc saslauthd[1537661]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:45 ispc saslauthd[1537661]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:52:51 ispc postfix/smtpd[1537662]: sql auxprop plugin using mysql engine Dec 14 13:52:51 ispc saslauthd[1537664]: pam_mysql - SELECT returned no result. Dec 14 13:52:51 ispc saslauthd[1537664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:51 ispc saslauthd[1537664]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:52:51 ispc saslauthd[1537665]: pam_mysql - SELECT returned no result. Dec 14 13:52:51 ispc saslauthd[1537665]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:52:51 ispc saslauthd[1537665]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:53:01 ispc CRON[1537671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:53:02 ispc CRON[1537671]: pam_unix(cron:session): session closed for user root Dec 14 13:54:01 ispc CRON[1537711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:54:02 ispc CRON[1537711]: pam_unix(cron:session): session closed for user root Dec 14 13:55:01 ispc CRON[1537750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:55:01 ispc CRON[1537751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:55:01 ispc CRON[1537752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:55:01 ispc CRON[1537753]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 13:55:01 ispc CRON[1537751]: pam_unix(cron:session): session closed for user root Dec 14 13:55:01 ispc CRON[1537753]: pam_unix(cron:session): session closed for user getmail Dec 14 13:55:02 ispc CRON[1537752]: pam_unix(cron:session): session closed for user root Dec 14 13:55:02 ispc CRON[1537750]: pam_unix(cron:session): session closed for user root Dec 14 13:55:24 ispc sshd[1537836]: Invalid user blceu from 43.135.148.156 Dec 14 13:55:32 ispc sshd[1537842]: Invalid user ziplines from 103.100.209.172 Dec 14 13:56:01 ispc CRON[1537859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:56:02 ispc CRON[1537859]: pam_unix(cron:session): session closed for user root Dec 14 13:56:27 ispc sshd[1537879]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 13:57:01 ispc CRON[1537902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:57:01 ispc CRON[1537902]: pam_unix(cron:session): session closed for user root Dec 14 13:58:01 ispc CRON[1537949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:58:02 ispc CRON[1537949]: pam_unix(cron:session): session closed for user root Dec 14 13:58:26 ispc sshd[1537968]: Invalid user ziplines from 148.216.54.17 Dec 14 13:58:53 ispc postfix/smtpd[1537986]: sql auxprop plugin using mysql engine Dec 14 13:58:54 ispc saslauthd[1537989]: pam_mysql - SELECT returned no result. Dec 14 13:58:54 ispc saslauthd[1537989]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 13:58:54 ispc saslauthd[1537989]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 13:58:56 ispc sshd[1537990]: Invalid user from 159.203.108.39 Dec 14 13:59:01 ispc CRON[1537996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 13:59:01 ispc CRON[1537996]: pam_unix(cron:session): session closed for user root Dec 14 14:00:01 ispc CRON[1538029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:00:01 ispc CRON[1538030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:00:01 ispc CRON[1538031]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:00:01 ispc CRON[1538032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:00:01 ispc CRON[1538033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:00:01 ispc CRON[1538034]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:00:02 ispc CRON[1538031]: pam_unix(cron:session): session closed for user www-data Dec 14 14:00:02 ispc CRON[1538030]: pam_unix(cron:session): session closed for user root Dec 14 14:00:02 ispc CRON[1538034]: pam_unix(cron:session): session closed for user getmail Dec 14 14:00:02 ispc CRON[1538033]: pam_unix(cron:session): session closed for user root Dec 14 14:00:03 ispc CRON[1538029]: pam_unix(cron:session): session closed for user root Dec 14 14:00:03 ispc CRON[1538032]: pam_unix(cron:session): session closed for user root Dec 14 14:00:46 ispc sshd[1538210]: Invalid user from 8.138.206.71 Dec 14 14:01:01 ispc CRON[1538218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:01:01 ispc CRON[1538218]: pam_unix(cron:session): session closed for user root Dec 14 14:01:28 ispc postfix/smtpd[1538241]: sql auxprop plugin using mysql engine Dec 14 14:01:34 ispc postfix/smtpd[1538256]: sql auxprop plugin using mysql engine Dec 14 14:01:41 ispc sshd[1538255]: Invalid user diamantdi from 14.103.206.196 Dec 14 14:02:01 ispc CRON[1538281]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 14:02:01 ispc CRON[1538282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:02:02 ispc CRON[1538282]: pam_unix(cron:session): session closed for user root Dec 14 14:03:01 ispc CRON[1539174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:03:02 ispc CRON[1539174]: pam_unix(cron:session): session closed for user root Dec 14 14:03:11 ispc CRON[1538281]: pam_unix(cron:session): session closed for user logcheck Dec 14 14:03:18 ispc postfix/smtpd[1539373]: sql auxprop plugin using mysql engine Dec 14 14:04:01 ispc CRON[1539401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:04:02 ispc CRON[1539401]: pam_unix(cron:session): session closed for user root Dec 14 14:05:01 ispc CRON[1539462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:05:01 ispc CRON[1539463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:05:01 ispc CRON[1539464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:05:01 ispc CRON[1539465]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:05:01 ispc CRON[1539463]: pam_unix(cron:session): session closed for user root Dec 14 14:05:01 ispc CRON[1539465]: pam_unix(cron:session): session closed for user getmail Dec 14 14:05:01 ispc CRON[1539464]: pam_unix(cron:session): session closed for user root Dec 14 14:05:01 ispc CRON[1539462]: pam_unix(cron:session): session closed for user root Dec 14 14:05:05 ispc sshd[1539539]: Invalid user ziplines from 43.135.130.196 Dec 14 14:05:58 ispc postfix/smtpd[1539572]: sql auxprop plugin using mysql engine Dec 14 14:05:59 ispc saslauthd[1539575]: pam_mysql - SELECT returned no result. Dec 14 14:05:59 ispc saslauthd[1539575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:05:59 ispc saslauthd[1539575]: do_auth : auth failure: [user=readonly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:06:01 ispc CRON[1539577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:06:02 ispc CRON[1539577]: pam_unix(cron:session): session closed for user root Dec 14 14:06:28 ispc CRON[1537289]: pam_unix(cron:session): session closed for user root Dec 14 14:06:37 ispc sshd[1539601]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 14:06:37 ispc sshd[1539601]: Invalid user blceu from 103.28.37.227 Dec 14 14:06:43 ispc postfix/smtpd[1539604]: sql auxprop plugin using mysql engine Dec 14 14:07:01 ispc CRON[1539609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:07:02 ispc CRON[1539609]: pam_unix(cron:session): session closed for user root Dec 14 14:08:01 ispc CRON[1539639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:08:03 ispc CRON[1539639]: pam_unix(cron:session): session closed for user root Dec 14 14:08:59 ispc sshd[1539658]: Invalid user blceu from 103.110.84.105 Dec 14 14:09:01 ispc CRON[1539660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:09:01 ispc CRON[1539661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:09:01 ispc CRON[1539660]: pam_unix(cron:session): session closed for user root Dec 14 14:09:02 ispc CRON[1539661]: pam_unix(cron:session): session closed for user root Dec 14 14:10:01 ispc CRON[1539694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:10:01 ispc CRON[1539695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:10:01 ispc CRON[1539696]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:10:01 ispc CRON[1539697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:10:01 ispc CRON[1539698]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:10:01 ispc CRON[1539696]: pam_unix(cron:session): session closed for user www-data Dec 14 14:10:01 ispc CRON[1539695]: pam_unix(cron:session): session closed for user root Dec 14 14:10:01 ispc CRON[1539698]: pam_unix(cron:session): session closed for user getmail Dec 14 14:10:02 ispc CRON[1539694]: pam_unix(cron:session): session closed for user root Dec 14 14:10:38 ispc CRON[1539697]: pam_unix(cron:session): session closed for user root Dec 14 14:11:01 ispc CRON[1539818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:12:01 ispc CRON[1539857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:12:01 ispc CRON[1539857]: pam_unix(cron:session): session closed for user root Dec 14 14:13:01 ispc CRON[1539903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:13:02 ispc CRON[1539903]: pam_unix(cron:session): session closed for user root Dec 14 14:13:43 ispc sshd[1539937]: Did not receive identification string from 134.209.88.243 Dec 14 14:14:01 ispc CRON[1539943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:14:02 ispc CRON[1539943]: pam_unix(cron:session): session closed for user root Dec 14 14:15:01 ispc CRON[1539985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:15:01 ispc CRON[1539986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:15:01 ispc CRON[1539987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:15:01 ispc CRON[1539988]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:15:01 ispc CRON[1539986]: pam_unix(cron:session): session closed for user root Dec 14 14:15:01 ispc CRON[1539988]: pam_unix(cron:session): session closed for user getmail Dec 14 14:15:01 ispc CRON[1539985]: pam_unix(cron:session): session closed for user root Dec 14 14:15:02 ispc CRON[1539987]: pam_unix(cron:session): session closed for user root Dec 14 14:15:25 ispc sshd[1540080]: Invalid user klape from 67.205.163.146 Dec 14 14:15:26 ispc sshd[1540083]: Invalid user ubuntu from 67.205.163.146 Dec 14 14:15:41 ispc postfix/smtpd[1540089]: sql auxprop plugin using mysql engine Dec 14 14:15:42 ispc saslauthd[1540092]: pam_mysql - SELECT returned no result. Dec 14 14:15:42 ispc saslauthd[1540092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:15:42 ispc saslauthd[1540092]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:16:01 ispc CRON[1540102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:16:02 ispc CRON[1540102]: pam_unix(cron:session): session closed for user root Dec 14 14:17:01 ispc CRON[1540143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:17:02 ispc CRON[1540143]: pam_unix(cron:session): session closed for user root Dec 14 14:18:01 ispc CRON[1540193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:18:02 ispc CRON[1540193]: pam_unix(cron:session): session closed for user root Dec 14 14:18:33 ispc postfix/smtpd[1540217]: sql auxprop plugin using mysql engine Dec 14 14:18:34 ispc saslauthd[1540219]: pam_mysql - SELECT returned no result. Dec 14 14:18:34 ispc saslauthd[1540219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:18:34 ispc saslauthd[1540219]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:19:01 ispc CRON[1540235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:19:01 ispc CRON[1540235]: pam_unix(cron:session): session closed for user root Dec 14 14:19:22 ispc sshd[1540258]: Invalid user klape from 77.241.18.2 Dec 14 14:19:23 ispc sshd[1540260]: Invalid user ubuntu from 77.241.18.2 Dec 14 14:20:01 ispc CRON[1540293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:20:01 ispc CRON[1540294]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:20:01 ispc CRON[1540290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:20:02 ispc CRON[1540291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:20:02 ispc CRON[1540292]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:20:02 ispc CRON[1540292]: pam_unix(cron:session): session closed for user www-data Dec 14 14:20:02 ispc CRON[1540291]: pam_unix(cron:session): session closed for user root Dec 14 14:20:02 ispc CRON[1540294]: pam_unix(cron:session): session closed for user getmail Dec 14 14:20:02 ispc CRON[1540293]: pam_unix(cron:session): session closed for user root Dec 14 14:20:03 ispc CRON[1540290]: pam_unix(cron:session): session closed for user root Dec 14 14:20:07 ispc sshd[1540288]: Invalid user matlbula from 14.103.206.196 Dec 14 14:20:40 ispc sshd[1540392]: Did not receive identification string from 45.140.17.97 Dec 14 14:20:40 ispc postfix/smtpd[1540393]: sql auxprop plugin using mysql engine Dec 14 14:21:02 ispc CRON[1540406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:21:02 ispc CRON[1540407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:21:02 ispc CRON[1540406]: pam_unix(cron:session): session closed for user root Dec 14 14:21:03 ispc CRON[1540407]: pam_unix(cron:session): session closed for user root Dec 14 14:21:06 ispc sshd[1540422]: Invalid user martof from 175.125.92.77 Dec 14 14:21:08 ispc saslauthd[1540428]: pam_mysql - SELECT returned no result. Dec 14 14:21:08 ispc saslauthd[1540428]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:21:08 ispc saslauthd[1540428]: do_auth : auth failure: [user=recover] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:22:01 ispc CRON[1540452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:22:01 ispc CRON[1540452]: pam_unix(cron:session): session closed for user root Dec 14 14:22:06 ispc saslauthd[1540463]: pam_mysql - SELECT returned no result. Dec 14 14:22:06 ispc saslauthd[1540463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:22:06 ispc saslauthd[1540463]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:23:01 ispc CRON[1540510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:23:02 ispc CRON[1540510]: pam_unix(cron:session): session closed for user root Dec 14 14:23:54 ispc postfix/smtpd[1540545]: sql auxprop plugin using mysql engine Dec 14 14:23:55 ispc saslauthd[1540547]: pam_mysql - SELECT returned no result. Dec 14 14:23:55 ispc saslauthd[1540547]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:23:55 ispc saslauthd[1540547]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:24:01 ispc CRON[1540554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:24:02 ispc CRON[1540554]: pam_unix(cron:session): session closed for user root Dec 14 14:25:01 ispc CRON[1540597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:25:01 ispc CRON[1540598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:25:01 ispc CRON[1540599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:25:01 ispc CRON[1540600]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:25:01 ispc CRON[1540598]: pam_unix(cron:session): session closed for user root Dec 14 14:25:01 ispc CRON[1540600]: pam_unix(cron:session): session closed for user getmail Dec 14 14:25:02 ispc CRON[1540597]: pam_unix(cron:session): session closed for user root Dec 14 14:25:02 ispc CRON[1540599]: pam_unix(cron:session): session closed for user root Dec 14 14:25:20 ispc sshd[1540681]: Invalid user matlbula from 51.159.18.215 Dec 14 14:25:24 ispc saslauthd[1540687]: pam_mysql - SELECT returned no result. Dec 14 14:25:24 ispc saslauthd[1540687]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:25:24 ispc saslauthd[1540687]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:25:34 ispc sshd[1540693]: Invalid user blceu from 221.156.137.104 Dec 14 14:25:57 ispc saslauthd[1540706]: pam_mysql - SELECT returned no result. Dec 14 14:25:57 ispc saslauthd[1540706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:25:57 ispc saslauthd[1540706]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:26:01 ispc CRON[1540711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:26:01 ispc CRON[1540711]: pam_unix(cron:session): session closed for user root Dec 14 14:26:08 ispc saslauthd[1540722]: pam_mysql - SELECT returned no result. Dec 14 14:26:08 ispc saslauthd[1540722]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:26:08 ispc saslauthd[1540722]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:26:51 ispc sshd[1540741]: Invalid user admin from 134.209.88.243 Dec 14 14:27:01 ispc CRON[1540751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:27:02 ispc CRON[1540751]: pam_unix(cron:session): session closed for user root Dec 14 14:27:28 ispc sshd[1540770]: Invalid user admin from 134.209.88.243 Dec 14 14:27:47 ispc saslauthd[1540788]: pam_mysql - SELECT returned no result. Dec 14 14:27:47 ispc saslauthd[1540788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:27:47 ispc saslauthd[1540788]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:27:52 ispc sshd[1540794]: Invalid user lanovacentra from 51.159.18.215 Dec 14 14:28:01 ispc CRON[1540800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:28:01 ispc CRON[1540800]: pam_unix(cron:session): session closed for user root Dec 14 14:28:04 ispc sshd[1540815]: Invalid user admin from 134.209.88.243 Dec 14 14:28:41 ispc sshd[1540830]: Invalid user admin from 134.209.88.243 Dec 14 14:29:01 ispc CRON[1540841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:29:02 ispc CRON[1540841]: pam_unix(cron:session): session closed for user root Dec 14 14:29:18 ispc sshd[1540861]: Invalid user admin from 134.209.88.243 Dec 14 14:29:52 ispc sshd[1540878]: Invalid user admin from 134.209.88.243 Dec 14 14:30:01 ispc CRON[1540891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:30:01 ispc CRON[1540892]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:30:01 ispc CRON[1540893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:30:01 ispc CRON[1540890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:30:01 ispc CRON[1540894]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:30:01 ispc CRON[1540892]: pam_unix(cron:session): session closed for user www-data Dec 14 14:30:01 ispc CRON[1540891]: pam_unix(cron:session): session closed for user root Dec 14 14:30:01 ispc CRON[1540894]: pam_unix(cron:session): session closed for user getmail Dec 14 14:30:02 ispc CRON[1540893]: pam_unix(cron:session): session closed for user root Dec 14 14:30:02 ispc CRON[1540890]: pam_unix(cron:session): session closed for user root Dec 14 14:31:01 ispc CRON[1540994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:31:03 ispc CRON[1540994]: pam_unix(cron:session): session closed for user root Dec 14 14:31:08 ispc postfix/smtpd[1541009]: sql auxprop plugin using mysql engine Dec 14 14:31:09 ispc saslauthd[1541012]: pam_mysql - SELECT returned no result. Dec 14 14:31:09 ispc saslauthd[1541012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:31:09 ispc saslauthd[1541012]: do_auth : auth failure: [user=sybase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:31:15 ispc CRON[1539818]: pam_unix(cron:session): session closed for user root Dec 14 14:31:51 ispc saslauthd[1541020]: pam_mysql - SELECT returned no result. Dec 14 14:31:51 ispc saslauthd[1541020]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:31:51 ispc saslauthd[1541020]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:32:01 ispc CRON[1541021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:32:02 ispc CRON[1541021]: pam_unix(cron:session): session closed for user root Dec 14 14:32:03 ispc sshd[1541033]: Did not receive identification string from 80.94.92.166 Dec 14 14:32:07 ispc sshd[1541034]: Invalid user ziplines from 118.218.219.250 Dec 14 14:33:01 ispc CRON[1541048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:33:02 ispc CRON[1541048]: pam_unix(cron:session): session closed for user root Dec 14 14:34:01 ispc CRON[1541063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:34:02 ispc CRON[1541063]: pam_unix(cron:session): session closed for user root Dec 14 14:35:01 ispc CRON[1541076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:35:01 ispc CRON[1541077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:35:01 ispc CRON[1541078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:35:01 ispc CRON[1541079]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:35:01 ispc CRON[1541077]: pam_unix(cron:session): session closed for user root Dec 14 14:35:01 ispc CRON[1541079]: pam_unix(cron:session): session closed for user getmail Dec 14 14:35:04 ispc CRON[1541076]: pam_unix(cron:session): session closed for user root Dec 14 14:35:37 ispc CRON[1541078]: pam_unix(cron:session): session closed for user root Dec 14 14:36:01 ispc CRON[1541190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:36:17 ispc saslauthd[1541207]: pam_mysql - SELECT returned no result. Dec 14 14:36:17 ispc saslauthd[1541207]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:36:17 ispc saslauthd[1541207]: do_auth : auth failure: [user=redline] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:37:01 ispc CRON[1541225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:37:01 ispc CRON[1541225]: pam_unix(cron:session): session closed for user root Dec 14 14:37:05 ispc postfix/smtpd[1541240]: sql auxprop plugin using mysql engine Dec 14 14:37:31 ispc sshd[1541251]: Invalid user martof from 118.218.219.250 Dec 14 14:37:44 ispc sshd[1541271]: Invalid user ubuntu from 80.94.92.166 Dec 14 14:37:58 ispc postfix/smtpd[1541284]: sql auxprop plugin using mysql engine Dec 14 14:37:59 ispc saslauthd[1541286]: pam_mysql - SELECT returned no result. Dec 14 14:37:59 ispc saslauthd[1541286]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:37:59 ispc saslauthd[1541286]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:00 ispc saslauthd[1541287]: pam_mysql - SELECT returned no result. Dec 14 14:38:00 ispc saslauthd[1541287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:00 ispc saslauthd[1541287]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:01 ispc CRON[1541288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:38:02 ispc CRON[1541288]: pam_unix(cron:session): session closed for user root Dec 14 14:38:22 ispc saslauthd[1541310]: pam_mysql - SELECT returned no result. Dec 14 14:38:22 ispc saslauthd[1541310]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:22 ispc saslauthd[1541310]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:27 ispc saslauthd[1541315]: pam_mysql - SELECT returned no result. Dec 14 14:38:27 ispc saslauthd[1541315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:27 ispc saslauthd[1541315]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:30 ispc saslauthd[1541317]: pam_mysql - SELECT returned no result. Dec 14 14:38:30 ispc saslauthd[1541317]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:30 ispc saslauthd[1541317]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:35 ispc saslauthd[1541322]: pam_mysql - SELECT returned no result. Dec 14 14:38:35 ispc saslauthd[1541322]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:35 ispc saslauthd[1541322]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:38 ispc saslauthd[1541323]: pam_mysql - SELECT returned no result. Dec 14 14:38:38 ispc saslauthd[1541323]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:38 ispc saslauthd[1541323]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:44 ispc postfix/smtpd[1541328]: sql auxprop plugin using mysql engine Dec 14 14:38:45 ispc saslauthd[1541330]: pam_mysql - SELECT returned no result. Dec 14 14:38:45 ispc saslauthd[1541330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:45 ispc saslauthd[1541330]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:49 ispc saslauthd[1541332]: pam_mysql - SELECT returned no result. Dec 14 14:38:49 ispc saslauthd[1541332]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:49 ispc saslauthd[1541332]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:49 ispc saslauthd[1541331]: pam_mysql - SELECT returned no result. Dec 14 14:38:49 ispc saslauthd[1541331]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:49 ispc saslauthd[1541331]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:50 ispc saslauthd[1541333]: pam_mysql - SELECT returned no result. Dec 14 14:38:50 ispc saslauthd[1541333]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:50 ispc saslauthd[1541333]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:52 ispc saslauthd[1541334]: pam_mysql - SELECT returned no result. Dec 14 14:38:52 ispc saslauthd[1541334]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:52 ispc saslauthd[1541334]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:38:54 ispc saslauthd[1541339]: pam_mysql - SELECT returned no result. Dec 14 14:38:54 ispc saslauthd[1541339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:38:54 ispc saslauthd[1541339]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:39:01 ispc CRON[1541341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:39:01 ispc CRON[1541342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:39:02 ispc CRON[1541341]: pam_unix(cron:session): session closed for user root Dec 14 14:39:02 ispc CRON[1541342]: pam_unix(cron:session): session closed for user root Dec 14 14:39:03 ispc sshd[1541359]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 14:39:03 ispc sshd[1541359]: Invalid user blceu from 103.91.189.70 Dec 14 14:39:25 ispc saslauthd[1541377]: pam_mysql - SELECT returned no result. Dec 14 14:39:25 ispc saslauthd[1541377]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:39:25 ispc saslauthd[1541377]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:40:01 ispc CRON[1541392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:40:01 ispc CRON[1541393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:40:01 ispc CRON[1541394]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:40:01 ispc CRON[1541395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:40:01 ispc CRON[1541396]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:40:01 ispc CRON[1541393]: pam_unix(cron:session): session closed for user root Dec 14 14:40:01 ispc CRON[1541394]: pam_unix(cron:session): session closed for user www-data Dec 14 14:40:01 ispc CRON[1541396]: pam_unix(cron:session): session closed for user getmail Dec 14 14:40:02 ispc CRON[1541395]: pam_unix(cron:session): session closed for user root Dec 14 14:40:02 ispc CRON[1541392]: pam_unix(cron:session): session closed for user root Dec 14 14:41:01 ispc CRON[1541501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:41:02 ispc sshd[1541499]: Invalid user sol from 80.94.92.166 Dec 14 14:41:02 ispc CRON[1541501]: pam_unix(cron:session): session closed for user root Dec 14 14:42:01 ispc CRON[1541540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:42:02 ispc CRON[1541540]: pam_unix(cron:session): session closed for user root Dec 14 14:43:01 ispc CRON[1541588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:43:03 ispc CRON[1541588]: pam_unix(cron:session): session closed for user root Dec 14 14:44:01 ispc CRON[1541626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:44:01 ispc CRON[1541626]: pam_unix(cron:session): session closed for user root Dec 14 14:44:24 ispc postfix/smtpd[1541647]: sql auxprop plugin using mysql engine Dec 14 14:44:26 ispc sshd[1541650]: Invalid user solana from 80.94.92.166 Dec 14 14:45:01 ispc CRON[1541674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:45:01 ispc CRON[1541675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:45:01 ispc CRON[1541676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:45:02 ispc CRON[1541677]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:45:02 ispc CRON[1541675]: pam_unix(cron:session): session closed for user root Dec 14 14:45:02 ispc CRON[1541677]: pam_unix(cron:session): session closed for user getmail Dec 14 14:45:02 ispc CRON[1541676]: pam_unix(cron:session): session closed for user root Dec 14 14:45:02 ispc CRON[1541674]: pam_unix(cron:session): session closed for user root Dec 14 14:46:01 ispc CRON[1541780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:46:02 ispc CRON[1541780]: pam_unix(cron:session): session closed for user root Dec 14 14:46:09 ispc postfix/smtpd[1541791]: sql auxprop plugin using mysql engine Dec 14 14:46:10 ispc saslauthd[1541793]: pam_mysql - SELECT returned no result. Dec 14 14:46:10 ispc saslauthd[1541793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:46:10 ispc saslauthd[1541793]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:47:01 ispc CRON[1541817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:47:03 ispc CRON[1541817]: pam_unix(cron:session): session closed for user root Dec 14 14:47:11 ispc sshd[1541833]: Invalid user martof from 43.135.130.196 Dec 14 14:47:20 ispc saslauthd[1541839]: pam_mysql - SELECT returned no result. Dec 14 14:47:20 ispc saslauthd[1541839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:47:20 ispc saslauthd[1541839]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:47:27 ispc sshd[1541844]: Invalid user blceu from 175.125.92.77 Dec 14 14:47:43 ispc sshd[1541854]: Invalid user validator from 80.94.92.166 Dec 14 14:48:01 ispc CRON[1541867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:48:02 ispc CRON[1541867]: pam_unix(cron:session): session closed for user root Dec 14 14:48:31 ispc sshd[1541895]: Invalid user ziplines from 175.125.92.77 Dec 14 14:49:01 ispc CRON[1541910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:49:01 ispc CRON[1541910]: pam_unix(cron:session): session closed for user root Dec 14 14:49:30 ispc postfix/smtpd[1541933]: sql auxprop plugin using mysql engine Dec 14 14:49:30 ispc saslauthd[1541935]: pam_mysql - SELECT returned no result. Dec 14 14:49:30 ispc saslauthd[1541935]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:49:30 ispc saslauthd[1541935]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:49:32 ispc saslauthd[1541938]: pam_mysql - SELECT returned no result. Dec 14 14:49:32 ispc saslauthd[1541938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:49:32 ispc saslauthd[1541938]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:49:36 ispc saslauthd[1541940]: pam_mysql - SELECT returned no result. Dec 14 14:49:36 ispc saslauthd[1541940]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:49:36 ispc saslauthd[1541940]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:50:01 ispc CRON[1541956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:50:01 ispc CRON[1541957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:50:01 ispc CRON[1541958]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 14:50:01 ispc CRON[1541959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:50:01 ispc CRON[1541960]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:50:01 ispc CRON[1541957]: pam_unix(cron:session): session closed for user root Dec 14 14:50:01 ispc CRON[1541958]: pam_unix(cron:session): session closed for user www-data Dec 14 14:50:02 ispc CRON[1541960]: pam_unix(cron:session): session closed for user getmail Dec 14 14:50:02 ispc CRON[1541956]: pam_unix(cron:session): session closed for user root Dec 14 14:50:02 ispc CRON[1541959]: pam_unix(cron:session): session closed for user root Dec 14 14:50:08 ispc saslauthd[1542038]: pam_mysql - SELECT returned no result. Dec 14 14:50:08 ispc saslauthd[1542038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:50:08 ispc saslauthd[1542038]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:50:11 ispc saslauthd[1542039]: pam_mysql - SELECT returned no result. Dec 14 14:50:11 ispc saslauthd[1542039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:50:11 ispc saslauthd[1542039]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:50:14 ispc saslauthd[1542040]: pam_mysql - SELECT returned no result. Dec 14 14:50:14 ispc saslauthd[1542040]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:50:14 ispc saslauthd[1542040]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:50:50 ispc sshd[1542058]: Invalid user node from 80.94.92.166 Dec 14 14:51:01 ispc CRON[1542065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:51:02 ispc CRON[1542065]: pam_unix(cron:session): session closed for user root Dec 14 14:51:30 ispc saslauthd[1542089]: pam_mysql - SELECT returned no result. Dec 14 14:51:30 ispc saslauthd[1542089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 14:51:30 ispc saslauthd[1542089]: do_auth : auth failure: [user=replication-receiver] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 14:51:53 ispc sshd[1542100]: Invalid user cristopher from 62.60.131.157 Dec 14 14:52:01 ispc CRON[1542106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:52:01 ispc CRON[1542106]: pam_unix(cron:session): session closed for user root Dec 14 14:53:01 ispc CRON[1542150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:53:03 ispc CRON[1542150]: pam_unix(cron:session): session closed for user root Dec 14 14:53:07 ispc sshd[1542161]: reverse mapping checking getaddrinfo for 103-91-189-70.colodee.net [103.91.189.70] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 14:53:07 ispc sshd[1542161]: Invalid user martof from 103.91.189.70 Dec 14 14:53:53 ispc sshd[1542193]: Invalid user solv from 80.94.92.166 Dec 14 14:54:01 ispc CRON[1542205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:54:01 ispc CRON[1542205]: pam_unix(cron:session): session closed for user root Dec 14 14:54:14 ispc sshd[1542220]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 14:55:01 ispc CRON[1542248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:55:01 ispc CRON[1542249]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 14:55:01 ispc CRON[1542246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:55:01 ispc CRON[1542247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:55:01 ispc CRON[1542247]: pam_unix(cron:session): session closed for user root Dec 14 14:55:01 ispc CRON[1542249]: pam_unix(cron:session): session closed for user getmail Dec 14 14:55:02 ispc CRON[1542246]: pam_unix(cron:session): session closed for user root Dec 14 14:55:02 ispc CRON[1542248]: pam_unix(cron:session): session closed for user root Dec 14 14:56:01 ispc CRON[1542349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:56:02 ispc CRON[1542349]: pam_unix(cron:session): session closed for user root Dec 14 14:56:21 ispc postfix/smtpd[1542367]: sql auxprop plugin using mysql engine Dec 14 14:56:21 ispc CRON[1541190]: pam_unix(cron:session): session closed for user root Dec 14 14:57:01 ispc CRON[1542373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:57:02 ispc CRON[1542373]: pam_unix(cron:session): session closed for user root Dec 14 14:58:01 ispc CRON[1542398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:58:01 ispc CRON[1542398]: pam_unix(cron:session): session closed for user root Dec 14 14:59:01 ispc CRON[1542413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 14:59:02 ispc CRON[1542413]: pam_unix(cron:session): session closed for user root Dec 14 15:00:02 ispc CRON[1542432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:00:02 ispc CRON[1542433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:00:02 ispc CRON[1542434]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:00:02 ispc CRON[1542435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:00:02 ispc CRON[1542436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:00:02 ispc CRON[1542437]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:00:02 ispc CRON[1542433]: pam_unix(cron:session): session closed for user root Dec 14 15:00:02 ispc CRON[1542434]: pam_unix(cron:session): session closed for user www-data Dec 14 15:00:02 ispc CRON[1542437]: pam_unix(cron:session): session closed for user getmail Dec 14 15:00:02 ispc CRON[1542432]: pam_unix(cron:session): session closed for user root Dec 14 15:00:03 ispc CRON[1542435]: pam_unix(cron:session): session closed for user root Dec 14 15:00:40 ispc CRON[1542436]: pam_unix(cron:session): session closed for user root Dec 14 15:01:01 ispc CRON[1542702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:02:01 ispc CRON[1542736]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 15:02:01 ispc CRON[1542737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:02:02 ispc CRON[1542737]: pam_unix(cron:session): session closed for user root Dec 14 15:03:01 ispc CRON[1543611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:03:01 ispc CRON[1543611]: pam_unix(cron:session): session closed for user root Dec 14 15:03:15 ispc CRON[1542736]: pam_unix(cron:session): session closed for user logcheck Dec 14 15:03:20 ispc postfix/smtpd[1543814]: sql auxprop plugin using mysql engine Dec 14 15:03:22 ispc postfix/smtpd[1543817]: sql auxprop plugin using mysql engine Dec 14 15:03:22 ispc saslauthd[1543819]: pam_mysql - SELECT returned no result. Dec 14 15:03:22 ispc saslauthd[1543819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:03:22 ispc saslauthd[1543819]: do_auth : auth failure: [user=informix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:03:43 ispc sshd[1543830]: Invalid user blceu from 45.119.213.109 Dec 14 15:04:01 ispc CRON[1543840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:04:02 ispc CRON[1543840]: pam_unix(cron:session): session closed for user root Dec 14 15:05:01 ispc CRON[1543878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:05:01 ispc CRON[1543879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:05:01 ispc CRON[1543880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:05:01 ispc CRON[1543881]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:05:01 ispc CRON[1543879]: pam_unix(cron:session): session closed for user root Dec 14 15:05:01 ispc CRON[1543881]: pam_unix(cron:session): session closed for user getmail Dec 14 15:05:02 ispc CRON[1543880]: pam_unix(cron:session): session closed for user root Dec 14 15:05:03 ispc CRON[1543878]: pam_unix(cron:session): session closed for user root Dec 14 15:05:30 ispc sshd[1543966]: Did not receive identification string from 165.22.220.123 Dec 14 15:06:01 ispc CRON[1543985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:06:02 ispc CRON[1543985]: pam_unix(cron:session): session closed for user root Dec 14 15:06:44 ispc postfix/smtpd[1544015]: sql auxprop plugin using mysql engine Dec 14 15:06:45 ispc saslauthd[1544018]: pam_mysql - SELECT returned no result. Dec 14 15:06:45 ispc saslauthd[1544018]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:06:45 ispc saslauthd[1544018]: do_auth : auth failure: [user=replicator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:06:46 ispc sshd[1544013]: Invalid user blceu from 103.100.209.172 Dec 14 15:07:01 ispc CRON[1544035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:07:02 ispc CRON[1544035]: pam_unix(cron:session): session closed for user root Dec 14 15:08:01 ispc CRON[1544084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:08:03 ispc CRON[1544084]: pam_unix(cron:session): session closed for user root Dec 14 15:08:24 ispc sshd[1544105]: Did not receive identification string from 204.76.203.83 Dec 14 15:09:01 ispc CRON[1544125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:09:01 ispc CRON[1544126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:09:02 ispc CRON[1544125]: pam_unix(cron:session): session closed for user root Dec 14 15:09:02 ispc CRON[1544126]: pam_unix(cron:session): session closed for user root Dec 14 15:10:01 ispc CRON[1544169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:10:01 ispc CRON[1544170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:10:01 ispc CRON[1544171]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:10:01 ispc CRON[1544172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:10:01 ispc CRON[1544173]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:10:01 ispc CRON[1544171]: pam_unix(cron:session): session closed for user www-data Dec 14 15:10:01 ispc CRON[1544170]: pam_unix(cron:session): session closed for user root Dec 14 15:10:02 ispc CRON[1544173]: pam_unix(cron:session): session closed for user getmail Dec 14 15:10:02 ispc CRON[1544172]: pam_unix(cron:session): session closed for user root Dec 14 15:10:03 ispc CRON[1544169]: pam_unix(cron:session): session closed for user root Dec 14 15:11:01 ispc CRON[1544274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:11:03 ispc CRON[1544274]: pam_unix(cron:session): session closed for user root Dec 14 15:12:01 ispc CRON[1544312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:12:01 ispc CRON[1544312]: pam_unix(cron:session): session closed for user root Dec 14 15:12:43 ispc sshd[1544348]: Invalid user ziplines from 103.110.84.105 Dec 14 15:13:01 ispc CRON[1544360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:13:02 ispc CRON[1544360]: pam_unix(cron:session): session closed for user root Dec 14 15:13:18 ispc sshd[1544375]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 15:13:18 ispc sshd[1544375]: Invalid user ziplines from 103.28.37.227 Dec 14 15:13:31 ispc postfix/smtpd[1544386]: sql auxprop plugin using mysql engine Dec 14 15:13:31 ispc saslauthd[1544388]: pam_mysql - SELECT returned no result. Dec 14 15:13:31 ispc saslauthd[1544388]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:13:31 ispc saslauthd[1544388]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:14:01 ispc CRON[1544402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:14:02 ispc CRON[1544402]: pam_unix(cron:session): session closed for user root Dec 14 15:15:01 ispc CRON[1544441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:15:01 ispc CRON[1544442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:15:01 ispc CRON[1544443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:15:01 ispc CRON[1544444]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:15:02 ispc CRON[1544442]: pam_unix(cron:session): session closed for user root Dec 14 15:15:02 ispc CRON[1544444]: pam_unix(cron:session): session closed for user getmail Dec 14 15:15:03 ispc CRON[1544443]: pam_unix(cron:session): session closed for user root Dec 14 15:15:04 ispc CRON[1544441]: pam_unix(cron:session): session closed for user root Dec 14 15:15:35 ispc postfix/smtpd[1544531]: sql auxprop plugin using mysql engine Dec 14 15:16:01 ispc CRON[1544541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:16:02 ispc CRON[1544541]: pam_unix(cron:session): session closed for user root Dec 14 15:16:14 ispc saslauthd[1544561]: pam_mysql - SELECT returned no result. Dec 14 15:16:14 ispc saslauthd[1544561]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:16:14 ispc saslauthd[1544561]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:17:01 ispc CRON[1544580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:17:01 ispc CRON[1544580]: pam_unix(cron:session): session closed for user root Dec 14 15:18:01 ispc CRON[1544627]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 15:18:01 ispc CRON[1544628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:18:02 ispc CRON[1544628]: pam_unix(cron:session): session closed for user root Dec 14 15:18:06 ispc CRON[1544627]: pam_unix(cron:session): session closed for user amavis Dec 14 15:18:07 ispc postfix/smtpd[1544655]: sql auxprop plugin using mysql engine Dec 14 15:19:01 ispc CRON[1544681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:19:02 ispc CRON[1544681]: pam_unix(cron:session): session closed for user root Dec 14 15:19:38 ispc postfix/smtpd[1544711]: sql auxprop plugin using mysql engine Dec 14 15:19:38 ispc saslauthd[1544716]: pam_mysql - SELECT returned no result. Dec 14 15:19:38 ispc saslauthd[1544716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:19:38 ispc saslauthd[1544716]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:20:01 ispc CRON[1544729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:20:01 ispc CRON[1544730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:20:01 ispc CRON[1544731]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:20:01 ispc CRON[1544732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:20:01 ispc CRON[1544733]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:20:01 ispc CRON[1544730]: pam_unix(cron:session): session closed for user root Dec 14 15:20:01 ispc CRON[1544731]: pam_unix(cron:session): session closed for user www-data Dec 14 15:20:01 ispc CRON[1544733]: pam_unix(cron:session): session closed for user getmail Dec 14 15:20:02 ispc CRON[1544732]: pam_unix(cron:session): session closed for user root Dec 14 15:20:04 ispc CRON[1544729]: pam_unix(cron:session): session closed for user root Dec 14 15:21:01 ispc CRON[1544840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:21:01 ispc CRON[1544841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:21:01 ispc CRON[1544840]: pam_unix(cron:session): session closed for user root Dec 14 15:21:02 ispc CRON[1544841]: pam_unix(cron:session): session closed for user root Dec 14 15:21:18 ispc sshd[1544863]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 15:21:18 ispc sshd[1544863]: Invalid user martof from 103.28.37.227 Dec 14 15:21:25 ispc postfix/smtpd[1544870]: sql auxprop plugin using mysql engine Dec 14 15:21:25 ispc CRON[1542702]: pam_unix(cron:session): session closed for user root Dec 14 15:21:57 ispc saslauthd[1544876]: pam_mysql - SELECT returned no result. Dec 14 15:21:57 ispc saslauthd[1544876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:21:57 ispc saslauthd[1544876]: do_auth : auth failure: [user=restoreonly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:22:01 ispc CRON[1544877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:22:01 ispc CRON[1544877]: pam_unix(cron:session): session closed for user root Dec 14 15:22:41 ispc sshd[1544906]: Invalid user klape from 2.57.217.229 Dec 14 15:22:42 ispc sshd[1544908]: Invalid user ubuntu from 2.57.217.229 Dec 14 15:22:42 ispc saslauthd[1544910]: pam_mysql - SELECT returned no result. Dec 14 15:22:42 ispc saslauthd[1544910]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:22:42 ispc saslauthd[1544910]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:22:52 ispc saslauthd[1544913]: pam_mysql - SELECT returned no result. Dec 14 15:22:52 ispc saslauthd[1544913]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:22:52 ispc saslauthd[1544913]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:23:01 ispc saslauthd[1544914]: pam_mysql - SELECT returned no result. Dec 14 15:23:01 ispc saslauthd[1544914]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:23:01 ispc saslauthd[1544914]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:23:01 ispc CRON[1544915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:23:03 ispc CRON[1544915]: pam_unix(cron:session): session closed for user root Dec 14 15:23:18 ispc postfix/smtpd[1544929]: sql auxprop plugin using mysql engine Dec 14 15:23:21 ispc saslauthd[1544932]: pam_mysql - SELECT returned no result. Dec 14 15:23:21 ispc saslauthd[1544932]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:23:21 ispc saslauthd[1544932]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:24:01 ispc CRON[1544936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:24:01 ispc CRON[1544936]: pam_unix(cron:session): session closed for user root Dec 14 15:24:21 ispc sshd[1544952]: Invalid user martof from 51.159.91.86 Dec 14 15:25:01 ispc CRON[1544954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:25:01 ispc CRON[1544955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:25:01 ispc CRON[1544956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:25:01 ispc CRON[1544957]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:25:01 ispc CRON[1544955]: pam_unix(cron:session): session closed for user root Dec 14 15:25:01 ispc CRON[1544957]: pam_unix(cron:session): session closed for user getmail Dec 14 15:25:02 ispc CRON[1544954]: pam_unix(cron:session): session closed for user root Dec 14 15:25:31 ispc CRON[1544956]: pam_unix(cron:session): session closed for user root Dec 14 15:25:38 ispc saslauthd[1545067]: pam_mysql - SELECT returned no result. Dec 14 15:25:38 ispc saslauthd[1545067]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:25:38 ispc saslauthd[1545067]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:26:01 ispc CRON[1545069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:27:01 ispc CRON[1545105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:27:02 ispc CRON[1545105]: pam_unix(cron:session): session closed for user root Dec 14 15:28:01 ispc CRON[1545155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:28:01 ispc CRON[1545155]: pam_unix(cron:session): session closed for user root Dec 14 15:28:11 ispc sshd[1545171]: Did not receive identification string from 159.223.231.153 Dec 14 15:29:01 ispc CRON[1545199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:29:02 ispc CRON[1545199]: pam_unix(cron:session): session closed for user root Dec 14 15:30:01 ispc CRON[1545246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:30:01 ispc CRON[1545247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:30:01 ispc CRON[1545248]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:30:01 ispc CRON[1545249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:30:01 ispc CRON[1545250]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:30:01 ispc CRON[1545248]: pam_unix(cron:session): session closed for user www-data Dec 14 15:30:01 ispc CRON[1545247]: pam_unix(cron:session): session closed for user root Dec 14 15:30:01 ispc CRON[1545250]: pam_unix(cron:session): session closed for user getmail Dec 14 15:30:01 ispc CRON[1545249]: pam_unix(cron:session): session closed for user root Dec 14 15:30:02 ispc CRON[1545246]: pam_unix(cron:session): session closed for user root Dec 14 15:31:01 ispc CRON[1545353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:31:02 ispc CRON[1545353]: pam_unix(cron:session): session closed for user root Dec 14 15:32:01 ispc CRON[1545397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:32:02 ispc CRON[1545397]: pam_unix(cron:session): session closed for user root Dec 14 15:32:39 ispc postfix/smtpd[1545431]: sql auxprop plugin using mysql engine Dec 14 15:32:40 ispc saslauthd[1545436]: pam_mysql - SELECT returned no result. Dec 14 15:32:40 ispc saslauthd[1545436]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:32:40 ispc saslauthd[1545436]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:32:44 ispc saslauthd[1545440]: pam_mysql - SELECT returned no result. Dec 14 15:32:44 ispc saslauthd[1545440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:32:44 ispc saslauthd[1545440]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:01 ispc CRON[1545451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:33:02 ispc CRON[1545451]: pam_unix(cron:session): session closed for user root Dec 14 15:33:05 ispc saslauthd[1545462]: pam_mysql - SELECT returned no result. Dec 14 15:33:05 ispc saslauthd[1545462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:05 ispc saslauthd[1545462]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:07 ispc saslauthd[1545463]: pam_mysql - SELECT returned no result. Dec 14 15:33:07 ispc saslauthd[1545463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:07 ispc saslauthd[1545463]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:12 ispc saslauthd[1545468]: pam_mysql - SELECT returned no result. Dec 14 15:33:12 ispc saslauthd[1545468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:12 ispc saslauthd[1545468]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:14 ispc saslauthd[1545469]: pam_mysql - SELECT returned no result. Dec 14 15:33:14 ispc saslauthd[1545469]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:14 ispc saslauthd[1545469]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:15 ispc saslauthd[1545470]: pam_mysql - SELECT returned no result. Dec 14 15:33:15 ispc saslauthd[1545470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:15 ispc saslauthd[1545470]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:26 ispc saslauthd[1545478]: pam_mysql - SELECT returned no result. Dec 14 15:33:26 ispc saslauthd[1545478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:26 ispc saslauthd[1545478]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:31 ispc saslauthd[1545484]: pam_mysql - SELECT returned no result. Dec 14 15:33:31 ispc saslauthd[1545484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:31 ispc saslauthd[1545484]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:34 ispc postfix/smtpd[1545487]: sql auxprop plugin using mysql engine Dec 14 15:33:35 ispc postfix/smtpd[1545489]: sql auxprop plugin using mysql engine Dec 14 15:33:35 ispc saslauthd[1545490]: pam_mysql - SELECT returned no result. Dec 14 15:33:35 ispc saslauthd[1545490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:35 ispc saslauthd[1545490]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:35 ispc saslauthd[1545491]: pam_mysql - SELECT returned no result. Dec 14 15:33:35 ispc saslauthd[1545491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:35 ispc saslauthd[1545491]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:35 ispc postfix/smtpd[1545492]: sql auxprop plugin using mysql engine Dec 14 15:33:36 ispc saslauthd[1545493]: pam_mysql - SELECT returned no result. Dec 14 15:33:36 ispc saslauthd[1545493]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:36 ispc saslauthd[1545493]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:33:37 ispc saslauthd[1545494]: pam_mysql - SELECT returned no result. Dec 14 15:33:37 ispc saslauthd[1545494]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:33:37 ispc saslauthd[1545494]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:34:01 ispc CRON[1545503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:34:01 ispc CRON[1545503]: pam_unix(cron:session): session closed for user root Dec 14 15:34:06 ispc sshd[1545518]: Invalid user martof from 221.156.137.104 Dec 14 15:34:07 ispc saslauthd[1545520]: pam_mysql - SELECT returned no result. Dec 14 15:34:07 ispc saslauthd[1545520]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:34:07 ispc saslauthd[1545520]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:35:01 ispc CRON[1545546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:35:01 ispc CRON[1545547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:35:01 ispc CRON[1545548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:35:01 ispc CRON[1545549]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:35:01 ispc CRON[1545547]: pam_unix(cron:session): session closed for user root Dec 14 15:35:01 ispc CRON[1545549]: pam_unix(cron:session): session closed for user getmail Dec 14 15:35:02 ispc CRON[1545548]: pam_unix(cron:session): session closed for user root Dec 14 15:35:03 ispc CRON[1545546]: pam_unix(cron:session): session closed for user root Dec 14 15:35:36 ispc saslauthd[1545643]: pam_mysql - SELECT returned no result. Dec 14 15:35:36 ispc saslauthd[1545643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:35:36 ispc saslauthd[1545643]: do_auth : auth failure: [user=oracle8] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:36:01 ispc CRON[1545657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:36:02 ispc CRON[1545657]: pam_unix(cron:session): session closed for user root Dec 14 15:37:01 ispc CRON[1545697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:37:02 ispc CRON[1545697]: pam_unix(cron:session): session closed for user root Dec 14 15:37:11 ispc saslauthd[1545712]: pam_mysql - SELECT returned no result. Dec 14 15:37:11 ispc saslauthd[1545712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:37:11 ispc saslauthd[1545712]: do_auth : auth failure: [user=ripeop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:37:25 ispc sshd[1545719]: Invalid user martof from 116.120.58.228 Dec 14 15:37:37 ispc sshd[1545730]: Invalid user martof from 43.135.148.156 Dec 14 15:38:01 ispc CRON[1545760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:38:02 ispc CRON[1545760]: pam_unix(cron:session): session closed for user root Dec 14 15:38:27 ispc sshd[1545785]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 15:38:40 ispc sshd[1545791]: Invalid user ziplines from 221.156.137.104 Dec 14 15:39:01 ispc CRON[1545806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:39:01 ispc CRON[1545807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:39:01 ispc CRON[1545806]: pam_unix(cron:session): session closed for user root Dec 14 15:39:02 ispc CRON[1545807]: pam_unix(cron:session): session closed for user root Dec 14 15:39:57 ispc sshd[1545858]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 15:40:01 ispc CRON[1545860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:40:01 ispc CRON[1545861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:40:01 ispc CRON[1545862]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:40:01 ispc CRON[1545863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:40:01 ispc CRON[1545864]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:40:01 ispc CRON[1545861]: pam_unix(cron:session): session closed for user root Dec 14 15:40:01 ispc CRON[1545862]: pam_unix(cron:session): session closed for user www-data Dec 14 15:40:01 ispc CRON[1545864]: pam_unix(cron:session): session closed for user getmail Dec 14 15:40:01 ispc CRON[1545863]: pam_unix(cron:session): session closed for user root Dec 14 15:40:02 ispc CRON[1545860]: pam_unix(cron:session): session closed for user root Dec 14 15:40:44 ispc sshd[1545960]: Invalid user klape from 187.190.35.163 Dec 14 15:40:45 ispc sshd[1545962]: Invalid user ubuntu from 187.190.35.163 Dec 14 15:41:01 ispc CRON[1545973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:41:02 ispc CRON[1545973]: pam_unix(cron:session): session closed for user root Dec 14 15:41:38 ispc postfix/smtpd[1546004]: sql auxprop plugin using mysql engine Dec 14 15:41:39 ispc saslauthd[1546007]: pam_mysql - SELECT returned no result. Dec 14 15:41:39 ispc saslauthd[1546007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:41:39 ispc saslauthd[1546007]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:42:01 ispc CRON[1546018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:42:02 ispc CRON[1546018]: pam_unix(cron:session): session closed for user root Dec 14 15:42:51 ispc saslauthd[1546066]: pam_mysql - SELECT returned no result. Dec 14 15:42:51 ispc saslauthd[1546066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:42:51 ispc saslauthd[1546066]: do_auth : auth failure: [user=ticket] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:43:01 ispc CRON[1546071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:43:02 ispc CRON[1546071]: pam_unix(cron:session): session closed for user root Dec 14 15:44:01 ispc CRON[1546114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:44:02 ispc CRON[1546114]: pam_unix(cron:session): session closed for user root Dec 14 15:44:04 ispc sshd[1546125]: Invalid user martof from 103.110.84.105 Dec 14 15:44:16 ispc saslauthd[1546132]: pam_mysql - SELECT returned no result. Dec 14 15:44:16 ispc saslauthd[1546132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:44:16 ispc saslauthd[1546132]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:45:01 ispc CRON[1546162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:45:01 ispc CRON[1546163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:45:01 ispc CRON[1546164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:45:01 ispc CRON[1546165]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:45:01 ispc CRON[1546163]: pam_unix(cron:session): session closed for user root Dec 14 15:45:01 ispc CRON[1546165]: pam_unix(cron:session): session closed for user getmail Dec 14 15:45:01 ispc CRON[1546164]: pam_unix(cron:session): session closed for user root Dec 14 15:45:01 ispc CRON[1546162]: pam_unix(cron:session): session closed for user root Dec 14 15:45:51 ispc sshd[1546265]: Invalid user admin from 159.223.231.153 Dec 14 15:46:01 ispc CRON[1546271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:46:03 ispc CRON[1546271]: pam_unix(cron:session): session closed for user root Dec 14 15:46:20 ispc postfix/smtpd[1546288]: sql auxprop plugin using mysql engine Dec 14 15:46:20 ispc CRON[1545069]: pam_unix(cron:session): session closed for user root Dec 14 15:46:26 ispc saslauthd[1546292]: pam_mysql - SELECT returned no result. Dec 14 15:46:26 ispc saslauthd[1546292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:46:26 ispc saslauthd[1546292]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:46:37 ispc sshd[1546294]: Invalid user admin from 159.223.231.153 Dec 14 15:46:37 ispc saslauthd[1546296]: pam_mysql - SELECT returned no result. Dec 14 15:46:37 ispc saslauthd[1546296]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:46:37 ispc saslauthd[1546296]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:46:42 ispc saslauthd[1546297]: pam_mysql - SELECT returned no result. Dec 14 15:46:42 ispc saslauthd[1546297]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:46:42 ispc saslauthd[1546297]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:46:54 ispc sshd[1546298]: Invalid user blceu from 180.76.190.171 Dec 14 15:47:01 ispc CRON[1546300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:47:02 ispc postfix/smtpd[1546310]: sql auxprop plugin using mysql engine Dec 14 15:47:02 ispc CRON[1546300]: pam_unix(cron:session): session closed for user root Dec 14 15:47:02 ispc saslauthd[1546314]: pam_mysql - SELECT returned no result. Dec 14 15:47:02 ispc saslauthd[1546314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:47:02 ispc saslauthd[1546314]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:47:04 ispc saslauthd[1546315]: pam_mysql - SELECT returned no result. Dec 14 15:47:04 ispc saslauthd[1546315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:47:04 ispc saslauthd[1546315]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:47:09 ispc saslauthd[1546318]: pam_mysql - SELECT returned no result. Dec 14 15:47:09 ispc saslauthd[1546318]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:47:09 ispc saslauthd[1546318]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:47:12 ispc saslauthd[1546319]: pam_mysql - SELECT returned no result. Dec 14 15:47:12 ispc saslauthd[1546319]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:47:12 ispc saslauthd[1546319]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:47:20 ispc sshd[1546321]: Invalid user admin from 159.223.231.153 Dec 14 15:47:34 ispc postfix/smtpd[1546324]: sql auxprop plugin using mysql engine Dec 14 15:48:01 ispc CRON[1546336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:48:02 ispc CRON[1546336]: pam_unix(cron:session): session closed for user root Dec 14 15:48:04 ispc sshd[1546348]: Invalid user admin from 159.223.231.153 Dec 14 15:48:47 ispc sshd[1546352]: Invalid user admin from 159.223.231.153 Dec 14 15:49:01 ispc CRON[1546355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:49:01 ispc CRON[1546355]: pam_unix(cron:session): session closed for user root Dec 14 15:49:33 ispc sshd[1546370]: Invalid user admin from 159.223.231.153 Dec 14 15:49:52 ispc sshd[1546381]: Invalid user klape from 70.37.89.177 Dec 14 15:49:53 ispc sshd[1546383]: Invalid user ubuntu from 70.37.89.177 Dec 14 15:50:01 ispc CRON[1546385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:50:01 ispc CRON[1546386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:50:01 ispc CRON[1546387]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 15:50:01 ispc CRON[1546388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:50:01 ispc CRON[1546389]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:50:02 ispc CRON[1546387]: pam_unix(cron:session): session closed for user www-data Dec 14 15:50:02 ispc CRON[1546386]: pam_unix(cron:session): session closed for user root Dec 14 15:50:02 ispc CRON[1546389]: pam_unix(cron:session): session closed for user getmail Dec 14 15:50:03 ispc CRON[1546385]: pam_unix(cron:session): session closed for user root Dec 14 15:50:35 ispc CRON[1546388]: pam_unix(cron:session): session closed for user root Dec 14 15:51:01 ispc CRON[1546500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:51:54 ispc postfix/smtpd[1546536]: sql auxprop plugin using mysql engine Dec 14 15:52:01 ispc CRON[1546539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:52:01 ispc CRON[1546540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:52:03 ispc CRON[1546540]: pam_unix(cron:session): session closed for user root Dec 14 15:52:25 ispc saslauthd[1546569]: pam_mysql - SELECT returned no result. Dec 14 15:52:25 ispc saslauthd[1546569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 15:52:25 ispc saslauthd[1546569]: do_auth : auth failure: [user=rje] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 15:52:35 ispc sshd[1546575]: Invalid user racingkennel from 185.12.204.239 Dec 14 15:53:01 ispc CRON[1546596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:53:01 ispc CRON[1546596]: pam_unix(cron:session): session closed for user root Dec 14 15:54:01 ispc CRON[1546634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:54:02 ispc CRON[1546634]: pam_unix(cron:session): session closed for user root Dec 14 15:54:04 ispc sshd[1546645]: Invalid user admin from 62.60.131.157 Dec 14 15:55:01 ispc CRON[1546675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:55:01 ispc CRON[1546676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:55:01 ispc CRON[1546677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:55:01 ispc CRON[1546678]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 15:55:01 ispc CRON[1546676]: pam_unix(cron:session): session closed for user root Dec 14 15:55:01 ispc CRON[1546678]: pam_unix(cron:session): session closed for user getmail Dec 14 15:55:01 ispc CRON[1546677]: pam_unix(cron:session): session closed for user root Dec 14 15:55:02 ispc CRON[1546675]: pam_unix(cron:session): session closed for user root Dec 14 15:55:19 ispc CRON[1546539]: pam_unix(cron:session): session closed for user root Dec 14 15:56:01 ispc CRON[1546782]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:56:01 ispc CRON[1546782]: pam_unix(cron:session): session closed for user root Dec 14 15:56:36 ispc postfix/smtpd[1546808]: sql auxprop plugin using mysql engine Dec 14 15:56:39 ispc sshd[1546817]: Invalid user klape from 103.164.20.29 Dec 14 15:56:41 ispc sshd[1546819]: Invalid user ubuntu from 103.164.20.29 Dec 14 15:57:01 ispc CRON[1546831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:57:02 ispc CRON[1546831]: pam_unix(cron:session): session closed for user root Dec 14 15:58:01 ispc CRON[1546877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:58:02 ispc CRON[1546877]: pam_unix(cron:session): session closed for user root Dec 14 15:58:13 ispc sshd[1546893]: Invalid user ziplines from 51.159.91.86 Dec 14 15:59:01 ispc CRON[1546921]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 15:59:02 ispc sshd[1546919]: Invalid user blceu from 43.135.130.196 Dec 14 15:59:02 ispc CRON[1546921]: pam_unix(cron:session): session closed for user root Dec 14 16:00:01 ispc CRON[1546967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:00:01 ispc CRON[1546968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:00:01 ispc CRON[1546969]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:00:01 ispc CRON[1546970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:00:01 ispc CRON[1546971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:00:01 ispc CRON[1546972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:00:01 ispc CRON[1546973]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:00:01 ispc CRON[1546969]: pam_unix(cron:session): session closed for user www-data Dec 14 16:00:01 ispc CRON[1546968]: pam_unix(cron:session): session closed for user root Dec 14 16:00:01 ispc CRON[1546971]: pam_unix(cron:session): session closed for user root Dec 14 16:00:01 ispc CRON[1546973]: pam_unix(cron:session): session closed for user getmail Dec 14 16:00:02 ispc CRON[1546972]: pam_unix(cron:session): session closed for user root Dec 14 16:00:02 ispc CRON[1546967]: pam_unix(cron:session): session closed for user root Dec 14 16:00:03 ispc CRON[1546970]: pam_unix(cron:session): session closed for user root Dec 14 16:00:32 ispc sshd[1547137]: Did not receive identification string from 20.65.193.130 Dec 14 16:00:32 ispc sshd[1547142]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 20.65.193.130 Dec 14 16:01:01 ispc CRON[1547157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:01:02 ispc CRON[1547157]: pam_unix(cron:session): session closed for user root Dec 14 16:02:01 ispc CRON[1547192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:02:01 ispc CRON[1547191]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 16:02:02 ispc CRON[1547192]: pam_unix(cron:session): session closed for user root Dec 14 16:03:01 ispc CRON[1548071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:03:02 ispc CRON[1548071]: pam_unix(cron:session): session closed for user root Dec 14 16:03:09 ispc sshd[1548114]: Invalid user blceu from 51.159.91.86 Dec 14 16:03:21 ispc CRON[1547191]: pam_unix(cron:session): session closed for user logcheck Dec 14 16:03:27 ispc postfix/smtpd[1548277]: sql auxprop plugin using mysql engine Dec 14 16:04:01 ispc CRON[1548301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:04:01 ispc CRON[1548301]: pam_unix(cron:session): session closed for user root Dec 14 16:05:01 ispc CRON[1548343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:05:01 ispc CRON[1548345]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:05:01 ispc CRON[1548342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:05:01 ispc CRON[1548344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:05:01 ispc CRON[1548343]: pam_unix(cron:session): session closed for user root Dec 14 16:05:01 ispc CRON[1548345]: pam_unix(cron:session): session closed for user getmail Dec 14 16:05:01 ispc CRON[1548344]: pam_unix(cron:session): session closed for user root Dec 14 16:05:02 ispc CRON[1548342]: pam_unix(cron:session): session closed for user root Dec 14 16:05:11 ispc sshd[1548422]: Invalid user ziplines from 116.120.58.228 Dec 14 16:06:01 ispc CRON[1548447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:06:01 ispc CRON[1548447]: pam_unix(cron:session): session closed for user root Dec 14 16:07:01 ispc CRON[1548487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:07:02 ispc CRON[1548487]: pam_unix(cron:session): session closed for user root Dec 14 16:07:10 ispc sshd[1548498]: Invalid user diamantdi from 51.159.18.215 Dec 14 16:07:21 ispc sshd[1548509]: Did not receive identification string from 45.140.17.97 Dec 14 16:07:21 ispc postfix/smtpd[1548510]: sql auxprop plugin using mysql engine Dec 14 16:07:43 ispc saslauthd[1548525]: pam_mysql - SELECT returned no result. Dec 14 16:07:43 ispc saslauthd[1548525]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:07:43 ispc saslauthd[1548525]: do_auth : auth failure: [user=ro] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:07:51 ispc saslauthd[1548532]: pam_mysql - SELECT returned no result. Dec 14 16:07:51 ispc saslauthd[1548532]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:07:51 ispc saslauthd[1548532]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:08:01 ispc CRON[1548538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:08:01 ispc CRON[1548538]: pam_unix(cron:session): session closed for user root Dec 14 16:08:14 ispc sshd[1548559]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:09:02 ispc CRON[1548582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:09:02 ispc CRON[1548583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:09:02 ispc CRON[1548582]: pam_unix(cron:session): session closed for user root Dec 14 16:09:02 ispc CRON[1548583]: pam_unix(cron:session): session closed for user root Dec 14 16:09:31 ispc sshd[1548617]: Invalid user ziplines from 43.135.148.156 Dec 14 16:10:01 ispc CRON[1548634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:10:01 ispc CRON[1548637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:10:01 ispc CRON[1548635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:10:01 ispc CRON[1548636]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:10:01 ispc CRON[1548638]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:10:01 ispc CRON[1548636]: pam_unix(cron:session): session closed for user www-data Dec 14 16:10:01 ispc CRON[1548635]: pam_unix(cron:session): session closed for user root Dec 14 16:10:01 ispc CRON[1548638]: pam_unix(cron:session): session closed for user getmail Dec 14 16:10:02 ispc CRON[1548637]: pam_unix(cron:session): session closed for user root Dec 14 16:10:02 ispc CRON[1548634]: pam_unix(cron:session): session closed for user root Dec 14 16:10:12 ispc postfix/smtpd[1548717]: sql auxprop plugin using mysql engine Dec 14 16:10:57 ispc sshd[1548742]: Did not receive identification string from 167.172.43.10 Dec 14 16:11:01 ispc CRON[1548743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:11:02 ispc CRON[1548743]: pam_unix(cron:session): session closed for user root Dec 14 16:11:14 ispc postfix/smtpd[1548758]: sql auxprop plugin using mysql engine Dec 14 16:11:14 ispc saslauthd[1548760]: pam_mysql - SELECT returned no result. Dec 14 16:11:14 ispc saslauthd[1548760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:11:14 ispc saslauthd[1548760]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:11:28 ispc CRON[1546500]: pam_unix(cron:session): session closed for user root Dec 14 16:11:55 ispc sshd[1548773]: Invalid user admin from 167.172.43.10 Dec 14 16:12:01 ispc CRON[1548775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:12:02 ispc CRON[1548775]: pam_unix(cron:session): session closed for user root Dec 14 16:12:31 ispc sshd[1548789]: Invalid user blceu from 43.135.148.156 Dec 14 16:12:33 ispc sshd[1548791]: Invalid user admin from 167.172.43.10 Dec 14 16:13:01 ispc CRON[1548803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:13:02 ispc CRON[1548803]: pam_unix(cron:session): session closed for user root Dec 14 16:13:12 ispc sshd[1548816]: Invalid user admin from 167.172.43.10 Dec 14 16:13:50 ispc sshd[1548821]: Invalid user admin from 167.172.43.10 Dec 14 16:14:01 ispc CRON[1548823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:14:02 ispc CRON[1548823]: pam_unix(cron:session): session closed for user root Dec 14 16:14:08 ispc saslauthd[1548836]: pam_mysql - SELECT returned no result. Dec 14 16:14:08 ispc saslauthd[1548836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:14:08 ispc saslauthd[1548836]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:14:18 ispc sshd[1548838]: Invalid user from 185.238.72.248 Dec 14 16:14:25 ispc sshd[1548840]: Invalid user admin from 167.172.43.10 Dec 14 16:15:01 ispc CRON[1548848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:15:01 ispc CRON[1548849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:15:01 ispc CRON[1548850]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:15:01 ispc CRON[1548847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:15:01 ispc CRON[1548848]: pam_unix(cron:session): session closed for user root Dec 14 16:15:01 ispc sshd[1548845]: Invalid user admin from 167.172.43.10 Dec 14 16:15:01 ispc CRON[1548850]: pam_unix(cron:session): session closed for user getmail Dec 14 16:15:02 ispc CRON[1548847]: pam_unix(cron:session): session closed for user root Dec 14 16:15:44 ispc CRON[1548849]: pam_unix(cron:session): session closed for user root Dec 14 16:16:01 ispc CRON[1549042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:16:31 ispc sshd[1549063]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:16:33 ispc sshd[1549067]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:16:33 ispc sshd[1549067]: Invalid user klape from 189.89.20.45 Dec 14 16:16:35 ispc sshd[1549073]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:16:35 ispc sshd[1549073]: Invalid user ubuntu from 189.89.20.45 Dec 14 16:17:01 ispc CRON[1549086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:17:01 ispc CRON[1549086]: pam_unix(cron:session): session closed for user root Dec 14 16:17:06 ispc sshd[1549097]: Invalid user ubuntu from 117.50.70.169 Dec 14 16:17:17 ispc postfix/smtpd[1549108]: sql auxprop plugin using mysql engine Dec 14 16:17:18 ispc saslauthd[1549110]: pam_mysql - SELECT returned no result. Dec 14 16:17:18 ispc saslauthd[1549110]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:17:18 ispc saslauthd[1549110]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:18:01 ispc CRON[1549140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:18:02 ispc CRON[1549140]: pam_unix(cron:session): session closed for user root Dec 14 16:19:01 ispc CRON[1549179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:19:02 ispc CRON[1549179]: pam_unix(cron:session): session closed for user root Dec 14 16:19:52 ispc postfix/smtpd[1549211]: sql auxprop plugin using mysql engine Dec 14 16:19:53 ispc saslauthd[1549213]: pam_mysql - SELECT returned no result. Dec 14 16:19:53 ispc saslauthd[1549213]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:19:53 ispc saslauthd[1549213]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:20:01 ispc CRON[1549220]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:20:01 ispc CRON[1549222]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:20:01 ispc CRON[1549218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:20:01 ispc CRON[1549219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:20:01 ispc CRON[1549221]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:20:01 ispc CRON[1549220]: pam_unix(cron:session): session closed for user www-data Dec 14 16:20:01 ispc CRON[1549222]: pam_unix(cron:session): session closed for user getmail Dec 14 16:20:01 ispc CRON[1549219]: pam_unix(cron:session): session closed for user root Dec 14 16:20:01 ispc CRON[1549221]: pam_unix(cron:session): session closed for user root Dec 14 16:20:01 ispc CRON[1549218]: pam_unix(cron:session): session closed for user root Dec 14 16:20:28 ispc saslauthd[1549311]: pam_mysql - SELECT returned no result. Dec 14 16:20:28 ispc saslauthd[1549311]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:20:28 ispc saslauthd[1549311]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:20:47 ispc saslauthd[1549317]: pam_mysql - SELECT returned no result. Dec 14 16:20:47 ispc saslauthd[1549317]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:20:47 ispc saslauthd[1549317]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:21:01 ispc CRON[1549330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:21:01 ispc CRON[1549331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:21:01 ispc CRON[1549330]: pam_unix(cron:session): session closed for user root Dec 14 16:21:02 ispc CRON[1549331]: pam_unix(cron:session): session closed for user root Dec 14 16:21:45 ispc sshd[1549358]: Invalid user matlbula from 36.134.126.74 Dec 14 16:21:55 ispc saslauthd[1549370]: pam_mysql - SELECT returned no result. Dec 14 16:21:55 ispc saslauthd[1549370]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:21:55 ispc saslauthd[1549370]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:22:01 ispc CRON[1549376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:22:02 ispc CRON[1549376]: pam_unix(cron:session): session closed for user root Dec 14 16:22:27 ispc sshd[1549395]: Invalid user blceu from 51.159.18.215 Dec 14 16:22:56 ispc sshd[1549417]: Invalid user blceu from 202.46.29.79 Dec 14 16:23:00 ispc saslauthd[1549419]: pam_mysql - SELECT returned no result. Dec 14 16:23:00 ispc saslauthd[1549419]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:23:00 ispc saslauthd[1549419]: do_auth : auth failure: [user=role] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:23:01 ispc CRON[1549421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:23:02 ispc CRON[1549421]: pam_unix(cron:session): session closed for user root Dec 14 16:23:28 ispc saslauthd[1549445]: pam_mysql - SELECT returned no result. Dec 14 16:23:28 ispc saslauthd[1549445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:23:28 ispc saslauthd[1549445]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:24:01 ispc CRON[1549462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:24:02 ispc CRON[1549462]: pam_unix(cron:session): session closed for user root Dec 14 16:25:01 ispc CRON[1549498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:25:01 ispc CRON[1549499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:25:01 ispc CRON[1549500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:25:01 ispc CRON[1549501]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:25:01 ispc CRON[1549499]: pam_unix(cron:session): session closed for user root Dec 14 16:25:01 ispc CRON[1549501]: pam_unix(cron:session): session closed for user getmail Dec 14 16:25:02 ispc CRON[1549500]: pam_unix(cron:session): session closed for user root Dec 14 16:25:02 ispc CRON[1549498]: pam_unix(cron:session): session closed for user root Dec 14 16:26:01 ispc CRON[1549604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:26:02 ispc CRON[1549604]: pam_unix(cron:session): session closed for user root Dec 14 16:27:01 ispc CRON[1549639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:27:02 ispc CRON[1549639]: pam_unix(cron:session): session closed for user root Dec 14 16:27:12 ispc postfix/smtpd[1549656]: sql auxprop plugin using mysql engine Dec 14 16:27:13 ispc saslauthd[1549659]: pam_mysql - SELECT returned no result. Dec 14 16:27:13 ispc saslauthd[1549659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:13 ispc saslauthd[1549659]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:16 ispc saslauthd[1549665]: pam_mysql - SELECT returned no result. Dec 14 16:27:16 ispc saslauthd[1549665]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:16 ispc saslauthd[1549665]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:40 ispc saslauthd[1549680]: pam_mysql - SELECT returned no result. Dec 14 16:27:40 ispc saslauthd[1549680]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:40 ispc saslauthd[1549680]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:42 ispc saslauthd[1549681]: pam_mysql - SELECT returned no result. Dec 14 16:27:42 ispc saslauthd[1549681]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:42 ispc saslauthd[1549681]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:44 ispc saslauthd[1549682]: pam_mysql - SELECT returned no result. Dec 14 16:27:44 ispc saslauthd[1549682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:44 ispc saslauthd[1549682]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:50 ispc sshd[1549692]: Invalid user anoraksro from 185.12.204.239 Dec 14 16:27:53 ispc saslauthd[1549694]: pam_mysql - SELECT returned no result. Dec 14 16:27:53 ispc saslauthd[1549694]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:53 ispc saslauthd[1549694]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:55 ispc saslauthd[1549695]: pam_mysql - SELECT returned no result. Dec 14 16:27:55 ispc saslauthd[1549695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:55 ispc saslauthd[1549695]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:27:59 ispc saslauthd[1549700]: pam_mysql - SELECT returned no result. Dec 14 16:27:59 ispc saslauthd[1549700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:27:59 ispc saslauthd[1549700]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:01 ispc CRON[1549701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:28:01 ispc CRON[1549701]: pam_unix(cron:session): session closed for user root Dec 14 16:28:09 ispc saslauthd[1549716]: pam_mysql - SELECT returned no result. Dec 14 16:28:09 ispc saslauthd[1549716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:09 ispc saslauthd[1549716]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:12 ispc postfix/smtpd[1549717]: sql auxprop plugin using mysql engine Dec 14 16:28:12 ispc saslauthd[1549719]: pam_mysql - SELECT returned no result. Dec 14 16:28:12 ispc saslauthd[1549719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:12 ispc saslauthd[1549719]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:13 ispc saslauthd[1549720]: pam_mysql - SELECT returned no result. Dec 14 16:28:13 ispc saslauthd[1549720]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:13 ispc saslauthd[1549720]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:14 ispc saslauthd[1549721]: pam_mysql - SELECT returned no result. Dec 14 16:28:14 ispc saslauthd[1549721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:14 ispc saslauthd[1549721]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:19 ispc saslauthd[1549726]: pam_mysql - SELECT returned no result. Dec 14 16:28:19 ispc saslauthd[1549726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:19 ispc saslauthd[1549726]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:28:46 ispc saslauthd[1549739]: pam_mysql - SELECT returned no result. Dec 14 16:28:46 ispc saslauthd[1549739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:28:46 ispc saslauthd[1549739]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:29:01 ispc CRON[1549749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:29:02 ispc CRON[1549749]: pam_unix(cron:session): session closed for user root Dec 14 16:29:58 ispc postfix/smtpd[1549784]: sql auxprop plugin using mysql engine Dec 14 16:30:01 ispc CRON[1549790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:30:01 ispc CRON[1549791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:30:01 ispc CRON[1549792]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:30:01 ispc CRON[1549793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:30:01 ispc CRON[1549794]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:30:01 ispc CRON[1549792]: pam_unix(cron:session): session closed for user www-data Dec 14 16:30:01 ispc CRON[1549791]: pam_unix(cron:session): session closed for user root Dec 14 16:30:01 ispc CRON[1549794]: pam_unix(cron:session): session closed for user getmail Dec 14 16:30:02 ispc CRON[1549790]: pam_unix(cron:session): session closed for user root Dec 14 16:30:02 ispc CRON[1549793]: pam_unix(cron:session): session closed for user root Dec 14 16:31:01 ispc CRON[1549896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:31:02 ispc CRON[1549896]: pam_unix(cron:session): session closed for user root Dec 14 16:31:26 ispc sshd[1549916]: Bad protocol version identification '\003' from 194.165.16.166 Dec 14 16:32:01 ispc CRON[1549935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:32:01 ispc sshd[1549943]: Did not receive identification string from 142.93.133.122 Dec 14 16:32:02 ispc CRON[1549935]: pam_unix(cron:session): session closed for user root Dec 14 16:32:17 ispc postfix/smtpd[1549953]: sql auxprop plugin using mysql engine Dec 14 16:32:25 ispc postfix/smtpd[1549966]: sql auxprop plugin using mysql engine Dec 14 16:33:01 ispc CRON[1550002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:33:01 ispc CRON[1550002]: pam_unix(cron:session): session closed for user root Dec 14 16:33:59 ispc sshd[1550043]: Did not receive identification string from 196.61.35.198 Dec 14 16:34:01 ispc CRON[1550048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:34:02 ispc CRON[1550048]: pam_unix(cron:session): session closed for user root Dec 14 16:34:52 ispc sshd[1550084]: Did not receive identification string from 152.42.141.151 Dec 14 16:35:01 ispc CRON[1550085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:35:01 ispc CRON[1550086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:35:01 ispc CRON[1550087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:35:01 ispc CRON[1550088]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:35:01 ispc CRON[1550086]: pam_unix(cron:session): session closed for user root Dec 14 16:35:01 ispc CRON[1550088]: pam_unix(cron:session): session closed for user getmail Dec 14 16:35:02 ispc CRON[1550087]: pam_unix(cron:session): session closed for user root Dec 14 16:35:02 ispc CRON[1550085]: pam_unix(cron:session): session closed for user root Dec 14 16:36:01 ispc CRON[1550197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:36:02 ispc CRON[1550197]: pam_unix(cron:session): session closed for user root Dec 14 16:36:23 ispc CRON[1549042]: pam_unix(cron:session): session closed for user root Dec 14 16:36:23 ispc postfix/smtpd[1550218]: sql auxprop plugin using mysql engine Dec 14 16:37:01 ispc CRON[1550230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:37:02 ispc CRON[1550230]: pam_unix(cron:session): session closed for user root Dec 14 16:37:05 ispc saslauthd[1550243]: pam_mysql - SELECT returned no result. Dec 14 16:37:05 ispc saslauthd[1550243]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:37:05 ispc saslauthd[1550243]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:38:01 ispc CRON[1550264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:38:02 ispc CRON[1550264]: pam_unix(cron:session): session closed for user root Dec 14 16:38:08 ispc saslauthd[1550277]: pam_mysql - SELECT returned no result. Dec 14 16:38:08 ispc saslauthd[1550277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:38:08 ispc saslauthd[1550277]: do_auth : auth failure: [user=role1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:39:01 ispc CRON[1550300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:39:01 ispc CRON[1550301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:39:02 ispc CRON[1550300]: pam_unix(cron:session): session closed for user root Dec 14 16:39:02 ispc CRON[1550301]: pam_unix(cron:session): session closed for user root Dec 14 16:39:27 ispc sshd[1550331]: Invalid user ubuntu from 196.61.35.198 Dec 14 16:40:01 ispc CRON[1550343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:40:01 ispc CRON[1550344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:40:01 ispc CRON[1550345]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:40:01 ispc CRON[1550346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:40:01 ispc CRON[1550347]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:40:01 ispc CRON[1550345]: pam_unix(cron:session): session closed for user www-data Dec 14 16:40:01 ispc CRON[1550344]: pam_unix(cron:session): session closed for user root Dec 14 16:40:01 ispc CRON[1550347]: pam_unix(cron:session): session closed for user getmail Dec 14 16:40:03 ispc CRON[1550343]: pam_unix(cron:session): session closed for user root Dec 14 16:40:06 ispc saslauthd[1550456]: pam_mysql - SELECT returned no result. Dec 14 16:40:06 ispc saslauthd[1550456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:40:06 ispc saslauthd[1550456]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:40:37 ispc CRON[1550346]: pam_unix(cron:session): session closed for user root Dec 14 16:41:01 ispc CRON[1550479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:41:22 ispc saslauthd[1550507]: pam_mysql - SELECT returned no result. Dec 14 16:41:22 ispc saslauthd[1550507]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:41:22 ispc saslauthd[1550507]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:42:01 ispc CRON[1550531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:42:02 ispc CRON[1550531]: pam_unix(cron:session): session closed for user root Dec 14 16:42:26 ispc sshd[1550560]: Invalid user temp from 196.61.35.198 Dec 14 16:42:42 ispc sshd[1550575]: Did not receive identification string from 152.42.141.151 Dec 14 16:42:45 ispc sshd[1550582]: Invalid user pi from 196.61.35.198 Dec 14 16:43:01 ispc CRON[1550592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:43:02 ispc CRON[1550592]: pam_unix(cron:session): session closed for user root Dec 14 16:43:03 ispc sshd[1550603]: Invalid user pi from 196.61.35.198 Dec 14 16:43:17 ispc sshd[1550618]: Invalid user klape from 51.77.222.24 Dec 14 16:43:18 ispc sshd[1550620]: Invalid user ubuntu from 51.77.222.24 Dec 14 16:43:19 ispc sshd[1550622]: Did not receive identification string from 152.42.141.151 Dec 14 16:43:33 ispc postfix/smtpd[1550634]: sql auxprop plugin using mysql engine Dec 14 16:43:33 ispc saslauthd[1550636]: pam_mysql - SELECT returned no result. Dec 14 16:43:33 ispc saslauthd[1550636]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:43:33 ispc saslauthd[1550636]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:43:53 ispc sshd[1550650]: Did not receive identification string from 152.42.141.151 Dec 14 16:44:01 ispc saslauthd[1550659]: pam_mysql - SELECT returned no result. Dec 14 16:44:01 ispc saslauthd[1550659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:44:01 ispc saslauthd[1550659]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:44:01 ispc CRON[1550660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:44:01 ispc CRON[1550660]: pam_unix(cron:session): session closed for user root Dec 14 16:44:07 ispc saslauthd[1550675]: pam_mysql - SELECT returned no result. Dec 14 16:44:07 ispc saslauthd[1550675]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:44:07 ispc saslauthd[1550675]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:44:07 ispc postfix/smtpd[1550676]: sql auxprop plugin using mysql engine Dec 14 16:44:07 ispc saslauthd[1550678]: pam_mysql - SELECT returned no result. Dec 14 16:44:07 ispc saslauthd[1550678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:44:07 ispc saslauthd[1550678]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:44:07 ispc saslauthd[1550681]: pam_mysql - SELECT returned no result. Dec 14 16:44:07 ispc saslauthd[1550681]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:44:07 ispc saslauthd[1550681]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:44:12 ispc saslauthd[1550682]: pam_mysql - SELECT returned no result. Dec 14 16:44:12 ispc saslauthd[1550682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:44:12 ispc saslauthd[1550682]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:44:57 ispc sshd[1550725]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:44:58 ispc sshd[1550727]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:44:58 ispc sshd[1550729]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:44:59 ispc sshd[1550731]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:00 ispc sshd[1550733]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:00 ispc sshd[1550735]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:01 ispc sshd[1550737]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:01 ispc CRON[1550741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:45:01 ispc CRON[1550742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:45:01 ispc CRON[1550743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:45:01 ispc CRON[1550744]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:45:01 ispc CRON[1550742]: pam_unix(cron:session): session closed for user root Dec 14 16:45:02 ispc CRON[1550744]: pam_unix(cron:session): session closed for user getmail Dec 14 16:45:02 ispc sshd[1550739]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:02 ispc CRON[1550743]: pam_unix(cron:session): session closed for user root Dec 14 16:45:02 ispc CRON[1550741]: pam_unix(cron:session): session closed for user root Dec 14 16:45:02 ispc sshd[1550779]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:03 ispc sshd[1550819]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:03 ispc sshd[1550821]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:04 ispc sshd[1550825]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:04 ispc sshd[1550827]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:05 ispc sshd[1550830]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:05 ispc sshd[1550835]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:06 ispc sshd[1550837]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:07 ispc sshd[1550839]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:08 ispc sshd[1550841]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:08 ispc sshd[1550843]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:08 ispc sshd[1550843]: Invalid user Antminer from 179.43.184.242 Dec 14 16:45:09 ispc sshd[1550845]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:09 ispc sshd[1550845]: Invalid user Antminer from 179.43.184.242 Dec 14 16:45:09 ispc sshd[1550847]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:09 ispc sshd[1550849]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:10 ispc sshd[1550851]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:10 ispc sshd[1550853]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:11 ispc sshd[1550855]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:11 ispc sshd[1550857]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:11 ispc sshd[1550857]: Invalid user admin from 179.43.184.242 Dec 14 16:45:12 ispc sshd[1550859]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:12 ispc sshd[1550859]: Invalid user baikal from 179.43.184.242 Dec 14 16:45:33 ispc sshd[1550876]: Invalid user caja01 from 196.61.35.198 Dec 14 16:45:36 ispc sshd[1550878]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:45:41 ispc sshd[1550884]: Invalid user caja1 from 196.61.35.198 Dec 14 16:46:01 ispc CRON[1550901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:46:02 ispc CRON[1550901]: pam_unix(cron:session): session closed for user root Dec 14 16:46:44 ispc sshd[1550935]: Did not receive identification string from 220.250.59.155 Dec 14 16:47:01 ispc CRON[1550944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:47:01 ispc CRON[1550944]: pam_unix(cron:session): session closed for user root Dec 14 16:47:24 ispc sshd[1550967]: Invalid user martof from 202.46.29.79 Dec 14 16:48:01 ispc CRON[1550998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:48:02 ispc CRON[1550998]: pam_unix(cron:session): session closed for user root Dec 14 16:48:12 ispc sshd[1551015]: Invalid user klape from 200.32.52.150 Dec 14 16:48:14 ispc sshd[1551017]: Invalid user ubuntu from 200.32.52.150 Dec 14 16:49:01 ispc CRON[1551047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:49:03 ispc CRON[1551047]: pam_unix(cron:session): session closed for user root Dec 14 16:49:50 ispc sshd[1551078]: Did not receive identification string from 87.236.176.47 Dec 14 16:50:01 ispc CRON[1551091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:50:01 ispc CRON[1551092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:50:01 ispc CRON[1551093]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 16:50:01 ispc CRON[1551094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:50:01 ispc CRON[1551095]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:50:01 ispc CRON[1551092]: pam_unix(cron:session): session closed for user root Dec 14 16:50:01 ispc CRON[1551093]: pam_unix(cron:session): session closed for user www-data Dec 14 16:50:01 ispc CRON[1551095]: pam_unix(cron:session): session closed for user getmail Dec 14 16:50:02 ispc CRON[1551094]: pam_unix(cron:session): session closed for user root Dec 14 16:50:03 ispc CRON[1551091]: pam_unix(cron:session): session closed for user root Dec 14 16:50:33 ispc postfix/smtpd[1551185]: sql auxprop plugin using mysql engine Dec 14 16:51:01 ispc CRON[1551200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:51:02 ispc CRON[1551200]: pam_unix(cron:session): session closed for user root Dec 14 16:51:40 ispc postfix/smtpd[1551230]: sql auxprop plugin using mysql engine Dec 14 16:52:01 ispc CRON[1551244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:52:01 ispc CRON[1551244]: pam_unix(cron:session): session closed for user root Dec 14 16:52:04 ispc sshd[1551255]: Invalid user klape from 36.50.177.171 Dec 14 16:52:09 ispc sshd[1551261]: Invalid user ubuntu from 36.50.177.171 Dec 14 16:53:01 ispc CRON[1551296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:53:02 ispc CRON[1551296]: pam_unix(cron:session): session closed for user root Dec 14 16:53:16 ispc saslauthd[1551319]: pam_mysql - SELECT returned no result. Dec 14 16:53:16 ispc saslauthd[1551319]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 16:53:16 ispc saslauthd[1551319]: do_auth : auth failure: [user=roo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 16:53:38 ispc sshd[1551328]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 16:53:38 ispc sshd[1551330]: Invalid user admin from 152.42.141.151 Dec 14 16:54:01 ispc CRON[1551340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:54:02 ispc CRON[1551340]: pam_unix(cron:session): session closed for user root Dec 14 16:54:11 ispc sshd[1551357]: Invalid user admin from 152.42.141.151 Dec 14 16:54:44 ispc sshd[1551373]: Invalid user admin from 152.42.141.151 Dec 14 16:55:01 ispc CRON[1551385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:55:01 ispc CRON[1551386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:55:01 ispc CRON[1551387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:55:01 ispc CRON[1551388]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 16:55:01 ispc CRON[1551386]: pam_unix(cron:session): session closed for user root Dec 14 16:55:01 ispc CRON[1551388]: pam_unix(cron:session): session closed for user getmail Dec 14 16:55:02 ispc CRON[1551387]: pam_unix(cron:session): session closed for user root Dec 14 16:55:02 ispc CRON[1551385]: pam_unix(cron:session): session closed for user root Dec 14 16:55:18 ispc sshd[1551465]: Invalid user admin from 152.42.141.151 Dec 14 16:55:52 ispc sshd[1551483]: Invalid user admin from 152.42.141.151 Dec 14 16:56:01 ispc CRON[1551491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:56:02 ispc CRON[1551491]: pam_unix(cron:session): session closed for user root Dec 14 16:56:22 ispc sshd[1551512]: Did not receive identification string from 167.99.46.205 Dec 14 16:56:22 ispc postfix/smtpd[1551517]: sql auxprop plugin using mysql engine Dec 14 16:56:25 ispc sshd[1551519]: Invalid user admin from 152.42.141.151 Dec 14 16:57:01 ispc CRON[1551539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:57:01 ispc CRON[1551539]: pam_unix(cron:session): session closed for user root Dec 14 16:57:25 ispc sshd[1551566]: Invalid user test1 from 167.99.46.205 Dec 14 16:58:01 ispc CRON[1551591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:58:02 ispc CRON[1551591]: pam_unix(cron:session): session closed for user root Dec 14 16:58:16 ispc sshd[1551611]: Invalid user test2 from 167.99.46.205 Dec 14 16:59:01 ispc CRON[1551639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 16:59:02 ispc CRON[1551639]: pam_unix(cron:session): session closed for user root Dec 14 16:59:07 ispc sshd[1551654]: Invalid user test3 from 167.99.46.205 Dec 14 16:59:56 ispc postfix/smtpd[1551681]: sql auxprop plugin using mysql engine Dec 14 17:00:01 ispc CRON[1551687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:00:01 ispc CRON[1551688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:00:01 ispc CRON[1551689]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:00:01 ispc CRON[1551691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:00:01 ispc CRON[1551692]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:00:01 ispc CRON[1551690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:00:01 ispc CRON[1551689]: pam_unix(cron:session): session closed for user www-data Dec 14 17:00:01 ispc CRON[1551688]: pam_unix(cron:session): session closed for user root Dec 14 17:00:01 ispc CRON[1551692]: pam_unix(cron:session): session closed for user getmail Dec 14 17:00:01 ispc CRON[1551691]: pam_unix(cron:session): session closed for user root Dec 14 17:00:01 ispc CRON[1551690]: pam_unix(cron:session): session closed for user root Dec 14 17:00:02 ispc CRON[1551687]: pam_unix(cron:session): session closed for user root Dec 14 17:01:01 ispc CRON[1551872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:01:01 ispc CRON[1551872]: pam_unix(cron:session): session closed for user root Dec 14 17:01:29 ispc CRON[1550479]: pam_unix(cron:session): session closed for user root Dec 14 17:02:01 ispc CRON[1551906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:02:01 ispc CRON[1551905]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 17:02:01 ispc CRON[1551906]: pam_unix(cron:session): session closed for user root Dec 14 17:02:23 ispc saslauthd[1552435]: pam_mysql - SELECT returned no result. Dec 14 17:02:23 ispc saslauthd[1552435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:02:23 ispc saslauthd[1552435]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:03:01 ispc CRON[1552748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:03:02 ispc CRON[1552748]: pam_unix(cron:session): session closed for user root Dec 14 17:03:21 ispc sshd[1552788]: Invalid user ziplines from 49.247.24.89 Dec 14 17:03:35 ispc CRON[1551905]: pam_unix(cron:session): session closed for user logcheck Dec 14 17:03:46 ispc postfix/smtpd[1552965]: sql auxprop plugin using mysql engine Dec 14 17:04:01 ispc CRON[1552970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:04:02 ispc CRON[1552970]: pam_unix(cron:session): session closed for user root Dec 14 17:05:01 ispc CRON[1552991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:05:01 ispc CRON[1552989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:05:01 ispc CRON[1552990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:05:01 ispc CRON[1552992]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:05:01 ispc CRON[1552990]: pam_unix(cron:session): session closed for user root Dec 14 17:05:01 ispc CRON[1552992]: pam_unix(cron:session): session closed for user getmail Dec 14 17:05:02 ispc CRON[1552989]: pam_unix(cron:session): session closed for user root Dec 14 17:05:31 ispc CRON[1552991]: pam_unix(cron:session): session closed for user root Dec 14 17:05:36 ispc sshd[1553100]: Invalid user martof from 51.91.247.10 Dec 14 17:05:37 ispc sshd[1553102]: Invalid user ziplines from 202.46.29.79 Dec 14 17:06:01 ispc CRON[1553108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:06:26 ispc sshd[1553132]: Invalid user klape from 67.205.163.146 Dec 14 17:06:27 ispc sshd[1553134]: Invalid user ubuntu from 67.205.163.146 Dec 14 17:07:01 ispc CRON[1553150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:07:02 ispc CRON[1553150]: pam_unix(cron:session): session closed for user root Dec 14 17:08:01 ispc CRON[1553196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:08:01 ispc CRON[1553196]: pam_unix(cron:session): session closed for user root Dec 14 17:08:10 ispc sshd[1553211]: Invalid user tshombeknife from 185.12.204.239 Dec 14 17:08:11 ispc postfix/smtpd[1553213]: sql auxprop plugin using mysql engine Dec 14 17:08:14 ispc saslauthd[1553219]: pam_mysql - SELECT returned no result. Dec 14 17:08:14 ispc saslauthd[1553219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:08:14 ispc saslauthd[1553219]: do_auth : auth failure: [user=rsadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:09:01 ispc CRON[1553237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:09:01 ispc CRON[1553238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:09:01 ispc CRON[1553237]: pam_unix(cron:session): session closed for user root Dec 14 17:09:02 ispc CRON[1553238]: pam_unix(cron:session): session closed for user root Dec 14 17:09:16 ispc saslauthd[1553270]: pam_mysql - SELECT returned no result. Dec 14 17:09:16 ispc saslauthd[1553270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:09:16 ispc saslauthd[1553270]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:10:01 ispc CRON[1553289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:10:01 ispc CRON[1553290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:10:01 ispc CRON[1553291]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:10:01 ispc CRON[1553292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:10:01 ispc CRON[1553293]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:10:01 ispc CRON[1553290]: pam_unix(cron:session): session closed for user root Dec 14 17:10:01 ispc CRON[1553291]: pam_unix(cron:session): session closed for user www-data Dec 14 17:10:02 ispc CRON[1553293]: pam_unix(cron:session): session closed for user getmail Dec 14 17:10:02 ispc CRON[1553292]: pam_unix(cron:session): session closed for user root Dec 14 17:10:02 ispc CRON[1553289]: pam_unix(cron:session): session closed for user root Dec 14 17:11:01 ispc CRON[1553397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:11:02 ispc CRON[1553397]: pam_unix(cron:session): session closed for user root Dec 14 17:11:57 ispc sshd[1553435]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 17:11:57 ispc sshd[1553435]: Invalid user blceu from 103.28.37.227 Dec 14 17:11:58 ispc sshd[1553434]: Invalid user martof from 175.125.92.77 Dec 14 17:12:01 ispc CRON[1553438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:12:01 ispc CRON[1553438]: pam_unix(cron:session): session closed for user root Dec 14 17:12:19 ispc postfix/smtpd[1553457]: sql auxprop plugin using mysql engine Dec 14 17:12:22 ispc postfix/smtpd[1553459]: sql auxprop plugin using mysql engine Dec 14 17:12:24 ispc saslauthd[1553461]: pam_mysql - SELECT returned no result. Dec 14 17:12:24 ispc saslauthd[1553461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:12:24 ispc saslauthd[1553461]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:12:33 ispc saslauthd[1553466]: pam_mysql - SELECT returned no result. Dec 14 17:12:33 ispc saslauthd[1553466]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:12:33 ispc saslauthd[1553466]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:13:01 ispc CRON[1553489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:13:01 ispc CRON[1553489]: pam_unix(cron:session): session closed for user root Dec 14 17:14:01 ispc CRON[1553528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:14:02 ispc CRON[1553528]: pam_unix(cron:session): session closed for user root Dec 14 17:15:01 ispc CRON[1553572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:15:01 ispc CRON[1553573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:15:01 ispc CRON[1553574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:15:01 ispc CRON[1553575]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:15:01 ispc CRON[1553573]: pam_unix(cron:session): session closed for user root Dec 14 17:15:01 ispc CRON[1553575]: pam_unix(cron:session): session closed for user getmail Dec 14 17:15:02 ispc CRON[1553574]: pam_unix(cron:session): session closed for user root Dec 14 17:15:03 ispc CRON[1553572]: pam_unix(cron:session): session closed for user root Dec 14 17:15:25 ispc postfix/smtpd[1553658]: sql auxprop plugin using mysql engine Dec 14 17:15:26 ispc saslauthd[1553660]: pam_mysql - SELECT returned no result. Dec 14 17:15:26 ispc saslauthd[1553660]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:15:26 ispc saslauthd[1553660]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:16:01 ispc CRON[1553679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:16:01 ispc CRON[1553679]: pam_unix(cron:session): session closed for user root Dec 14 17:16:59 ispc saslauthd[1553716]: pam_mysql - SELECT returned no result. Dec 14 17:16:59 ispc saslauthd[1553716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:16:59 ispc saslauthd[1553716]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:17:01 ispc CRON[1553717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:17:02 ispc CRON[1553717]: pam_unix(cron:session): session closed for user root Dec 14 17:18:01 ispc CRON[1553763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:18:03 ispc CRON[1553763]: pam_unix(cron:session): session closed for user root Dec 14 17:18:19 ispc saslauthd[1553784]: pam_mysql - SELECT returned no result. Dec 14 17:18:19 ispc saslauthd[1553784]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:18:19 ispc saslauthd[1553784]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:18:22 ispc sshd[1553785]: Invalid user blceu from 185.12.204.239 Dec 14 17:18:44 ispc saslauthd[1553800]: pam_mysql - SELECT returned no result. Dec 14 17:18:44 ispc saslauthd[1553800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:18:44 ispc saslauthd[1553800]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:19:01 ispc CRON[1553806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:19:01 ispc CRON[1553806]: pam_unix(cron:session): session closed for user root Dec 14 17:19:54 ispc saslauthd[1553842]: pam_mysql - SELECT returned no result. Dec 14 17:19:54 ispc saslauthd[1553842]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:19:54 ispc saslauthd[1553842]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:20:01 ispc CRON[1553847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:20:01 ispc CRON[1553848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:20:01 ispc CRON[1553849]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:20:01 ispc CRON[1553850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:20:01 ispc CRON[1553851]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:20:01 ispc CRON[1553849]: pam_unix(cron:session): session closed for user www-data Dec 14 17:20:01 ispc CRON[1553848]: pam_unix(cron:session): session closed for user root Dec 14 17:20:02 ispc CRON[1553851]: pam_unix(cron:session): session closed for user getmail Dec 14 17:20:02 ispc CRON[1553850]: pam_unix(cron:session): session closed for user root Dec 14 17:20:04 ispc CRON[1553847]: pam_unix(cron:session): session closed for user root Dec 14 17:20:39 ispc sshd[1553945]: Bad protocol version identification 'GET / HTTP/1.1' from 66.228.53.4 Dec 14 17:20:39 ispc sshd[1553946]: Bad protocol version identification '\026\003\001' from 66.228.53.4 Dec 14 17:21:01 ispc CRON[1553956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:21:01 ispc CRON[1553957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:21:01 ispc CRON[1553956]: pam_unix(cron:session): session closed for user root Dec 14 17:21:02 ispc CRON[1553957]: pam_unix(cron:session): session closed for user root Dec 14 17:21:24 ispc saslauthd[1553981]: pam_mysql - SELECT returned no result. Dec 14 17:21:24 ispc saslauthd[1553981]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:21:24 ispc saslauthd[1553981]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:21:48 ispc saslauthd[1553994]: pam_mysql - SELECT returned no result. Dec 14 17:21:48 ispc saslauthd[1553994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:21:48 ispc saslauthd[1553994]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:21:49 ispc saslauthd[1553995]: pam_mysql - SELECT returned no result. Dec 14 17:21:49 ispc saslauthd[1553995]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:21:49 ispc saslauthd[1553995]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:01 ispc CRON[1554001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:22:02 ispc CRON[1554001]: pam_unix(cron:session): session closed for user root Dec 14 17:22:16 ispc postfix/smtpd[1554017]: sql auxprop plugin using mysql engine Dec 14 17:22:16 ispc saslauthd[1554019]: pam_mysql - SELECT returned no result. Dec 14 17:22:16 ispc saslauthd[1554019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:16 ispc saslauthd[1554019]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:18 ispc saslauthd[1554021]: pam_mysql - SELECT returned no result. Dec 14 17:22:18 ispc saslauthd[1554021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:18 ispc saslauthd[1554021]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:20 ispc saslauthd[1554025]: pam_mysql - SELECT returned no result. Dec 14 17:22:20 ispc saslauthd[1554025]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:20 ispc saslauthd[1554025]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:33 ispc postfix/smtpd[1554032]: sql auxprop plugin using mysql engine Dec 14 17:22:34 ispc saslauthd[1554034]: pam_mysql - SELECT returned no result. Dec 14 17:22:34 ispc saslauthd[1554034]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:34 ispc saslauthd[1554034]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:34 ispc saslauthd[1554036]: pam_mysql - SELECT returned no result. Dec 14 17:22:34 ispc saslauthd[1554036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:34 ispc saslauthd[1554036]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:36 ispc saslauthd[1554037]: pam_mysql - SELECT returned no result. Dec 14 17:22:36 ispc saslauthd[1554037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:36 ispc saslauthd[1554037]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:46 ispc saslauthd[1554048]: pam_mysql - SELECT returned no result. Dec 14 17:22:46 ispc saslauthd[1554048]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:46 ispc saslauthd[1554048]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:52 ispc saslauthd[1554053]: pam_mysql - SELECT returned no result. Dec 14 17:22:52 ispc saslauthd[1554053]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:52 ispc saslauthd[1554053]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:52 ispc saslauthd[1554054]: pam_mysql - SELECT returned no result. Dec 14 17:22:52 ispc saslauthd[1554054]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:52 ispc saslauthd[1554054]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:53 ispc saslauthd[1554055]: pam_mysql - SELECT returned no result. Dec 14 17:22:53 ispc saslauthd[1554055]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:53 ispc saslauthd[1554055]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:54 ispc saslauthd[1554056]: pam_mysql - SELECT returned no result. Dec 14 17:22:54 ispc saslauthd[1554056]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:54 ispc saslauthd[1554056]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:22:54 ispc saslauthd[1554057]: pam_mysql - SELECT returned no result. Dec 14 17:22:54 ispc saslauthd[1554057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:22:54 ispc saslauthd[1554057]: do_auth : auth failure: [user=rw] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:23:01 ispc CRON[1554062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:23:01 ispc CRON[1554062]: pam_unix(cron:session): session closed for user root Dec 14 17:23:25 ispc saslauthd[1554081]: pam_mysql - SELECT returned no result. Dec 14 17:23:25 ispc saslauthd[1554081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:23:25 ispc saslauthd[1554081]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:23:35 ispc sshd[1554087]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 17:24:01 ispc CRON[1554104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:24:02 ispc CRON[1554104]: pam_unix(cron:session): session closed for user root Dec 14 17:25:01 ispc CRON[1554136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:25:01 ispc CRON[1554137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:25:01 ispc CRON[1554138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:25:01 ispc CRON[1554139]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:25:01 ispc CRON[1554137]: pam_unix(cron:session): session closed for user root Dec 14 17:25:01 ispc CRON[1554139]: pam_unix(cron:session): session closed for user getmail Dec 14 17:25:02 ispc CRON[1554138]: pam_unix(cron:session): session closed for user root Dec 14 17:25:02 ispc CRON[1554136]: pam_unix(cron:session): session closed for user root Dec 14 17:26:01 ispc CRON[1554242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:26:01 ispc CRON[1554242]: pam_unix(cron:session): session closed for user root Dec 14 17:26:25 ispc postfix/smtpd[1554266]: sql auxprop plugin using mysql engine Dec 14 17:26:25 ispc CRON[1553108]: pam_unix(cron:session): session closed for user root Dec 14 17:27:01 ispc CRON[1554271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:27:03 ispc CRON[1554271]: pam_unix(cron:session): session closed for user root Dec 14 17:28:01 ispc CRON[1554296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:28:02 ispc CRON[1554296]: pam_unix(cron:session): session closed for user root Dec 14 17:28:41 ispc sshd[1554309]: Did not receive identification string from 171.105.76.110 Dec 14 17:29:01 ispc CRON[1554313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:29:02 ispc CRON[1554313]: pam_unix(cron:session): session closed for user root Dec 14 17:30:01 ispc CRON[1554331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:30:01 ispc CRON[1554332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:30:01 ispc CRON[1554333]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:30:01 ispc CRON[1554334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:30:01 ispc CRON[1554335]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:30:01 ispc CRON[1554333]: pam_unix(cron:session): session closed for user www-data Dec 14 17:30:01 ispc CRON[1554332]: pam_unix(cron:session): session closed for user root Dec 14 17:30:01 ispc CRON[1554335]: pam_unix(cron:session): session closed for user getmail Dec 14 17:30:02 ispc CRON[1554331]: pam_unix(cron:session): session closed for user root Dec 14 17:30:37 ispc CRON[1554334]: pam_unix(cron:session): session closed for user root Dec 14 17:31:01 ispc CRON[1554524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:32:01 ispc CRON[1554556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:32:01 ispc CRON[1554556]: pam_unix(cron:session): session closed for user root Dec 14 17:32:43 ispc postfix/smtpd[1554600]: sql auxprop plugin using mysql engine Dec 14 17:32:44 ispc saslauthd[1554602]: pam_mysql - SELECT returned no result. Dec 14 17:32:44 ispc saslauthd[1554602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:32:44 ispc saslauthd[1554602]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:33:01 ispc CRON[1554607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:33:02 ispc CRON[1554607]: pam_unix(cron:session): session closed for user root Dec 14 17:34:01 ispc CRON[1554645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:34:01 ispc CRON[1554645]: pam_unix(cron:session): session closed for user root Dec 14 17:35:01 ispc CRON[1554685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:35:01 ispc CRON[1554686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:35:01 ispc CRON[1554687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:35:01 ispc CRON[1554688]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:35:02 ispc CRON[1554686]: pam_unix(cron:session): session closed for user root Dec 14 17:35:02 ispc CRON[1554688]: pam_unix(cron:session): session closed for user getmail Dec 14 17:35:02 ispc CRON[1554687]: pam_unix(cron:session): session closed for user root Dec 14 17:35:03 ispc CRON[1554685]: pam_unix(cron:session): session closed for user root Dec 14 17:36:01 ispc CRON[1554787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:36:02 ispc CRON[1554787]: pam_unix(cron:session): session closed for user root Dec 14 17:37:01 ispc CRON[1554826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:37:02 ispc CRON[1554826]: pam_unix(cron:session): session closed for user root Dec 14 17:37:51 ispc sshd[1554868]: Invalid user blceu from 175.125.92.77 Dec 14 17:37:54 ispc sshd[1554871]: Invalid user ubuntu from 117.50.70.169 Dec 14 17:37:58 ispc postfix/smtpd[1554877]: sql auxprop plugin using mysql engine Dec 14 17:38:00 ispc saslauthd[1554880]: pam_mysql - SELECT returned no result. Dec 14 17:38:00 ispc saslauthd[1554880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:38:00 ispc saslauthd[1554880]: do_auth : auth failure: [user=rwa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:38:01 ispc CRON[1554881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:38:02 ispc CRON[1554881]: pam_unix(cron:session): session closed for user root Dec 14 17:38:42 ispc saslauthd[1554911]: pam_mysql - SELECT returned no result. Dec 14 17:38:42 ispc saslauthd[1554911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:38:42 ispc saslauthd[1554911]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:38:52 ispc sshd[1554916]: Invalid user ziplines from 175.125.92.77 Dec 14 17:38:58 ispc sshd[1554922]: Invalid user matlbula from 185.12.204.239 Dec 14 17:39:01 ispc CRON[1554924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:39:01 ispc CRON[1554925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:39:01 ispc CRON[1554924]: pam_unix(cron:session): session closed for user root Dec 14 17:39:01 ispc CRON[1554925]: pam_unix(cron:session): session closed for user root Dec 14 17:40:01 ispc CRON[1554975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:40:01 ispc CRON[1554976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:40:01 ispc CRON[1554977]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:40:01 ispc CRON[1554978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:40:01 ispc CRON[1554979]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:40:01 ispc CRON[1554976]: pam_unix(cron:session): session closed for user root Dec 14 17:40:01 ispc CRON[1554977]: pam_unix(cron:session): session closed for user www-data Dec 14 17:40:01 ispc CRON[1554979]: pam_unix(cron:session): session closed for user getmail Dec 14 17:40:02 ispc CRON[1554978]: pam_unix(cron:session): session closed for user root Dec 14 17:40:02 ispc CRON[1554975]: pam_unix(cron:session): session closed for user root Dec 14 17:40:53 ispc postfix/smtpd[1555078]: sql auxprop plugin using mysql engine Dec 14 17:40:53 ispc saslauthd[1555080]: pam_mysql - SELECT returned no result. Dec 14 17:40:53 ispc saslauthd[1555080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:40:53 ispc saslauthd[1555080]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:41:01 ispc CRON[1555087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:41:02 ispc CRON[1555087]: pam_unix(cron:session): session closed for user root Dec 14 17:41:26 ispc saslauthd[1555107]: pam_mysql - SELECT returned no result. Dec 14 17:41:26 ispc saslauthd[1555107]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:41:26 ispc saslauthd[1555107]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:41:26 ispc saslauthd[1555108]: pam_mysql - SELECT returned no result. Dec 14 17:41:26 ispc saslauthd[1555108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:41:26 ispc saslauthd[1555108]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:41:31 ispc saslauthd[1555109]: pam_mysql - SELECT returned no result. Dec 14 17:41:31 ispc saslauthd[1555109]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:41:31 ispc saslauthd[1555109]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:41:36 ispc saslauthd[1555114]: pam_mysql - SELECT returned no result. Dec 14 17:41:36 ispc saslauthd[1555114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:41:36 ispc saslauthd[1555114]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:41:40 ispc saslauthd[1555115]: pam_mysql - SELECT returned no result. Dec 14 17:41:40 ispc saslauthd[1555115]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:41:40 ispc saslauthd[1555115]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:42:01 ispc CRON[1555124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:42:03 ispc CRON[1555124]: pam_unix(cron:session): session closed for user root Dec 14 17:42:57 ispc postfix/smtpd[1555172]: sql auxprop plugin using mysql engine Dec 14 17:43:01 ispc CRON[1555174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:43:02 ispc CRON[1555174]: pam_unix(cron:session): session closed for user root Dec 14 17:44:01 ispc CRON[1555213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:44:02 ispc CRON[1555213]: pam_unix(cron:session): session closed for user root Dec 14 17:44:13 ispc sshd[1555228]: Invalid user antiqkabinet from 77.90.185.40 Dec 14 17:44:14 ispc postfix/smtpd[1555230]: sql auxprop plugin using mysql engine Dec 14 17:44:26 ispc saslauthd[1555241]: pam_mysql - SELECT returned no result. Dec 14 17:44:26 ispc saslauthd[1555241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:44:26 ispc saslauthd[1555241]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:45:01 ispc CRON[1555257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:45:01 ispc CRON[1555258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:45:01 ispc CRON[1555259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:45:01 ispc CRON[1555260]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:45:01 ispc CRON[1555258]: pam_unix(cron:session): session closed for user root Dec 14 17:45:01 ispc CRON[1555260]: pam_unix(cron:session): session closed for user getmail Dec 14 17:45:02 ispc CRON[1555259]: pam_unix(cron:session): session closed for user root Dec 14 17:45:03 ispc CRON[1555257]: pam_unix(cron:session): session closed for user root Dec 14 17:46:01 ispc CRON[1555360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:46:01 ispc CRON[1555360]: pam_unix(cron:session): session closed for user root Dec 14 17:46:22 ispc sshd[1555382]: Invalid user blceu from 51.91.247.10 Dec 14 17:47:01 ispc CRON[1555403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:47:02 ispc CRON[1555403]: pam_unix(cron:session): session closed for user root Dec 14 17:48:01 ispc CRON[1555449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:48:02 ispc CRON[1555449]: pam_unix(cron:session): session closed for user root Dec 14 17:48:59 ispc sshd[1555485]: Invalid user racingkennel from 185.12.204.239 Dec 14 17:49:01 ispc CRON[1555493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:49:02 ispc CRON[1555493]: pam_unix(cron:session): session closed for user root Dec 14 17:49:35 ispc sshd[1555522]: Invalid user martof from 51.159.91.86 Dec 14 17:50:01 ispc CRON[1555540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:50:01 ispc CRON[1555541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:50:01 ispc CRON[1555542]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 17:50:01 ispc CRON[1555544]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:50:01 ispc CRON[1555543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:50:01 ispc CRON[1555542]: pam_unix(cron:session): session closed for user www-data Dec 14 17:50:01 ispc CRON[1555541]: pam_unix(cron:session): session closed for user root Dec 14 17:50:01 ispc CRON[1555544]: pam_unix(cron:session): session closed for user getmail Dec 14 17:50:01 ispc CRON[1555543]: pam_unix(cron:session): session closed for user root Dec 14 17:50:02 ispc CRON[1555540]: pam_unix(cron:session): session closed for user root Dec 14 17:51:01 ispc CRON[1555647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:51:01 ispc CRON[1555647]: pam_unix(cron:session): session closed for user root Dec 14 17:51:27 ispc CRON[1554524]: pam_unix(cron:session): session closed for user root Dec 14 17:51:27 ispc postfix/smtpd[1555670]: sql auxprop plugin using mysql engine Dec 14 17:52:01 ispc CRON[1555675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:52:03 ispc CRON[1555675]: pam_unix(cron:session): session closed for user root Dec 14 17:53:01 ispc CRON[1555701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:53:01 ispc saslauthd[1555709]: pam_mysql - SELECT returned no result. Dec 14 17:53:01 ispc saslauthd[1555709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 17:53:01 ispc saslauthd[1555709]: do_auth : auth failure: [user=s1stem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 17:53:02 ispc CRON[1555701]: pam_unix(cron:session): session closed for user root Dec 14 17:53:02 ispc postfix/smtpd[1555712]: sql auxprop plugin using mysql engine Dec 14 17:54:01 ispc CRON[1555718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:54:01 ispc CRON[1555718]: pam_unix(cron:session): session closed for user root Dec 14 17:54:48 ispc sshd[1555733]: Invalid user martof from 43.135.148.156 Dec 14 17:54:57 ispc sshd[1555738]: Invalid user tshombeknife from 175.125.95.234 Dec 14 17:55:01 ispc CRON[1555740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:55:01 ispc CRON[1555741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:55:01 ispc CRON[1555742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:55:01 ispc CRON[1555743]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 17:55:01 ispc CRON[1555741]: pam_unix(cron:session): session closed for user root Dec 14 17:55:01 ispc CRON[1555743]: pam_unix(cron:session): session closed for user getmail Dec 14 17:55:03 ispc CRON[1555740]: pam_unix(cron:session): session closed for user root Dec 14 17:55:29 ispc sshd[1555852]: Invalid user klape from 77.241.18.2 Dec 14 17:55:30 ispc sshd[1555854]: Invalid user ubuntu from 77.241.18.2 Dec 14 17:55:39 ispc CRON[1555742]: pam_unix(cron:session): session closed for user root Dec 14 17:55:40 ispc sshd[1555857]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 17:56:01 ispc CRON[1555861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:57:01 ispc CRON[1555896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:57:01 ispc CRON[1555896]: pam_unix(cron:session): session closed for user root Dec 14 17:58:01 ispc CRON[1555944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:58:03 ispc CRON[1555944]: pam_unix(cron:session): session closed for user root Dec 14 17:58:37 ispc sshd[1555975]: Invalid user from 64.62.197.25 Dec 14 17:59:01 ispc CRON[1555988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 17:59:02 ispc CRON[1555988]: pam_unix(cron:session): session closed for user root Dec 14 18:00:01 ispc CRON[1556025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:00:01 ispc CRON[1556026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:00:01 ispc CRON[1556027]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:00:01 ispc CRON[1556028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:00:01 ispc CRON[1556029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:00:01 ispc CRON[1556030]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:00:01 ispc CRON[1556027]: pam_unix(cron:session): session closed for user www-data Dec 14 18:00:01 ispc CRON[1556026]: pam_unix(cron:session): session closed for user root Dec 14 18:00:01 ispc CRON[1556030]: pam_unix(cron:session): session closed for user getmail Dec 14 18:00:02 ispc CRON[1556028]: pam_unix(cron:session): session closed for user root Dec 14 18:00:02 ispc CRON[1556029]: pam_unix(cron:session): session closed for user root Dec 14 18:00:03 ispc CRON[1556025]: pam_unix(cron:session): session closed for user root Dec 14 18:01:01 ispc CRON[1556212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:01:01 ispc CRON[1556212]: pam_unix(cron:session): session closed for user root Dec 14 18:02:01 ispc CRON[1556253]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 18:02:01 ispc CRON[1556254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:02:03 ispc CRON[1556254]: pam_unix(cron:session): session closed for user root Dec 14 18:03:01 ispc CRON[1557218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:03:02 ispc CRON[1557218]: pam_unix(cron:session): session closed for user root Dec 14 18:03:10 ispc CRON[1556253]: pam_unix(cron:session): session closed for user logcheck Dec 14 18:03:15 ispc postfix/smtpd[1557333]: sql auxprop plugin using mysql engine Dec 14 18:04:01 ispc CRON[1557358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:04:02 ispc CRON[1557358]: pam_unix(cron:session): session closed for user root Dec 14 18:04:59 ispc sshd[1557392]: Invalid user matlbula from 77.90.185.40 Dec 14 18:05:01 ispc CRON[1557398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:05:01 ispc CRON[1557399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:05:01 ispc CRON[1557400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:05:01 ispc CRON[1557401]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:05:01 ispc CRON[1557399]: pam_unix(cron:session): session closed for user root Dec 14 18:05:01 ispc CRON[1557401]: pam_unix(cron:session): session closed for user getmail Dec 14 18:05:02 ispc CRON[1557400]: pam_unix(cron:session): session closed for user root Dec 14 18:05:03 ispc CRON[1557398]: pam_unix(cron:session): session closed for user root Dec 14 18:06:01 ispc CRON[1557496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:06:02 ispc CRON[1557496]: pam_unix(cron:session): session closed for user root Dec 14 18:06:25 ispc postfix/smtpd[1557520]: sql auxprop plugin using mysql engine Dec 14 18:06:52 ispc postfix/smtpd[1557537]: sql auxprop plugin using mysql engine Dec 14 18:06:53 ispc saslauthd[1557539]: pam_mysql - SELECT returned no result. Dec 14 18:06:53 ispc saslauthd[1557539]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:06:53 ispc saslauthd[1557539]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:07:02 ispc CRON[1557540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:07:02 ispc CRON[1557540]: pam_unix(cron:session): session closed for user root Dec 14 18:07:27 ispc postfix/smtpd[1557563]: sql auxprop plugin using mysql engine Dec 14 18:07:58 ispc saslauthd[1557589]: pam_mysql - SELECT returned no result. Dec 14 18:07:58 ispc saslauthd[1557589]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:07:58 ispc saslauthd[1557589]: do_auth : auth failure: [user=sa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:08:01 ispc CRON[1557590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:08:02 ispc CRON[1557590]: pam_unix(cron:session): session closed for user root Dec 14 18:09:01 ispc CRON[1557631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:09:01 ispc CRON[1557632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:09:01 ispc CRON[1557631]: pam_unix(cron:session): session closed for user root Dec 14 18:09:02 ispc CRON[1557632]: pam_unix(cron:session): session closed for user root Dec 14 18:09:16 ispc sshd[1557661]: Invalid user blceu from 116.120.58.228 Dec 14 18:09:57 ispc postfix/smtpd[1557683]: sql auxprop plugin using mysql engine Dec 14 18:09:58 ispc saslauthd[1557685]: pam_mysql - SELECT returned no result. Dec 14 18:09:58 ispc saslauthd[1557685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:09:58 ispc saslauthd[1557685]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:10:01 ispc CRON[1557686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:10:01 ispc CRON[1557687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:10:01 ispc CRON[1557688]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:10:01 ispc CRON[1557689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:10:01 ispc CRON[1557690]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:10:01 ispc CRON[1557688]: pam_unix(cron:session): session closed for user www-data Dec 14 18:10:01 ispc CRON[1557687]: pam_unix(cron:session): session closed for user root Dec 14 18:10:01 ispc CRON[1557690]: pam_unix(cron:session): session closed for user getmail Dec 14 18:10:02 ispc CRON[1557689]: pam_unix(cron:session): session closed for user root Dec 14 18:10:02 ispc CRON[1557686]: pam_unix(cron:session): session closed for user root Dec 14 18:11:01 ispc CRON[1557789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:11:02 ispc CRON[1557789]: pam_unix(cron:session): session closed for user root Dec 14 18:12:01 ispc CRON[1557832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:12:02 ispc CRON[1557832]: pam_unix(cron:session): session closed for user root Dec 14 18:12:57 ispc postfix/smtpd[1557877]: sql auxprop plugin using mysql engine Dec 14 18:12:58 ispc saslauthd[1557879]: pam_mysql - SELECT returned no result. Dec 14 18:12:58 ispc saslauthd[1557879]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:12:58 ispc saslauthd[1557879]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:13:01 ispc CRON[1557880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:13:01 ispc CRON[1557880]: pam_unix(cron:session): session closed for user root Dec 14 18:13:26 ispc saslauthd[1557900]: pam_mysql - SELECT returned no result. Dec 14 18:13:26 ispc saslauthd[1557900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:13:26 ispc saslauthd[1557900]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:14:02 ispc CRON[1557917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:14:02 ispc CRON[1557917]: pam_unix(cron:session): session closed for user root Dec 14 18:14:35 ispc postfix/smtpd[1557944]: sql auxprop plugin using mysql engine Dec 14 18:15:01 ispc CRON[1557962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:15:01 ispc CRON[1557963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:15:01 ispc CRON[1557964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:15:01 ispc CRON[1557965]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:15:01 ispc CRON[1557963]: pam_unix(cron:session): session closed for user root Dec 14 18:15:01 ispc CRON[1557965]: pam_unix(cron:session): session closed for user getmail Dec 14 18:15:02 ispc CRON[1557964]: pam_unix(cron:session): session closed for user root Dec 14 18:15:02 ispc CRON[1557962]: pam_unix(cron:session): session closed for user root Dec 14 18:15:38 ispc postfix/smtpd[1558055]: sql auxprop plugin using mysql engine Dec 14 18:15:39 ispc saslauthd[1558057]: pam_mysql - SELECT returned no result. Dec 14 18:15:39 ispc saslauthd[1558057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:15:39 ispc saslauthd[1558057]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:01 ispc CRON[1558070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:16:02 ispc CRON[1558070]: pam_unix(cron:session): session closed for user root Dec 14 18:16:13 ispc saslauthd[1558085]: pam_mysql - SELECT returned no result. Dec 14 18:16:13 ispc saslauthd[1558085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:13 ispc saslauthd[1558085]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:15 ispc saslauthd[1558086]: pam_mysql - SELECT returned no result. Dec 14 18:16:15 ispc saslauthd[1558086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:15 ispc saslauthd[1558086]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:21 ispc CRON[1555861]: pam_unix(cron:session): session closed for user root Dec 14 18:16:25 ispc saslauthd[1558092]: pam_mysql - SELECT returned no result. Dec 14 18:16:25 ispc saslauthd[1558092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:25 ispc saslauthd[1558092]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:35 ispc saslauthd[1558096]: pam_mysql - SELECT returned no result. Dec 14 18:16:35 ispc saslauthd[1558096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:35 ispc saslauthd[1558096]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:45 ispc saslauthd[1558098]: pam_mysql - SELECT returned no result. Dec 14 18:16:45 ispc saslauthd[1558098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:45 ispc saslauthd[1558098]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:46 ispc postfix/smtpd[1558099]: sql auxprop plugin using mysql engine Dec 14 18:16:46 ispc saslauthd[1558102]: pam_mysql - SELECT returned no result. Dec 14 18:16:46 ispc saslauthd[1558102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:46 ispc saslauthd[1558102]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:47 ispc saslauthd[1558103]: pam_mysql - SELECT returned no result. Dec 14 18:16:47 ispc saslauthd[1558103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:47 ispc saslauthd[1558103]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:16:59 ispc saslauthd[1558104]: pam_mysql - SELECT returned no result. Dec 14 18:16:59 ispc saslauthd[1558104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:16:59 ispc saslauthd[1558104]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:01 ispc CRON[1558105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:17:02 ispc CRON[1558105]: pam_unix(cron:session): session closed for user root Dec 14 18:17:02 ispc saslauthd[1558117]: pam_mysql - SELECT returned no result. Dec 14 18:17:02 ispc saslauthd[1558117]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:02 ispc saslauthd[1558117]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:05 ispc saslauthd[1558118]: pam_mysql - SELECT returned no result. Dec 14 18:17:05 ispc saslauthd[1558118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:05 ispc saslauthd[1558118]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:09 ispc sshd[1558120]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 18:17:09 ispc sshd[1558120]: Invalid user ziplines from 103.28.37.227 Dec 14 18:17:14 ispc saslauthd[1558122]: pam_mysql - SELECT returned no result. Dec 14 18:17:14 ispc saslauthd[1558122]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:14 ispc saslauthd[1558122]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:15 ispc saslauthd[1558123]: pam_mysql - SELECT returned no result. Dec 14 18:17:15 ispc saslauthd[1558123]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:15 ispc saslauthd[1558123]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:16 ispc saslauthd[1558124]: pam_mysql - SELECT returned no result. Dec 14 18:17:16 ispc saslauthd[1558124]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:16 ispc saslauthd[1558124]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:17 ispc saslauthd[1558125]: pam_mysql - SELECT returned no result. Dec 14 18:17:17 ispc saslauthd[1558125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:17 ispc saslauthd[1558125]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:19 ispc saslauthd[1558126]: pam_mysql - SELECT returned no result. Dec 14 18:17:19 ispc saslauthd[1558126]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:19 ispc saslauthd[1558126]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:21 ispc saslauthd[1558127]: pam_mysql - SELECT returned no result. Dec 14 18:17:21 ispc saslauthd[1558127]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:21 ispc saslauthd[1558127]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:22 ispc saslauthd[1558128]: pam_mysql - SELECT returned no result. Dec 14 18:17:22 ispc saslauthd[1558128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:22 ispc saslauthd[1558128]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:17:53 ispc saslauthd[1558139]: pam_mysql - SELECT returned no result. Dec 14 18:17:53 ispc saslauthd[1558139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:17:53 ispc saslauthd[1558139]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:18:01 ispc CRON[1558140]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 18:18:01 ispc CRON[1558141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:18:02 ispc CRON[1558141]: pam_unix(cron:session): session closed for user root Dec 14 18:18:04 ispc CRON[1558140]: pam_unix(cron:session): session closed for user amavis Dec 14 18:18:05 ispc postfix/smtpd[1558166]: sql auxprop plugin using mysql engine Dec 14 18:18:46 ispc saslauthd[1558172]: pam_mysql - SELECT returned no result. Dec 14 18:18:46 ispc saslauthd[1558172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:18:46 ispc saslauthd[1558172]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:19:01 ispc CRON[1558176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:19:02 ispc CRON[1558176]: pam_unix(cron:session): session closed for user root Dec 14 18:20:01 ispc CRON[1558191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:20:01 ispc CRON[1558192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:20:01 ispc CRON[1558193]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:20:01 ispc CRON[1558194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:20:01 ispc CRON[1558195]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:20:01 ispc CRON[1558193]: pam_unix(cron:session): session closed for user www-data Dec 14 18:20:01 ispc CRON[1558192]: pam_unix(cron:session): session closed for user root Dec 14 18:20:01 ispc CRON[1558195]: pam_unix(cron:session): session closed for user getmail Dec 14 18:20:02 ispc CRON[1558191]: pam_unix(cron:session): session closed for user root Dec 14 18:20:32 ispc CRON[1558194]: pam_unix(cron:session): session closed for user root Dec 14 18:21:01 ispc CRON[1558303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:21:01 ispc CRON[1558304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:21:01 ispc CRON[1558303]: pam_unix(cron:session): session closed for user root Dec 14 18:21:59 ispc postfix/smtpd[1558341]: sql auxprop plugin using mysql engine Dec 14 18:22:01 ispc CRON[1558343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:22:03 ispc CRON[1558343]: pam_unix(cron:session): session closed for user root Dec 14 18:23:00 ispc saslauthd[1558392]: pam_mysql - SELECT returned no result. Dec 14 18:23:00 ispc saslauthd[1558392]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:23:00 ispc saslauthd[1558392]: do_auth : auth failure: [user=sadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:23:01 ispc CRON[1558393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:23:01 ispc CRON[1558393]: pam_unix(cron:session): session closed for user root Dec 14 18:24:01 ispc CRON[1558430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:24:02 ispc CRON[1558430]: pam_unix(cron:session): session closed for user root Dec 14 18:24:08 ispc sshd[1558441]: Invalid user klape from 13.70.185.98 Dec 14 18:24:55 ispc sshd[1558469]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 18:24:55 ispc sshd[1558469]: Invalid user martof from 103.28.37.227 Dec 14 18:25:01 ispc CRON[1558481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:25:01 ispc CRON[1558482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:25:01 ispc CRON[1558483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:25:01 ispc CRON[1558484]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:25:01 ispc CRON[1558482]: pam_unix(cron:session): session closed for user root Dec 14 18:25:01 ispc CRON[1558484]: pam_unix(cron:session): session closed for user getmail Dec 14 18:25:02 ispc CRON[1558483]: pam_unix(cron:session): session closed for user root Dec 14 18:25:03 ispc CRON[1558481]: pam_unix(cron:session): session closed for user root Dec 14 18:26:01 ispc CRON[1558586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:26:02 ispc CRON[1558586]: pam_unix(cron:session): session closed for user root Dec 14 18:26:05 ispc sshd[1558598]: Invalid user ziplines from 43.135.148.156 Dec 14 18:27:01 ispc CRON[1558631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:27:01 ispc CRON[1558631]: pam_unix(cron:session): session closed for user root Dec 14 18:28:01 ispc CRON[1558678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:28:02 ispc CRON[1558678]: pam_unix(cron:session): session closed for user root Dec 14 18:28:18 ispc postfix/smtpd[1558698]: sql auxprop plugin using mysql engine Dec 14 18:28:19 ispc saslauthd[1558701]: pam_mysql - SELECT returned no result. Dec 14 18:28:19 ispc saslauthd[1558701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:28:19 ispc saslauthd[1558701]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:28:36 ispc postfix/smtpd[1558710]: sql auxprop plugin using mysql engine Dec 14 18:29:01 ispc CRON[1558725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:29:01 ispc CRON[1558725]: pam_unix(cron:session): session closed for user root Dec 14 18:29:21 ispc sshd[1558746]: Invalid user klape from 103.164.20.29 Dec 14 18:29:22 ispc sshd[1558748]: Invalid user ubuntu from 103.164.20.29 Dec 14 18:30:01 ispc CRON[1558770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:30:01 ispc CRON[1558771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:30:01 ispc CRON[1558772]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:30:01 ispc CRON[1558773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:30:01 ispc CRON[1558774]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:30:01 ispc CRON[1558771]: pam_unix(cron:session): session closed for user root Dec 14 18:30:01 ispc CRON[1558772]: pam_unix(cron:session): session closed for user www-data Dec 14 18:30:02 ispc CRON[1558774]: pam_unix(cron:session): session closed for user getmail Dec 14 18:30:02 ispc CRON[1558773]: pam_unix(cron:session): session closed for user root Dec 14 18:30:03 ispc CRON[1558770]: pam_unix(cron:session): session closed for user root Dec 14 18:31:01 ispc CRON[1558878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:31:02 ispc CRON[1558878]: pam_unix(cron:session): session closed for user root Dec 14 18:31:08 ispc postfix/smtpd[1558895]: sql auxprop plugin using mysql engine Dec 14 18:31:09 ispc saslauthd[1558897]: pam_mysql - SELECT returned no result. Dec 14 18:31:09 ispc saslauthd[1558897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:31:09 ispc saslauthd[1558897]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:31:13 ispc saslauthd[1558898]: pam_mysql - SELECT returned no result. Dec 14 18:31:13 ispc saslauthd[1558898]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:31:13 ispc saslauthd[1558898]: do_auth : auth failure: [user=postmaster@matl-bula.org] [service=smtp] [realm=matl-bula.org] [mech=pam] [reason=PAM auth error] Dec 14 18:32:01 ispc CRON[1558922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:32:02 ispc CRON[1558922]: pam_unix(cron:session): session closed for user root Dec 14 18:33:01 ispc CRON[1558968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:33:02 ispc CRON[1558968]: pam_unix(cron:session): session closed for user root Dec 14 18:34:01 ispc CRON[1559010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:34:02 ispc CRON[1559010]: pam_unix(cron:session): session closed for user root Dec 14 18:35:01 ispc CRON[1559048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:35:01 ispc CRON[1559049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:35:01 ispc CRON[1559050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:35:01 ispc CRON[1559051]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:35:01 ispc CRON[1559049]: pam_unix(cron:session): session closed for user root Dec 14 18:35:01 ispc CRON[1559051]: pam_unix(cron:session): session closed for user getmail Dec 14 18:35:02 ispc CRON[1559050]: pam_unix(cron:session): session closed for user root Dec 14 18:35:02 ispc CRON[1559048]: pam_unix(cron:session): session closed for user root Dec 14 18:35:22 ispc postfix/smtpd[1559133]: sql auxprop plugin using mysql engine Dec 14 18:35:22 ispc saslauthd[1559136]: pam_mysql - SELECT returned no result. Dec 14 18:35:22 ispc saslauthd[1559136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:35:22 ispc saslauthd[1559136]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:36:01 ispc CRON[1559156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:36:02 ispc CRON[1559156]: pam_unix(cron:session): session closed for user root Dec 14 18:36:30 ispc sshd[1559175]: Invalid user martof from 148.216.54.17 Dec 14 18:37:01 ispc CRON[1559191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:37:01 ispc CRON[1559191]: pam_unix(cron:session): session closed for user root Dec 14 18:37:35 ispc postfix/smtpd[1559221]: sql auxprop plugin using mysql engine Dec 14 18:37:40 ispc saslauthd[1559226]: pam_mysql - SELECT returned no result. Dec 14 18:37:40 ispc saslauthd[1559226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:37:40 ispc saslauthd[1559226]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:37:52 ispc saslauthd[1559241]: pam_mysql - SELECT returned no result. Dec 14 18:37:52 ispc saslauthd[1559241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:37:52 ispc saslauthd[1559241]: do_auth : auth failure: [user=satan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:38:01 ispc CRON[1559246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:38:02 ispc saslauthd[1559254]: pam_mysql - SELECT returned no result. Dec 14 18:38:02 ispc saslauthd[1559254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:38:02 ispc saslauthd[1559254]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:38:02 ispc CRON[1559246]: pam_unix(cron:session): session closed for user root Dec 14 18:38:07 ispc saslauthd[1559263]: pam_mysql - SELECT returned no result. Dec 14 18:38:07 ispc saslauthd[1559263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:38:07 ispc saslauthd[1559263]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:38:13 ispc saslauthd[1559264]: pam_mysql - SELECT returned no result. Dec 14 18:38:13 ispc saslauthd[1559264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:38:13 ispc saslauthd[1559264]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:38:25 ispc saslauthd[1559274]: pam_mysql - SELECT returned no result. Dec 14 18:38:25 ispc saslauthd[1559274]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:38:25 ispc saslauthd[1559274]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:38:30 ispc saslauthd[1559275]: pam_mysql - SELECT returned no result. Dec 14 18:38:30 ispc saslauthd[1559275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:38:30 ispc saslauthd[1559275]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:39:01 ispc CRON[1559291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:39:01 ispc CRON[1559292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:39:01 ispc CRON[1559291]: pam_unix(cron:session): session closed for user root Dec 14 18:39:02 ispc CRON[1559292]: pam_unix(cron:session): session closed for user root Dec 14 18:39:36 ispc sshd[1559326]: Invalid user martof from 116.120.58.228 Dec 14 18:40:01 ispc CRON[1559342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:40:01 ispc CRON[1559343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:40:01 ispc CRON[1559344]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:40:01 ispc CRON[1559345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:40:01 ispc CRON[1559346]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:40:01 ispc CRON[1559343]: pam_unix(cron:session): session closed for user root Dec 14 18:40:01 ispc CRON[1559344]: pam_unix(cron:session): session closed for user www-data Dec 14 18:40:01 ispc CRON[1559346]: pam_unix(cron:session): session closed for user getmail Dec 14 18:40:02 ispc CRON[1559345]: pam_unix(cron:session): session closed for user root Dec 14 18:40:02 ispc CRON[1559342]: pam_unix(cron:session): session closed for user root Dec 14 18:41:01 ispc CRON[1559455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:41:02 ispc CRON[1559455]: pam_unix(cron:session): session closed for user root Dec 14 18:41:02 ispc sshd[1559453]: Invalid user blceu from 49.247.24.89 Dec 14 18:41:29 ispc postfix/smtpd[1559477]: sql auxprop plugin using mysql engine Dec 14 18:41:29 ispc CRON[1558304]: pam_unix(cron:session): session closed for user root Dec 14 18:41:36 ispc sshd[1559481]: Invalid user martof from 49.247.24.89 Dec 14 18:42:01 ispc CRON[1559486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:42:02 ispc CRON[1559486]: pam_unix(cron:session): session closed for user root Dec 14 18:43:01 ispc CRON[1559509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:43:02 ispc CRON[1559509]: pam_unix(cron:session): session closed for user root Dec 14 18:44:01 ispc CRON[1559530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:44:02 ispc CRON[1559530]: pam_unix(cron:session): session closed for user root Dec 14 18:45:01 ispc CRON[1559548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:45:01 ispc CRON[1559549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:45:01 ispc CRON[1559550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:45:01 ispc CRON[1559551]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:45:01 ispc CRON[1559549]: pam_unix(cron:session): session closed for user root Dec 14 18:45:01 ispc CRON[1559551]: pam_unix(cron:session): session closed for user getmail Dec 14 18:45:01 ispc CRON[1559548]: pam_unix(cron:session): session closed for user root Dec 14 18:45:32 ispc sshd[1559736]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 18:45:43 ispc CRON[1559550]: pam_unix(cron:session): session closed for user root Dec 14 18:46:01 ispc CRON[1559740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:47:01 ispc CRON[1559778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:47:02 ispc CRON[1559778]: pam_unix(cron:session): session closed for user root Dec 14 18:48:01 ispc CRON[1559826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:48:01 ispc CRON[1559826]: pam_unix(cron:session): session closed for user root Dec 14 18:48:17 ispc postfix/smtpd[1559846]: sql auxprop plugin using mysql engine Dec 14 18:48:17 ispc saslauthd[1559850]: pam_mysql - SELECT returned no result. Dec 14 18:48:17 ispc saslauthd[1559850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:48:17 ispc saslauthd[1559850]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:49:01 ispc CRON[1559872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:49:02 ispc CRON[1559872]: pam_unix(cron:session): session closed for user root Dec 14 18:50:01 ispc CRON[1559911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:50:01 ispc CRON[1559912]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 18:50:01 ispc CRON[1559913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:50:01 ispc CRON[1559910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:50:01 ispc CRON[1559914]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:50:01 ispc CRON[1559911]: pam_unix(cron:session): session closed for user root Dec 14 18:50:01 ispc CRON[1559912]: pam_unix(cron:session): session closed for user www-data Dec 14 18:50:01 ispc CRON[1559914]: pam_unix(cron:session): session closed for user getmail Dec 14 18:50:01 ispc CRON[1559913]: pam_unix(cron:session): session closed for user root Dec 14 18:50:01 ispc CRON[1559910]: pam_unix(cron:session): session closed for user root Dec 14 18:51:01 ispc CRON[1560017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:51:02 ispc CRON[1560017]: pam_unix(cron:session): session closed for user root Dec 14 18:51:41 ispc sshd[1560047]: Invalid user ziplines from 51.91.247.10 Dec 14 18:52:01 ispc CRON[1560058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:52:01 ispc CRON[1560059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:52:02 ispc CRON[1560059]: pam_unix(cron:session): session closed for user root Dec 14 18:52:47 ispc postfix/smtpd[1560100]: sql auxprop plugin using mysql engine Dec 14 18:52:48 ispc saslauthd[1560103]: pam_mysql - SELECT returned no result. Dec 14 18:52:48 ispc saslauthd[1560103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:52:48 ispc saslauthd[1560103]: do_auth : auth failure: [user=savelogs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 18:53:01 ispc CRON[1560108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:53:01 ispc CRON[1560108]: pam_unix(cron:session): session closed for user root Dec 14 18:54:01 ispc CRON[1560148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:54:02 ispc CRON[1560148]: pam_unix(cron:session): session closed for user root Dec 14 18:55:01 ispc CRON[1560189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:55:01 ispc CRON[1560190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:55:01 ispc CRON[1560191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:55:01 ispc CRON[1560192]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 18:55:01 ispc CRON[1560190]: pam_unix(cron:session): session closed for user root Dec 14 18:55:01 ispc CRON[1560192]: pam_unix(cron:session): session closed for user getmail Dec 14 18:55:01 ispc CRON[1560191]: pam_unix(cron:session): session closed for user root Dec 14 18:55:01 ispc CRON[1560189]: pam_unix(cron:session): session closed for user root Dec 14 18:55:18 ispc CRON[1560058]: pam_unix(cron:session): session closed for user root Dec 14 18:56:01 ispc CRON[1560293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:56:02 ispc CRON[1560293]: pam_unix(cron:session): session closed for user root Dec 14 18:57:01 ispc CRON[1560330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:57:01 ispc CRON[1560330]: pam_unix(cron:session): session closed for user root Dec 14 18:58:01 ispc CRON[1560379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:58:02 ispc CRON[1560379]: pam_unix(cron:session): session closed for user root Dec 14 18:58:53 ispc sshd[1560417]: Invalid user klape from 2.57.217.229 Dec 14 18:58:54 ispc sshd[1560419]: Invalid user ubuntu from 2.57.217.229 Dec 14 18:59:01 ispc CRON[1560422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 18:59:02 ispc CRON[1560422]: pam_unix(cron:session): session closed for user root Dec 14 18:59:09 ispc postfix/smtpd[1560437]: sql auxprop plugin using mysql engine Dec 14 18:59:10 ispc saslauthd[1560440]: pam_mysql - SELECT returned no result. Dec 14 18:59:10 ispc saslauthd[1560440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 18:59:10 ispc saslauthd[1560440]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:00:01 ispc CRON[1560465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:00:01 ispc CRON[1560468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:00:01 ispc CRON[1560467]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:00:01 ispc CRON[1560466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:00:01 ispc CRON[1560469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:00:01 ispc CRON[1560470]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:00:01 ispc CRON[1560467]: pam_unix(cron:session): session closed for user www-data Dec 14 19:00:01 ispc CRON[1560470]: pam_unix(cron:session): session closed for user getmail Dec 14 19:00:01 ispc CRON[1560466]: pam_unix(cron:session): session closed for user root Dec 14 19:00:01 ispc CRON[1560469]: pam_unix(cron:session): session closed for user root Dec 14 19:00:01 ispc CRON[1560465]: pam_unix(cron:session): session closed for user root Dec 14 19:00:02 ispc CRON[1560468]: pam_unix(cron:session): session closed for user root Dec 14 19:01:01 ispc CRON[1560651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:01:02 ispc CRON[1560651]: pam_unix(cron:session): session closed for user root Dec 14 19:02:01 ispc CRON[1560691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:02:01 ispc CRON[1560690]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 19:02:01 ispc CRON[1560691]: pam_unix(cron:session): session closed for user root Dec 14 19:03:01 ispc CRON[1561558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:03:02 ispc CRON[1561558]: pam_unix(cron:session): session closed for user root Dec 14 19:03:31 ispc CRON[1560690]: pam_unix(cron:session): session closed for user logcheck Dec 14 19:03:39 ispc postfix/smtpd[1561781]: sql auxprop plugin using mysql engine Dec 14 19:04:01 ispc CRON[1561795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:04:02 ispc CRON[1561795]: pam_unix(cron:session): session closed for user root Dec 14 19:04:08 ispc postfix/smtpd[1561810]: sql auxprop plugin using mysql engine Dec 14 19:04:09 ispc saslauthd[1561813]: pam_mysql - SELECT returned no result. Dec 14 19:04:09 ispc saslauthd[1561813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:04:09 ispc saslauthd[1561813]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:05:01 ispc CRON[1561835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:05:01 ispc CRON[1561836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:05:01 ispc CRON[1561838]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:05:01 ispc CRON[1561837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:05:01 ispc CRON[1561836]: pam_unix(cron:session): session closed for user root Dec 14 19:05:01 ispc CRON[1561838]: pam_unix(cron:session): session closed for user getmail Dec 14 19:05:02 ispc CRON[1561837]: pam_unix(cron:session): session closed for user root Dec 14 19:05:03 ispc CRON[1561835]: pam_unix(cron:session): session closed for user root Dec 14 19:06:01 ispc CRON[1561940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:06:01 ispc CRON[1561940]: pam_unix(cron:session): session closed for user root Dec 14 19:06:28 ispc postfix/smtpd[1561962]: sql auxprop plugin using mysql engine Dec 14 19:06:29 ispc CRON[1559740]: pam_unix(cron:session): session closed for user root Dec 14 19:07:01 ispc CRON[1561966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:07:01 ispc CRON[1561966]: pam_unix(cron:session): session closed for user root Dec 14 19:07:16 ispc sshd[1561981]: Invalid user ziplines from 116.120.58.228 Dec 14 19:07:36 ispc saslauthd[1561986]: pam_mysql - SELECT returned no result. Dec 14 19:07:36 ispc saslauthd[1561986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:07:36 ispc saslauthd[1561986]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:07:44 ispc saslauthd[1561993]: pam_mysql - SELECT returned no result. Dec 14 19:07:44 ispc saslauthd[1561993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:07:44 ispc saslauthd[1561993]: do_auth : auth failure: [user=scott] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:07:47 ispc postfix/smtpd[1561994]: sql auxprop plugin using mysql engine Dec 14 19:07:52 ispc postfix/smtpd[1562001]: sql auxprop plugin using mysql engine Dec 14 19:08:01 ispc CRON[1562003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:08:02 ispc CRON[1562003]: pam_unix(cron:session): session closed for user root Dec 14 19:09:01 ispc CRON[1562021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:09:01 ispc CRON[1562020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:09:01 ispc CRON[1562020]: pam_unix(cron:session): session closed for user root Dec 14 19:09:02 ispc CRON[1562021]: pam_unix(cron:session): session closed for user root Dec 14 19:09:29 ispc saslauthd[1562047]: pam_mysql - SELECT returned no result. Dec 14 19:09:29 ispc saslauthd[1562047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:09:29 ispc saslauthd[1562047]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:10:01 ispc CRON[1562048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:10:01 ispc CRON[1562051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:10:01 ispc CRON[1562050]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:10:01 ispc CRON[1562052]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:10:01 ispc CRON[1562049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:10:01 ispc CRON[1562050]: pam_unix(cron:session): session closed for user www-data Dec 14 19:10:01 ispc CRON[1562049]: pam_unix(cron:session): session closed for user root Dec 14 19:10:01 ispc CRON[1562052]: pam_unix(cron:session): session closed for user getmail Dec 14 19:10:03 ispc CRON[1562048]: pam_unix(cron:session): session closed for user root Dec 14 19:10:33 ispc CRON[1562051]: pam_unix(cron:session): session closed for user root Dec 14 19:10:34 ispc saslauthd[1562159]: pam_mysql - SELECT returned no result. Dec 14 19:10:34 ispc saslauthd[1562159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:10:34 ispc saslauthd[1562159]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:10:35 ispc saslauthd[1562162]: pam_mysql - SELECT returned no result. Dec 14 19:10:35 ispc saslauthd[1562162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:10:35 ispc saslauthd[1562162]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:10:38 ispc sshd[1562160]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 19:10:39 ispc saslauthd[1562163]: pam_mysql - SELECT returned no result. Dec 14 19:10:39 ispc saslauthd[1562163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:10:39 ispc saslauthd[1562163]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:10:57 ispc saslauthd[1562165]: pam_mysql - SELECT returned no result. Dec 14 19:10:57 ispc saslauthd[1562165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:10:57 ispc saslauthd[1562165]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:01 ispc CRON[1562167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:11:08 ispc postfix/smtpd[1562179]: sql auxprop plugin using mysql engine Dec 14 19:11:08 ispc saslauthd[1562181]: pam_mysql - SELECT returned no result. Dec 14 19:11:08 ispc saslauthd[1562181]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:08 ispc saslauthd[1562181]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:09 ispc saslauthd[1562182]: pam_mysql - SELECT returned no result. Dec 14 19:11:09 ispc saslauthd[1562182]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:09 ispc saslauthd[1562182]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:21 ispc saslauthd[1562189]: pam_mysql - SELECT returned no result. Dec 14 19:11:21 ispc saslauthd[1562189]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:22 ispc saslauthd[1562189]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:26 ispc saslauthd[1562194]: pam_mysql - SELECT returned no result. Dec 14 19:11:26 ispc saslauthd[1562194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:26 ispc saslauthd[1562194]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:32 ispc saslauthd[1562196]: pam_mysql - SELECT returned no result. Dec 14 19:11:32 ispc saslauthd[1562196]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:32 ispc saslauthd[1562196]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:39 ispc saslauthd[1562201]: pam_mysql - SELECT returned no result. Dec 14 19:11:39 ispc saslauthd[1562201]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:39 ispc saslauthd[1562201]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:39 ispc saslauthd[1562202]: pam_mysql - SELECT returned no result. Dec 14 19:11:39 ispc saslauthd[1562202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:39 ispc saslauthd[1562202]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:40 ispc saslauthd[1562203]: pam_mysql - SELECT returned no result. Dec 14 19:11:40 ispc saslauthd[1562203]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:40 ispc saslauthd[1562203]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:41 ispc saslauthd[1562204]: pam_mysql - SELECT returned no result. Dec 14 19:11:41 ispc saslauthd[1562204]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:41 ispc saslauthd[1562204]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:11:43 ispc saslauthd[1562205]: pam_mysql - SELECT returned no result. Dec 14 19:11:43 ispc saslauthd[1562205]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:11:43 ispc saslauthd[1562205]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:12:01 ispc CRON[1562214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:12:01 ispc CRON[1562214]: pam_unix(cron:session): session closed for user root Dec 14 19:12:10 ispc saslauthd[1562230]: pam_mysql - SELECT returned no result. Dec 14 19:12:10 ispc saslauthd[1562230]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:12:10 ispc saslauthd[1562230]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:13:01 ispc CRON[1562265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:13:02 ispc CRON[1562265]: pam_unix(cron:session): session closed for user root Dec 14 19:13:37 ispc saslauthd[1562295]: pam_mysql - SELECT returned no result. Dec 14 19:13:37 ispc saslauthd[1562295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:13:37 ispc saslauthd[1562295]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:14:01 ispc CRON[1562305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:14:02 ispc CRON[1562305]: pam_unix(cron:session): session closed for user root Dec 14 19:14:17 ispc saslauthd[1562325]: pam_mysql - SELECT returned no result. Dec 14 19:14:17 ispc saslauthd[1562325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:14:17 ispc saslauthd[1562325]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:14:22 ispc postfix/smtpd[1562326]: sql auxprop plugin using mysql engine Dec 14 19:14:34 ispc saslauthd[1562334]: pam_mysql - SELECT returned no result. Dec 14 19:14:34 ispc saslauthd[1562334]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:14:34 ispc saslauthd[1562334]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:15:01 ispc CRON[1562349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:15:01 ispc CRON[1562350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:15:01 ispc CRON[1562351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:15:01 ispc CRON[1562352]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:15:01 ispc CRON[1562350]: pam_unix(cron:session): session closed for user root Dec 14 19:15:01 ispc CRON[1562352]: pam_unix(cron:session): session closed for user getmail Dec 14 19:15:01 ispc CRON[1562351]: pam_unix(cron:session): session closed for user root Dec 14 19:15:02 ispc CRON[1562349]: pam_unix(cron:session): session closed for user root Dec 14 19:15:54 ispc saslauthd[1562448]: pam_mysql - SELECT returned no result. Dec 14 19:15:54 ispc saslauthd[1562448]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:15:54 ispc saslauthd[1562448]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:16:01 ispc CRON[1562454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:16:01 ispc CRON[1562454]: pam_unix(cron:session): session closed for user root Dec 14 19:17:01 ispc CRON[1562493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:17:02 ispc CRON[1562493]: pam_unix(cron:session): session closed for user root Dec 14 19:17:53 ispc sshd[1562534]: Invalid user blceu from 148.216.54.17 Dec 14 19:18:01 ispc CRON[1562537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:18:01 ispc CRON[1562537]: pam_unix(cron:session): session closed for user root Dec 14 19:18:42 ispc sshd[1562567]: Invalid user ubnt from 62.60.131.157 Dec 14 19:19:01 ispc CRON[1562578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:19:02 ispc CRON[1562578]: pam_unix(cron:session): session closed for user root Dec 14 19:19:52 ispc sshd[1562615]: Invalid user klape from 187.190.35.163 Dec 14 19:19:53 ispc sshd[1562617]: Invalid user ubuntu from 187.190.35.163 Dec 14 19:20:01 ispc CRON[1562626]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:20:01 ispc CRON[1562624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:20:01 ispc CRON[1562625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:20:01 ispc CRON[1562627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:20:01 ispc CRON[1562628]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:20:01 ispc CRON[1562625]: pam_unix(cron:session): session closed for user root Dec 14 19:20:01 ispc CRON[1562626]: pam_unix(cron:session): session closed for user www-data Dec 14 19:20:01 ispc CRON[1562628]: pam_unix(cron:session): session closed for user getmail Dec 14 19:20:01 ispc CRON[1562627]: pam_unix(cron:session): session closed for user root Dec 14 19:20:02 ispc CRON[1562624]: pam_unix(cron:session): session closed for user root Dec 14 19:20:07 ispc postfix/smtpd[1562707]: sql auxprop plugin using mysql engine Dec 14 19:20:07 ispc saslauthd[1562710]: pam_mysql - SELECT returned no result. Dec 14 19:20:07 ispc saslauthd[1562710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:20:07 ispc saslauthd[1562710]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:21:01 ispc CRON[1562735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:21:01 ispc CRON[1562736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:21:01 ispc CRON[1562735]: pam_unix(cron:session): session closed for user root Dec 14 19:21:02 ispc CRON[1562736]: pam_unix(cron:session): session closed for user root Dec 14 19:22:01 ispc CRON[1562778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:22:01 ispc CRON[1562778]: pam_unix(cron:session): session closed for user root Dec 14 19:22:29 ispc postfix/smtpd[1562804]: sql auxprop plugin using mysql engine Dec 14 19:22:31 ispc saslauthd[1562806]: pam_mysql - SELECT returned no result. Dec 14 19:22:31 ispc saslauthd[1562806]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:22:31 ispc saslauthd[1562806]: do_auth : auth failure: [user=secofr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:23:01 ispc CRON[1562830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:23:02 ispc CRON[1562830]: pam_unix(cron:session): session closed for user root Dec 14 19:23:52 ispc saslauthd[1562864]: pam_mysql - SELECT returned no result. Dec 14 19:23:52 ispc saslauthd[1562864]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:23:52 ispc saslauthd[1562864]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:24:01 ispc CRON[1562866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:24:01 ispc CRON[1562866]: pam_unix(cron:session): session closed for user root Dec 14 19:25:01 ispc CRON[1562908]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:25:01 ispc CRON[1562906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:25:01 ispc CRON[1562907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:25:01 ispc CRON[1562905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:25:01 ispc CRON[1562906]: pam_unix(cron:session): session closed for user root Dec 14 19:25:02 ispc CRON[1562908]: pam_unix(cron:session): session closed for user getmail Dec 14 19:25:02 ispc CRON[1562907]: pam_unix(cron:session): session closed for user root Dec 14 19:25:03 ispc CRON[1562905]: pam_unix(cron:session): session closed for user root Dec 14 19:25:08 ispc sshd[1562985]: Did not receive identification string from 134.122.53.16 Dec 14 19:26:01 ispc CRON[1563008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:26:03 ispc CRON[1563008]: pam_unix(cron:session): session closed for user root Dec 14 19:26:04 ispc sshd[1563012]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 19:26:06 ispc sshd[1563025]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 19:26:06 ispc sshd[1563025]: Invalid user klape from 189.89.20.45 Dec 14 19:26:07 ispc sshd[1563027]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 19:26:07 ispc sshd[1563027]: Invalid user ubuntu from 189.89.20.45 Dec 14 19:27:01 ispc CRON[1563053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:27:02 ispc CRON[1563053]: pam_unix(cron:session): session closed for user root Dec 14 19:28:01 ispc CRON[1563101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:28:01 ispc CRON[1563101]: pam_unix(cron:session): session closed for user root Dec 14 19:29:01 ispc CRON[1563140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:29:03 ispc CRON[1563140]: pam_unix(cron:session): session closed for user root Dec 14 19:29:09 ispc sshd[1563155]: Did not receive identification string from 188.166.74.62 Dec 14 19:29:31 ispc sshd[1563168]: Did not receive identification string from 146.190.235.168 Dec 14 19:30:01 ispc CRON[1563185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:30:01 ispc CRON[1563186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:30:01 ispc CRON[1563187]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:30:01 ispc CRON[1563188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:30:01 ispc CRON[1563189]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:30:01 ispc CRON[1563186]: pam_unix(cron:session): session closed for user root Dec 14 19:30:01 ispc CRON[1563187]: pam_unix(cron:session): session closed for user www-data Dec 14 19:30:01 ispc CRON[1563189]: pam_unix(cron:session): session closed for user getmail Dec 14 19:30:01 ispc CRON[1563188]: pam_unix(cron:session): session closed for user root Dec 14 19:30:02 ispc CRON[1563185]: pam_unix(cron:session): session closed for user root Dec 14 19:31:01 ispc CRON[1563298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:31:02 ispc CRON[1563298]: pam_unix(cron:session): session closed for user root Dec 14 19:31:26 ispc postfix/smtpd[1563323]: sql auxprop plugin using mysql engine Dec 14 19:31:27 ispc CRON[1562167]: pam_unix(cron:session): session closed for user root Dec 14 19:31:59 ispc postfix/smtpd[1563333]: sql auxprop plugin using mysql engine Dec 14 19:31:59 ispc saslauthd[1563336]: pam_mysql - SELECT returned no result. Dec 14 19:31:59 ispc saslauthd[1563336]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:31:59 ispc saslauthd[1563336]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:32:00 ispc saslauthd[1563337]: pam_mysql - SELECT returned no result. Dec 14 19:32:00 ispc saslauthd[1563337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:32:00 ispc saslauthd[1563337]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:32:01 ispc CRON[1563338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:32:02 ispc CRON[1563338]: pam_unix(cron:session): session closed for user root Dec 14 19:32:59 ispc sshd[1563368]: Did not receive identification string from 64.227.76.141 Dec 14 19:33:01 ispc CRON[1563369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:33:01 ispc CRON[1563369]: pam_unix(cron:session): session closed for user root Dec 14 19:33:34 ispc sshd[1563389]: Invalid user antiqkabinet from 77.90.185.40 Dec 14 19:34:01 ispc CRON[1563391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:34:02 ispc CRON[1563391]: pam_unix(cron:session): session closed for user root Dec 14 19:34:16 ispc saslauthd[1563410]: pam_mysql - SELECT returned no result. Dec 14 19:34:16 ispc saslauthd[1563410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:34:16 ispc saslauthd[1563410]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:34:38 ispc saslauthd[1563415]: pam_mysql - SELECT returned no result. Dec 14 19:34:38 ispc saslauthd[1563415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:34:38 ispc saslauthd[1563415]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:34:43 ispc saslauthd[1563416]: pam_mysql - SELECT returned no result. Dec 14 19:34:43 ispc saslauthd[1563416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:34:43 ispc saslauthd[1563416]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:34:47 ispc saslauthd[1563417]: pam_mysql - SELECT returned no result. Dec 14 19:34:47 ispc saslauthd[1563417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:34:47 ispc saslauthd[1563417]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:35:01 ispc CRON[1563420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:35:01 ispc CRON[1563421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:35:01 ispc CRON[1563422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:35:01 ispc CRON[1563423]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:35:01 ispc CRON[1563421]: pam_unix(cron:session): session closed for user root Dec 14 19:35:01 ispc CRON[1563423]: pam_unix(cron:session): session closed for user getmail Dec 14 19:35:01 ispc saslauthd[1563439]: pam_mysql - SELECT returned no result. Dec 14 19:35:01 ispc saslauthd[1563439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:35:01 ispc saslauthd[1563439]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:35:01 ispc CRON[1563420]: pam_unix(cron:session): session closed for user root Dec 14 19:35:07 ispc saslauthd[1563531]: pam_mysql - SELECT returned no result. Dec 14 19:35:07 ispc saslauthd[1563531]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:35:07 ispc saslauthd[1563531]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:35:34 ispc CRON[1563422]: pam_unix(cron:session): session closed for user root Dec 14 19:35:47 ispc sshd[1563544]: Invalid user klape from 70.37.89.177 Dec 14 19:35:49 ispc sshd[1563547]: Invalid user ubuntu from 70.37.89.177 Dec 14 19:36:01 ispc CRON[1563551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:37:01 ispc CRON[1563597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:37:02 ispc CRON[1563597]: pam_unix(cron:session): session closed for user root Dec 14 19:37:03 ispc sshd[1563610]: Did not receive identification string from 205.210.31.225 Dec 14 19:37:17 ispc postfix/smtpd[1563623]: sql auxprop plugin using mysql engine Dec 14 19:37:18 ispc saslauthd[1563625]: pam_mysql - SELECT returned no result. Dec 14 19:37:18 ispc saslauthd[1563625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:37:18 ispc saslauthd[1563625]: do_auth : auth failure: [user=security] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:38:01 ispc CRON[1563661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:38:02 ispc CRON[1563661]: pam_unix(cron:session): session closed for user root Dec 14 19:39:01 ispc CRON[1563713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:39:01 ispc CRON[1563714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:39:01 ispc CRON[1563713]: pam_unix(cron:session): session closed for user root Dec 14 19:39:02 ispc CRON[1563714]: pam_unix(cron:session): session closed for user root Dec 14 19:40:01 ispc CRON[1563776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:40:01 ispc CRON[1563777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:40:01 ispc CRON[1563778]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:40:01 ispc CRON[1563779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:40:01 ispc CRON[1563780]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:40:01 ispc CRON[1563778]: pam_unix(cron:session): session closed for user www-data Dec 14 19:40:01 ispc CRON[1563777]: pam_unix(cron:session): session closed for user root Dec 14 19:40:01 ispc CRON[1563780]: pam_unix(cron:session): session closed for user getmail Dec 14 19:40:02 ispc CRON[1563779]: pam_unix(cron:session): session closed for user root Dec 14 19:40:02 ispc CRON[1563776]: pam_unix(cron:session): session closed for user root Dec 14 19:40:52 ispc sshd[1563885]: Invalid user postgres from 64.227.76.141 Dec 14 19:41:01 ispc CRON[1563893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:41:02 ispc CRON[1563893]: pam_unix(cron:session): session closed for user root Dec 14 19:41:32 ispc sshd[1563924]: Invalid user oracle from 64.227.76.141 Dec 14 19:42:01 ispc CRON[1563943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:42:02 ispc CRON[1563943]: pam_unix(cron:session): session closed for user root Dec 14 19:42:11 ispc sshd[1563958]: Invalid user user from 64.227.76.141 Dec 14 19:42:50 ispc sshd[1563994]: Invalid user vps from 64.227.76.141 Dec 14 19:43:01 ispc CRON[1564002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:43:03 ispc CRON[1564002]: pam_unix(cron:session): session closed for user root Dec 14 19:43:28 ispc sshd[1564028]: Invalid user testuser from 64.227.76.141 Dec 14 19:43:40 ispc sshd[1564038]: Invalid user postgres from 188.166.74.62 Dec 14 19:44:01 ispc CRON[1564050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:44:01 ispc CRON[1564050]: pam_unix(cron:session): session closed for user root Dec 14 19:44:10 ispc sshd[1564068]: Invalid user server from 64.227.76.141 Dec 14 19:44:25 ispc sshd[1564082]: Invalid user oracle from 188.166.74.62 Dec 14 19:45:01 ispc CRON[1564107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:45:01 ispc CRON[1564108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:45:01 ispc CRON[1564109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:45:01 ispc CRON[1564110]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:45:01 ispc CRON[1564108]: pam_unix(cron:session): session closed for user root Dec 14 19:45:01 ispc CRON[1564110]: pam_unix(cron:session): session closed for user getmail Dec 14 19:45:02 ispc CRON[1564109]: pam_unix(cron:session): session closed for user root Dec 14 19:45:02 ispc CRON[1564107]: pam_unix(cron:session): session closed for user root Dec 14 19:45:11 ispc sshd[1564189]: Invalid user user from 188.166.74.62 Dec 14 19:45:13 ispc sshd[1564191]: Did not receive identification string from 161.35.157.181 Dec 14 19:45:57 ispc sshd[1564219]: Invalid user vps from 188.166.74.62 Dec 14 19:46:01 ispc CRON[1564226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:46:02 ispc CRON[1564226]: pam_unix(cron:session): session closed for user root Dec 14 19:46:42 ispc sshd[1564256]: Invalid user testuser from 188.166.74.62 Dec 14 19:47:01 ispc CRON[1564279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:47:02 ispc CRON[1564279]: pam_unix(cron:session): session closed for user root Dec 14 19:47:27 ispc sshd[1564306]: Invalid user server from 188.166.74.62 Dec 14 19:48:01 ispc CRON[1564342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:48:02 ispc CRON[1564342]: pam_unix(cron:session): session closed for user root Dec 14 19:49:01 ispc CRON[1564392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:49:02 ispc CRON[1564392]: pam_unix(cron:session): session closed for user root Dec 14 19:50:01 ispc CRON[1564440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:50:01 ispc CRON[1564441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:50:01 ispc CRON[1564442]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 19:50:01 ispc CRON[1564443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:50:01 ispc CRON[1564444]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:50:01 ispc CRON[1564441]: pam_unix(cron:session): session closed for user root Dec 14 19:50:01 ispc CRON[1564442]: pam_unix(cron:session): session closed for user www-data Dec 14 19:50:01 ispc CRON[1564444]: pam_unix(cron:session): session closed for user getmail Dec 14 19:50:01 ispc CRON[1564443]: pam_unix(cron:session): session closed for user root Dec 14 19:50:02 ispc CRON[1564440]: pam_unix(cron:session): session closed for user root Dec 14 19:50:11 ispc sshd[1564524]: Invalid user ziplines from 148.216.54.17 Dec 14 19:51:01 ispc CRON[1564560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:51:02 ispc CRON[1564560]: pam_unix(cron:session): session closed for user root Dec 14 19:51:58 ispc postfix/smtpd[1564602]: sql auxprop plugin using mysql engine Dec 14 19:51:58 ispc saslauthd[1564609]: pam_mysql - SELECT returned no result. Dec 14 19:51:58 ispc saslauthd[1564609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:51:58 ispc saslauthd[1564609]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:52:01 ispc CRON[1564610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:52:02 ispc CRON[1564610]: pam_unix(cron:session): session closed for user root Dec 14 19:52:09 ispc saslauthd[1564628]: pam_mysql - SELECT returned no result. Dec 14 19:52:09 ispc saslauthd[1564628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 19:52:09 ispc saslauthd[1564628]: do_auth : auth failure: [user=sedacm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 19:53:01 ispc CRON[1564669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:53:01 ispc CRON[1564669]: pam_unix(cron:session): session closed for user root Dec 14 19:54:01 ispc CRON[1564716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:54:02 ispc CRON[1564716]: pam_unix(cron:session): session closed for user root Dec 14 19:55:01 ispc CRON[1564762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:55:01 ispc CRON[1564763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:55:01 ispc CRON[1564764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:55:01 ispc CRON[1564765]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 19:55:01 ispc CRON[1564763]: pam_unix(cron:session): session closed for user root Dec 14 19:55:01 ispc CRON[1564765]: pam_unix(cron:session): session closed for user getmail Dec 14 19:55:02 ispc CRON[1564764]: pam_unix(cron:session): session closed for user root Dec 14 19:55:03 ispc CRON[1564762]: pam_unix(cron:session): session closed for user root Dec 14 19:55:10 ispc sshd[1564844]: Invalid user matlbula from 77.90.185.40 Dec 14 19:56:01 ispc CRON[1564879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:56:02 ispc CRON[1564879]: pam_unix(cron:session): session closed for user root Dec 14 19:56:34 ispc CRON[1563551]: pam_unix(cron:session): session closed for user root Dec 14 19:56:34 ispc postfix/smtpd[1564911]: sql auxprop plugin using mysql engine Dec 14 19:57:01 ispc CRON[1564923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:57:02 ispc CRON[1564923]: pam_unix(cron:session): session closed for user root Dec 14 19:57:23 ispc sshd[1564940]: Invalid user klape from 36.50.177.171 Dec 14 19:57:27 ispc sshd[1564942]: Invalid user ubuntu from 36.50.177.171 Dec 14 19:57:56 ispc sshd[1564969]: Invalid user klape from 67.205.163.146 Dec 14 19:58:01 ispc CRON[1564975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:58:02 ispc sshd[1564973]: Invalid user ubuntu from 67.205.163.146 Dec 14 19:58:03 ispc CRON[1564975]: pam_unix(cron:session): session closed for user root Dec 14 19:59:01 ispc CRON[1565005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 19:59:02 ispc CRON[1565005]: pam_unix(cron:session): session closed for user root Dec 14 20:00:00 ispc sshd[1565032]: Invalid user admin from 161.35.157.181 Dec 14 20:00:01 ispc CRON[1565034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:00:01 ispc CRON[1565035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:00:01 ispc CRON[1565036]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:00:01 ispc CRON[1565037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:00:01 ispc CRON[1565038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:00:01 ispc CRON[1565039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:00:01 ispc CRON[1565040]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:00:01 ispc CRON[1565038]: pam_unix(cron:session): session closed for user root Dec 14 20:00:01 ispc CRON[1565035]: pam_unix(cron:session): session closed for user root Dec 14 20:00:01 ispc CRON[1565036]: pam_unix(cron:session): session closed for user www-data Dec 14 20:00:01 ispc CRON[1565040]: pam_unix(cron:session): session closed for user getmail Dec 14 20:00:02 ispc CRON[1565037]: pam_unix(cron:session): session closed for user root Dec 14 20:00:02 ispc CRON[1565034]: pam_unix(cron:session): session closed for user root Dec 14 20:00:04 ispc postfix/smtpd[1565230]: sql auxprop plugin using mysql engine Dec 14 20:00:42 ispc sshd[1565320]: Invalid user admin from 161.35.157.181 Dec 14 20:00:43 ispc CRON[1565039]: pam_unix(cron:session): session closed for user root Dec 14 20:01:01 ispc CRON[1565326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:01:21 ispc sshd[1565348]: Invalid user admin from 161.35.157.181 Dec 14 20:01:56 ispc sshd[1565375]: Invalid user admin from 161.35.157.181 Dec 14 20:02:01 ispc CRON[1565378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:02:01 ispc CRON[1565377]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 20:02:02 ispc CRON[1565378]: pam_unix(cron:session): session closed for user root Dec 14 20:02:24 ispc postfix/smtpd[1565802]: sql auxprop plugin using mysql engine Dec 14 20:02:24 ispc saslauthd[1565810]: pam_mysql - SELECT returned no result. Dec 14 20:02:24 ispc saslauthd[1565810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:02:24 ispc saslauthd[1565810]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:02:32 ispc sshd[1565875]: Invalid user admin from 161.35.157.181 Dec 14 20:03:01 ispc CRON[1566225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:03:02 ispc CRON[1566225]: pam_unix(cron:session): session closed for user root Dec 14 20:03:08 ispc sshd[1566275]: Invalid user admin from 161.35.157.181 Dec 14 20:03:54 ispc sshd[1566476]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 20:03:56 ispc CRON[1565377]: pam_unix(cron:session): session closed for user logcheck Dec 14 20:04:01 ispc CRON[1566513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:04:02 ispc CRON[1566513]: pam_unix(cron:session): session closed for user root Dec 14 20:04:03 ispc postfix/smtpd[1566525]: sql auxprop plugin using mysql engine Dec 14 20:04:14 ispc postfix/smtpd[1566534]: sql auxprop plugin using mysql engine Dec 14 20:04:30 ispc sshd[1566552]: Invalid user pi from 77.7.168.126 Dec 14 20:04:30 ispc sshd[1566550]: Invalid user pi from 77.7.168.126 Dec 14 20:04:32 ispc saslauthd[1566556]: pam_mysql - SELECT returned no result. Dec 14 20:04:32 ispc saslauthd[1566556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:04:32 ispc saslauthd[1566556]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:04:49 ispc saslauthd[1566566]: pam_mysql - SELECT returned no result. Dec 14 20:04:49 ispc saslauthd[1566566]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:04:49 ispc saslauthd[1566566]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:04:54 ispc saslauthd[1566569]: pam_mysql - SELECT returned no result. Dec 14 20:04:54 ispc saslauthd[1566569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:04:54 ispc saslauthd[1566569]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:01 ispc CRON[1566574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:05:01 ispc CRON[1566575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:05:01 ispc CRON[1566576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:05:01 ispc CRON[1566577]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:05:01 ispc CRON[1566575]: pam_unix(cron:session): session closed for user root Dec 14 20:05:01 ispc CRON[1566577]: pam_unix(cron:session): session closed for user getmail Dec 14 20:05:02 ispc CRON[1566576]: pam_unix(cron:session): session closed for user root Dec 14 20:05:02 ispc sshd[1566617]: Invalid user klape from 51.77.222.24 Dec 14 20:05:02 ispc CRON[1566574]: pam_unix(cron:session): session closed for user root Dec 14 20:05:03 ispc sshd[1566654]: Invalid user ubuntu from 51.77.222.24 Dec 14 20:05:14 ispc saslauthd[1566664]: pam_mysql - SELECT returned no result. Dec 14 20:05:14 ispc saslauthd[1566664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:14 ispc saslauthd[1566664]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:22 ispc saslauthd[1566676]: pam_mysql - SELECT returned no result. Dec 14 20:05:22 ispc saslauthd[1566676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:22 ispc saslauthd[1566676]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:25 ispc saslauthd[1566678]: pam_mysql - SELECT returned no result. Dec 14 20:05:25 ispc saslauthd[1566678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:25 ispc saslauthd[1566678]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:37 ispc saslauthd[1566683]: pam_mysql - SELECT returned no result. Dec 14 20:05:37 ispc saslauthd[1566683]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:37 ispc saslauthd[1566683]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:43 ispc saslauthd[1566688]: pam_mysql - SELECT returned no result. Dec 14 20:05:43 ispc saslauthd[1566688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:43 ispc saslauthd[1566688]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:55 ispc saslauthd[1566696]: pam_mysql - SELECT returned no result. Dec 14 20:05:55 ispc saslauthd[1566696]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:55 ispc saslauthd[1566696]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:56 ispc saslauthd[1566697]: pam_mysql - SELECT returned no result. Dec 14 20:05:56 ispc saslauthd[1566697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:56 ispc saslauthd[1566697]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:57 ispc saslauthd[1566700]: pam_mysql - SELECT returned no result. Dec 14 20:05:57 ispc saslauthd[1566700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:57 ispc saslauthd[1566700]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:59 ispc saslauthd[1566701]: pam_mysql - SELECT returned no result. Dec 14 20:05:59 ispc saslauthd[1566701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:05:59 ispc saslauthd[1566701]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:05:59 ispc postfix/smtpd[1566702]: sql auxprop plugin using mysql engine Dec 14 20:06:00 ispc saslauthd[1566705]: pam_mysql - SELECT returned no result. Dec 14 20:06:00 ispc saslauthd[1566705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:06:00 ispc saslauthd[1566705]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:06:01 ispc CRON[1566709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:06:01 ispc saslauthd[1566711]: pam_mysql - SELECT returned no result. Dec 14 20:06:01 ispc saslauthd[1566711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:06:01 ispc saslauthd[1566711]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:06:03 ispc CRON[1566709]: pam_unix(cron:session): session closed for user root Dec 14 20:06:26 ispc saslauthd[1566735]: pam_mysql - SELECT returned no result. Dec 14 20:06:26 ispc saslauthd[1566735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:06:26 ispc saslauthd[1566735]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:06:49 ispc saslauthd[1566750]: pam_mysql - SELECT returned no result. Dec 14 20:06:49 ispc saslauthd[1566750]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:06:49 ispc saslauthd[1566750]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:06:52 ispc saslauthd[1566755]: pam_mysql - SELECT returned no result. Dec 14 20:06:52 ispc saslauthd[1566755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:06:52 ispc saslauthd[1566755]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:07:01 ispc CRON[1566758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:07:01 ispc CRON[1566758]: pam_unix(cron:session): session closed for user root Dec 14 20:07:47 ispc saslauthd[1566803]: pam_mysql - SELECT returned no result. Dec 14 20:07:47 ispc saslauthd[1566803]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:07:47 ispc saslauthd[1566803]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:08:01 ispc CRON[1566818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:08:02 ispc CRON[1566818]: pam_unix(cron:session): session closed for user root Dec 14 20:08:41 ispc sshd[1566854]: Invalid user admin from 146.190.235.168 Dec 14 20:09:01 ispc CRON[1566869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:09:01 ispc CRON[1566870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:09:01 ispc CRON[1566869]: pam_unix(cron:session): session closed for user root Dec 14 20:09:02 ispc CRON[1566870]: pam_unix(cron:session): session closed for user root Dec 14 20:09:11 ispc sshd[1566895]: Invalid user admin from 146.190.235.168 Dec 14 20:09:38 ispc sshd[1566912]: Invalid user admin from 146.190.235.168 Dec 14 20:10:01 ispc CRON[1566927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:10:01 ispc CRON[1566928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:10:01 ispc CRON[1566929]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:10:01 ispc CRON[1566930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:10:01 ispc CRON[1566931]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:10:01 ispc CRON[1566931]: pam_unix(cron:session): session closed for user getmail Dec 14 20:10:01 ispc CRON[1566928]: pam_unix(cron:session): session closed for user root Dec 14 20:10:01 ispc CRON[1566929]: pam_unix(cron:session): session closed for user www-data Dec 14 20:10:01 ispc CRON[1566927]: pam_unix(cron:session): session closed for user root Dec 14 20:10:01 ispc CRON[1566930]: pam_unix(cron:session): session closed for user root Dec 14 20:10:07 ispc sshd[1567011]: Invalid user admin from 146.190.235.168 Dec 14 20:10:34 ispc sshd[1567023]: Invalid user admin from 146.190.235.168 Dec 14 20:10:44 ispc postfix/smtpd[1567031]: sql auxprop plugin using mysql engine Dec 14 20:10:44 ispc saslauthd[1567033]: pam_mysql - SELECT returned no result. Dec 14 20:10:44 ispc saslauthd[1567033]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:10:44 ispc saslauthd[1567033]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:11:02 ispc CRON[1567046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:11:02 ispc CRON[1567046]: pam_unix(cron:session): session closed for user root Dec 14 20:11:04 ispc sshd[1567057]: Invalid user admin from 146.190.235.168 Dec 14 20:11:57 ispc saslauthd[1567094]: pam_mysql - SELECT returned no result. Dec 14 20:11:57 ispc saslauthd[1567094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:11:57 ispc saslauthd[1567094]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:12:01 ispc CRON[1567099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:12:02 ispc CRON[1567099]: pam_unix(cron:session): session closed for user root Dec 14 20:12:08 ispc saslauthd[1567111]: pam_mysql - SELECT returned no result. Dec 14 20:12:08 ispc saslauthd[1567111]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:12:08 ispc saslauthd[1567111]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:13:01 ispc CRON[1567155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:13:02 ispc CRON[1567155]: pam_unix(cron:session): session closed for user root Dec 14 20:14:01 ispc CRON[1567192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:14:01 ispc CRON[1567192]: pam_unix(cron:session): session closed for user root Dec 14 20:14:20 ispc sshd[1567215]: Did not receive identification string from 167.99.38.110 Dec 14 20:14:57 ispc postfix/smtpd[1567239]: sql auxprop plugin using mysql engine Dec 14 20:14:57 ispc saslauthd[1567241]: pam_mysql - SELECT returned no result. Dec 14 20:14:57 ispc saslauthd[1567241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:14:57 ispc saslauthd[1567241]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:15:01 ispc CRON[1567244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:15:01 ispc CRON[1567245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:15:01 ispc CRON[1567246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:15:01 ispc CRON[1567247]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:15:02 ispc CRON[1567245]: pam_unix(cron:session): session closed for user root Dec 14 20:15:02 ispc CRON[1567247]: pam_unix(cron:session): session closed for user getmail Dec 14 20:15:02 ispc CRON[1567246]: pam_unix(cron:session): session closed for user root Dec 14 20:15:04 ispc CRON[1567244]: pam_unix(cron:session): session closed for user root Dec 14 20:16:01 ispc CRON[1567355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:16:01 ispc CRON[1567355]: pam_unix(cron:session): session closed for user root Dec 14 20:17:01 ispc CRON[1567399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:17:03 ispc CRON[1567399]: pam_unix(cron:session): session closed for user root Dec 14 20:17:12 ispc sshd[1567415]: Invalid user admin from 134.122.53.16 Dec 14 20:17:55 ispc sshd[1567448]: Invalid user admin from 134.122.53.16 Dec 14 20:18:01 ispc CRON[1567456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:18:01 ispc CRON[1567456]: pam_unix(cron:session): session closed for user root Dec 14 20:18:37 ispc sshd[1567484]: Invalid user admin from 134.122.53.16 Dec 14 20:19:01 ispc CRON[1567503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:19:02 ispc CRON[1567503]: pam_unix(cron:session): session closed for user root Dec 14 20:19:18 ispc postfix/smtpd[1567521]: sql auxprop plugin using mysql engine Dec 14 20:19:18 ispc sshd[1567519]: Invalid user admin from 134.122.53.16 Dec 14 20:19:18 ispc saslauthd[1567524]: pam_mysql - SELECT returned no result. Dec 14 20:19:18 ispc saslauthd[1567524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:19:18 ispc saslauthd[1567524]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:20:01 ispc CRON[1567552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:20:01 ispc CRON[1567553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:20:01 ispc CRON[1567554]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:20:01 ispc CRON[1567555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:20:01 ispc CRON[1567556]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:20:01 ispc CRON[1567553]: pam_unix(cron:session): session closed for user root Dec 14 20:20:02 ispc CRON[1567554]: pam_unix(cron:session): session closed for user www-data Dec 14 20:20:02 ispc CRON[1567556]: pam_unix(cron:session): session closed for user getmail Dec 14 20:20:02 ispc CRON[1567555]: pam_unix(cron:session): session closed for user root Dec 14 20:20:03 ispc CRON[1567552]: pam_unix(cron:session): session closed for user root Dec 14 20:21:01 ispc CRON[1567669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:21:01 ispc CRON[1567670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:21:01 ispc CRON[1567669]: pam_unix(cron:session): session closed for user root Dec 14 20:21:01 ispc CRON[1567670]: pam_unix(cron:session): session closed for user root Dec 14 20:21:31 ispc postfix/smtpd[1567699]: sql auxprop plugin using mysql engine Dec 14 20:21:32 ispc CRON[1565326]: pam_unix(cron:session): session closed for user root Dec 14 20:21:49 ispc saslauthd[1567705]: pam_mysql - SELECT returned no result. Dec 14 20:21:49 ispc saslauthd[1567705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:21:49 ispc saslauthd[1567705]: do_auth : auth failure: [user=servlet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:22:01 ispc CRON[1567710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:22:01 ispc CRON[1567710]: pam_unix(cron:session): session closed for user root Dec 14 20:23:01 ispc CRON[1567738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:23:02 ispc CRON[1567738]: pam_unix(cron:session): session closed for user root Dec 14 20:23:49 ispc saslauthd[1567760]: pam_mysql - SELECT returned no result. Dec 14 20:23:49 ispc saslauthd[1567760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:23:49 ispc saslauthd[1567760]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:24:01 ispc CRON[1567764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:24:02 ispc CRON[1567764]: pam_unix(cron:session): session closed for user root Dec 14 20:25:01 ispc CRON[1567789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:25:01 ispc CRON[1567790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:25:01 ispc CRON[1567791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:25:01 ispc CRON[1567792]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:25:01 ispc CRON[1567790]: pam_unix(cron:session): session closed for user root Dec 14 20:25:01 ispc CRON[1567792]: pam_unix(cron:session): session closed for user getmail Dec 14 20:25:01 ispc CRON[1567789]: pam_unix(cron:session): session closed for user root Dec 14 20:25:35 ispc CRON[1567791]: pam_unix(cron:session): session closed for user root Dec 14 20:26:01 ispc CRON[1567908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:27:01 ispc CRON[1567948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:27:02 ispc CRON[1567948]: pam_unix(cron:session): session closed for user root Dec 14 20:28:01 ispc CRON[1568002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:28:02 ispc CRON[1568002]: pam_unix(cron:session): session closed for user root Dec 14 20:29:01 ispc CRON[1568048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:29:01 ispc CRON[1568048]: pam_unix(cron:session): session closed for user root Dec 14 20:30:01 ispc CRON[1568094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:30:01 ispc CRON[1568095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:30:01 ispc CRON[1568096]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:30:01 ispc CRON[1568097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:30:01 ispc CRON[1568098]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:30:01 ispc CRON[1568095]: pam_unix(cron:session): session closed for user root Dec 14 20:30:01 ispc CRON[1568096]: pam_unix(cron:session): session closed for user www-data Dec 14 20:30:01 ispc CRON[1568098]: pam_unix(cron:session): session closed for user getmail Dec 14 20:30:02 ispc CRON[1568097]: pam_unix(cron:session): session closed for user root Dec 14 20:30:02 ispc CRON[1568094]: pam_unix(cron:session): session closed for user root Dec 14 20:31:00 ispc postfix/smtpd[1568205]: sql auxprop plugin using mysql engine Dec 14 20:31:01 ispc saslauthd[1568208]: pam_mysql - SELECT returned no result. Dec 14 20:31:01 ispc saslauthd[1568208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:31:01 ispc saslauthd[1568208]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:31:01 ispc CRON[1568209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:31:02 ispc CRON[1568209]: pam_unix(cron:session): session closed for user root Dec 14 20:31:44 ispc postfix/smtpd[1568242]: sql auxprop plugin using mysql engine Dec 14 20:31:45 ispc postfix/smtpd[1568244]: sql auxprop plugin using mysql engine Dec 14 20:32:01 ispc CRON[1568255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:32:03 ispc CRON[1568255]: pam_unix(cron:session): session closed for user root Dec 14 20:33:01 ispc CRON[1568307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:33:01 ispc CRON[1568307]: pam_unix(cron:session): session closed for user root Dec 14 20:33:22 ispc postfix/smtpd[1568326]: sql auxprop plugin using mysql engine Dec 14 20:33:23 ispc saslauthd[1568329]: pam_mysql - SELECT returned no result. Dec 14 20:33:23 ispc saslauthd[1568329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:33:23 ispc saslauthd[1568329]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:33:39 ispc sshd[1568335]: Invalid user admin from 167.99.38.110 Dec 14 20:33:44 ispc saslauthd[1568342]: pam_mysql - SELECT returned no result. Dec 14 20:33:44 ispc saslauthd[1568342]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:33:44 ispc saslauthd[1568342]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:33:47 ispc saslauthd[1568343]: pam_mysql - SELECT returned no result. Dec 14 20:33:47 ispc saslauthd[1568343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:33:47 ispc saslauthd[1568343]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:33:54 ispc saslauthd[1568350]: pam_mysql - SELECT returned no result. Dec 14 20:33:54 ispc saslauthd[1568350]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:33:54 ispc saslauthd[1568350]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:34:01 ispc CRON[1568356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:34:02 ispc CRON[1568356]: pam_unix(cron:session): session closed for user root Dec 14 20:34:12 ispc saslauthd[1568371]: pam_mysql - SELECT returned no result. Dec 14 20:34:12 ispc saslauthd[1568371]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:34:12 ispc saslauthd[1568371]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:34:12 ispc saslauthd[1568372]: pam_mysql - SELECT returned no result. Dec 14 20:34:12 ispc saslauthd[1568372]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:34:12 ispc saslauthd[1568372]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:34:19 ispc sshd[1568374]: Invalid user admin from 167.99.38.110 Dec 14 20:34:57 ispc sshd[1568399]: Invalid user admin from 167.99.38.110 Dec 14 20:35:01 ispc CRON[1568405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:35:01 ispc CRON[1568406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:35:01 ispc CRON[1568407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:35:01 ispc CRON[1568408]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:35:02 ispc CRON[1568406]: pam_unix(cron:session): session closed for user root Dec 14 20:35:02 ispc CRON[1568408]: pam_unix(cron:session): session closed for user getmail Dec 14 20:35:02 ispc CRON[1568407]: pam_unix(cron:session): session closed for user root Dec 14 20:35:03 ispc CRON[1568405]: pam_unix(cron:session): session closed for user root Dec 14 20:35:27 ispc sshd[1568493]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 20:35:37 ispc sshd[1568499]: Invalid user admin from 167.99.38.110 Dec 14 20:36:01 ispc CRON[1568516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:36:02 ispc CRON[1568516]: pam_unix(cron:session): session closed for user root Dec 14 20:36:17 ispc sshd[1568532]: Invalid user admin from 167.99.38.110 Dec 14 20:36:20 ispc sshd[1568535]: Invalid user martof from 148.216.54.17 Dec 14 20:36:42 ispc postfix/smtpd[1568548]: sql auxprop plugin using mysql engine Dec 14 20:36:43 ispc saslauthd[1568553]: pam_mysql - SELECT returned no result. Dec 14 20:36:43 ispc saslauthd[1568553]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:36:43 ispc saslauthd[1568553]: do_auth : auth failure: [user=setpriv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:36:56 ispc sshd[1568558]: Invalid user admin from 167.99.38.110 Dec 14 20:37:01 ispc CRON[1568566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:37:01 ispc CRON[1568566]: pam_unix(cron:session): session closed for user root Dec 14 20:38:01 ispc CRON[1568617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:38:03 ispc CRON[1568617]: pam_unix(cron:session): session closed for user root Dec 14 20:39:01 ispc CRON[1568656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:39:01 ispc CRON[1568657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:39:01 ispc CRON[1568656]: pam_unix(cron:session): session closed for user root Dec 14 20:39:02 ispc CRON[1568657]: pam_unix(cron:session): session closed for user root Dec 14 20:40:01 ispc CRON[1568710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:40:01 ispc CRON[1568711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:40:01 ispc CRON[1568712]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:40:01 ispc CRON[1568713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:40:01 ispc CRON[1568714]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:40:01 ispc CRON[1568711]: pam_unix(cron:session): session closed for user root Dec 14 20:40:01 ispc CRON[1568712]: pam_unix(cron:session): session closed for user www-data Dec 14 20:40:01 ispc CRON[1568714]: pam_unix(cron:session): session closed for user getmail Dec 14 20:40:02 ispc CRON[1568713]: pam_unix(cron:session): session closed for user root Dec 14 20:40:03 ispc CRON[1568710]: pam_unix(cron:session): session closed for user root Dec 14 20:41:01 ispc CRON[1568813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:41:02 ispc CRON[1568813]: pam_unix(cron:session): session closed for user root Dec 14 20:42:01 ispc CRON[1568855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:42:02 ispc CRON[1568855]: pam_unix(cron:session): session closed for user root Dec 14 20:42:55 ispc sshd[1568898]: Invalid user blceu from 175.125.95.234 Dec 14 20:43:01 ispc CRON[1568900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:43:02 ispc CRON[1568900]: pam_unix(cron:session): session closed for user root Dec 14 20:44:01 ispc CRON[1568940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:44:02 ispc CRON[1568940]: pam_unix(cron:session): session closed for user root Dec 14 20:45:01 ispc CRON[1568983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:45:01 ispc CRON[1568984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:45:01 ispc CRON[1568985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:45:01 ispc CRON[1568986]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:45:01 ispc CRON[1568984]: pam_unix(cron:session): session closed for user root Dec 14 20:45:01 ispc CRON[1568986]: pam_unix(cron:session): session closed for user getmail Dec 14 20:45:02 ispc CRON[1568985]: pam_unix(cron:session): session closed for user root Dec 14 20:45:03 ispc CRON[1568983]: pam_unix(cron:session): session closed for user root Dec 14 20:46:01 ispc CRON[1569085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:46:01 ispc CRON[1569085]: pam_unix(cron:session): session closed for user root Dec 14 20:46:24 ispc postfix/smtpd[1569111]: sql auxprop plugin using mysql engine Dec 14 20:46:24 ispc CRON[1567908]: pam_unix(cron:session): session closed for user root Dec 14 20:46:35 ispc postfix/smtpd[1569115]: sql auxprop plugin using mysql engine Dec 14 20:46:43 ispc saslauthd[1569118]: pam_mysql - SELECT returned no result. Dec 14 20:46:43 ispc saslauthd[1569118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:46:43 ispc saslauthd[1569118]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:47:01 ispc CRON[1569120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:47:02 ispc CRON[1569120]: pam_unix(cron:session): session closed for user root Dec 14 20:48:01 ispc CRON[1569148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:48:02 ispc CRON[1569148]: pam_unix(cron:session): session closed for user root Dec 14 20:49:01 ispc CRON[1569164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:49:03 ispc CRON[1569164]: pam_unix(cron:session): session closed for user root Dec 14 20:50:01 ispc CRON[1569181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:50:01 ispc CRON[1569182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:50:01 ispc CRON[1569183]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 20:50:01 ispc CRON[1569184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:50:01 ispc CRON[1569185]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:50:01 ispc CRON[1569182]: pam_unix(cron:session): session closed for user root Dec 14 20:50:01 ispc CRON[1569183]: pam_unix(cron:session): session closed for user www-data Dec 14 20:50:01 ispc CRON[1569185]: pam_unix(cron:session): session closed for user getmail Dec 14 20:50:02 ispc CRON[1569181]: pam_unix(cron:session): session closed for user root Dec 14 20:50:35 ispc CRON[1569184]: pam_unix(cron:session): session closed for user root Dec 14 20:51:01 ispc CRON[1569296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:51:27 ispc saslauthd[1569321]: pam_mysql - SELECT returned no result. Dec 14 20:51:27 ispc saslauthd[1569321]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:51:27 ispc saslauthd[1569321]: do_auth : auth failure: [user=setup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:51:52 ispc sshd[1569335]: Invalid user klape from 200.32.52.150 Dec 14 20:51:52 ispc sshd[1569337]: Invalid user ubuntu from 200.32.52.150 Dec 14 20:52:01 ispc CRON[1569345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:52:02 ispc CRON[1569345]: pam_unix(cron:session): session closed for user root Dec 14 20:53:01 ispc CRON[1569400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:53:02 ispc CRON[1569400]: pam_unix(cron:session): session closed for user root Dec 14 20:54:01 ispc CRON[1569440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:54:01 ispc CRON[1569440]: pam_unix(cron:session): session closed for user root Dec 14 20:55:01 ispc CRON[1569477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:55:01 ispc CRON[1569478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:55:01 ispc CRON[1569479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:55:01 ispc CRON[1569480]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 20:55:01 ispc CRON[1569478]: pam_unix(cron:session): session closed for user root Dec 14 20:55:01 ispc CRON[1569480]: pam_unix(cron:session): session closed for user getmail Dec 14 20:55:02 ispc CRON[1569479]: pam_unix(cron:session): session closed for user root Dec 14 20:55:02 ispc CRON[1569477]: pam_unix(cron:session): session closed for user root Dec 14 20:55:38 ispc postfix/smtpd[1569572]: sql auxprop plugin using mysql engine Dec 14 20:55:39 ispc saslauthd[1569575]: pam_mysql - SELECT returned no result. Dec 14 20:55:39 ispc saslauthd[1569575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:55:39 ispc saslauthd[1569575]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:56:01 ispc CRON[1569585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:56:02 ispc CRON[1569585]: pam_unix(cron:session): session closed for user root Dec 14 20:56:19 ispc sshd[1569604]: Invalid user user from 62.60.131.157 Dec 14 20:57:01 ispc CRON[1569628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:57:01 ispc CRON[1569628]: pam_unix(cron:session): session closed for user root Dec 14 20:58:01 ispc CRON[1569676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:58:01 ispc CRON[1569676]: pam_unix(cron:session): session closed for user root Dec 14 20:59:01 ispc CRON[1569715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 20:59:02 ispc CRON[1569715]: pam_unix(cron:session): session closed for user root Dec 14 20:59:14 ispc postfix/smtpd[1569730]: sql auxprop plugin using mysql engine Dec 14 20:59:15 ispc postfix/smtpd[1569732]: sql auxprop plugin using mysql engine Dec 14 20:59:15 ispc saslauthd[1569734]: pam_mysql - SELECT returned no result. Dec 14 20:59:15 ispc saslauthd[1569734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:59:15 ispc saslauthd[1569734]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:59:15 ispc saslauthd[1569735]: pam_mysql - SELECT returned no result. Dec 14 20:59:15 ispc saslauthd[1569735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:59:15 ispc saslauthd[1569735]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:59:36 ispc saslauthd[1569747]: pam_mysql - SELECT returned no result. Dec 14 20:59:36 ispc saslauthd[1569747]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:59:36 ispc saslauthd[1569747]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:59:48 ispc saslauthd[1569757]: pam_mysql - SELECT returned no result. Dec 14 20:59:48 ispc saslauthd[1569757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:59:48 ispc saslauthd[1569757]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 20:59:49 ispc saslauthd[1569758]: pam_mysql - SELECT returned no result. Dec 14 20:59:49 ispc saslauthd[1569758]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 20:59:49 ispc saslauthd[1569758]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:00 ispc saslauthd[1569765]: pam_mysql - SELECT returned no result. Dec 14 21:00:00 ispc saslauthd[1569765]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:00 ispc saslauthd[1569765]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:01 ispc CRON[1569767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:00:01 ispc CRON[1569769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:00:01 ispc CRON[1569768]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:00:01 ispc CRON[1569770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:00:01 ispc CRON[1569771]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:00:01 ispc CRON[1569766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:00:02 ispc CRON[1569767]: pam_unix(cron:session): session closed for user root Dec 14 21:00:02 ispc CRON[1569768]: pam_unix(cron:session): session closed for user www-data Dec 14 21:00:02 ispc CRON[1569771]: pam_unix(cron:session): session closed for user getmail Dec 14 21:00:02 ispc CRON[1569770]: pam_unix(cron:session): session closed for user root Dec 14 21:00:02 ispc CRON[1569769]: pam_unix(cron:session): session closed for user root Dec 14 21:00:02 ispc CRON[1569766]: pam_unix(cron:session): session closed for user root Dec 14 21:00:09 ispc saslauthd[1569929]: pam_mysql - SELECT returned no result. Dec 14 21:00:09 ispc saslauthd[1569929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:09 ispc saslauthd[1569929]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:16 ispc saslauthd[1569930]: pam_mysql - SELECT returned no result. Dec 14 21:00:16 ispc saslauthd[1569930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:16 ispc saslauthd[1569930]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:17 ispc saslauthd[1569931]: pam_mysql - SELECT returned no result. Dec 14 21:00:17 ispc saslauthd[1569931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:17 ispc saslauthd[1569931]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:20 ispc saslauthd[1569936]: pam_mysql - SELECT returned no result. Dec 14 21:00:20 ispc saslauthd[1569936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:20 ispc saslauthd[1569936]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:21 ispc saslauthd[1569937]: pam_mysql - SELECT returned no result. Dec 14 21:00:21 ispc saslauthd[1569937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:21 ispc saslauthd[1569937]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:21 ispc saslauthd[1569938]: pam_mysql - SELECT returned no result. Dec 14 21:00:21 ispc saslauthd[1569938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:21 ispc saslauthd[1569938]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:25 ispc saslauthd[1569939]: pam_mysql - SELECT returned no result. Dec 14 21:00:25 ispc saslauthd[1569939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:25 ispc saslauthd[1569939]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:00:51 ispc saslauthd[1569955]: pam_mysql - SELECT returned no result. Dec 14 21:00:51 ispc saslauthd[1569955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:00:51 ispc saslauthd[1569955]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:01:01 ispc CRON[1569961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:01:01 ispc saslauthd[1569960]: pam_mysql - SELECT returned no result. Dec 14 21:01:01 ispc saslauthd[1569960]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:01:01 ispc saslauthd[1569960]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:01:02 ispc CRON[1569961]: pam_unix(cron:session): session closed for user root Dec 14 21:01:30 ispc saslauthd[1569985]: pam_mysql - SELECT returned no result. Dec 14 21:01:30 ispc saslauthd[1569985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:01:30 ispc saslauthd[1569985]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:02:01 ispc CRON[1570002]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 21:02:01 ispc CRON[1570003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:02:01 ispc CRON[1570003]: pam_unix(cron:session): session closed for user root Dec 14 21:02:12 ispc sshd[1570228]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:02:18 ispc sshd[1570335]: Invalid user klape from 103.164.20.29 Dec 14 21:02:19 ispc sshd[1570359]: Invalid user ubuntu from 103.164.20.29 Dec 14 21:03:01 ispc CRON[1570884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:03:02 ispc CRON[1570884]: pam_unix(cron:session): session closed for user root Dec 14 21:03:25 ispc CRON[1570002]: pam_unix(cron:session): session closed for user logcheck Dec 14 21:03:32 ispc postfix/smtpd[1571093]: sql auxprop plugin using mysql engine Dec 14 21:04:01 ispc CRON[1571116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:04:01 ispc CRON[1571116]: pam_unix(cron:session): session closed for user root Dec 14 21:04:02 ispc postfix/smtpd[1571128]: sql auxprop plugin using mysql engine Dec 14 21:04:02 ispc saslauthd[1571130]: pam_mysql - SELECT returned no result. Dec 14 21:04:02 ispc saslauthd[1571130]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:04:02 ispc saslauthd[1571130]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:04:25 ispc saslauthd[1571147]: pam_mysql - SELECT returned no result. Dec 14 21:04:25 ispc saslauthd[1571147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:04:25 ispc saslauthd[1571147]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:04:28 ispc saslauthd[1571150]: pam_mysql - SELECT returned no result. Dec 14 21:04:28 ispc saslauthd[1571150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:04:28 ispc saslauthd[1571150]: do_auth : auth failure: [user=postmaster@diamant-di.com] [service=smtp] [realm=diamant-di.com] [mech=pam] [reason=PAM auth error] Dec 14 21:05:01 ispc CRON[1571167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:05:01 ispc CRON[1571168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:05:01 ispc CRON[1571169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:05:01 ispc CRON[1571170]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:05:01 ispc CRON[1571170]: pam_unix(cron:session): session closed for user getmail Dec 14 21:05:01 ispc CRON[1571168]: pam_unix(cron:session): session closed for user root Dec 14 21:05:02 ispc CRON[1571169]: pam_unix(cron:session): session closed for user root Dec 14 21:05:02 ispc CRON[1571167]: pam_unix(cron:session): session closed for user root Dec 14 21:05:06 ispc saslauthd[1571247]: pam_mysql - SELECT returned no result. Dec 14 21:05:06 ispc saslauthd[1571247]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:05:06 ispc saslauthd[1571247]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:06:01 ispc CRON[1571275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:06:02 ispc CRON[1571275]: pam_unix(cron:session): session closed for user root Dec 14 21:06:10 ispc sshd[1571290]: Did not receive identification string from 24.144.83.100 Dec 14 21:06:14 ispc saslauthd[1571291]: pam_mysql - SELECT returned no result. Dec 14 21:06:14 ispc saslauthd[1571291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:06:14 ispc saslauthd[1571291]: do_auth : auth failure: [user=shutdown] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:07:01 ispc CRON[1571319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:07:01 ispc CRON[1571319]: pam_unix(cron:session): session closed for user root Dec 14 21:08:01 ispc CRON[1571368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:08:02 ispc CRON[1571368]: pam_unix(cron:session): session closed for user root Dec 14 21:08:10 ispc postfix/smtpd[1571384]: sql auxprop plugin using mysql engine Dec 14 21:08:15 ispc saslauthd[1571386]: pam_mysql - SELECT returned no result. Dec 14 21:08:15 ispc saslauthd[1571386]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:08:15 ispc saslauthd[1571386]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:09:01 ispc CRON[1571413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:09:01 ispc CRON[1571412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:09:01 ispc CRON[1571412]: pam_unix(cron:session): session closed for user root Dec 14 21:09:02 ispc CRON[1571413]: pam_unix(cron:session): session closed for user root Dec 14 21:09:14 ispc sshd[1571439]: Invalid user solv from 24.144.83.100 Dec 14 21:09:37 ispc saslauthd[1571451]: pam_mysql - SELECT returned no result. Dec 14 21:09:37 ispc saslauthd[1571451]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:09:37 ispc saslauthd[1571451]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:09:40 ispc saslauthd[1571456]: pam_mysql - SELECT returned no result. Dec 14 21:09:40 ispc saslauthd[1571456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:09:40 ispc saslauthd[1571456]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:10:01 ispc CRON[1571470]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:10:01 ispc CRON[1571467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:10:01 ispc CRON[1571468]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:10:01 ispc CRON[1571469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:10:01 ispc CRON[1571466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:10:01 ispc CRON[1571468]: pam_unix(cron:session): session closed for user www-data Dec 14 21:10:01 ispc CRON[1571467]: pam_unix(cron:session): session closed for user root Dec 14 21:10:01 ispc CRON[1571470]: pam_unix(cron:session): session closed for user getmail Dec 14 21:10:01 ispc CRON[1571469]: pam_unix(cron:session): session closed for user root Dec 14 21:10:01 ispc CRON[1571466]: pam_unix(cron:session): session closed for user root Dec 14 21:10:29 ispc sshd[1571554]: Invalid user martof from 51.91.247.10 Dec 14 21:11:01 ispc CRON[1571575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:11:02 ispc CRON[1571575]: pam_unix(cron:session): session closed for user root Dec 14 21:11:20 ispc postfix/smtpd[1571597]: sql auxprop plugin using mysql engine Dec 14 21:11:20 ispc CRON[1569296]: pam_unix(cron:session): session closed for user root Dec 14 21:11:25 ispc sshd[1571601]: Invalid user solv from 24.144.83.100 Dec 14 21:11:33 ispc sshd[1571604]: Invalid user blceu from 116.120.58.228 Dec 14 21:12:01 ispc CRON[1571607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:12:02 ispc CRON[1571607]: pam_unix(cron:session): session closed for user root Dec 14 21:12:07 ispc sshd[1571620]: Invalid user admin from 210.114.18.123 Dec 14 21:12:59 ispc saslauthd[1571637]: pam_mysql - SELECT returned no result. Dec 14 21:12:59 ispc saslauthd[1571637]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:12:59 ispc saslauthd[1571637]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:13:01 ispc CRON[1571638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:13:02 ispc CRON[1571638]: pam_unix(cron:session): session closed for user root Dec 14 21:13:35 ispc sshd[1571655]: Invalid user solv from 24.144.83.100 Dec 14 21:14:01 ispc CRON[1571659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:14:01 ispc CRON[1571659]: pam_unix(cron:session): session closed for user root Dec 14 21:14:37 ispc saslauthd[1571675]: pam_mysql - SELECT returned no result. Dec 14 21:14:37 ispc saslauthd[1571675]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:14:37 ispc saslauthd[1571675]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:15:01 ispc CRON[1571680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:15:01 ispc CRON[1571679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:15:01 ispc CRON[1571681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:15:01 ispc CRON[1571682]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:15:01 ispc CRON[1571680]: pam_unix(cron:session): session closed for user root Dec 14 21:15:02 ispc CRON[1571682]: pam_unix(cron:session): session closed for user getmail Dec 14 21:15:02 ispc CRON[1571679]: pam_unix(cron:session): session closed for user root Dec 14 21:15:46 ispc CRON[1571681]: pam_unix(cron:session): session closed for user root Dec 14 21:15:47 ispc sshd[1571870]: Invalid user solv from 24.144.83.100 Dec 14 21:16:01 ispc CRON[1571874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:16:52 ispc sshd[1571906]: Invalid user blceu from 202.46.29.79 Dec 14 21:17:01 ispc CRON[1571915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:17:02 ispc CRON[1571915]: pam_unix(cron:session): session closed for user root Dec 14 21:17:44 ispc sshd[1571953]: Invalid user solv from 24.144.83.100 Dec 14 21:18:01 ispc CRON[1571964]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 14 21:18:01 ispc CRON[1571965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:18:02 ispc CRON[1571965]: pam_unix(cron:session): session closed for user root Dec 14 21:18:06 ispc CRON[1571964]: pam_unix(cron:session): session closed for user amavis Dec 14 21:18:06 ispc sshd[1571984]: Invalid user blceu from 148.216.54.17 Dec 14 21:18:07 ispc postfix/smtpd[1571994]: sql auxprop plugin using mysql engine Dec 14 21:19:01 ispc CRON[1572024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:19:03 ispc CRON[1572024]: pam_unix(cron:session): session closed for user root Dec 14 21:19:47 ispc sshd[1572059]: Invalid user solv from 24.144.83.100 Dec 14 21:20:01 ispc CRON[1572071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:20:01 ispc CRON[1572072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:20:01 ispc CRON[1572073]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:20:01 ispc CRON[1572074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:20:01 ispc CRON[1572075]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:20:01 ispc CRON[1572072]: pam_unix(cron:session): session closed for user root Dec 14 21:20:01 ispc CRON[1572073]: pam_unix(cron:session): session closed for user www-data Dec 14 21:20:01 ispc CRON[1572075]: pam_unix(cron:session): session closed for user getmail Dec 14 21:20:01 ispc CRON[1572074]: pam_unix(cron:session): session closed for user root Dec 14 21:20:02 ispc CRON[1572071]: pam_unix(cron:session): session closed for user root Dec 14 21:20:27 ispc postfix/smtpd[1572164]: sql auxprop plugin using mysql engine Dec 14 21:20:29 ispc saslauthd[1572167]: pam_mysql - SELECT returned no result. Dec 14 21:20:29 ispc saslauthd[1572167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:20:29 ispc saslauthd[1572167]: do_auth : auth failure: [user=signa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:21:01 ispc CRON[1572184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:21:01 ispc CRON[1572185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:21:01 ispc CRON[1572184]: pam_unix(cron:session): session closed for user root Dec 14 21:21:02 ispc CRON[1572185]: pam_unix(cron:session): session closed for user root Dec 14 21:21:35 ispc sshd[1572213]: Invalid user ziplines from 49.247.24.89 Dec 14 21:22:01 ispc CRON[1572228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:22:02 ispc CRON[1572228]: pam_unix(cron:session): session closed for user root Dec 14 21:23:01 ispc CRON[1572275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:23:01 ispc CRON[1572275]: pam_unix(cron:session): session closed for user root Dec 14 21:24:02 ispc CRON[1572315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:24:03 ispc CRON[1572315]: pam_unix(cron:session): session closed for user root Dec 14 21:25:01 ispc CRON[1572357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:25:01 ispc CRON[1572358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:25:01 ispc CRON[1572359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:25:01 ispc CRON[1572360]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:25:01 ispc CRON[1572358]: pam_unix(cron:session): session closed for user root Dec 14 21:25:01 ispc CRON[1572360]: pam_unix(cron:session): session closed for user getmail Dec 14 21:25:01 ispc CRON[1572359]: pam_unix(cron:session): session closed for user root Dec 14 21:25:01 ispc CRON[1572357]: pam_unix(cron:session): session closed for user root Dec 14 21:26:02 ispc CRON[1572464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:26:03 ispc CRON[1572464]: pam_unix(cron:session): session closed for user root Dec 14 21:27:01 ispc CRON[1572500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:27:01 ispc CRON[1572500]: pam_unix(cron:session): session closed for user root Dec 14 21:27:28 ispc postfix/smtpd[1572524]: sql auxprop plugin using mysql engine Dec 14 21:27:29 ispc saslauthd[1572527]: pam_mysql - SELECT returned no result. Dec 14 21:27:29 ispc saslauthd[1572527]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:27:29 ispc saslauthd[1572527]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:27:43 ispc saslauthd[1572541]: pam_mysql - SELECT returned no result. Dec 14 21:27:43 ispc saslauthd[1572541]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:27:43 ispc saslauthd[1572541]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:28:01 ispc CRON[1572552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:28:02 ispc CRON[1572552]: pam_unix(cron:session): session closed for user root Dec 14 21:29:01 ispc CRON[1572589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:29:02 ispc CRON[1572589]: pam_unix(cron:session): session closed for user root Dec 14 21:30:01 ispc CRON[1572631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:30:01 ispc CRON[1572632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:30:01 ispc CRON[1572633]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:30:01 ispc CRON[1572634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:30:01 ispc CRON[1572635]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:30:01 ispc CRON[1572632]: pam_unix(cron:session): session closed for user root Dec 14 21:30:01 ispc CRON[1572633]: pam_unix(cron:session): session closed for user www-data Dec 14 21:30:01 ispc CRON[1572635]: pam_unix(cron:session): session closed for user getmail Dec 14 21:30:02 ispc CRON[1572634]: pam_unix(cron:session): session closed for user root Dec 14 21:30:03 ispc CRON[1572631]: pam_unix(cron:session): session closed for user root Dec 14 21:30:07 ispc postfix/smtpd[1572715]: sql auxprop plugin using mysql engine Dec 14 21:30:08 ispc saslauthd[1572717]: pam_mysql - SELECT returned no result. Dec 14 21:30:08 ispc saslauthd[1572717]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:30:08 ispc saslauthd[1572717]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:30:32 ispc saslauthd[1572728]: pam_mysql - SELECT returned no result. Dec 14 21:30:32 ispc saslauthd[1572728]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:30:32 ispc saslauthd[1572728]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:30:32 ispc saslauthd[1572729]: pam_mysql - SELECT returned no result. Dec 14 21:30:32 ispc saslauthd[1572729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:30:32 ispc saslauthd[1572729]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:30:38 ispc sshd[1572735]: Invalid user antiqkabinet from 77.90.185.40 Dec 14 21:30:41 ispc saslauthd[1572737]: pam_mysql - SELECT returned no result. Dec 14 21:30:41 ispc saslauthd[1572737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:30:41 ispc saslauthd[1572737]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:30:58 ispc saslauthd[1572747]: pam_mysql - SELECT returned no result. Dec 14 21:30:58 ispc saslauthd[1572747]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:30:58 ispc saslauthd[1572747]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:31:01 ispc CRON[1572749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:31:02 ispc CRON[1572749]: pam_unix(cron:session): session closed for user root Dec 14 21:31:03 ispc saslauthd[1572760]: pam_mysql - SELECT returned no result. Dec 14 21:31:03 ispc saslauthd[1572760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:31:03 ispc saslauthd[1572760]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:32:01 ispc CRON[1572788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:32:02 ispc CRON[1572788]: pam_unix(cron:session): session closed for user root Dec 14 21:32:06 ispc sshd[1572806]: Invalid user klape from 77.241.18.2 Dec 14 21:32:07 ispc postfix/smtpd[1572810]: sql auxprop plugin using mysql engine Dec 14 21:32:07 ispc sshd[1572808]: Invalid user ubuntu from 77.241.18.2 Dec 14 21:33:01 ispc CRON[1572844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:33:02 ispc CRON[1572844]: pam_unix(cron:session): session closed for user root Dec 14 21:34:01 ispc CRON[1572883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:34:01 ispc CRON[1572883]: pam_unix(cron:session): session closed for user root Dec 14 21:35:01 ispc CRON[1572920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:35:01 ispc CRON[1572921]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:35:01 ispc CRON[1572922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:35:01 ispc CRON[1572923]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:35:02 ispc CRON[1572921]: pam_unix(cron:session): session closed for user root Dec 14 21:35:02 ispc CRON[1572923]: pam_unix(cron:session): session closed for user getmail Dec 14 21:35:03 ispc CRON[1572922]: pam_unix(cron:session): session closed for user root Dec 14 21:35:04 ispc CRON[1572920]: pam_unix(cron:session): session closed for user root Dec 14 21:35:15 ispc postfix/smtpd[1573001]: sql auxprop plugin using mysql engine Dec 14 21:35:16 ispc saslauthd[1573003]: pam_mysql - SELECT returned no result. Dec 14 21:35:16 ispc saslauthd[1573003]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:35:16 ispc saslauthd[1573003]: do_auth : auth failure: [user=siteadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:36:01 ispc CRON[1573031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:36:01 ispc CRON[1573031]: pam_unix(cron:session): session closed for user root Dec 14 21:36:18 ispc CRON[1571874]: pam_unix(cron:session): session closed for user root Dec 14 21:37:01 ispc CRON[1573054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:37:02 ispc CRON[1573054]: pam_unix(cron:session): session closed for user root Dec 14 21:38:01 ispc CRON[1573087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:38:02 ispc CRON[1573087]: pam_unix(cron:session): session closed for user root Dec 14 21:39:01 ispc CRON[1573105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:39:01 ispc CRON[1573106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:39:02 ispc CRON[1573105]: pam_unix(cron:session): session closed for user root Dec 14 21:39:02 ispc CRON[1573106]: pam_unix(cron:session): session closed for user root Dec 14 21:39:43 ispc sshd[1573129]: Invalid user martof from 202.46.29.79 Dec 14 21:40:01 ispc CRON[1573133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:40:01 ispc CRON[1573134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:40:01 ispc CRON[1573135]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:40:01 ispc CRON[1573137]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:40:01 ispc CRON[1573136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:40:01 ispc CRON[1573135]: pam_unix(cron:session): session closed for user www-data Dec 14 21:40:01 ispc CRON[1573134]: pam_unix(cron:session): session closed for user root Dec 14 21:40:01 ispc CRON[1573137]: pam_unix(cron:session): session closed for user getmail Dec 14 21:40:03 ispc CRON[1573133]: pam_unix(cron:session): session closed for user root Dec 14 21:40:35 ispc CRON[1573136]: pam_unix(cron:session): session closed for user root Dec 14 21:41:01 ispc CRON[1573249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:42:01 ispc CRON[1573288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:42:02 ispc CRON[1573288]: pam_unix(cron:session): session closed for user root Dec 14 21:43:01 ispc CRON[1573333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:43:03 ispc CRON[1573333]: pam_unix(cron:session): session closed for user root Dec 14 21:44:01 ispc CRON[1573372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:44:01 ispc CRON[1573372]: pam_unix(cron:session): session closed for user root Dec 14 21:45:01 ispc CRON[1573416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:45:01 ispc CRON[1573417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:45:01 ispc CRON[1573418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:45:01 ispc CRON[1573419]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:45:01 ispc CRON[1573417]: pam_unix(cron:session): session closed for user root Dec 14 21:45:01 ispc CRON[1573419]: pam_unix(cron:session): session closed for user getmail Dec 14 21:45:01 ispc CRON[1573418]: pam_unix(cron:session): session closed for user root Dec 14 21:45:02 ispc CRON[1573416]: pam_unix(cron:session): session closed for user root Dec 14 21:46:01 ispc CRON[1573519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:46:02 ispc CRON[1573519]: pam_unix(cron:session): session closed for user root Dec 14 21:47:01 ispc CRON[1573556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:47:02 ispc CRON[1573556]: pam_unix(cron:session): session closed for user root Dec 14 21:48:01 ispc CRON[1573607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:48:03 ispc CRON[1573607]: pam_unix(cron:session): session closed for user root Dec 14 21:49:01 ispc CRON[1573643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:49:02 ispc CRON[1573643]: pam_unix(cron:session): session closed for user root Dec 14 21:49:48 ispc sshd[1573678]: Invalid user ziplines from 148.216.54.17 Dec 14 21:50:01 ispc CRON[1573692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:50:01 ispc CRON[1573693]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 21:50:01 ispc CRON[1573694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:50:01 ispc CRON[1573695]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:50:01 ispc CRON[1573691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:50:01 ispc CRON[1573693]: pam_unix(cron:session): session closed for user www-data Dec 14 21:50:01 ispc CRON[1573692]: pam_unix(cron:session): session closed for user root Dec 14 21:50:01 ispc CRON[1573695]: pam_unix(cron:session): session closed for user getmail Dec 14 21:50:01 ispc CRON[1573694]: pam_unix(cron:session): session closed for user root Dec 14 21:50:02 ispc CRON[1573691]: pam_unix(cron:session): session closed for user root Dec 14 21:50:04 ispc postfix/smtpd[1573773]: sql auxprop plugin using mysql engine Dec 14 21:50:05 ispc saslauthd[1573777]: pam_mysql - SELECT returned no result. Dec 14 21:50:05 ispc saslauthd[1573777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:50:05 ispc saslauthd[1573777]: do_auth : auth failure: [user=snake] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:50:34 ispc sshd[1573792]: Invalid user admin from 210.114.18.123 Dec 14 21:51:01 ispc CRON[1573803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:51:01 ispc CRON[1573803]: pam_unix(cron:session): session closed for user root Dec 14 21:52:02 ispc CRON[1573842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:52:02 ispc CRON[1573843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:52:02 ispc CRON[1573843]: pam_unix(cron:session): session closed for user root Dec 14 21:52:27 ispc sshd[1573873]: Invalid user blceu from 51.91.247.10 Dec 14 21:53:01 ispc CRON[1573895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:53:02 ispc CRON[1573895]: pam_unix(cron:session): session closed for user root Dec 14 21:53:19 ispc sshd[1573917]: Invalid user matlbula from 77.90.185.40 Dec 14 21:54:01 ispc CRON[1573947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:54:02 ispc CRON[1573947]: pam_unix(cron:session): session closed for user root Dec 14 21:54:04 ispc postfix/smtpd[1573958]: sql auxprop plugin using mysql engine Dec 14 21:54:05 ispc saslauthd[1573961]: pam_mysql - SELECT returned no result. Dec 14 21:54:05 ispc saslauthd[1573961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:05 ispc saslauthd[1573961]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:54:07 ispc saslauthd[1573966]: pam_mysql - SELECT returned no result. Dec 14 21:54:07 ispc saslauthd[1573966]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:07 ispc saslauthd[1573966]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:54:28 ispc saslauthd[1573976]: pam_mysql - SELECT returned no result. Dec 14 21:54:28 ispc saslauthd[1573976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:28 ispc saslauthd[1573976]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:54:38 ispc saslauthd[1573981]: pam_mysql - SELECT returned no result. Dec 14 21:54:38 ispc saslauthd[1573981]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:38 ispc saslauthd[1573981]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:54:40 ispc saslauthd[1573982]: pam_mysql - SELECT returned no result. Dec 14 21:54:40 ispc saslauthd[1573982]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:40 ispc saslauthd[1573982]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:54:49 ispc saslauthd[1573987]: pam_mysql - SELECT returned no result. Dec 14 21:54:49 ispc saslauthd[1573987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:54:49 ispc saslauthd[1573987]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:01 ispc saslauthd[1573993]: pam_mysql - SELECT returned no result. Dec 14 21:55:01 ispc saslauthd[1573993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:01 ispc saslauthd[1573993]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:01 ispc CRON[1573994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:55:01 ispc CRON[1573995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:55:01 ispc CRON[1573996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:55:01 ispc CRON[1573997]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 21:55:01 ispc CRON[1573995]: pam_unix(cron:session): session closed for user root Dec 14 21:55:01 ispc CRON[1573997]: pam_unix(cron:session): session closed for user getmail Dec 14 21:55:02 ispc CRON[1573996]: pam_unix(cron:session): session closed for user root Dec 14 21:55:03 ispc CRON[1573994]: pam_unix(cron:session): session closed for user root Dec 14 21:55:03 ispc saslauthd[1574070]: pam_mysql - SELECT returned no result. Dec 14 21:55:03 ispc saslauthd[1574070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:03 ispc saslauthd[1574070]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:10 ispc saslauthd[1574075]: pam_mysql - SELECT returned no result. Dec 14 21:55:10 ispc saslauthd[1574075]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:10 ispc saslauthd[1574075]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:11 ispc postfix/smtpd[1574076]: sql auxprop plugin using mysql engine Dec 14 21:55:12 ispc saslauthd[1574079]: pam_mysql - SELECT returned no result. Dec 14 21:55:12 ispc saslauthd[1574079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:12 ispc saslauthd[1574079]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:12 ispc saslauthd[1574080]: pam_mysql - SELECT returned no result. Dec 14 21:55:12 ispc saslauthd[1574080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:12 ispc saslauthd[1574080]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:14 ispc saslauthd[1574082]: pam_mysql - SELECT returned no result. Dec 14 21:55:14 ispc saslauthd[1574082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:14 ispc saslauthd[1574082]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:17 ispc saslauthd[1574087]: pam_mysql - SELECT returned no result. Dec 14 21:55:17 ispc saslauthd[1574087]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:17 ispc saslauthd[1574087]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:19 ispc CRON[1573842]: pam_unix(cron:session): session closed for user root Dec 14 21:55:24 ispc sshd[1574088]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:32 ispc sshd[1574095]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:32 ispc sshd[1574095]: Invalid user system from 27.79.6.240 Dec 14 21:55:41 ispc saslauthd[1574102]: pam_mysql - SELECT returned no result. Dec 14 21:55:41 ispc saslauthd[1574102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:55:41 ispc saslauthd[1574102]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:55:46 ispc sshd[1574103]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:46 ispc sshd[1574103]: Invalid user support from 27.79.6.240 Dec 14 21:55:52 ispc sshd[1574109]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:52 ispc sshd[1574109]: Invalid user test from 27.79.6.240 Dec 14 21:55:54 ispc sshd[1574114]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:54 ispc sshd[1574114]: Invalid user ubnt from 27.79.6.240 Dec 14 21:55:54 ispc sshd[1574111]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:55:54 ispc sshd[1574111]: Invalid user admin from 27.79.6.240 Dec 14 21:56:01 ispc CRON[1574120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:56:02 ispc CRON[1574120]: pam_unix(cron:session): session closed for user root Dec 14 21:56:15 ispc sshd[1574137]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:56:15 ispc sshd[1574137]: Invalid user squid from 27.79.6.240 Dec 14 21:56:15 ispc sshd[1574135]: Address 27.79.6.240 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 21:56:15 ispc sshd[1574135]: Invalid user admin from 27.79.6.240 Dec 14 21:57:01 ispc CRON[1574167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:57:02 ispc CRON[1574167]: pam_unix(cron:session): session closed for user root Dec 14 21:57:06 ispc sshd[1574180]: Invalid user ziplines from 202.46.29.79 Dec 14 21:57:56 ispc postfix/smtpd[1574213]: sql auxprop plugin using mysql engine Dec 14 21:57:57 ispc saslauthd[1574215]: pam_mysql - SELECT returned no result. Dec 14 21:57:57 ispc saslauthd[1574215]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:57:57 ispc saslauthd[1574215]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:58:01 ispc CRON[1574220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:58:02 ispc CRON[1574220]: pam_unix(cron:session): session closed for user root Dec 14 21:59:01 ispc CRON[1574259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 21:59:01 ispc CRON[1574259]: pam_unix(cron:session): session closed for user root Dec 14 21:59:16 ispc saslauthd[1574275]: pam_mysql - SELECT returned no result. Dec 14 21:59:16 ispc saslauthd[1574275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:59:16 ispc saslauthd[1574275]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:59:20 ispc saslauthd[1574280]: pam_mysql - SELECT returned no result. Dec 14 21:59:20 ispc saslauthd[1574280]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:59:20 ispc saslauthd[1574280]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 21:59:52 ispc saslauthd[1574295]: pam_mysql - SELECT returned no result. Dec 14 21:59:52 ispc saslauthd[1574295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 21:59:52 ispc saslauthd[1574295]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:00:01 ispc CRON[1574303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:00:01 ispc CRON[1574304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:00:01 ispc CRON[1574305]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:00:01 ispc CRON[1574306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:00:01 ispc CRON[1574307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:00:01 ispc CRON[1574308]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:00:02 ispc CRON[1574305]: pam_unix(cron:session): session closed for user www-data Dec 14 22:00:02 ispc CRON[1574304]: pam_unix(cron:session): session closed for user root Dec 14 22:00:02 ispc CRON[1574308]: pam_unix(cron:session): session closed for user getmail Dec 14 22:00:02 ispc CRON[1574307]: pam_unix(cron:session): session closed for user root Dec 14 22:00:02 ispc CRON[1574306]: pam_unix(cron:session): session closed for user root Dec 14 22:00:03 ispc CRON[1574303]: pam_unix(cron:session): session closed for user root Dec 14 22:01:01 ispc CRON[1574484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:01:02 ispc saslauthd[1574498]: pam_mysql - SELECT returned no result. Dec 14 22:01:02 ispc saslauthd[1574498]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:01:02 ispc saslauthd[1574498]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:01:02 ispc CRON[1574484]: pam_unix(cron:session): session closed for user root Dec 14 22:01:22 ispc CRON[1573249]: pam_unix(cron:session): session closed for user root Dec 14 22:02:01 ispc CRON[1574510]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 22:02:01 ispc CRON[1574511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:02:02 ispc CRON[1574511]: pam_unix(cron:session): session closed for user root Dec 14 22:03:01 ispc CRON[1575365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:03:02 ispc CRON[1575365]: pam_unix(cron:session): session closed for user root Dec 14 22:03:09 ispc saslauthd[1575379]: pam_mysql - SELECT returned no result. Dec 14 22:03:09 ispc saslauthd[1575379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:03:09 ispc saslauthd[1575379]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:03:10 ispc postfix/smtpd[1575380]: sql auxprop plugin using mysql engine Dec 14 22:03:16 ispc postfix/smtpd[1575406]: sql auxprop plugin using mysql engine Dec 14 22:03:22 ispc postfix/smtpd[1575459]: sql auxprop plugin using mysql engine Dec 14 22:03:35 ispc CRON[1574510]: pam_unix(cron:session): session closed for user logcheck Dec 14 22:03:49 ispc postfix/smtpd[1575566]: sql auxprop plugin using mysql engine Dec 14 22:04:01 ispc CRON[1575573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:04:02 ispc CRON[1575573]: pam_unix(cron:session): session closed for user root Dec 14 22:04:51 ispc saslauthd[1575587]: pam_mysql - SELECT returned no result. Dec 14 22:04:51 ispc saslauthd[1575587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:04:51 ispc saslauthd[1575587]: do_auth : auth failure: [user=snmp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:05:01 ispc CRON[1575589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:05:01 ispc CRON[1575590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:05:01 ispc CRON[1575591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:05:01 ispc CRON[1575592]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:05:01 ispc CRON[1575590]: pam_unix(cron:session): session closed for user root Dec 14 22:05:01 ispc CRON[1575592]: pam_unix(cron:session): session closed for user getmail Dec 14 22:05:03 ispc CRON[1575589]: pam_unix(cron:session): session closed for user root Dec 14 22:05:37 ispc CRON[1575591]: pam_unix(cron:session): session closed for user root Dec 14 22:06:01 ispc CRON[1575703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:06:29 ispc saslauthd[1575723]: pam_mysql - SELECT returned no result. Dec 14 22:06:29 ispc saslauthd[1575723]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:06:29 ispc saslauthd[1575723]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:07:01 ispc CRON[1575737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:07:01 ispc CRON[1575737]: pam_unix(cron:session): session closed for user root Dec 14 22:07:48 ispc saslauthd[1575777]: pam_mysql - SELECT returned no result. Dec 14 22:07:48 ispc saslauthd[1575777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:07:48 ispc saslauthd[1575777]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:08:01 ispc saslauthd[1575788]: pam_mysql - SELECT returned no result. Dec 14 22:08:01 ispc saslauthd[1575788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:08:01 ispc saslauthd[1575788]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:08:02 ispc CRON[1575789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:08:03 ispc CRON[1575789]: pam_unix(cron:session): session closed for user root Dec 14 22:08:56 ispc sshd[1575828]: Address 27.79.2.141 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:08:56 ispc sshd[1575828]: Invalid user mms from 27.79.2.141 Dec 14 22:09:01 ispc CRON[1575835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:09:01 ispc CRON[1575836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:09:01 ispc CRON[1575835]: pam_unix(cron:session): session closed for user root Dec 14 22:09:02 ispc CRON[1575836]: pam_unix(cron:session): session closed for user root Dec 14 22:09:53 ispc postfix/smtpd[1575882]: sql auxprop plugin using mysql engine Dec 14 22:09:54 ispc saslauthd[1575885]: pam_mysql - SELECT returned no result. Dec 14 22:09:54 ispc saslauthd[1575885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:09:54 ispc saslauthd[1575885]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:10:01 ispc CRON[1575892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:10:01 ispc CRON[1575893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:10:01 ispc CRON[1575894]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:10:01 ispc CRON[1575895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:10:01 ispc CRON[1575896]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:10:01 ispc CRON[1575894]: pam_unix(cron:session): session closed for user www-data Dec 14 22:10:01 ispc CRON[1575893]: pam_unix(cron:session): session closed for user root Dec 14 22:10:01 ispc CRON[1575896]: pam_unix(cron:session): session closed for user getmail Dec 14 22:10:02 ispc CRON[1575895]: pam_unix(cron:session): session closed for user root Dec 14 22:10:03 ispc CRON[1575892]: pam_unix(cron:session): session closed for user root Dec 14 22:10:14 ispc saslauthd[1575975]: pam_mysql - SELECT returned no result. Dec 14 22:10:14 ispc saslauthd[1575975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:10:14 ispc saslauthd[1575975]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:11:01 ispc CRON[1576000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:11:01 ispc CRON[1576000]: pam_unix(cron:session): session closed for user root Dec 14 22:12:01 ispc CRON[1576042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:12:02 ispc CRON[1576042]: pam_unix(cron:session): session closed for user root Dec 14 22:13:01 ispc CRON[1576085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:13:02 ispc CRON[1576085]: pam_unix(cron:session): session closed for user root Dec 14 22:14:01 ispc CRON[1576126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:14:01 ispc CRON[1576126]: pam_unix(cron:session): session closed for user root Dec 14 22:15:01 ispc CRON[1576166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:15:01 ispc CRON[1576167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:15:01 ispc CRON[1576168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:15:01 ispc CRON[1576169]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:15:02 ispc CRON[1576167]: pam_unix(cron:session): session closed for user root Dec 14 22:15:02 ispc CRON[1576169]: pam_unix(cron:session): session closed for user getmail Dec 14 22:15:02 ispc CRON[1576168]: pam_unix(cron:session): session closed for user root Dec 14 22:15:03 ispc CRON[1576166]: pam_unix(cron:session): session closed for user root Dec 14 22:15:24 ispc sshd[1576250]: Invalid user martof from 222.236.46.74 Dec 14 22:16:01 ispc CRON[1576278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:16:02 ispc CRON[1576278]: pam_unix(cron:session): session closed for user root Dec 14 22:17:01 ispc CRON[1576331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:17:02 ispc CRON[1576331]: pam_unix(cron:session): session closed for user root Dec 14 22:17:10 ispc postfix/smtpd[1576346]: sql auxprop plugin using mysql engine Dec 14 22:17:10 ispc saslauthd[1576349]: pam_mysql - SELECT returned no result. Dec 14 22:17:10 ispc saslauthd[1576349]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:17:10 ispc saslauthd[1576349]: do_auth : auth failure: [user=compras] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:17:55 ispc sshd[1576380]: Did not receive identification string from 45.140.17.97 Dec 14 22:18:01 ispc CRON[1576385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:18:01 ispc CRON[1576385]: pam_unix(cron:session): session closed for user root Dec 14 22:18:55 ispc postfix/smtpd[1576419]: sql auxprop plugin using mysql engine Dec 14 22:19:01 ispc CRON[1576428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:19:02 ispc CRON[1576428]: pam_unix(cron:session): session closed for user root Dec 14 22:19:33 ispc saslauthd[1576452]: pam_mysql - SELECT returned no result. Dec 14 22:19:33 ispc saslauthd[1576452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:19:33 ispc saslauthd[1576452]: do_auth : auth failure: [user=software] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:20:01 ispc CRON[1576462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:20:01 ispc CRON[1576463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:20:01 ispc CRON[1576464]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:20:01 ispc CRON[1576465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:20:01 ispc CRON[1576466]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:20:01 ispc CRON[1576463]: pam_unix(cron:session): session closed for user root Dec 14 22:20:01 ispc CRON[1576464]: pam_unix(cron:session): session closed for user www-data Dec 14 22:20:01 ispc CRON[1576466]: pam_unix(cron:session): session closed for user getmail Dec 14 22:20:02 ispc CRON[1576465]: pam_unix(cron:session): session closed for user root Dec 14 22:20:02 ispc CRON[1576462]: pam_unix(cron:session): session closed for user root Dec 14 22:21:01 ispc CRON[1576571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:21:01 ispc CRON[1576572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:21:01 ispc CRON[1576571]: pam_unix(cron:session): session closed for user root Dec 14 22:21:02 ispc CRON[1576572]: pam_unix(cron:session): session closed for user root Dec 14 22:22:01 ispc CRON[1576612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:22:02 ispc CRON[1576612]: pam_unix(cron:session): session closed for user root Dec 14 22:23:01 ispc CRON[1576659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:23:02 ispc CRON[1576659]: pam_unix(cron:session): session closed for user root Dec 14 22:24:01 ispc CRON[1576699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:24:02 ispc CRON[1576699]: pam_unix(cron:session): session closed for user root Dec 14 22:24:03 ispc postfix/smtpd[1576712]: sql auxprop plugin using mysql engine Dec 14 22:24:04 ispc saslauthd[1576715]: pam_mysql - SELECT returned no result. Dec 14 22:24:04 ispc saslauthd[1576715]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:24:04 ispc saslauthd[1576715]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:25:01 ispc CRON[1576738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:25:01 ispc CRON[1576739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:25:01 ispc CRON[1576740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:25:01 ispc CRON[1576741]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:25:01 ispc CRON[1576739]: pam_unix(cron:session): session closed for user root Dec 14 22:25:01 ispc CRON[1576741]: pam_unix(cron:session): session closed for user getmail Dec 14 22:25:02 ispc CRON[1576740]: pam_unix(cron:session): session closed for user root Dec 14 22:25:02 ispc CRON[1576738]: pam_unix(cron:session): session closed for user root Dec 14 22:25:08 ispc sshd[1576818]: Invalid user matlbula from 51.159.18.215 Dec 14 22:26:01 ispc CRON[1576846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:26:02 ispc CRON[1576846]: pam_unix(cron:session): session closed for user root Dec 14 22:26:05 ispc sshd[1576861]: Invalid user admin from 210.114.18.123 Dec 14 22:26:14 ispc sshd[1576867]: Did not receive identification string from 167.172.42.101 Dec 14 22:26:25 ispc postfix/smtpd[1576873]: sql auxprop plugin using mysql engine Dec 14 22:26:25 ispc saslauthd[1576875]: pam_mysql - SELECT returned no result. Dec 14 22:26:25 ispc saslauthd[1576875]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:26:25 ispc saslauthd[1576875]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:26:32 ispc CRON[1575703]: pam_unix(cron:session): session closed for user root Dec 14 22:26:45 ispc saslauthd[1576880]: pam_mysql - SELECT returned no result. Dec 14 22:26:45 ispc saslauthd[1576880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:26:45 ispc saslauthd[1576880]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:26:49 ispc saslauthd[1576882]: pam_mysql - SELECT returned no result. Dec 14 22:26:49 ispc saslauthd[1576882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:26:49 ispc saslauthd[1576882]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:26:55 ispc saslauthd[1576883]: pam_mysql - SELECT returned no result. Dec 14 22:26:55 ispc saslauthd[1576883]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:26:55 ispc saslauthd[1576883]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:27:01 ispc CRON[1576884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:27:02 ispc CRON[1576884]: pam_unix(cron:session): session closed for user root Dec 14 22:27:16 ispc saslauthd[1576898]: pam_mysql - SELECT returned no result. Dec 14 22:27:16 ispc saslauthd[1576898]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:27:16 ispc saslauthd[1576898]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:27:22 ispc saslauthd[1576900]: pam_mysql - SELECT returned no result. Dec 14 22:27:22 ispc saslauthd[1576900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:27:22 ispc saslauthd[1576900]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:28:01 ispc CRON[1576913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:28:02 ispc CRON[1576913]: pam_unix(cron:session): session closed for user root Dec 14 22:29:01 ispc CRON[1576931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:29:02 ispc CRON[1576931]: pam_unix(cron:session): session closed for user root Dec 14 22:29:13 ispc sshd[1576943]: Invalid user admin from 167.172.42.101 Dec 14 22:30:01 ispc CRON[1576948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:30:01 ispc CRON[1576949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:30:01 ispc CRON[1576950]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:30:01 ispc CRON[1576951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:30:01 ispc CRON[1576952]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:30:01 ispc CRON[1576950]: pam_unix(cron:session): session closed for user www-data Dec 14 22:30:01 ispc CRON[1576949]: pam_unix(cron:session): session closed for user root Dec 14 22:30:02 ispc CRON[1576952]: pam_unix(cron:session): session closed for user getmail Dec 14 22:30:02 ispc CRON[1576948]: pam_unix(cron:session): session closed for user root Dec 14 22:30:24 ispc sshd[1577135]: Invalid user admin from 167.172.42.101 Dec 14 22:30:35 ispc CRON[1576951]: pam_unix(cron:session): session closed for user root Dec 14 22:31:01 ispc saslauthd[1577140]: pam_mysql - SELECT returned no result. Dec 14 22:31:01 ispc saslauthd[1577140]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:31:01 ispc saslauthd[1577140]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:31:01 ispc CRON[1577141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:31:17 ispc sshd[1577157]: Did not receive identification string from 143.198.96.49 Dec 14 22:31:27 ispc sshd[1577163]: Invalid user user from 62.60.131.157 Dec 14 22:31:37 ispc sshd[1577169]: Invalid user admin from 167.172.42.101 Dec 14 22:32:01 ispc CRON[1577180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:32:02 ispc CRON[1577180]: pam_unix(cron:session): session closed for user root Dec 14 22:32:46 ispc sshd[1577223]: Invalid user admin from 167.172.42.101 Dec 14 22:33:01 ispc CRON[1577229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:33:02 ispc CRON[1577229]: pam_unix(cron:session): session closed for user root Dec 14 22:33:50 ispc sshd[1577262]: Invalid user admin from 167.172.42.101 Dec 14 22:34:01 ispc CRON[1577268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:34:01 ispc CRON[1577268]: pam_unix(cron:session): session closed for user root Dec 14 22:34:04 ispc sshd[1577281]: Invalid user klape from 2.57.217.229 Dec 14 22:34:04 ispc sshd[1577283]: Invalid user ubuntu from 2.57.217.229 Dec 14 22:34:20 ispc postfix/smtpd[1577294]: sql auxprop plugin using mysql engine Dec 14 22:34:21 ispc saslauthd[1577296]: pam_mysql - SELECT returned no result. Dec 14 22:34:21 ispc saslauthd[1577296]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:34:21 ispc saslauthd[1577296]: do_auth : auth failure: [user=spcl] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:34:33 ispc sshd[1577302]: Invalid user solv from 143.198.96.49 Dec 14 22:34:49 ispc sshd[1577313]: Invalid user admin from 167.172.42.101 Dec 14 22:34:53 ispc sshd[1577321]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:34:56 ispc sshd[1577323]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:34:56 ispc sshd[1577323]: Invalid user klape from 189.89.20.45 Dec 14 22:34:57 ispc sshd[1577325]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:34:57 ispc sshd[1577325]: Invalid user ubuntu from 189.89.20.45 Dec 14 22:35:01 ispc CRON[1577332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:35:01 ispc CRON[1577333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:35:01 ispc CRON[1577334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:35:01 ispc CRON[1577335]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:35:01 ispc CRON[1577333]: pam_unix(cron:session): session closed for user root Dec 14 22:35:01 ispc CRON[1577335]: pam_unix(cron:session): session closed for user getmail Dec 14 22:35:02 ispc CRON[1577332]: pam_unix(cron:session): session closed for user root Dec 14 22:35:02 ispc CRON[1577334]: pam_unix(cron:session): session closed for user root Dec 14 22:36:01 ispc CRON[1577435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:36:03 ispc CRON[1577435]: pam_unix(cron:session): session closed for user root Dec 14 22:36:57 ispc sshd[1577476]: Invalid user solv from 143.198.96.49 Dec 14 22:37:01 ispc CRON[1577478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:37:02 ispc CRON[1577478]: pam_unix(cron:session): session closed for user root Dec 14 22:38:01 ispc CRON[1577528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:38:02 ispc CRON[1577528]: pam_unix(cron:session): session closed for user root Dec 14 22:39:01 ispc CRON[1577565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:39:01 ispc CRON[1577566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:39:01 ispc CRON[1577565]: pam_unix(cron:session): session closed for user root Dec 14 22:39:02 ispc CRON[1577566]: pam_unix(cron:session): session closed for user root Dec 14 22:39:21 ispc sshd[1577596]: Invalid user solv from 143.198.96.49 Dec 14 22:39:39 ispc sshd[1577607]: Did not receive identification string from 165.232.93.102 Dec 14 22:40:01 ispc CRON[1577616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:40:01 ispc CRON[1577617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:40:01 ispc CRON[1577618]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:40:01 ispc CRON[1577619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:40:01 ispc CRON[1577620]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:40:01 ispc CRON[1577617]: pam_unix(cron:session): session closed for user root Dec 14 22:40:01 ispc CRON[1577618]: pam_unix(cron:session): session closed for user www-data Dec 14 22:40:01 ispc CRON[1577620]: pam_unix(cron:session): session closed for user getmail Dec 14 22:40:02 ispc CRON[1577619]: pam_unix(cron:session): session closed for user root Dec 14 22:40:02 ispc CRON[1577616]: pam_unix(cron:session): session closed for user root Dec 14 22:40:05 ispc sshd[1577694]: Invalid user ziplines from 45.119.213.109 Dec 14 22:41:01 ispc CRON[1577728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:41:02 ispc CRON[1577728]: pam_unix(cron:session): session closed for user root Dec 14 22:41:06 ispc postfix/smtpd[1577740]: sql auxprop plugin using mysql engine Dec 14 22:41:33 ispc sshd[1577758]: Invalid user solv from 143.198.96.49 Dec 14 22:42:01 ispc CRON[1577776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:42:01 ispc CRON[1577776]: pam_unix(cron:session): session closed for user root Dec 14 22:43:01 ispc CRON[1577826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:43:02 ispc CRON[1577826]: pam_unix(cron:session): session closed for user root Dec 14 22:43:10 ispc sshd[1577839]: Invalid user martof from 175.125.92.77 Dec 14 22:43:17 ispc sshd[1577845]: Invalid user martof from 45.119.213.109 Dec 14 22:43:46 ispc sshd[1577861]: Invalid user solv from 143.198.96.49 Dec 14 22:44:01 ispc CRON[1577870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:44:02 ispc CRON[1577870]: pam_unix(cron:session): session closed for user root Dec 14 22:45:01 ispc CRON[1577915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:45:01 ispc CRON[1577916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:45:01 ispc CRON[1577917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:45:01 ispc CRON[1577918]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:45:01 ispc CRON[1577916]: pam_unix(cron:session): session closed for user root Dec 14 22:45:01 ispc CRON[1577918]: pam_unix(cron:session): session closed for user getmail Dec 14 22:45:02 ispc CRON[1577917]: pam_unix(cron:session): session closed for user root Dec 14 22:45:02 ispc CRON[1577915]: pam_unix(cron:session): session closed for user root Dec 14 22:45:24 ispc sshd[1578001]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 22:45:56 ispc sshd[1578022]: Invalid user solv from 143.198.96.49 Dec 14 22:46:01 ispc CRON[1578030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:46:01 ispc CRON[1578030]: pam_unix(cron:session): session closed for user root Dec 14 22:46:37 ispc postfix/smtpd[1578063]: sql auxprop plugin using mysql engine Dec 14 22:46:38 ispc saslauthd[1578066]: pam_mysql - SELECT returned no result. Dec 14 22:46:38 ispc saslauthd[1578066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:38 ispc saslauthd[1578066]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:40 ispc saslauthd[1578067]: pam_mysql - SELECT returned no result. Dec 14 22:46:40 ispc saslauthd[1578067]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:40 ispc saslauthd[1578067]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:40 ispc postfix/smtpd[1578068]: sql auxprop plugin using mysql engine Dec 14 22:46:41 ispc saslauthd[1578069]: pam_mysql - SELECT returned no result. Dec 14 22:46:41 ispc saslauthd[1578069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:41 ispc saslauthd[1578069]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:42 ispc saslauthd[1578070]: pam_mysql - SELECT returned no result. Dec 14 22:46:42 ispc saslauthd[1578070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:42 ispc saslauthd[1578070]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:43 ispc saslauthd[1578071]: pam_mysql - SELECT returned no result. Dec 14 22:46:43 ispc saslauthd[1578071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:43 ispc saslauthd[1578071]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:44 ispc saslauthd[1578072]: pam_mysql - SELECT returned no result. Dec 14 22:46:44 ispc saslauthd[1578072]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:44 ispc saslauthd[1578072]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:45 ispc saslauthd[1578073]: pam_mysql - SELECT returned no result. Dec 14 22:46:45 ispc saslauthd[1578073]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:45 ispc saslauthd[1578073]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:46 ispc saslauthd[1578078]: pam_mysql - SELECT returned no result. Dec 14 22:46:46 ispc saslauthd[1578078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:46 ispc saslauthd[1578078]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:47 ispc saslauthd[1578079]: pam_mysql - SELECT returned no result. Dec 14 22:46:47 ispc saslauthd[1578079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:47 ispc saslauthd[1578079]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:47 ispc saslauthd[1578080]: pam_mysql - SELECT returned no result. Dec 14 22:46:47 ispc saslauthd[1578080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:47 ispc saslauthd[1578080]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:48 ispc saslauthd[1578081]: pam_mysql - SELECT returned no result. Dec 14 22:46:48 ispc saslauthd[1578081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:48 ispc saslauthd[1578081]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:49 ispc saslauthd[1578082]: pam_mysql - SELECT returned no result. Dec 14 22:46:49 ispc saslauthd[1578082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:49 ispc saslauthd[1578082]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:50 ispc saslauthd[1578084]: pam_mysql - SELECT returned no result. Dec 14 22:46:50 ispc saslauthd[1578084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:50 ispc saslauthd[1578084]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:51 ispc saslauthd[1578086]: pam_mysql - SELECT returned no result. Dec 14 22:46:51 ispc saslauthd[1578086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:51 ispc saslauthd[1578086]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:52 ispc saslauthd[1578087]: pam_mysql - SELECT returned no result. Dec 14 22:46:52 ispc saslauthd[1578087]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:52 ispc saslauthd[1578087]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:53 ispc saslauthd[1578088]: pam_mysql - SELECT returned no result. Dec 14 22:46:53 ispc saslauthd[1578088]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:53 ispc saslauthd[1578088]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:54 ispc saslauthd[1578089]: pam_mysql - SELECT returned no result. Dec 14 22:46:54 ispc saslauthd[1578089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:54 ispc saslauthd[1578089]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:55 ispc saslauthd[1578090]: pam_mysql - SELECT returned no result. Dec 14 22:46:55 ispc saslauthd[1578090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:55 ispc saslauthd[1578090]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:56 ispc saslauthd[1578095]: pam_mysql - SELECT returned no result. Dec 14 22:46:56 ispc saslauthd[1578095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:56 ispc saslauthd[1578095]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:57 ispc saslauthd[1578096]: pam_mysql - SELECT returned no result. Dec 14 22:46:57 ispc saslauthd[1578096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:57 ispc saslauthd[1578096]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:58 ispc saslauthd[1578097]: pam_mysql - SELECT returned no result. Dec 14 22:46:58 ispc saslauthd[1578097]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:58 ispc saslauthd[1578097]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:46:59 ispc saslauthd[1578098]: pam_mysql - SELECT returned no result. Dec 14 22:46:59 ispc saslauthd[1578098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:46:59 ispc saslauthd[1578098]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:00 ispc saslauthd[1578099]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:00 ispc saslauthd[1578099]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:01 ispc saslauthd[1578100]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:01 ispc saslauthd[1578100]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:01 ispc CRON[1578101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:47:02 ispc saslauthd[1578112]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:02 ispc saslauthd[1578112]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:02 ispc CRON[1578101]: pam_unix(cron:session): session closed for user root Dec 14 22:47:03 ispc saslauthd[1578113]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:03 ispc saslauthd[1578113]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:04 ispc saslauthd[1578114]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:04 ispc saslauthd[1578114]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:05 ispc saslauthd[1578115]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:05 ispc saslauthd[1578115]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:06 ispc saslauthd[1578120]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:06 ispc saslauthd[1578120]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:07 ispc saslauthd[1578121]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:07 ispc saslauthd[1578121]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:08 ispc saslauthd[1578122]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:08 ispc saslauthd[1578122]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:09 ispc saslauthd[1578123]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:09 ispc saslauthd[1578123]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:10 ispc saslauthd[1578124]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:10 ispc saslauthd[1578124]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:11 ispc saslauthd[1578125]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:11 ispc saslauthd[1578125]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:12 ispc saslauthd[1578126]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:12 ispc saslauthd[1578126]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:13 ispc saslauthd[1578127]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:13 ispc saslauthd[1578127]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:14 ispc saslauthd[1578128]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:14 ispc saslauthd[1578128]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:15 ispc saslauthd[1578129]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:15 ispc saslauthd[1578129]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:16 ispc saslauthd[1578134]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:16 ispc saslauthd[1578134]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:17 ispc saslauthd[1578135]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:17 ispc saslauthd[1578135]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:18 ispc saslauthd[1578137]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:18 ispc saslauthd[1578137]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:20 ispc saslauthd[1578138]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:20 ispc saslauthd[1578138]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:21 ispc saslauthd[1578139]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:21 ispc saslauthd[1578139]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:22 ispc saslauthd[1578140]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:22 ispc saslauthd[1578140]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:23 ispc saslauthd[1578141]: pam_mysql - SELECT returned no result. Dec 14 22:47:23 ispc saslauthd[1578141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:23 ispc saslauthd[1578141]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:24 ispc saslauthd[1578143]: pam_mysql - SELECT returned no result. Dec 14 22:47:24 ispc saslauthd[1578143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:24 ispc saslauthd[1578143]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:25 ispc saslauthd[1578145]: pam_mysql - SELECT returned no result. Dec 14 22:47:25 ispc saslauthd[1578145]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:25 ispc saslauthd[1578145]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:26 ispc saslauthd[1578146]: pam_mysql - SELECT returned no result. Dec 14 22:47:26 ispc saslauthd[1578146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:26 ispc saslauthd[1578146]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:27 ispc saslauthd[1578151]: pam_mysql - SELECT returned no result. Dec 14 22:47:27 ispc saslauthd[1578151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:27 ispc saslauthd[1578151]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:27 ispc saslauthd[1578152]: pam_mysql - SELECT returned no result. Dec 14 22:47:27 ispc saslauthd[1578152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:27 ispc saslauthd[1578152]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:28 ispc saslauthd[1578153]: pam_mysql - SELECT returned no result. Dec 14 22:47:28 ispc saslauthd[1578153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:28 ispc saslauthd[1578153]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:29 ispc saslauthd[1578154]: pam_mysql - SELECT returned no result. Dec 14 22:47:29 ispc saslauthd[1578154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:29 ispc saslauthd[1578154]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:30 ispc saslauthd[1578155]: pam_mysql - SELECT returned no result. Dec 14 22:47:30 ispc saslauthd[1578155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:30 ispc saslauthd[1578155]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:31 ispc saslauthd[1578156]: pam_mysql - SELECT returned no result. Dec 14 22:47:31 ispc saslauthd[1578156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:31 ispc saslauthd[1578156]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:32 ispc saslauthd[1578157]: pam_mysql - SELECT returned no result. Dec 14 22:47:32 ispc saslauthd[1578157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:32 ispc saslauthd[1578157]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:33 ispc saslauthd[1578158]: pam_mysql - SELECT returned no result. Dec 14 22:47:33 ispc saslauthd[1578158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:33 ispc saslauthd[1578158]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:34 ispc saslauthd[1578159]: pam_mysql - SELECT returned no result. Dec 14 22:47:34 ispc saslauthd[1578159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:34 ispc saslauthd[1578159]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:35 ispc saslauthd[1578160]: pam_mysql - SELECT returned no result. Dec 14 22:47:35 ispc saslauthd[1578160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:35 ispc saslauthd[1578160]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:36 ispc saslauthd[1578161]: pam_mysql - SELECT returned no result. Dec 14 22:47:36 ispc saslauthd[1578161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:36 ispc saslauthd[1578161]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:37 ispc saslauthd[1578166]: pam_mysql - SELECT returned no result. Dec 14 22:47:37 ispc saslauthd[1578166]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:37 ispc saslauthd[1578166]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:38 ispc saslauthd[1578167]: pam_mysql - SELECT returned no result. Dec 14 22:47:38 ispc saslauthd[1578167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:38 ispc saslauthd[1578167]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:39 ispc saslauthd[1578172]: pam_mysql - SELECT returned no result. Dec 14 22:47:39 ispc saslauthd[1578172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:39 ispc saslauthd[1578172]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:40 ispc saslauthd[1578173]: pam_mysql - SELECT returned no result. Dec 14 22:47:40 ispc saslauthd[1578173]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:40 ispc saslauthd[1578173]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:41 ispc saslauthd[1578174]: pam_mysql - SELECT returned no result. Dec 14 22:47:41 ispc saslauthd[1578174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:41 ispc saslauthd[1578174]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:42 ispc saslauthd[1578175]: pam_mysql - SELECT returned no result. Dec 14 22:47:42 ispc saslauthd[1578175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:42 ispc saslauthd[1578175]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:43 ispc saslauthd[1578176]: pam_mysql - SELECT returned no result. Dec 14 22:47:43 ispc saslauthd[1578176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:47:43 ispc saslauthd[1578176]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:47:44 ispc saslauthd[1578177]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:44 ispc saslauthd[1578177]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:45 ispc saslauthd[1578178]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:45 ispc saslauthd[1578178]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:46 ispc saslauthd[1578179]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:46 ispc saslauthd[1578179]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:47 ispc saslauthd[1578184]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:47 ispc saslauthd[1578184]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:48 ispc saslauthd[1578185]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:48 ispc saslauthd[1578185]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:48 ispc saslauthd[1578186]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:48 ispc saslauthd[1578186]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:49 ispc saslauthd[1578187]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:49 ispc saslauthd[1578187]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:50 ispc saslauthd[1578191]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:50 ispc saslauthd[1578191]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:51 ispc saslauthd[1578192]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:51 ispc saslauthd[1578192]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:52 ispc saslauthd[1578193]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:52 ispc saslauthd[1578193]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:53 ispc saslauthd[1578194]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:53 ispc saslauthd[1578194]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:54 ispc saslauthd[1578195]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:54 ispc saslauthd[1578195]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:55 ispc saslauthd[1578196]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:55 ispc saslauthd[1578196]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:56 ispc saslauthd[1578198]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:56 ispc saslauthd[1578198]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:57 ispc saslauthd[1578204]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:57 ispc saslauthd[1578204]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:58 ispc saslauthd[1578205]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:58 ispc saslauthd[1578205]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:47:59 ispc saslauthd[1578206]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:47:59 ispc saslauthd[1578206]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:00 ispc saslauthd[1578207]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:48:00 ispc saslauthd[1578207]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:01 ispc saslauthd[1578209]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:48:01 ispc saslauthd[1578209]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:01 ispc CRON[1578210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:48:03 ispc CRON[1578210]: pam_unix(cron:session): session closed for user root Dec 14 22:48:03 ispc postfix/smtpd[1578221]: sql auxprop plugin using mysql engine Dec 14 22:48:03 ispc saslauthd[1578223]: pam_mysql - SELECT returned no result. Dec 14 22:48:03 ispc saslauthd[1578223]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:03 ispc saslauthd[1578223]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:05 ispc saslauthd[1578224]: pam_mysql - SELECT returned no result. Dec 14 22:48:05 ispc saslauthd[1578224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:05 ispc saslauthd[1578224]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:06 ispc saslauthd[1578225]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:48:06 ispc saslauthd[1578225]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:11 ispc saslauthd[1578230]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:48:11 ispc saslauthd[1578230]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:13 ispc saslauthd[1578231]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 14 22:48:13 ispc saslauthd[1578231]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 14 22:48:33 ispc saslauthd[1578243]: pam_mysql - SELECT returned no result. Dec 14 22:48:33 ispc saslauthd[1578243]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:33 ispc saslauthd[1578243]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:36 ispc saslauthd[1578244]: pam_mysql - SELECT returned no result. Dec 14 22:48:36 ispc saslauthd[1578244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:36 ispc saslauthd[1578244]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:38 ispc saslauthd[1578249]: pam_mysql - SELECT returned no result. Dec 14 22:48:38 ispc saslauthd[1578249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:38 ispc saslauthd[1578249]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:46 ispc saslauthd[1578251]: pam_mysql - SELECT returned no result. Dec 14 22:48:46 ispc saslauthd[1578251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:46 ispc saslauthd[1578251]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:58 ispc saslauthd[1578256]: pam_mysql - SELECT returned no result. Dec 14 22:48:58 ispc saslauthd[1578256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:58 ispc saslauthd[1578256]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:48:59 ispc saslauthd[1578261]: pam_mysql - SELECT returned no result. Dec 14 22:48:59 ispc saslauthd[1578261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:48:59 ispc saslauthd[1578261]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:01 ispc CRON[1578262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:49:01 ispc CRON[1578262]: pam_unix(cron:session): session closed for user root Dec 14 22:49:07 ispc saslauthd[1578276]: pam_mysql - SELECT returned no result. Dec 14 22:49:07 ispc saslauthd[1578276]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:07 ispc saslauthd[1578276]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:10 ispc postfix/smtpd[1578281]: sql auxprop plugin using mysql engine Dec 14 22:49:11 ispc saslauthd[1578283]: pam_mysql - SELECT returned no result. Dec 14 22:49:11 ispc saslauthd[1578283]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:11 ispc saslauthd[1578283]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:11 ispc saslauthd[1578284]: pam_mysql - SELECT returned no result. Dec 14 22:49:11 ispc saslauthd[1578284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:11 ispc saslauthd[1578284]: do_auth : auth failure: [user=ssadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:15 ispc saslauthd[1578285]: pam_mysql - SELECT returned no result. Dec 14 22:49:15 ispc saslauthd[1578285]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:15 ispc saslauthd[1578285]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:15 ispc saslauthd[1578286]: pam_mysql - SELECT returned no result. Dec 14 22:49:15 ispc saslauthd[1578286]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:15 ispc saslauthd[1578286]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:18 ispc saslauthd[1578287]: pam_mysql - SELECT returned no result. Dec 14 22:49:18 ispc saslauthd[1578287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:18 ispc saslauthd[1578287]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:49:37 ispc sshd[1578298]: Invalid user klape from 67.205.163.146 Dec 14 22:49:37 ispc sshd[1578300]: Invalid user ubuntu from 67.205.163.146 Dec 14 22:49:46 ispc saslauthd[1578308]: pam_mysql - SELECT returned no result. Dec 14 22:49:46 ispc saslauthd[1578308]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:49:46 ispc saslauthd[1578308]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:50:01 ispc CRON[1578319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:50:01 ispc CRON[1578321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:50:01 ispc CRON[1578322]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 22:50:01 ispc CRON[1578323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:50:01 ispc CRON[1578324]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:50:01 ispc CRON[1578322]: pam_unix(cron:session): session closed for user www-data Dec 14 22:50:01 ispc CRON[1578321]: pam_unix(cron:session): session closed for user root Dec 14 22:50:01 ispc CRON[1578324]: pam_unix(cron:session): session closed for user getmail Dec 14 22:50:02 ispc sshd[1578320]: Invalid user from 35.216.140.3 Dec 14 22:50:02 ispc CRON[1578323]: pam_unix(cron:session): session closed for user root Dec 14 22:50:02 ispc CRON[1578319]: pam_unix(cron:session): session closed for user root Dec 14 22:51:01 ispc CRON[1578432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:51:03 ispc CRON[1578432]: pam_unix(cron:session): session closed for user root Dec 14 22:51:31 ispc postfix/smtpd[1578456]: sql auxprop plugin using mysql engine Dec 14 22:51:31 ispc CRON[1577141]: pam_unix(cron:session): session closed for user root Dec 14 22:52:01 ispc CRON[1578462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:52:03 ispc CRON[1578462]: pam_unix(cron:session): session closed for user root Dec 14 22:52:22 ispc sshd[1578476]: Did not receive identification string from 188.166.33.172 Dec 14 22:52:56 ispc sshd[1578487]: Invalid user blceu from 202.46.29.79 Dec 14 22:53:01 ispc CRON[1578489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:53:02 ispc CRON[1578489]: pam_unix(cron:session): session closed for user root Dec 14 22:53:28 ispc sshd[1578504]: Invalid user blceu from 221.156.137.104 Dec 14 22:54:01 ispc CRON[1578508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:54:02 ispc CRON[1578508]: pam_unix(cron:session): session closed for user root Dec 14 22:54:40 ispc saslauthd[1578525]: pam_mysql - SELECT returned no result. Dec 14 22:54:40 ispc saslauthd[1578525]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:54:40 ispc saslauthd[1578525]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:55:01 ispc CRON[1578529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:55:01 ispc CRON[1578530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:55:01 ispc CRON[1578531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:55:01 ispc CRON[1578532]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 22:55:01 ispc CRON[1578530]: pam_unix(cron:session): session closed for user root Dec 14 22:55:01 ispc CRON[1578532]: pam_unix(cron:session): session closed for user getmail Dec 14 22:55:02 ispc CRON[1578529]: pam_unix(cron:session): session closed for user root Dec 14 22:55:36 ispc saslauthd[1578642]: pam_mysql - SELECT returned no result. Dec 14 22:55:36 ispc saslauthd[1578642]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:55:36 ispc saslauthd[1578642]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:55:41 ispc CRON[1578531]: pam_unix(cron:session): session closed for user root Dec 14 22:56:01 ispc CRON[1578645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:56:45 ispc saslauthd[1578679]: pam_mysql - SELECT returned no result. Dec 14 22:56:45 ispc saslauthd[1578679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 22:56:45 ispc saslauthd[1578679]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 22:57:01 ispc CRON[1578685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:57:02 ispc CRON[1578685]: pam_unix(cron:session): session closed for user root Dec 14 22:57:34 ispc sshd[1578712]: Invalid user ziplines from 51.91.247.10 Dec 14 22:58:01 ispc CRON[1578736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:58:02 ispc CRON[1578736]: pam_unix(cron:session): session closed for user root Dec 14 22:58:21 ispc sshd[1578758]: Invalid user ubuntu from 117.50.70.169 Dec 14 22:58:34 ispc sshd[1578767]: Invalid user blceu from 49.247.24.89 Dec 14 22:58:50 ispc sshd[1578780]: Invalid user klape from 187.190.35.163 Dec 14 22:58:51 ispc sshd[1578783]: Invalid user ubuntu from 187.190.35.163 Dec 14 22:59:01 ispc CRON[1578791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 22:59:01 ispc CRON[1578791]: pam_unix(cron:session): session closed for user root Dec 14 22:59:07 ispc sshd[1578803]: Invalid user martof from 49.247.24.89 Dec 14 23:00:01 ispc CRON[1578835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:00:01 ispc CRON[1578836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:00:01 ispc CRON[1578837]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:00:01 ispc CRON[1578838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:00:01 ispc CRON[1578839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:00:01 ispc CRON[1578840]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:00:01 ispc CRON[1578837]: pam_unix(cron:session): session closed for user www-data Dec 14 23:00:01 ispc CRON[1578836]: pam_unix(cron:session): session closed for user root Dec 14 23:00:02 ispc CRON[1578840]: pam_unix(cron:session): session closed for user getmail Dec 14 23:00:03 ispc CRON[1578839]: pam_unix(cron:session): session closed for user root Dec 14 23:00:03 ispc CRON[1578838]: pam_unix(cron:session): session closed for user root Dec 14 23:00:04 ispc CRON[1578835]: pam_unix(cron:session): session closed for user root Dec 14 23:01:01 ispc CRON[1579021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:01:02 ispc CRON[1579021]: pam_unix(cron:session): session closed for user root Dec 14 23:01:47 ispc sshd[1579054]: Invalid user klape from 36.50.177.171 Dec 14 23:01:49 ispc sshd[1579057]: Invalid user ubuntu from 36.50.177.171 Dec 14 23:02:01 ispc CRON[1579070]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 14 23:02:01 ispc CRON[1579071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:02:01 ispc CRON[1579071]: pam_unix(cron:session): session closed for user root Dec 14 23:02:13 ispc postfix/smtpd[1579369]: sql auxprop plugin using mysql engine Dec 14 23:02:14 ispc saslauthd[1579375]: pam_mysql - SELECT returned no result. Dec 14 23:02:14 ispc saslauthd[1579375]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:02:14 ispc saslauthd[1579375]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:02:42 ispc sshd[1579705]: Did not receive identification string from 45.156.129.105 Dec 14 23:02:51 ispc saslauthd[1579891]: pam_mysql - SELECT returned no result. Dec 14 23:02:51 ispc saslauthd[1579891]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:02:51 ispc saslauthd[1579891]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:03:01 ispc CRON[1579957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:03:02 ispc CRON[1579957]: pam_unix(cron:session): session closed for user root Dec 14 23:03:16 ispc CRON[1579070]: pam_unix(cron:session): session closed for user logcheck Dec 14 23:03:33 ispc postfix/smtpd[1580166]: sql auxprop plugin using mysql engine Dec 14 23:03:55 ispc saslauthd[1580179]: pam_mysql - SELECT returned no result. Dec 14 23:03:55 ispc saslauthd[1580179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:03:55 ispc saslauthd[1580179]: do_auth : auth failure: [user=ssladmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:04:01 ispc CRON[1580180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:04:02 ispc CRON[1580180]: pam_unix(cron:session): session closed for user root Dec 14 23:04:29 ispc postfix/smtpd[1580208]: sql auxprop plugin using mysql engine Dec 14 23:05:01 ispc CRON[1580224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:05:01 ispc CRON[1580225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:05:01 ispc CRON[1580226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:05:01 ispc CRON[1580227]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:05:01 ispc CRON[1580225]: pam_unix(cron:session): session closed for user root Dec 14 23:05:01 ispc CRON[1580227]: pam_unix(cron:session): session closed for user getmail Dec 14 23:05:01 ispc CRON[1580226]: pam_unix(cron:session): session closed for user root Dec 14 23:05:01 ispc CRON[1580224]: pam_unix(cron:session): session closed for user root Dec 14 23:05:27 ispc saslauthd[1580315]: pam_mysql - SELECT returned no result. Dec 14 23:05:27 ispc saslauthd[1580315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:05:27 ispc saslauthd[1580315]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:06:01 ispc CRON[1580332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:06:02 ispc CRON[1580332]: pam_unix(cron:session): session closed for user root Dec 14 23:06:44 ispc saslauthd[1580363]: pam_mysql - SELECT returned no result. Dec 14 23:06:44 ispc saslauthd[1580363]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:06:44 ispc saslauthd[1580363]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:07:01 ispc CRON[1580376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:07:02 ispc CRON[1580376]: pam_unix(cron:session): session closed for user root Dec 14 23:07:08 ispc saslauthd[1580396]: pam_mysql - SELECT returned no result. Dec 14 23:07:08 ispc saslauthd[1580396]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:07:08 ispc saslauthd[1580396]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:07:20 ispc saslauthd[1580401]: pam_mysql - SELECT returned no result. Dec 14 23:07:20 ispc saslauthd[1580401]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:07:20 ispc saslauthd[1580401]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:07:23 ispc saslauthd[1580402]: pam_mysql - SELECT returned no result. Dec 14 23:07:23 ispc saslauthd[1580402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:07:23 ispc saslauthd[1580402]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:08:01 ispc CRON[1580428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:08:02 ispc CRON[1580428]: pam_unix(cron:session): session closed for user root Dec 14 23:08:28 ispc sshd[1580450]: Invalid user blceu from 175.125.92.77 Dec 14 23:09:01 ispc CRON[1580472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:09:01 ispc CRON[1580473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:09:01 ispc CRON[1580472]: pam_unix(cron:session): session closed for user root Dec 14 23:09:02 ispc CRON[1580473]: pam_unix(cron:session): session closed for user root Dec 14 23:09:27 ispc sshd[1580509]: Invalid user ziplines from 175.125.92.77 Dec 14 23:10:01 ispc CRON[1580526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:10:01 ispc CRON[1580527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:10:01 ispc CRON[1580528]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:10:01 ispc CRON[1580529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:10:01 ispc CRON[1580530]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:10:01 ispc CRON[1580527]: pam_unix(cron:session): session closed for user root Dec 14 23:10:01 ispc CRON[1580528]: pam_unix(cron:session): session closed for user www-data Dec 14 23:10:01 ispc CRON[1580530]: pam_unix(cron:session): session closed for user getmail Dec 14 23:10:02 ispc CRON[1580529]: pam_unix(cron:session): session closed for user root Dec 14 23:10:03 ispc CRON[1580526]: pam_unix(cron:session): session closed for user root Dec 14 23:11:01 ispc CRON[1580633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:11:02 ispc CRON[1580633]: pam_unix(cron:session): session closed for user root Dec 14 23:12:01 ispc CRON[1580673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:12:02 ispc CRON[1580673]: pam_unix(cron:session): session closed for user root Dec 14 23:13:01 ispc CRON[1580722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:13:03 ispc CRON[1580722]: pam_unix(cron:session): session closed for user root Dec 14 23:14:01 ispc CRON[1580763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:14:01 ispc CRON[1580763]: pam_unix(cron:session): session closed for user root Dec 14 23:14:51 ispc sshd[1580799]: Invalid user admin from 188.166.33.172 Dec 14 23:15:01 ispc CRON[1580809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:15:01 ispc CRON[1580810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:15:01 ispc CRON[1580811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:15:01 ispc CRON[1580812]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:15:02 ispc CRON[1580810]: pam_unix(cron:session): session closed for user root Dec 14 23:15:02 ispc CRON[1580812]: pam_unix(cron:session): session closed for user getmail Dec 14 23:15:02 ispc CRON[1580811]: pam_unix(cron:session): session closed for user root Dec 14 23:15:03 ispc CRON[1580809]: pam_unix(cron:session): session closed for user root Dec 14 23:15:21 ispc postfix/smtpd[1580894]: sql auxprop plugin using mysql engine Dec 14 23:15:22 ispc saslauthd[1580897]: pam_mysql - SELECT returned no result. Dec 14 23:15:22 ispc saslauthd[1580897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:15:22 ispc saslauthd[1580897]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:15:33 ispc sshd[1580904]: Invalid user admin from 188.166.33.172 Dec 14 23:16:01 ispc CRON[1580920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:16:01 ispc sshd[1580918]: Invalid user martof from 202.46.29.79 Dec 14 23:16:02 ispc CRON[1580920]: pam_unix(cron:session): session closed for user root Dec 14 23:16:14 ispc sshd[1580936]: Invalid user admin from 188.166.33.172 Dec 14 23:16:26 ispc CRON[1578645]: pam_unix(cron:session): session closed for user root Dec 14 23:16:51 ispc sshd[1580947]: Invalid user admin from 188.166.33.172 Dec 14 23:17:01 ispc CRON[1580950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:17:02 ispc CRON[1580950]: pam_unix(cron:session): session closed for user root Dec 14 23:17:20 ispc postfix/smtpd[1580963]: sql auxprop plugin using mysql engine Dec 14 23:17:24 ispc sshd[1580966]: Invalid user admin from 188.166.33.172 Dec 14 23:17:58 ispc sshd[1580979]: Invalid user admin from 188.166.33.172 Dec 14 23:18:01 ispc CRON[1580988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:18:03 ispc CRON[1580988]: pam_unix(cron:session): session closed for user root Dec 14 23:18:42 ispc saslauthd[1581005]: pam_mysql - SELECT returned no result. Dec 14 23:18:42 ispc saslauthd[1581005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:18:42 ispc saslauthd[1581005]: do_auth : auth failure: [user=ssp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:18:43 ispc sshd[1581003]: Invalid user blceu from 106.12.215.233 Dec 14 23:19:01 ispc CRON[1581008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:19:01 ispc CRON[1581008]: pam_unix(cron:session): session closed for user root Dec 14 23:20:01 ispc CRON[1581024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:20:01 ispc CRON[1581025]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:20:01 ispc CRON[1581026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:20:01 ispc CRON[1581027]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:20:01 ispc CRON[1581023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:20:01 ispc CRON[1581025]: pam_unix(cron:session): session closed for user www-data Dec 14 23:20:01 ispc CRON[1581024]: pam_unix(cron:session): session closed for user root Dec 14 23:20:02 ispc CRON[1581027]: pam_unix(cron:session): session closed for user getmail Dec 14 23:20:03 ispc CRON[1581023]: pam_unix(cron:session): session closed for user root Dec 14 23:20:17 ispc saslauthd[1581134]: pam_mysql - SELECT returned no result. Dec 14 23:20:17 ispc saslauthd[1581134]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:20:17 ispc saslauthd[1581134]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:20:33 ispc CRON[1581026]: pam_unix(cron:session): session closed for user root Dec 14 23:21:01 ispc CRON[1581137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:21:01 ispc CRON[1581138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:21:01 ispc CRON[1581137]: pam_unix(cron:session): session closed for user root Dec 14 23:21:51 ispc sshd[1581172]: Invalid user klape from 70.37.89.177 Dec 14 23:21:52 ispc sshd[1581174]: Invalid user ubuntu from 70.37.89.177 Dec 14 23:22:01 ispc CRON[1581182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:22:03 ispc CRON[1581182]: pam_unix(cron:session): session closed for user root Dec 14 23:22:39 ispc postfix/smtpd[1581217]: sql auxprop plugin using mysql engine Dec 14 23:22:40 ispc saslauthd[1581218]: pam_mysql - SELECT returned no result. Dec 14 23:22:40 ispc saslauthd[1581218]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:22:40 ispc saslauthd[1581218]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:22:47 ispc sshd[1581225]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 13.89.120.212 Dec 14 23:23:01 ispc CRON[1581231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:23:02 ispc CRON[1581231]: pam_unix(cron:session): session closed for user root Dec 14 23:23:05 ispc postfix/smtpd[1581246]: sql auxprop plugin using mysql engine Dec 14 23:23:05 ispc saslauthd[1581248]: pam_mysql - SELECT returned no result. Dec 14 23:23:05 ispc saslauthd[1581248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:23:05 ispc saslauthd[1581248]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:23:06 ispc saslauthd[1581249]: pam_mysql - SELECT returned no result. Dec 14 23:23:06 ispc saslauthd[1581249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:23:06 ispc saslauthd[1581249]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:23:10 ispc saslauthd[1581250]: pam_mysql - SELECT returned no result. Dec 14 23:23:10 ispc saslauthd[1581250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:23:10 ispc saslauthd[1581250]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:23:29 ispc saslauthd[1581259]: pam_mysql - SELECT returned no result. Dec 14 23:23:29 ispc saslauthd[1581259]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:23:29 ispc saslauthd[1581259]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:23:32 ispc saslauthd[1581261]: pam_mysql - SELECT returned no result. Dec 14 23:23:32 ispc saslauthd[1581261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:23:32 ispc saslauthd[1581261]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:24:01 ispc CRON[1581276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:24:01 ispc CRON[1581276]: pam_unix(cron:session): session closed for user root Dec 14 23:25:01 ispc CRON[1581315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:25:01 ispc CRON[1581316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:25:01 ispc CRON[1581317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:25:01 ispc CRON[1581318]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:25:01 ispc CRON[1581316]: pam_unix(cron:session): session closed for user root Dec 14 23:25:01 ispc CRON[1581318]: pam_unix(cron:session): session closed for user getmail Dec 14 23:25:02 ispc CRON[1581317]: pam_unix(cron:session): session closed for user root Dec 14 23:25:03 ispc CRON[1581315]: pam_unix(cron:session): session closed for user root Dec 14 23:25:24 ispc sshd[1581404]: Invalid user ziplines from 49.247.24.89 Dec 14 23:25:47 ispc sshd[1581420]: Invalid user klape from 51.77.222.24 Dec 14 23:25:47 ispc sshd[1581422]: Invalid user ubuntu from 51.77.222.24 Dec 14 23:26:01 ispc CRON[1581429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:26:02 ispc CRON[1581429]: pam_unix(cron:session): session closed for user root Dec 14 23:27:01 ispc CRON[1581469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:27:01 ispc CRON[1581469]: pam_unix(cron:session): session closed for user root Dec 14 23:28:01 ispc CRON[1581516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:28:03 ispc CRON[1581516]: pam_unix(cron:session): session closed for user root Dec 14 23:28:17 ispc sshd[1581536]: Invalid user blceu from 220.196.191.58 Dec 14 23:29:01 ispc CRON[1581563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:29:01 ispc CRON[1581563]: pam_unix(cron:session): session closed for user root Dec 14 23:29:37 ispc sshd[1581591]: Did not receive identification string from 220.250.59.155 Dec 14 23:30:01 ispc CRON[1581603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:30:01 ispc CRON[1581604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:30:01 ispc CRON[1581605]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:30:01 ispc CRON[1581606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:30:01 ispc CRON[1581607]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:30:01 ispc CRON[1581605]: pam_unix(cron:session): session closed for user www-data Dec 14 23:30:01 ispc CRON[1581604]: pam_unix(cron:session): session closed for user root Dec 14 23:30:01 ispc CRON[1581607]: pam_unix(cron:session): session closed for user getmail Dec 14 23:30:02 ispc CRON[1581606]: pam_unix(cron:session): session closed for user root Dec 14 23:30:03 ispc CRON[1581603]: pam_unix(cron:session): session closed for user root Dec 14 23:31:01 ispc CRON[1581711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:31:02 ispc CRON[1581711]: pam_unix(cron:session): session closed for user root Dec 14 23:32:01 ispc CRON[1581749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:32:03 ispc CRON[1581749]: pam_unix(cron:session): session closed for user root Dec 14 23:33:01 ispc CRON[1581798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:33:02 ispc CRON[1581798]: pam_unix(cron:session): session closed for user root Dec 14 23:33:05 ispc sshd[1581809]: Invalid user ziplines from 202.46.29.79 Dec 14 23:33:26 ispc sshd[1581829]: Invalid user klape from 103.164.20.29 Dec 14 23:33:27 ispc sshd[1581831]: Invalid user ubuntu from 103.164.20.29 Dec 14 23:33:28 ispc postfix/smtpd[1581833]: sql auxprop plugin using mysql engine Dec 14 23:33:29 ispc saslauthd[1581836]: pam_mysql - SELECT returned no result. Dec 14 23:33:29 ispc saslauthd[1581836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:33:29 ispc saslauthd[1581836]: do_auth : auth failure: [user=status] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:34:01 ispc CRON[1581853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:34:01 ispc CRON[1581853]: pam_unix(cron:session): session closed for user root Dec 14 23:34:33 ispc sshd[1581877]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 14 23:34:33 ispc sshd[1581877]: Invalid user martof from 193.110.157.47 Dec 14 23:34:37 ispc saslauthd[1581880]: pam_mysql - SELECT returned no result. Dec 14 23:34:37 ispc saslauthd[1581880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:34:37 ispc saslauthd[1581880]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:35:01 ispc CRON[1581894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:35:01 ispc CRON[1581895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:35:01 ispc CRON[1581896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:35:01 ispc CRON[1581897]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:35:01 ispc CRON[1581895]: pam_unix(cron:session): session closed for user root Dec 14 23:35:01 ispc CRON[1581897]: pam_unix(cron:session): session closed for user getmail Dec 14 23:35:03 ispc CRON[1581896]: pam_unix(cron:session): session closed for user root Dec 14 23:35:03 ispc CRON[1581894]: pam_unix(cron:session): session closed for user root Dec 14 23:36:01 ispc CRON[1581993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:36:02 ispc CRON[1581993]: pam_unix(cron:session): session closed for user root Dec 14 23:37:01 ispc CRON[1582032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:37:02 ispc CRON[1582032]: pam_unix(cron:session): session closed for user root Dec 14 23:38:01 ispc CRON[1582079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:38:01 ispc CRON[1582079]: pam_unix(cron:session): session closed for user root Dec 14 23:39:01 ispc CRON[1582116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:39:01 ispc CRON[1582117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:39:01 ispc CRON[1582116]: pam_unix(cron:session): session closed for user root Dec 14 23:39:03 ispc CRON[1582117]: pam_unix(cron:session): session closed for user root Dec 14 23:40:01 ispc CRON[1582165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:40:01 ispc CRON[1582166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:40:01 ispc CRON[1582167]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:40:01 ispc CRON[1582168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:40:01 ispc CRON[1582169]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:40:01 ispc CRON[1582166]: pam_unix(cron:session): session closed for user root Dec 14 23:40:01 ispc CRON[1582167]: pam_unix(cron:session): session closed for user www-data Dec 14 23:40:01 ispc CRON[1582169]: pam_unix(cron:session): session closed for user getmail Dec 14 23:40:01 ispc CRON[1582168]: pam_unix(cron:session): session closed for user root Dec 14 23:40:03 ispc CRON[1582165]: pam_unix(cron:session): session closed for user root Dec 14 23:41:01 ispc CRON[1582273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:41:02 ispc CRON[1582273]: pam_unix(cron:session): session closed for user root Dec 14 23:41:17 ispc postfix/smtpd[1582290]: sql auxprop plugin using mysql engine Dec 14 23:41:17 ispc CRON[1581138]: pam_unix(cron:session): session closed for user root Dec 14 23:42:01 ispc CRON[1582295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:42:03 ispc CRON[1582295]: pam_unix(cron:session): session closed for user root Dec 14 23:43:01 ispc CRON[1582325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:43:02 ispc CRON[1582325]: pam_unix(cron:session): session closed for user root Dec 14 23:44:01 ispc CRON[1582342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:44:02 ispc CRON[1582342]: pam_unix(cron:session): session closed for user root Dec 14 23:44:48 ispc postfix/smtpd[1582371]: sql auxprop plugin using mysql engine Dec 14 23:45:00 ispc saslauthd[1582383]: pam_mysql - SELECT returned no result. Dec 14 23:45:00 ispc saslauthd[1582383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:00 ispc saslauthd[1582383]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:45:01 ispc CRON[1582386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:45:01 ispc CRON[1582387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:45:01 ispc CRON[1582388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:45:01 ispc CRON[1582389]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:45:01 ispc CRON[1582387]: pam_unix(cron:session): session closed for user root Dec 14 23:45:02 ispc CRON[1582389]: pam_unix(cron:session): session closed for user getmail Dec 14 23:45:02 ispc saslauthd[1582411]: pam_mysql - SELECT returned no result. Dec 14 23:45:02 ispc saslauthd[1582411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:02 ispc saslauthd[1582411]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:45:03 ispc CRON[1582386]: pam_unix(cron:session): session closed for user root Dec 14 23:45:17 ispc saslauthd[1582575]: pam_mysql - SELECT returned no result. Dec 14 23:45:17 ispc saslauthd[1582575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:17 ispc saslauthd[1582575]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:45:34 ispc saslauthd[1582577]: pam_mysql - SELECT returned no result. Dec 14 23:45:34 ispc saslauthd[1582577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:34 ispc saslauthd[1582577]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:45:36 ispc saslauthd[1582579]: pam_mysql - SELECT returned no result. Dec 14 23:45:36 ispc saslauthd[1582579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:36 ispc saslauthd[1582579]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:45:42 ispc CRON[1582388]: pam_unix(cron:session): session closed for user root Dec 14 23:45:44 ispc saslauthd[1582584]: pam_mysql - SELECT returned no result. Dec 14 23:45:44 ispc saslauthd[1582584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:45:44 ispc saslauthd[1582584]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:01 ispc saslauthd[1582587]: pam_mysql - SELECT returned no result. Dec 14 23:46:01 ispc saslauthd[1582587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:01 ispc saslauthd[1582587]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:01 ispc CRON[1582588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:46:06 ispc saslauthd[1582601]: pam_mysql - SELECT returned no result. Dec 14 23:46:06 ispc saslauthd[1582601]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:06 ispc saslauthd[1582601]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:08 ispc saslauthd[1582602]: pam_mysql - SELECT returned no result. Dec 14 23:46:08 ispc saslauthd[1582602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:08 ispc saslauthd[1582602]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:12 ispc saslauthd[1582603]: pam_mysql - SELECT returned no result. Dec 14 23:46:12 ispc saslauthd[1582603]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:12 ispc saslauthd[1582603]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:14 ispc saslauthd[1582608]: pam_mysql - SELECT returned no result. Dec 14 23:46:14 ispc saslauthd[1582608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:14 ispc saslauthd[1582608]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:15 ispc postfix/smtpd[1582609]: sql auxprop plugin using mysql engine Dec 14 23:46:15 ispc saslauthd[1582610]: pam_mysql - SELECT returned no result. Dec 14 23:46:15 ispc saslauthd[1582610]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:15 ispc saslauthd[1582610]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:18 ispc saslauthd[1582612]: pam_mysql - SELECT returned no result. Dec 14 23:46:18 ispc saslauthd[1582612]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:18 ispc saslauthd[1582612]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:46:42 ispc saslauthd[1582624]: pam_mysql - SELECT returned no result. Dec 14 23:46:42 ispc saslauthd[1582624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:46:42 ispc saslauthd[1582624]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:47:01 ispc CRON[1582636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:47:02 ispc CRON[1582636]: pam_unix(cron:session): session closed for user root Dec 14 23:48:01 ispc CRON[1582689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:48:01 ispc CRON[1582689]: pam_unix(cron:session): session closed for user root Dec 14 23:48:11 ispc saslauthd[1582706]: pam_mysql - SELECT returned no result. Dec 14 23:48:11 ispc saslauthd[1582706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:48:11 ispc saslauthd[1582706]: do_auth : auth failure: [user=storwatch] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:49:01 ispc CRON[1582743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:49:02 ispc CRON[1582743]: pam_unix(cron:session): session closed for user root Dec 14 23:50:01 ispc CRON[1582797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:50:01 ispc CRON[1582798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:50:01 ispc CRON[1582799]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 14 23:50:01 ispc CRON[1582800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:50:01 ispc CRON[1582801]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:50:01 ispc CRON[1582799]: pam_unix(cron:session): session closed for user www-data Dec 14 23:50:01 ispc CRON[1582798]: pam_unix(cron:session): session closed for user root Dec 14 23:50:01 ispc CRON[1582801]: pam_unix(cron:session): session closed for user getmail Dec 14 23:50:02 ispc CRON[1582800]: pam_unix(cron:session): session closed for user root Dec 14 23:50:03 ispc CRON[1582797]: pam_unix(cron:session): session closed for user root Dec 14 23:50:32 ispc postfix/smtpd[1582892]: sql auxprop plugin using mysql engine Dec 14 23:50:41 ispc postfix/smtpd[1582901]: sql auxprop plugin using mysql engine Dec 14 23:51:01 ispc CRON[1582912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:51:02 ispc CRON[1582912]: pam_unix(cron:session): session closed for user root Dec 14 23:51:18 ispc postfix/smtpd[1582930]: sql auxprop plugin using mysql engine Dec 14 23:51:18 ispc saslauthd[1582936]: pam_mysql - SELECT returned no result. Dec 14 23:51:18 ispc saslauthd[1582936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:51:18 ispc saslauthd[1582936]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:51:34 ispc saslauthd[1582943]: pam_mysql - SELECT returned no result. Dec 14 23:51:34 ispc saslauthd[1582943]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:51:34 ispc saslauthd[1582943]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:52:01 ispc CRON[1582960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:52:02 ispc CRON[1582960]: pam_unix(cron:session): session closed for user root Dec 14 23:53:01 ispc CRON[1583008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:53:02 ispc CRON[1583008]: pam_unix(cron:session): session closed for user root Dec 14 23:54:01 ispc CRON[1583053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:54:02 ispc CRON[1583053]: pam_unix(cron:session): session closed for user root Dec 14 23:55:01 ispc CRON[1583099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:55:01 ispc CRON[1583100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:55:01 ispc CRON[1583101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:55:01 ispc CRON[1583102]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 14 23:55:01 ispc CRON[1583100]: pam_unix(cron:session): session closed for user root Dec 14 23:55:01 ispc CRON[1583102]: pam_unix(cron:session): session closed for user getmail Dec 14 23:55:02 ispc CRON[1583101]: pam_unix(cron:session): session closed for user root Dec 14 23:55:03 ispc CRON[1583099]: pam_unix(cron:session): session closed for user root Dec 14 23:56:01 ispc CRON[1583207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:56:02 ispc CRON[1583207]: pam_unix(cron:session): session closed for user root Dec 14 23:56:19 ispc postfix/smtpd[1583229]: sql auxprop plugin using mysql engine Dec 14 23:56:20 ispc saslauthd[1583232]: pam_mysql - SELECT returned no result. Dec 14 23:56:20 ispc saslauthd[1583232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 14 23:56:20 ispc saslauthd[1583232]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 14 23:57:01 ispc CRON[1583254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:57:02 ispc CRON[1583254]: pam_unix(cron:session): session closed for user root Dec 14 23:57:43 ispc sshd[1583290]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 14 23:58:01 ispc CRON[1583309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:58:01 ispc CRON[1583309]: pam_unix(cron:session): session closed for user root Dec 14 23:58:49 ispc sshd[1583343]: Invalid user matl-bu from 158.94.210.248 Dec 14 23:58:49 ispc sshd[1583342]: Invalid user matl-bu from 158.94.210.248 Dec 14 23:58:49 ispc sshd[1583345]: Invalid user matl-bu from 158.94.210.248 Dec 14 23:58:49 ispc sshd[1583344]: Invalid user matl-bu from 158.94.210.248 Dec 14 23:58:49 ispc sshd[1583350]: Invalid user matl-bu from 158.94.210.248 Dec 14 23:59:01 ispc CRON[1583361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 14 23:59:02 ispc CRON[1583361]: pam_unix(cron:session): session closed for user root Dec 15 00:00:00 ispc sshd[1583394]: Invalid user martof from 221.156.137.104 Dec 15 00:00:01 ispc CRON[1583396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:00:01 ispc CRON[1583397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:00:01 ispc CRON[1583398]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:00:01 ispc CRON[1583401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:00:01 ispc CRON[1583402]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:00:01 ispc CRON[1583399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:00:01 ispc CRON[1583397]: pam_unix(cron:session): session closed for user root Dec 15 00:00:01 ispc CRON[1583398]: pam_unix(cron:session): session closed for user www-data Dec 15 00:00:01 ispc CRON[1583400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:00:01 ispc CRON[1583402]: pam_unix(cron:session): session closed for user getmail Dec 15 00:00:01 ispc CRON[1583400]: pam_unix(cron:session): session closed for user root Dec 15 00:00:01 ispc CRON[1583401]: pam_unix(cron:session): session closed for user root Dec 15 00:00:02 ispc CRON[1583396]: pam_unix(cron:session): session closed for user root Dec 15 00:00:02 ispc CRON[1583399]: pam_unix(cron:session): session closed for user root Dec 15 00:01:01 ispc CRON[1583585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:01:02 ispc CRON[1583585]: pam_unix(cron:session): session closed for user root Dec 15 00:01:03 ispc postfix/smtpd[1583596]: sql auxprop plugin using mysql engine Dec 15 00:01:04 ispc saslauthd[1583603]: pam_mysql - SELECT returned no result. Dec 15 00:01:04 ispc saslauthd[1583603]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:01:04 ispc saslauthd[1583603]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:01:54 ispc saslauthd[1583624]: pam_mysql - SELECT returned no result. Dec 15 00:01:54 ispc saslauthd[1583624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:01:54 ispc saslauthd[1583624]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:02:01 ispc CRON[1583629]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 00:02:01 ispc CRON[1583630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:02:02 ispc CRON[1583630]: pam_unix(cron:session): session closed for user root Dec 15 00:03:01 ispc saslauthd[1584507]: pam_mysql - SELECT returned no result. Dec 15 00:03:01 ispc saslauthd[1584507]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:03:01 ispc saslauthd[1584507]: do_auth : auth failure: [user=su] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:03:01 ispc CRON[1584508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:03:02 ispc CRON[1584508]: pam_unix(cron:session): session closed for user root Dec 15 00:03:22 ispc saslauthd[1584693]: pam_mysql - SELECT returned no result. Dec 15 00:03:22 ispc saslauthd[1584693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:03:22 ispc saslauthd[1584693]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:03:23 ispc CRON[1583629]: pam_unix(cron:session): session closed for user logcheck Dec 15 00:03:25 ispc saslauthd[1584710]: pam_mysql - SELECT returned no result. Dec 15 00:03:25 ispc saslauthd[1584710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:03:25 ispc saslauthd[1584710]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:03:42 ispc postfix/smtpd[1584722]: sql auxprop plugin using mysql engine Dec 15 00:04:02 ispc CRON[1584736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:04:02 ispc CRON[1584736]: pam_unix(cron:session): session closed for user root Dec 15 00:04:19 ispc saslauthd[1584752]: pam_mysql - SELECT returned no result. Dec 15 00:04:19 ispc saslauthd[1584752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:04:19 ispc saslauthd[1584752]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:04:28 ispc sshd[1584757]: Invalid user ziplines from 221.156.137.104 Dec 15 00:04:54 ispc saslauthd[1584773]: pam_mysql - SELECT returned no result. Dec 15 00:04:54 ispc saslauthd[1584773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:04:54 ispc saslauthd[1584773]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:05:01 ispc CRON[1584778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:05:01 ispc CRON[1584779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:05:02 ispc CRON[1584780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:05:02 ispc CRON[1584781]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:05:02 ispc CRON[1584779]: pam_unix(cron:session): session closed for user root Dec 15 00:05:02 ispc CRON[1584781]: pam_unix(cron:session): session closed for user getmail Dec 15 00:05:02 ispc CRON[1584780]: pam_unix(cron:session): session closed for user root Dec 15 00:05:03 ispc CRON[1584778]: pam_unix(cron:session): session closed for user root Dec 15 00:05:11 ispc sshd[1584860]: Invalid user 1234 from 62.60.131.157 Dec 15 00:05:36 ispc postfix/smtpd[1584877]: sql auxprop plugin using mysql engine Dec 15 00:06:01 ispc CRON[1584911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:06:01 ispc CRON[1584911]: pam_unix(cron:session): session closed for user root Dec 15 00:06:21 ispc saslauthd[1584927]: pam_mysql - SELECT returned no result. Dec 15 00:06:21 ispc saslauthd[1584927]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:06:21 ispc saslauthd[1584927]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:06:31 ispc CRON[1582588]: pam_unix(cron:session): session closed for user root Dec 15 00:07:01 ispc CRON[1584939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:07:02 ispc CRON[1584939]: pam_unix(cron:session): session closed for user root Dec 15 00:07:30 ispc sshd[1584954]: Did not receive identification string from 45.140.17.97 Dec 15 00:08:01 ispc CRON[1584965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:08:03 ispc CRON[1584965]: pam_unix(cron:session): session closed for user root Dec 15 00:09:01 ispc CRON[1584983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:09:01 ispc CRON[1584984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:09:01 ispc CRON[1584983]: pam_unix(cron:session): session closed for user root Dec 15 00:09:02 ispc CRON[1584984]: pam_unix(cron:session): session closed for user root Dec 15 00:10:01 ispc CRON[1585007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:10:01 ispc CRON[1585008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:10:01 ispc CRON[1585009]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:10:01 ispc CRON[1585010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:10:01 ispc CRON[1585011]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:10:01 ispc CRON[1585008]: pam_unix(cron:session): session closed for user root Dec 15 00:10:01 ispc CRON[1585009]: pam_unix(cron:session): session closed for user www-data Dec 15 00:10:01 ispc CRON[1585011]: pam_unix(cron:session): session closed for user getmail Dec 15 00:10:02 ispc CRON[1585007]: pam_unix(cron:session): session closed for user root Dec 15 00:10:42 ispc CRON[1585010]: pam_unix(cron:session): session closed for user root Dec 15 00:11:01 ispc CRON[1585129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:12:01 ispc CRON[1585176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:12:02 ispc CRON[1585176]: pam_unix(cron:session): session closed for user root Dec 15 00:13:01 ispc CRON[1585221]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:13:03 ispc CRON[1585221]: pam_unix(cron:session): session closed for user root Dec 15 00:14:01 ispc CRON[1585262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:14:01 ispc CRON[1585262]: pam_unix(cron:session): session closed for user root Dec 15 00:14:06 ispc sshd[1585273]: Invalid user martof from 210.114.18.123 Dec 15 00:14:37 ispc postfix/smtpd[1585287]: sql auxprop plugin using mysql engine Dec 15 00:15:01 ispc CRON[1585307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:15:01 ispc CRON[1585308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:15:01 ispc CRON[1585309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:15:01 ispc CRON[1585310]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:15:01 ispc CRON[1585308]: pam_unix(cron:session): session closed for user root Dec 15 00:15:01 ispc CRON[1585310]: pam_unix(cron:session): session closed for user getmail Dec 15 00:15:02 ispc CRON[1585309]: pam_unix(cron:session): session closed for user root Dec 15 00:15:04 ispc CRON[1585307]: pam_unix(cron:session): session closed for user root Dec 15 00:16:01 ispc CRON[1585411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:16:02 ispc CRON[1585411]: pam_unix(cron:session): session closed for user root Dec 15 00:16:30 ispc postfix/smtpd[1585430]: sql auxprop plugin using mysql engine Dec 15 00:16:30 ispc saslauthd[1585432]: pam_mysql - SELECT returned no result. Dec 15 00:16:30 ispc saslauthd[1585432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:16:30 ispc saslauthd[1585432]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:17:01 ispc CRON[1585450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:17:01 ispc CRON[1585450]: pam_unix(cron:session): session closed for user root Dec 15 00:17:50 ispc saslauthd[1585495]: pam_mysql - SELECT returned no result. Dec 15 00:17:50 ispc saslauthd[1585495]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:17:50 ispc saslauthd[1585495]: do_auth : auth failure: [user=super] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:18:01 ispc CRON[1585505]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 00:18:01 ispc CRON[1585506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:18:02 ispc CRON[1585506]: pam_unix(cron:session): session closed for user root Dec 15 00:18:05 ispc CRON[1585505]: pam_unix(cron:session): session closed for user amavis Dec 15 00:18:08 ispc postfix/smtpd[1585529]: sql auxprop plugin using mysql engine Dec 15 00:18:50 ispc saslauthd[1585557]: pam_mysql - SELECT returned no result. Dec 15 00:18:50 ispc saslauthd[1585557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:18:50 ispc saslauthd[1585557]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:19:01 ispc CRON[1585564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:19:02 ispc CRON[1585564]: pam_unix(cron:session): session closed for user root Dec 15 00:19:14 ispc saslauthd[1585583]: pam_mysql - SELECT returned no result. Dec 15 00:19:14 ispc saslauthd[1585583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:19:14 ispc saslauthd[1585583]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:19:17 ispc saslauthd[1585584]: pam_mysql - SELECT returned no result. Dec 15 00:19:17 ispc saslauthd[1585584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:19:17 ispc saslauthd[1585584]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:19:21 ispc saslauthd[1585586]: pam_mysql - SELECT returned no result. Dec 15 00:19:21 ispc saslauthd[1585586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:19:21 ispc saslauthd[1585586]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:19:41 ispc saslauthd[1585597]: pam_mysql - SELECT returned no result. Dec 15 00:19:41 ispc saslauthd[1585597]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:19:41 ispc saslauthd[1585597]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:19:45 ispc saslauthd[1585602]: pam_mysql - SELECT returned no result. Dec 15 00:19:45 ispc saslauthd[1585602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:19:45 ispc saslauthd[1585602]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:20:01 ispc CRON[1585608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:20:01 ispc CRON[1585609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:20:01 ispc CRON[1585610]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:20:01 ispc CRON[1585611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:20:01 ispc CRON[1585612]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:20:01 ispc CRON[1585610]: pam_unix(cron:session): session closed for user www-data Dec 15 00:20:01 ispc CRON[1585609]: pam_unix(cron:session): session closed for user root Dec 15 00:20:01 ispc CRON[1585612]: pam_unix(cron:session): session closed for user getmail Dec 15 00:20:02 ispc CRON[1585611]: pam_unix(cron:session): session closed for user root Dec 15 00:20:02 ispc CRON[1585608]: pam_unix(cron:session): session closed for user root Dec 15 00:20:27 ispc sshd[1585698]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 00:21:01 ispc CRON[1585712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:21:01 ispc CRON[1585713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:21:01 ispc CRON[1585712]: pam_unix(cron:session): session closed for user root Dec 15 00:21:02 ispc CRON[1585713]: pam_unix(cron:session): session closed for user root Dec 15 00:22:01 ispc CRON[1585761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:22:01 ispc CRON[1585761]: pam_unix(cron:session): session closed for user root Dec 15 00:22:51 ispc sshd[1585800]: reverse mapping checking getaddrinfo for 44-132-126-177.customer.netaki.com.br [177.126.132.44] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 00:22:51 ispc sshd[1585800]: Invalid user from 177.126.132.44 Dec 15 00:23:01 ispc CRON[1585810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:23:03 ispc CRON[1585810]: pam_unix(cron:session): session closed for user root Dec 15 00:23:15 ispc sshd[1585825]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 00:23:15 ispc sshd[1585825]: Invalid user ziplines from 193.110.157.47 Dec 15 00:24:01 ispc CRON[1585849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:24:02 ispc CRON[1585849]: pam_unix(cron:session): session closed for user root Dec 15 00:25:01 ispc CRON[1585884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:25:01 ispc CRON[1585885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:25:01 ispc CRON[1585886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:25:01 ispc CRON[1585887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:25:01 ispc CRON[1585885]: pam_unix(cron:session): session closed for user root Dec 15 00:25:01 ispc CRON[1585887]: pam_unix(cron:session): session closed for user getmail Dec 15 00:25:02 ispc CRON[1585886]: pam_unix(cron:session): session closed for user root Dec 15 00:25:02 ispc CRON[1585884]: pam_unix(cron:session): session closed for user root Dec 15 00:26:01 ispc CRON[1585992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:26:02 ispc CRON[1585992]: pam_unix(cron:session): session closed for user root Dec 15 00:27:01 ispc CRON[1586031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:27:01 ispc CRON[1586031]: pam_unix(cron:session): session closed for user root Dec 15 00:27:30 ispc postfix/smtpd[1586063]: sql auxprop plugin using mysql engine Dec 15 00:28:01 ispc CRON[1586088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:28:03 ispc CRON[1586088]: pam_unix(cron:session): session closed for user root Dec 15 00:29:01 ispc CRON[1586126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:29:02 ispc CRON[1586126]: pam_unix(cron:session): session closed for user root Dec 15 00:29:38 ispc postfix/smtpd[1586151]: sql auxprop plugin using mysql engine Dec 15 00:29:44 ispc postfix/smtpd[1586157]: sql auxprop plugin using mysql engine Dec 15 00:29:44 ispc saslauthd[1586158]: pam_mysql - SELECT returned no result. Dec 15 00:29:44 ispc saslauthd[1586158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:29:44 ispc saslauthd[1586158]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:30:00 ispc postfix/smtpd[1586165]: sql auxprop plugin using mysql engine Dec 15 00:30:01 ispc CRON[1586171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:30:01 ispc CRON[1586172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:30:01 ispc CRON[1586173]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:30:01 ispc CRON[1586174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:30:01 ispc CRON[1586175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:30:01 ispc CRON[1586176]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:30:01 ispc CRON[1586172]: pam_unix(cron:session): session closed for user root Dec 15 00:30:01 ispc CRON[1586173]: pam_unix(cron:session): session closed for user www-data Dec 15 00:30:01 ispc CRON[1586176]: pam_unix(cron:session): session closed for user getmail Dec 15 00:30:02 ispc CRON[1586175]: pam_unix(cron:session): session closed for user root Dec 15 00:30:04 ispc CRON[1586171]: pam_unix(cron:session): session closed for user root Dec 15 00:30:15 ispc sshd[1586381]: Invalid user supervisor from 36.37.244.244 Dec 15 00:31:01 ispc CRON[1586405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:31:02 ispc CRON[1586405]: pam_unix(cron:session): session closed for user root Dec 15 00:31:32 ispc postfix/smtpd[1586432]: sql auxprop plugin using mysql engine Dec 15 00:31:33 ispc CRON[1585129]: pam_unix(cron:session): session closed for user root Dec 15 00:32:01 ispc CRON[1586442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:32:01 ispc CRON[1586442]: pam_unix(cron:session): session closed for user root Dec 15 00:32:36 ispc saslauthd[1586456]: pam_mysql - SELECT returned no result. Dec 15 00:32:36 ispc saslauthd[1586456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:32:36 ispc saslauthd[1586456]: do_auth : auth failure: [user=superdba] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:33:01 ispc CRON[1586466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:33:03 ispc CRON[1586466]: pam_unix(cron:session): session closed for user root Dec 15 00:33:45 ispc sshd[1586481]: Did not receive identification string from 115.29.34.90 Dec 15 00:34:01 ispc CRON[1586485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:34:02 ispc CRON[1586485]: pam_unix(cron:session): session closed for user root Dec 15 00:35:01 ispc CRON[1586498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:35:01 ispc CRON[1586499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:35:01 ispc CRON[1586500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:35:01 ispc CRON[1586501]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:35:01 ispc CRON[1586501]: pam_unix(cron:session): session closed for user getmail Dec 15 00:35:01 ispc CRON[1586499]: pam_unix(cron:session): session closed for user root Dec 15 00:35:01 ispc CRON[1586498]: pam_unix(cron:session): session closed for user root Dec 15 00:35:38 ispc CRON[1586500]: pam_unix(cron:session): session closed for user root Dec 15 00:36:01 ispc CRON[1586614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:36:30 ispc postfix/smtpd[1586635]: sql auxprop plugin using mysql engine Dec 15 00:37:01 ispc CRON[1586649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:37:02 ispc CRON[1586649]: pam_unix(cron:session): session closed for user root Dec 15 00:37:36 ispc sshd[1586678]: Invalid user martof from 116.120.58.228 Dec 15 00:38:01 ispc CRON[1586704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:38:02 ispc CRON[1586704]: pam_unix(cron:session): session closed for user root Dec 15 00:38:05 ispc postfix/smtpd[1586719]: sql auxprop plugin using mysql engine Dec 15 00:38:05 ispc saslauthd[1586721]: pam_mysql - SELECT returned no result. Dec 15 00:38:05 ispc saslauthd[1586721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:38:05 ispc saslauthd[1586721]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:38:47 ispc postfix/smtpd[1587042]: sql auxprop plugin using mysql engine Dec 15 00:38:47 ispc saslauthd[1587044]: pam_mysql - SELECT returned no result. Dec 15 00:38:47 ispc saslauthd[1587044]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:38:47 ispc saslauthd[1587044]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:38:48 ispc saslauthd[1587045]: pam_mysql - SELECT returned no result. Dec 15 00:38:48 ispc saslauthd[1587045]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:38:48 ispc saslauthd[1587045]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:01 ispc CRON[1587050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:39:01 ispc CRON[1587051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:39:02 ispc CRON[1587050]: pam_unix(cron:session): session closed for user root Dec 15 00:39:02 ispc CRON[1587051]: pam_unix(cron:session): session closed for user root Dec 15 00:39:03 ispc saslauthd[1587072]: pam_mysql - SELECT returned no result. Dec 15 00:39:03 ispc saslauthd[1587072]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:03 ispc saslauthd[1587072]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:19 ispc saslauthd[1587082]: pam_mysql - SELECT returned no result. Dec 15 00:39:19 ispc saslauthd[1587082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:19 ispc saslauthd[1587082]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:23 ispc saslauthd[1587084]: pam_mysql - SELECT returned no result. Dec 15 00:39:23 ispc saslauthd[1587084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:23 ispc saslauthd[1587084]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:31 ispc saslauthd[1587090]: pam_mysql - SELECT returned no result. Dec 15 00:39:31 ispc saslauthd[1587090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:31 ispc saslauthd[1587090]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:47 ispc saslauthd[1587099]: pam_mysql - SELECT returned no result. Dec 15 00:39:47 ispc saslauthd[1587099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:47 ispc saslauthd[1587099]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:51 ispc saslauthd[1587101]: pam_mysql - SELECT returned no result. Dec 15 00:39:51 ispc saslauthd[1587101]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:51 ispc saslauthd[1587101]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:53 ispc saslauthd[1587102]: pam_mysql - SELECT returned no result. Dec 15 00:39:53 ispc saslauthd[1587102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:53 ispc saslauthd[1587102]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:39:59 ispc saslauthd[1587107]: pam_mysql - SELECT returned no result. Dec 15 00:39:59 ispc saslauthd[1587107]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:39:59 ispc saslauthd[1587107]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:40:01 ispc CRON[1587108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:40:01 ispc CRON[1587109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:40:01 ispc CRON[1587110]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:40:01 ispc CRON[1587111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:40:01 ispc CRON[1587112]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:40:01 ispc CRON[1587110]: pam_unix(cron:session): session closed for user www-data Dec 15 00:40:01 ispc CRON[1587109]: pam_unix(cron:session): session closed for user root Dec 15 00:40:01 ispc CRON[1587112]: pam_unix(cron:session): session closed for user getmail Dec 15 00:40:02 ispc saslauthd[1587137]: pam_mysql - SELECT returned no result. Dec 15 00:40:02 ispc saslauthd[1587137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:40:02 ispc saslauthd[1587137]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:40:02 ispc CRON[1587111]: pam_unix(cron:session): session closed for user root Dec 15 00:40:02 ispc CRON[1587108]: pam_unix(cron:session): session closed for user root Dec 15 00:40:03 ispc saslauthd[1587187]: pam_mysql - SELECT returned no result. Dec 15 00:40:03 ispc saslauthd[1587187]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:40:03 ispc saslauthd[1587187]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:40:03 ispc saslauthd[1587188]: pam_mysql - SELECT returned no result. Dec 15 00:40:03 ispc saslauthd[1587188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:40:03 ispc saslauthd[1587188]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:40:27 ispc saslauthd[1587210]: pam_mysql - SELECT returned no result. Dec 15 00:40:27 ispc saslauthd[1587210]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:40:27 ispc saslauthd[1587210]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:41:01 ispc CRON[1587224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:41:02 ispc CRON[1587224]: pam_unix(cron:session): session closed for user root Dec 15 00:42:01 ispc CRON[1587262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:42:03 ispc CRON[1587262]: pam_unix(cron:session): session closed for user root Dec 15 00:42:15 ispc sshd[1587279]: Invalid user klape from 13.70.185.98 Dec 15 00:43:01 ispc CRON[1587316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:43:02 ispc CRON[1587316]: pam_unix(cron:session): session closed for user root Dec 15 00:44:01 ispc CRON[1587354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:44:02 ispc CRON[1587354]: pam_unix(cron:session): session closed for user root Dec 15 00:44:56 ispc sshd[1587395]: Did not receive identification string from 186.130.100.233 Dec 15 00:45:01 ispc CRON[1587404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:45:01 ispc CRON[1587405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:45:01 ispc CRON[1587406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:45:01 ispc CRON[1587407]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:45:01 ispc CRON[1587407]: pam_unix(cron:session): session closed for user getmail Dec 15 00:45:01 ispc CRON[1587405]: pam_unix(cron:session): session closed for user root Dec 15 00:45:01 ispc CRON[1587404]: pam_unix(cron:session): session closed for user root Dec 15 00:45:02 ispc CRON[1587406]: pam_unix(cron:session): session closed for user root Dec 15 00:45:19 ispc postfix/smtpd[1587489]: sql auxprop plugin using mysql engine Dec 15 00:46:01 ispc CRON[1587509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:46:01 ispc CRON[1587509]: pam_unix(cron:session): session closed for user root Dec 15 00:46:32 ispc postfix/smtpd[1587536]: sql auxprop plugin using mysql engine Dec 15 00:46:32 ispc saslauthd[1587538]: pam_mysql - SELECT returned no result. Dec 15 00:46:32 ispc saslauthd[1587538]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:46:33 ispc saslauthd[1587538]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:47:01 ispc CRON[1587551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:47:02 ispc CRON[1587551]: pam_unix(cron:session): session closed for user root Dec 15 00:47:23 ispc saslauthd[1587570]: pam_mysql - SELECT returned no result. Dec 15 00:47:23 ispc saslauthd[1587570]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:47:23 ispc saslauthd[1587570]: do_auth : auth failure: [user=superuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:48:01 ispc CRON[1587596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:48:02 ispc CRON[1587596]: pam_unix(cron:session): session closed for user root Dec 15 00:48:14 ispc saslauthd[1587611]: pam_mysql - SELECT returned no result. Dec 15 00:48:14 ispc saslauthd[1587611]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:48:14 ispc saslauthd[1587611]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:48:40 ispc sshd[1587624]: Invalid user blceu from 103.110.84.105 Dec 15 00:49:01 ispc CRON[1587634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:49:01 ispc CRON[1587634]: pam_unix(cron:session): session closed for user root Dec 15 00:50:01 ispc CRON[1587678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:50:01 ispc CRON[1587679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:50:01 ispc CRON[1587680]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 00:50:01 ispc CRON[1587681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:50:01 ispc CRON[1587682]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:50:02 ispc CRON[1587680]: pam_unix(cron:session): session closed for user www-data Dec 15 00:50:02 ispc CRON[1587682]: pam_unix(cron:session): session closed for user getmail Dec 15 00:50:02 ispc CRON[1587679]: pam_unix(cron:session): session closed for user root Dec 15 00:50:02 ispc CRON[1587681]: pam_unix(cron:session): session closed for user root Dec 15 00:50:02 ispc CRON[1587678]: pam_unix(cron:session): session closed for user root Dec 15 00:50:25 ispc sshd[1587772]: Invalid user klape from 200.32.52.150 Dec 15 00:50:27 ispc sshd[1587774]: Invalid user ubuntu from 200.32.52.150 Dec 15 00:51:01 ispc CRON[1587797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:51:02 ispc CRON[1587797]: pam_unix(cron:session): session closed for user root Dec 15 00:51:39 ispc sshd[1587825]: Invalid user blceu from 210.114.18.123 Dec 15 00:52:01 ispc CRON[1587835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:52:01 ispc CRON[1587836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:52:02 ispc CRON[1587836]: pam_unix(cron:session): session closed for user root Dec 15 00:53:01 ispc CRON[1587896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:53:01 ispc CRON[1587896]: pam_unix(cron:session): session closed for user root Dec 15 00:53:30 ispc postfix/smtpd[1587921]: sql auxprop plugin using mysql engine Dec 15 00:53:30 ispc saslauthd[1587924]: pam_mysql - SELECT returned no result. Dec 15 00:53:30 ispc saslauthd[1587924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:53:30 ispc saslauthd[1587924]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:54:01 ispc CRON[1587937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:54:01 ispc CRON[1587937]: pam_unix(cron:session): session closed for user root Dec 15 00:55:01 ispc CRON[1587977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:55:01 ispc CRON[1587978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:55:01 ispc CRON[1587980]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 00:55:01 ispc CRON[1587979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:55:01 ispc CRON[1587978]: pam_unix(cron:session): session closed for user root Dec 15 00:55:01 ispc CRON[1587980]: pam_unix(cron:session): session closed for user getmail Dec 15 00:55:02 ispc CRON[1587979]: pam_unix(cron:session): session closed for user root Dec 15 00:55:02 ispc CRON[1587977]: pam_unix(cron:session): session closed for user root Dec 15 00:55:17 ispc CRON[1587835]: pam_unix(cron:session): session closed for user root Dec 15 00:56:01 ispc CRON[1588075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:56:02 ispc CRON[1588075]: pam_unix(cron:session): session closed for user root Dec 15 00:56:11 ispc postfix/smtpd[1588091]: sql auxprop plugin using mysql engine Dec 15 00:56:11 ispc saslauthd[1588093]: pam_mysql - SELECT returned no result. Dec 15 00:56:11 ispc saslauthd[1588093]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:56:11 ispc saslauthd[1588093]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:56:24 ispc CRON[1586614]: pam_unix(cron:session): session closed for user root Dec 15 00:57:01 ispc CRON[1588107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:57:02 ispc CRON[1588107]: pam_unix(cron:session): session closed for user root Dec 15 00:57:30 ispc CRON[1586174]: pam_unix(cron:session): session closed for user root Dec 15 00:57:31 ispc sshd[1588122]: Invalid user blceu from 222.236.46.74 Dec 15 00:58:01 ispc CRON[1588136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:58:02 ispc CRON[1588136]: pam_unix(cron:session): session closed for user root Dec 15 00:58:30 ispc saslauthd[1588149]: pam_mysql - SELECT returned no result. Dec 15 00:58:30 ispc saslauthd[1588149]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 00:58:30 ispc saslauthd[1588149]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 00:59:01 ispc CRON[1588154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 00:59:01 ispc CRON[1588154]: pam_unix(cron:session): session closed for user root Dec 15 00:59:48 ispc sshd[1588166]: Invalid user blceu from 49.247.24.89 Dec 15 00:59:48 ispc sshd[1588168]: Invalid user zamestnanievzdravotnictve from 175.125.95.234 Dec 15 01:00:01 ispc CRON[1588176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:00:01 ispc CRON[1588173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:00:01 ispc CRON[1588174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:00:01 ispc CRON[1588175]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:00:01 ispc CRON[1588177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:00:02 ispc CRON[1588178]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:00:02 ispc CRON[1588174]: pam_unix(cron:session): session closed for user root Dec 15 01:00:02 ispc CRON[1588175]: pam_unix(cron:session): session closed for user www-data Dec 15 01:00:02 ispc CRON[1588178]: pam_unix(cron:session): session closed for user getmail Dec 15 01:00:02 ispc CRON[1588173]: pam_unix(cron:session): session closed for user root Dec 15 01:00:02 ispc CRON[1588176]: pam_unix(cron:session): session closed for user root Dec 15 01:00:13 ispc saslauthd[1588463]: pam_mysql - SELECT returned no result. Dec 15 01:00:13 ispc saslauthd[1588463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:00:13 ispc saslauthd[1588463]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:00:16 ispc CRON[1588177]: pam_unix(cron:session): session closed for user root Dec 15 01:00:19 ispc saslauthd[1588464]: pam_mysql - SELECT returned no result. Dec 15 01:00:19 ispc saslauthd[1588464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:00:19 ispc saslauthd[1588464]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:00:21 ispc sshd[1588465]: Invalid user martof from 49.247.24.89 Dec 15 01:01:01 ispc CRON[1588476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:01:02 ispc CRON[1588476]: pam_unix(cron:session): session closed for user root Dec 15 01:01:55 ispc saslauthd[1588492]: pam_mysql - SELECT returned no result. Dec 15 01:01:55 ispc saslauthd[1588492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:01:55 ispc saslauthd[1588492]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:02:01 ispc CRON[1588493]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 01:02:01 ispc CRON[1588494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:02:01 ispc CRON[1588494]: pam_unix(cron:session): session closed for user root Dec 15 01:02:08 ispc saslauthd[1588670]: pam_mysql - SELECT returned no result. Dec 15 01:02:08 ispc saslauthd[1588670]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:02:08 ispc saslauthd[1588670]: do_auth : auth failure: [user=supervisor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:02:13 ispc saslauthd[1588792]: pam_mysql - SELECT returned no result. Dec 15 01:02:13 ispc saslauthd[1588792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:02:13 ispc saslauthd[1588792]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:03:01 ispc CRON[1589444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:03:02 ispc CRON[1589444]: pam_unix(cron:session): session closed for user root Dec 15 01:03:08 ispc CRON[1588493]: pam_unix(cron:session): session closed for user logcheck Dec 15 01:03:19 ispc postfix/smtpd[1589544]: sql auxprop plugin using mysql engine Dec 15 01:04:01 ispc CRON[1589552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:04:02 ispc CRON[1589552]: pam_unix(cron:session): session closed for user root Dec 15 01:04:50 ispc sshd[1589569]: Invalid user ziplines from 116.120.58.228 Dec 15 01:05:01 ispc CRON[1589571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:05:01 ispc CRON[1589572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:05:01 ispc CRON[1589573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:05:01 ispc CRON[1589574]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:05:01 ispc CRON[1589572]: pam_unix(cron:session): session closed for user root Dec 15 01:05:01 ispc CRON[1589574]: pam_unix(cron:session): session closed for user getmail Dec 15 01:05:01 ispc CRON[1589571]: pam_unix(cron:session): session closed for user root Dec 15 01:05:04 ispc CRON[1589573]: pam_unix(cron:session): session closed for user root Dec 15 01:05:21 ispc postfix/smtpd[1589693]: sql auxprop plugin using mysql engine Dec 15 01:06:01 ispc CRON[1589697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:06:02 ispc CRON[1589697]: pam_unix(cron:session): session closed for user root Dec 15 01:06:29 ispc sshd[1589712]: Invalid user matlbula from 51.159.18.215 Dec 15 01:06:49 ispc sshd[1589718]: Invalid user klape from 77.241.18.2 Dec 15 01:06:50 ispc sshd[1589720]: Invalid user ubuntu from 77.241.18.2 Dec 15 01:07:01 ispc CRON[1589722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:07:01 ispc CRON[1589722]: pam_unix(cron:session): session closed for user root Dec 15 01:08:02 ispc CRON[1589745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:08:02 ispc CRON[1589745]: pam_unix(cron:session): session closed for user root Dec 15 01:08:36 ispc sshd[1589760]: Invalid user lanovacentra from 51.159.18.215 Dec 15 01:09:01 ispc CRON[1589762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:09:01 ispc CRON[1589763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:09:01 ispc CRON[1589762]: pam_unix(cron:session): session closed for user root Dec 15 01:09:02 ispc CRON[1589763]: pam_unix(cron:session): session closed for user root Dec 15 01:09:49 ispc saslauthd[1589786]: pam_mysql - SELECT returned no result. Dec 15 01:09:49 ispc saslauthd[1589786]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:09:49 ispc saslauthd[1589786]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:10:01 ispc CRON[1589789]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:10:01 ispc CRON[1589790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:10:01 ispc CRON[1589791]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:10:01 ispc CRON[1589787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:10:01 ispc CRON[1589788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:10:01 ispc CRON[1589788]: pam_unix(cron:session): session closed for user root Dec 15 01:10:01 ispc CRON[1589789]: pam_unix(cron:session): session closed for user www-data Dec 15 01:10:01 ispc CRON[1589791]: pam_unix(cron:session): session closed for user getmail Dec 15 01:10:02 ispc CRON[1589787]: pam_unix(cron:session): session closed for user root Dec 15 01:10:06 ispc CRON[1589790]: pam_unix(cron:session): session closed for user root Dec 15 01:11:01 ispc CRON[1589914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:11:01 ispc CRON[1589914]: pam_unix(cron:session): session closed for user root Dec 15 01:12:01 ispc CRON[1589930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:12:03 ispc CRON[1589930]: pam_unix(cron:session): session closed for user root Dec 15 01:12:53 ispc saslauthd[1589954]: pam_mysql - SELECT returned no result. Dec 15 01:12:53 ispc saslauthd[1589954]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:12:53 ispc saslauthd[1589954]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:13:01 ispc CRON[1589955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:13:02 ispc CRON[1589955]: pam_unix(cron:session): session closed for user root Dec 15 01:14:01 ispc CRON[1589969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:14:02 ispc CRON[1589969]: pam_unix(cron:session): session closed for user root Dec 15 01:14:36 ispc sshd[1589993]: Did not receive identification string from 193.32.162.151 Dec 15 01:15:01 ispc CRON[1589996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:15:01 ispc CRON[1589997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:15:01 ispc CRON[1589998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:15:01 ispc CRON[1589999]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:15:01 ispc CRON[1589997]: pam_unix(cron:session): session closed for user root Dec 15 01:15:01 ispc CRON[1589999]: pam_unix(cron:session): session closed for user getmail Dec 15 01:15:01 ispc CRON[1589996]: pam_unix(cron:session): session closed for user root Dec 15 01:15:14 ispc saslauthd[1590193]: pam_mysql - SELECT returned no result. Dec 15 01:15:14 ispc saslauthd[1590193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:15:14 ispc saslauthd[1590193]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:15:14 ispc CRON[1589998]: pam_unix(cron:session): session closed for user root Dec 15 01:15:38 ispc saslauthd[1590195]: pam_mysql - SELECT returned no result. Dec 15 01:15:38 ispc saslauthd[1590195]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:15:38 ispc saslauthd[1590195]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:15:39 ispc saslauthd[1590196]: pam_mysql - SELECT returned no result. Dec 15 01:15:39 ispc saslauthd[1590196]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:15:39 ispc saslauthd[1590196]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:15:44 ispc saslauthd[1590197]: pam_mysql - SELECT returned no result. Dec 15 01:15:44 ispc saslauthd[1590197]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:15:44 ispc saslauthd[1590197]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:16:01 ispc CRON[1590198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:16:01 ispc CRON[1590198]: pam_unix(cron:session): session closed for user root Dec 15 01:16:08 ispc saslauthd[1590211]: pam_mysql - SELECT returned no result. Dec 15 01:16:08 ispc saslauthd[1590211]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:16:08 ispc saslauthd[1590211]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:16:12 ispc saslauthd[1590213]: pam_mysql - SELECT returned no result. Dec 15 01:16:12 ispc saslauthd[1590213]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:16:12 ispc saslauthd[1590213]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:16:16 ispc saslauthd[1590214]: pam_mysql - SELECT returned no result. Dec 15 01:16:16 ispc saslauthd[1590214]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:16:16 ispc saslauthd[1590214]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:17:01 ispc CRON[1590224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:17:02 ispc CRON[1590224]: pam_unix(cron:session): session closed for user root Dec 15 01:18:01 ispc CRON[1590257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:18:02 ispc CRON[1590257]: pam_unix(cron:session): session closed for user root Dec 15 01:19:01 ispc CRON[1590273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:19:02 ispc CRON[1590273]: pam_unix(cron:session): session closed for user root Dec 15 01:20:01 ispc CRON[1590286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:20:01 ispc CRON[1590287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:20:01 ispc CRON[1590289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:20:01 ispc CRON[1590290]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:20:01 ispc CRON[1590288]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:20:01 ispc CRON[1590288]: pam_unix(cron:session): session closed for user www-data Dec 15 01:20:01 ispc CRON[1590287]: pam_unix(cron:session): session closed for user root Dec 15 01:20:01 ispc CRON[1590290]: pam_unix(cron:session): session closed for user getmail Dec 15 01:20:02 ispc CRON[1590286]: pam_unix(cron:session): session closed for user root Dec 15 01:20:30 ispc CRON[1590289]: pam_unix(cron:session): session closed for user root Dec 15 01:20:31 ispc sshd[1590400]: Invalid user admin from 193.32.162.151 Dec 15 01:21:01 ispc CRON[1590403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:21:01 ispc CRON[1590404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:21:01 ispc CRON[1590403]: pam_unix(cron:session): session closed for user root Dec 15 01:21:53 ispc postfix/smtpd[1590440]: sql auxprop plugin using mysql engine Dec 15 01:22:01 ispc CRON[1590442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:22:01 ispc CRON[1590442]: pam_unix(cron:session): session closed for user root Dec 15 01:23:01 ispc CRON[1590490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:23:02 ispc CRON[1590490]: pam_unix(cron:session): session closed for user root Dec 15 01:23:39 ispc postfix/smtpd[1590519]: sql auxprop plugin using mysql engine Dec 15 01:23:39 ispc postfix/smtpd[1590521]: sql auxprop plugin using mysql engine Dec 15 01:23:55 ispc sshd[1590534]: Invalid user oracle from 193.32.162.151 Dec 15 01:24:01 ispc CRON[1590536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:24:01 ispc CRON[1590536]: pam_unix(cron:session): session closed for user root Dec 15 01:25:01 ispc CRON[1590576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:25:01 ispc CRON[1590578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:25:01 ispc CRON[1590579]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:25:01 ispc CRON[1590577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:25:01 ispc CRON[1590577]: pam_unix(cron:session): session closed for user root Dec 15 01:25:01 ispc CRON[1590579]: pam_unix(cron:session): session closed for user getmail Dec 15 01:25:01 ispc CRON[1590578]: pam_unix(cron:session): session closed for user root Dec 15 01:25:02 ispc CRON[1590576]: pam_unix(cron:session): session closed for user root Dec 15 01:25:41 ispc sshd[1590670]: Invalid user martof from 175.125.92.77 Dec 15 01:26:02 ispc CRON[1590680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:26:02 ispc CRON[1590680]: pam_unix(cron:session): session closed for user root Dec 15 01:26:25 ispc sshd[1590700]: Invalid user ziplines from 210.114.18.123 Dec 15 01:27:01 ispc CRON[1590727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:27:01 ispc CRON[1590727]: pam_unix(cron:session): session closed for user root Dec 15 01:27:25 ispc sshd[1590746]: Invalid user hmsftp from 193.32.162.151 Dec 15 01:28:01 ispc CRON[1590774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:28:02 ispc CRON[1590774]: pam_unix(cron:session): session closed for user root Dec 15 01:29:01 ispc CRON[1590812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:29:01 ispc CRON[1590812]: pam_unix(cron:session): session closed for user root Dec 15 01:30:01 ispc CRON[1590852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:30:01 ispc CRON[1590854]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:30:01 ispc CRON[1590856]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:30:01 ispc CRON[1590855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:30:01 ispc CRON[1590853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:30:01 ispc CRON[1590854]: pam_unix(cron:session): session closed for user www-data Dec 15 01:30:01 ispc CRON[1590856]: pam_unix(cron:session): session closed for user getmail Dec 15 01:30:01 ispc CRON[1590853]: pam_unix(cron:session): session closed for user root Dec 15 01:30:02 ispc CRON[1590855]: pam_unix(cron:session): session closed for user root Dec 15 01:30:02 ispc CRON[1590852]: pam_unix(cron:session): session closed for user root Dec 15 01:30:18 ispc postfix/smtpd[1590936]: sql auxprop plugin using mysql engine Dec 15 01:30:19 ispc saslauthd[1590943]: pam_mysql - SELECT returned no result. Dec 15 01:30:19 ispc saslauthd[1590943]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:30:19 ispc saslauthd[1590943]: do_auth : auth failure: [user=sweex] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:30:39 ispc sshd[1590952]: Invalid user loginuser from 193.32.162.151 Dec 15 01:31:01 ispc CRON[1590963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:31:01 ispc CRON[1590963]: pam_unix(cron:session): session closed for user root Dec 15 01:32:01 ispc CRON[1590999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:32:02 ispc CRON[1590999]: pam_unix(cron:session): session closed for user root Dec 15 01:32:30 ispc postfix/smtpd[1591024]: sql auxprop plugin using mysql engine Dec 15 01:32:30 ispc postfix/smtpd[1591027]: sql auxprop plugin using mysql engine Dec 15 01:32:30 ispc saslauthd[1591026]: pam_mysql - SELECT returned no result. Dec 15 01:32:30 ispc saslauthd[1591026]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:32:30 ispc saslauthd[1591026]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:32:31 ispc saslauthd[1591029]: pam_mysql - SELECT returned no result. Dec 15 01:32:31 ispc saslauthd[1591029]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:32:31 ispc saslauthd[1591029]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:32:46 ispc saslauthd[1591042]: pam_mysql - SELECT returned no result. Dec 15 01:32:46 ispc saslauthd[1591042]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:32:46 ispc saslauthd[1591042]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:01 ispc CRON[1591052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:33:01 ispc CRON[1591052]: pam_unix(cron:session): session closed for user root Dec 15 01:33:03 ispc saslauthd[1591063]: pam_mysql - SELECT returned no result. Dec 15 01:33:03 ispc saslauthd[1591063]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:03 ispc saslauthd[1591063]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:07 ispc saslauthd[1591064]: pam_mysql - SELECT returned no result. Dec 15 01:33:07 ispc saslauthd[1591064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:07 ispc saslauthd[1591064]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:13 ispc saslauthd[1591069]: pam_mysql - SELECT returned no result. Dec 15 01:33:13 ispc saslauthd[1591069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:13 ispc saslauthd[1591069]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:14 ispc saslauthd[1591070]: pam_mysql - SELECT returned no result. Dec 15 01:33:14 ispc saslauthd[1591070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:14 ispc saslauthd[1591070]: do_auth : auth failure: [user=david] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:32 ispc saslauthd[1591081]: pam_mysql - SELECT returned no result. Dec 15 01:33:32 ispc saslauthd[1591081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:32 ispc saslauthd[1591081]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:35 ispc saslauthd[1591082]: pam_mysql - SELECT returned no result. Dec 15 01:33:35 ispc saslauthd[1591082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:35 ispc saslauthd[1591082]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:38 ispc saslauthd[1591083]: pam_mysql - SELECT returned no result. Dec 15 01:33:38 ispc saslauthd[1591083]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:38 ispc saslauthd[1591083]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:45 ispc saslauthd[1591094]: pam_mysql - SELECT returned no result. Dec 15 01:33:45 ispc saslauthd[1591094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:45 ispc saslauthd[1591094]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:47 ispc saslauthd[1591095]: pam_mysql - SELECT returned no result. Dec 15 01:33:47 ispc saslauthd[1591095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:47 ispc saslauthd[1591095]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:48 ispc saslauthd[1591096]: pam_mysql - SELECT returned no result. Dec 15 01:33:48 ispc saslauthd[1591096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:48 ispc saslauthd[1591096]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:48 ispc saslauthd[1591097]: pam_mysql - SELECT returned no result. Dec 15 01:33:48 ispc saslauthd[1591097]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:33:48 ispc saslauthd[1591097]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:33:48 ispc sshd[1591092]: Invalid user loginuser from 193.32.162.151 Dec 15 01:34:01 ispc CRON[1591106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:34:02 ispc CRON[1591106]: pam_unix(cron:session): session closed for user root Dec 15 01:34:12 ispc saslauthd[1591121]: pam_mysql - SELECT returned no result. Dec 15 01:34:12 ispc saslauthd[1591121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:34:12 ispc saslauthd[1591121]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:34:45 ispc sshd[1591136]: Invalid user ziplines from 222.236.46.74 Dec 15 01:35:01 ispc CRON[1591148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:35:01 ispc CRON[1591149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:35:01 ispc CRON[1591150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:35:01 ispc CRON[1591151]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:35:01 ispc CRON[1591149]: pam_unix(cron:session): session closed for user root Dec 15 01:35:01 ispc CRON[1591151]: pam_unix(cron:session): session closed for user getmail Dec 15 01:35:01 ispc CRON[1591148]: pam_unix(cron:session): session closed for user root Dec 15 01:35:01 ispc CRON[1591150]: pam_unix(cron:session): session closed for user root Dec 15 01:36:01 ispc CRON[1591250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:36:02 ispc CRON[1591250]: pam_unix(cron:session): session closed for user root Dec 15 01:36:56 ispc sshd[1591298]: Invalid user loginuser from 193.32.162.151 Dec 15 01:37:01 ispc CRON[1591310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:37:01 ispc CRON[1591310]: pam_unix(cron:session): session closed for user root Dec 15 01:37:58 ispc sshd[1591351]: Invalid user default from 62.60.131.157 Dec 15 01:38:01 ispc CRON[1591353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:38:02 ispc CRON[1591353]: pam_unix(cron:session): session closed for user root Dec 15 01:39:01 ispc CRON[1591393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:39:01 ispc CRON[1591394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:39:01 ispc CRON[1591393]: pam_unix(cron:session): session closed for user root Dec 15 01:39:02 ispc CRON[1591394]: pam_unix(cron:session): session closed for user root Dec 15 01:39:14 ispc sshd[1591419]: Invalid user admin from 221.156.137.104 Dec 15 01:40:01 ispc CRON[1591443]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:40:01 ispc CRON[1591441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:40:01 ispc CRON[1591445]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:40:01 ispc CRON[1591442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:40:01 ispc CRON[1591444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:40:01 ispc CRON[1591442]: pam_unix(cron:session): session closed for user root Dec 15 01:40:01 ispc CRON[1591443]: pam_unix(cron:session): session closed for user www-data Dec 15 01:40:01 ispc CRON[1591445]: pam_unix(cron:session): session closed for user getmail Dec 15 01:40:01 ispc CRON[1591444]: pam_unix(cron:session): session closed for user root Dec 15 01:40:02 ispc CRON[1591441]: pam_unix(cron:session): session closed for user root Dec 15 01:41:01 ispc CRON[1591551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:41:01 ispc CRON[1591551]: pam_unix(cron:session): session closed for user root Dec 15 01:41:14 ispc CRON[1590404]: pam_unix(cron:session): session closed for user root Dec 15 01:41:14 ispc postfix/smtpd[1591568]: sql auxprop plugin using mysql engine Dec 15 01:41:17 ispc sshd[1591574]: Invalid user klape from 67.205.163.146 Dec 15 01:41:18 ispc sshd[1591576]: Invalid user ubuntu from 67.205.163.146 Dec 15 01:41:34 ispc saslauthd[1591579]: pam_mysql - SELECT returned no result. Dec 15 01:41:34 ispc saslauthd[1591579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:41:34 ispc saslauthd[1591579]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:41:55 ispc saslauthd[1591581]: pam_mysql - SELECT returned no result. Dec 15 01:41:55 ispc saslauthd[1591581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:41:55 ispc saslauthd[1591581]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:42:01 ispc CRON[1591582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:42:02 ispc CRON[1591582]: pam_unix(cron:session): session closed for user root Dec 15 01:42:42 ispc sshd[1591605]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 01:42:44 ispc sshd[1591607]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 01:42:44 ispc sshd[1591607]: Invalid user klape from 189.89.20.45 Dec 15 01:42:45 ispc sshd[1591609]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 01:42:45 ispc sshd[1591609]: Invalid user ubuntu from 189.89.20.45 Dec 15 01:43:01 ispc CRON[1591613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:43:01 ispc CRON[1591613]: pam_unix(cron:session): session closed for user root Dec 15 01:43:39 ispc postfix/smtpd[1591625]: sql auxprop plugin using mysql engine Dec 15 01:43:47 ispc postfix/smtpd[1591635]: sql auxprop plugin using mysql engine Dec 15 01:44:01 ispc CRON[1591647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:44:02 ispc CRON[1591647]: pam_unix(cron:session): session closed for user root Dec 15 01:44:11 ispc saslauthd[1591659]: pam_mysql - SELECT returned no result. Dec 15 01:44:11 ispc saslauthd[1591659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:44:11 ispc saslauthd[1591659]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:44:58 ispc saslauthd[1591663]: pam_mysql - SELECT returned no result. Dec 15 01:44:58 ispc saslauthd[1591663]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:44:58 ispc saslauthd[1591663]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:45:01 ispc CRON[1591666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:45:01 ispc CRON[1591667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:45:01 ispc CRON[1591668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:45:01 ispc CRON[1591669]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:45:01 ispc CRON[1591667]: pam_unix(cron:session): session closed for user root Dec 15 01:45:01 ispc CRON[1591669]: pam_unix(cron:session): session closed for user getmail Dec 15 01:45:02 ispc CRON[1591666]: pam_unix(cron:session): session closed for user root Dec 15 01:45:08 ispc saslauthd[1591813]: pam_mysql - SELECT returned no result. Dec 15 01:45:08 ispc saslauthd[1591813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:45:08 ispc saslauthd[1591813]: do_auth : auth failure: [user=sync] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:45:23 ispc sshd[1591856]: Did not receive identification string from 134.209.205.14 Dec 15 01:45:45 ispc CRON[1591668]: pam_unix(cron:session): session closed for user root Dec 15 01:45:47 ispc sshd[1591860]: Did not receive identification string from 64.227.86.201 Dec 15 01:46:01 ispc CRON[1591861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:47:01 ispc CRON[1591898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:47:02 ispc CRON[1591898]: pam_unix(cron:session): session closed for user root Dec 15 01:47:04 ispc sshd[1591913]: Invalid user blceu from 45.119.213.109 Dec 15 01:47:14 ispc sshd[1591919]: Did not receive identification string from 134.209.205.14 Dec 15 01:48:01 ispc CRON[1591952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:48:01 ispc CRON[1591952]: pam_unix(cron:session): session closed for user root Dec 15 01:48:05 ispc sshd[1591967]: Did not receive identification string from 167.71.71.157 Dec 15 01:49:01 ispc CRON[1591995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:49:02 ispc CRON[1591995]: pam_unix(cron:session): session closed for user root Dec 15 01:50:01 ispc CRON[1592038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:50:01 ispc CRON[1592039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:50:01 ispc CRON[1592040]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 01:50:01 ispc CRON[1592041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:50:01 ispc CRON[1592042]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:50:01 ispc CRON[1592039]: pam_unix(cron:session): session closed for user root Dec 15 01:50:01 ispc CRON[1592040]: pam_unix(cron:session): session closed for user www-data Dec 15 01:50:01 ispc CRON[1592042]: pam_unix(cron:session): session closed for user getmail Dec 15 01:50:01 ispc CRON[1592041]: pam_unix(cron:session): session closed for user root Dec 15 01:50:01 ispc CRON[1592038]: pam_unix(cron:session): session closed for user root Dec 15 01:50:41 ispc postfix/smtpd[1592135]: sql auxprop plugin using mysql engine Dec 15 01:50:42 ispc saslauthd[1592138]: pam_mysql - SELECT returned no result. Dec 15 01:50:42 ispc saslauthd[1592138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:50:42 ispc saslauthd[1592138]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:50:55 ispc saslauthd[1592150]: pam_mysql - SELECT returned no result. Dec 15 01:50:55 ispc saslauthd[1592150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:50:55 ispc saslauthd[1592150]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:50:57 ispc sshd[1592151]: Invalid user blceu from 175.125.92.77 Dec 15 01:51:02 ispc CRON[1592153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:51:02 ispc CRON[1592153]: pam_unix(cron:session): session closed for user root Dec 15 01:51:20 ispc sshd[1592172]: Invalid user ziplines from 103.110.84.105 Dec 15 01:51:58 ispc sshd[1592195]: Invalid user ziplines from 175.125.92.77 Dec 15 01:52:01 ispc CRON[1592197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:52:01 ispc CRON[1592197]: pam_unix(cron:session): session closed for user root Dec 15 01:53:01 ispc CRON[1592245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:53:02 ispc CRON[1592245]: pam_unix(cron:session): session closed for user root Dec 15 01:54:01 ispc CRON[1592290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:54:01 ispc CRON[1592290]: pam_unix(cron:session): session closed for user root Dec 15 01:55:01 ispc CRON[1592336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:55:01 ispc CRON[1592337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:55:01 ispc CRON[1592339]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 01:55:01 ispc CRON[1592338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:55:01 ispc CRON[1592337]: pam_unix(cron:session): session closed for user root Dec 15 01:55:01 ispc CRON[1592339]: pam_unix(cron:session): session closed for user getmail Dec 15 01:55:01 ispc CRON[1592338]: pam_unix(cron:session): session closed for user root Dec 15 01:55:01 ispc CRON[1592336]: pam_unix(cron:session): session closed for user root Dec 15 01:55:05 ispc sshd[1592412]: Invalid user admin from 45.148.10.121 Dec 15 01:56:01 ispc CRON[1592448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:56:01 ispc postfix/smtpd[1592447]: sql auxprop plugin using mysql engine Dec 15 01:56:02 ispc CRON[1592448]: pam_unix(cron:session): session closed for user root Dec 15 01:56:02 ispc saslauthd[1592461]: pam_mysql - SELECT returned no result. Dec 15 01:56:02 ispc saslauthd[1592461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:56:02 ispc saslauthd[1592461]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:56:56 ispc saslauthd[1592490]: pam_mysql - SELECT returned no result. Dec 15 01:56:56 ispc saslauthd[1592490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:56:56 ispc saslauthd[1592490]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:57:01 ispc CRON[1592495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:57:01 ispc CRON[1592495]: pam_unix(cron:session): session closed for user root Dec 15 01:57:09 ispc saslauthd[1592513]: pam_mysql - SELECT returned no result. Dec 15 01:57:09 ispc saslauthd[1592513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:57:09 ispc saslauthd[1592513]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:58:01 ispc CRON[1592548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:58:02 ispc CRON[1592548]: pam_unix(cron:session): session closed for user root Dec 15 01:59:01 ispc CRON[1592599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 01:59:02 ispc CRON[1592599]: pam_unix(cron:session): session closed for user root Dec 15 01:59:10 ispc sshd[1592610]: Invalid user admin from 134.209.205.14 Dec 15 01:59:17 ispc sshd[1592616]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 01:59:18 ispc postfix/smtpd[1592618]: sql auxprop plugin using mysql engine Dec 15 01:59:19 ispc saslauthd[1592620]: pam_mysql - SELECT returned no result. Dec 15 01:59:19 ispc saslauthd[1592620]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:59:19 ispc saslauthd[1592620]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 01:59:37 ispc sshd[1592632]: Did not receive identification string from 104.248.82.126 Dec 15 01:59:44 ispc sshd[1592639]: Invalid user admin from 134.209.205.14 Dec 15 01:59:53 ispc saslauthd[1592647]: pam_mysql - SELECT returned no result. Dec 15 01:59:53 ispc saslauthd[1592647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 01:59:53 ispc saslauthd[1592647]: do_auth : auth failure: [user=sys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:00:01 ispc CRON[1592650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:00:01 ispc CRON[1592651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:00:01 ispc CRON[1592652]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:00:01 ispc CRON[1592653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:00:01 ispc CRON[1592654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:00:01 ispc CRON[1592655]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:00:01 ispc CRON[1592651]: pam_unix(cron:session): session closed for user root Dec 15 02:00:01 ispc CRON[1592652]: pam_unix(cron:session): session closed for user www-data Dec 15 02:00:01 ispc CRON[1592655]: pam_unix(cron:session): session closed for user getmail Dec 15 02:00:01 ispc CRON[1592654]: pam_unix(cron:session): session closed for user root Dec 15 02:00:02 ispc CRON[1592650]: pam_unix(cron:session): session closed for user root Dec 15 02:00:02 ispc su[1592827]: Successful su for root by root Dec 15 02:00:02 ispc su[1592827]: + ??? root:root Dec 15 02:00:02 ispc su[1592827]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:02 ispc su[1592827]: pam_unix(su:session): session closed for user root Dec 15 02:00:02 ispc su[1592832]: Successful su for root by root Dec 15 02:00:02 ispc su[1592832]: + ??? root:root Dec 15 02:00:02 ispc su[1592832]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:02 ispc su[1592832]: pam_unix(su:session): session closed for user root Dec 15 02:00:02 ispc su[1592835]: Successful su for root by root Dec 15 02:00:02 ispc su[1592835]: + ??? root:root Dec 15 02:00:02 ispc su[1592835]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:02 ispc su[1592835]: pam_unix(su:session): session closed for user root Dec 15 02:00:02 ispc su[1592841]: Successful su for root by root Dec 15 02:00:02 ispc su[1592841]: + ??? root:root Dec 15 02:00:02 ispc su[1592841]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:03 ispc su[1592841]: pam_unix(su:session): session closed for user root Dec 15 02:00:03 ispc su[1592844]: Successful su for root by root Dec 15 02:00:03 ispc su[1592844]: + ??? root:root Dec 15 02:00:03 ispc su[1592844]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:04 ispc su[1592844]: pam_unix(su:session): session closed for user root Dec 15 02:00:04 ispc su[1592850]: Successful su for root by root Dec 15 02:00:04 ispc su[1592850]: + ??? root:root Dec 15 02:00:04 ispc su[1592850]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:04 ispc su[1592850]: pam_unix(su:session): session closed for user root Dec 15 02:00:04 ispc su[1592853]: Successful su for root by root Dec 15 02:00:04 ispc su[1592853]: + ??? root:root Dec 15 02:00:04 ispc su[1592853]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:08 ispc su[1592853]: pam_unix(su:session): session closed for user root Dec 15 02:00:08 ispc su[1592859]: Successful su for root by root Dec 15 02:00:08 ispc su[1592859]: + ??? root:root Dec 15 02:00:08 ispc su[1592859]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:09 ispc su[1592859]: pam_unix(su:session): session closed for user root Dec 15 02:00:09 ispc su[1592862]: Successful su for root by root Dec 15 02:00:09 ispc su[1592862]: + ??? root:root Dec 15 02:00:09 ispc su[1592862]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:09 ispc su[1592862]: pam_unix(su:session): session closed for user root Dec 15 02:00:09 ispc su[1592868]: Successful su for root by root Dec 15 02:00:09 ispc su[1592868]: + ??? root:root Dec 15 02:00:09 ispc su[1592868]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:09 ispc su[1592868]: pam_unix(su:session): session closed for user root Dec 15 02:00:09 ispc su[1592871]: Successful su for root by root Dec 15 02:00:09 ispc su[1592871]: + ??? root:root Dec 15 02:00:09 ispc su[1592871]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:12 ispc su[1592871]: pam_unix(su:session): session closed for user root Dec 15 02:00:12 ispc su[1592881]: Successful su for root by root Dec 15 02:00:12 ispc su[1592881]: + ??? root:root Dec 15 02:00:12 ispc su[1592881]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:12 ispc su[1592881]: pam_unix(su:session): session closed for user root Dec 15 02:00:13 ispc su[1592884]: Successful su for root by root Dec 15 02:00:13 ispc su[1592884]: + ??? root:root Dec 15 02:00:13 ispc su[1592884]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:13 ispc su[1592884]: pam_unix(su:session): session closed for user root Dec 15 02:00:13 ispc su[1592890]: Successful su for root by root Dec 15 02:00:13 ispc su[1592890]: + ??? root:root Dec 15 02:00:13 ispc su[1592890]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:13 ispc su[1592890]: pam_unix(su:session): session closed for user root Dec 15 02:00:13 ispc su[1592893]: Successful su for root by root Dec 15 02:00:13 ispc su[1592893]: + ??? root:root Dec 15 02:00:13 ispc su[1592893]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:16 ispc su[1592893]: pam_unix(su:session): session closed for user root Dec 15 02:00:16 ispc su[1592900]: Successful su for root by root Dec 15 02:00:16 ispc su[1592900]: + ??? root:root Dec 15 02:00:16 ispc su[1592900]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:16 ispc su[1592900]: pam_unix(su:session): session closed for user root Dec 15 02:00:16 ispc su[1592903]: Successful su for root by root Dec 15 02:00:16 ispc su[1592903]: + ??? root:root Dec 15 02:00:16 ispc su[1592903]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:17 ispc su[1592903]: pam_unix(su:session): session closed for user root Dec 15 02:00:17 ispc su[1592909]: Successful su for root by root Dec 15 02:00:17 ispc su[1592909]: + ??? root:root Dec 15 02:00:17 ispc su[1592909]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:17 ispc su[1592909]: pam_unix(su:session): session closed for user root Dec 15 02:00:17 ispc su[1592912]: Successful su for root by root Dec 15 02:00:17 ispc su[1592912]: + ??? root:root Dec 15 02:00:17 ispc su[1592912]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:20 ispc sshd[1592917]: Invalid user admin from 134.209.205.14 Dec 15 02:00:23 ispc saslauthd[1592923]: pam_mysql - SELECT returned no result. Dec 15 02:00:23 ispc saslauthd[1592923]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:00:23 ispc saslauthd[1592923]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:00:29 ispc su[1592912]: pam_unix(su:session): session closed for user root Dec 15 02:00:29 ispc su[1592928]: Successful su for root by root Dec 15 02:00:29 ispc su[1592928]: + ??? root:root Dec 15 02:00:29 ispc su[1592928]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:29 ispc su[1592928]: pam_unix(su:session): session closed for user root Dec 15 02:00:29 ispc su[1592931]: Successful su for root by root Dec 15 02:00:29 ispc su[1592931]: + ??? root:root Dec 15 02:00:29 ispc su[1592931]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:29 ispc su[1592931]: pam_unix(su:session): session closed for user root Dec 15 02:00:29 ispc su[1592937]: Successful su for root by root Dec 15 02:00:29 ispc su[1592937]: + ??? root:root Dec 15 02:00:29 ispc su[1592937]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:29 ispc su[1592937]: pam_unix(su:session): session closed for user root Dec 15 02:00:29 ispc su[1592940]: Successful su for root by root Dec 15 02:00:29 ispc su[1592940]: + ??? root:root Dec 15 02:00:29 ispc su[1592940]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:30 ispc su[1592940]: pam_unix(su:session): session closed for user root Dec 15 02:00:30 ispc su[1592946]: Successful su for root by root Dec 15 02:00:30 ispc su[1592946]: + ??? root:root Dec 15 02:00:30 ispc su[1592946]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:30 ispc su[1592946]: pam_unix(su:session): session closed for user root Dec 15 02:00:30 ispc su[1592949]: Successful su for root by root Dec 15 02:00:30 ispc su[1592949]: + ??? root:root Dec 15 02:00:30 ispc su[1592949]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:00:55 ispc sshd[1592966]: Invalid user admin from 134.209.205.14 Dec 15 02:01:01 ispc CRON[1592968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:01:02 ispc CRON[1592968]: pam_unix(cron:session): session closed for user root Dec 15 02:01:29 ispc sshd[1592995]: Invalid user admin from 134.209.205.14 Dec 15 02:01:45 ispc sshd[1593005]: Invalid user klape from 36.50.177.171 Dec 15 02:01:46 ispc sshd[1593011]: Invalid user ubuntu from 36.50.177.171 Dec 15 02:02:00 ispc sshd[1593020]: Invalid user admin from 134.209.205.14 Dec 15 02:02:01 ispc CRON[1593028]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 02:02:01 ispc CRON[1593029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:02:01 ispc CRON[1593029]: pam_unix(cron:session): session closed for user root Dec 15 02:03:01 ispc CRON[1593994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:03:02 ispc CRON[1593994]: pam_unix(cron:session): session closed for user root Dec 15 02:03:12 ispc CRON[1593028]: pam_unix(cron:session): session closed for user logcheck Dec 15 02:03:23 ispc postfix/smtpd[1594122]: sql auxprop plugin using mysql engine Dec 15 02:03:43 ispc postfix/smtpd[1594137]: sql auxprop plugin using mysql engine Dec 15 02:04:01 ispc CRON[1594151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:04:01 ispc CRON[1594151]: pam_unix(cron:session): session closed for user root Dec 15 02:04:26 ispc sshd[1594177]: Invalid user klape from 103.164.20.29 Dec 15 02:04:27 ispc sshd[1594179]: Invalid user ubuntu from 103.164.20.29 Dec 15 02:05:01 ispc CRON[1594203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:05:01 ispc CRON[1594201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:05:01 ispc CRON[1594202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:05:01 ispc CRON[1594204]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:05:01 ispc CRON[1594202]: pam_unix(cron:session): session closed for user root Dec 15 02:05:01 ispc CRON[1594204]: pam_unix(cron:session): session closed for user getmail Dec 15 02:05:02 ispc CRON[1594203]: pam_unix(cron:session): session closed for user root Dec 15 02:05:02 ispc CRON[1594201]: pam_unix(cron:session): session closed for user root Dec 15 02:05:30 ispc su[1592949]: pam_unix(su:session): session closed for user root Dec 15 02:05:30 ispc su[1594292]: Successful su for root by root Dec 15 02:05:30 ispc su[1594292]: + ??? root:root Dec 15 02:05:30 ispc su[1594292]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:30 ispc su[1594292]: pam_unix(su:session): session closed for user root Dec 15 02:05:30 ispc su[1594295]: Successful su for root by root Dec 15 02:05:30 ispc su[1594295]: + ??? root:root Dec 15 02:05:30 ispc su[1594295]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:33 ispc su[1594295]: pam_unix(su:session): session closed for user root Dec 15 02:05:33 ispc su[1594303]: Successful su for root by root Dec 15 02:05:33 ispc su[1594303]: + ??? root:root Dec 15 02:05:33 ispc su[1594303]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:33 ispc su[1594303]: pam_unix(su:session): session closed for user root Dec 15 02:05:33 ispc su[1594306]: Successful su for root by root Dec 15 02:05:33 ispc su[1594306]: + ??? root:root Dec 15 02:05:33 ispc su[1594306]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:36 ispc su[1594306]: pam_unix(su:session): session closed for user root Dec 15 02:05:36 ispc su[1594314]: Successful su for root by root Dec 15 02:05:36 ispc su[1594314]: + ??? root:root Dec 15 02:05:36 ispc su[1594314]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:36 ispc su[1594314]: pam_unix(su:session): session closed for user root Dec 15 02:05:36 ispc su[1594317]: Successful su for root by root Dec 15 02:05:36 ispc su[1594317]: + ??? root:root Dec 15 02:05:36 ispc su[1594317]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:37 ispc su[1594317]: pam_unix(su:session): session closed for user root Dec 15 02:05:37 ispc su[1594323]: Successful su for root by root Dec 15 02:05:37 ispc su[1594323]: + ??? root:root Dec 15 02:05:37 ispc su[1594323]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:37 ispc su[1594323]: pam_unix(su:session): session closed for user root Dec 15 02:05:37 ispc su[1594326]: Successful su for root by root Dec 15 02:05:37 ispc su[1594326]: + ??? root:root Dec 15 02:05:37 ispc su[1594326]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:38 ispc su[1594326]: pam_unix(su:session): session closed for user root Dec 15 02:05:38 ispc su[1594336]: Successful su for root by root Dec 15 02:05:38 ispc su[1594336]: + ??? root:root Dec 15 02:05:38 ispc su[1594336]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:38 ispc su[1594336]: pam_unix(su:session): session closed for user root Dec 15 02:05:38 ispc su[1594339]: Successful su for root by root Dec 15 02:05:38 ispc su[1594339]: + ??? root:root Dec 15 02:05:38 ispc su[1594339]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:46 ispc postfix/smtpd[1594343]: sql auxprop plugin using mysql engine Dec 15 02:05:52 ispc su[1594339]: pam_unix(su:session): session closed for user root Dec 15 02:05:52 ispc su[1594351]: Successful su for root by root Dec 15 02:05:52 ispc su[1594351]: + ??? root:root Dec 15 02:05:52 ispc su[1594351]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:05:52 ispc su[1594351]: pam_unix(su:session): session closed for user root Dec 15 02:05:52 ispc su[1594354]: Successful su for root by root Dec 15 02:05:52 ispc su[1594354]: + ??? root:root Dec 15 02:05:52 ispc su[1594354]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:06:01 ispc CRON[1594364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:06:02 ispc CRON[1594364]: pam_unix(cron:session): session closed for user root Dec 15 02:06:18 ispc CRON[1591861]: pam_unix(cron:session): session closed for user root Dec 15 02:06:19 ispc su[1594354]: pam_unix(su:session): session closed for user root Dec 15 02:06:19 ispc su[1594385]: Successful su for root by root Dec 15 02:06:19 ispc su[1594385]: + ??? root:root Dec 15 02:06:19 ispc su[1594385]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:06:19 ispc su[1594385]: pam_unix(su:session): session closed for user root Dec 15 02:06:19 ispc su[1594388]: Successful su for root by root Dec 15 02:06:19 ispc su[1594388]: + ??? root:root Dec 15 02:06:19 ispc su[1594388]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:06:20 ispc su[1594388]: pam_unix(su:session): session closed for user root Dec 15 02:06:20 ispc su[1594395]: Successful su for root by root Dec 15 02:06:20 ispc su[1594395]: + ??? root:root Dec 15 02:06:20 ispc su[1594395]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:06:20 ispc su[1594395]: pam_unix(su:session): session closed for user root Dec 15 02:06:20 ispc su[1594399]: Successful su for root by root Dec 15 02:06:20 ispc su[1594399]: + ??? root:root Dec 15 02:06:20 ispc su[1594399]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:07:01 ispc CRON[1594408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:07:02 ispc CRON[1594408]: pam_unix(cron:session): session closed for user root Dec 15 02:07:41 ispc postfix/smtpd[1594431]: sql auxprop plugin using mysql engine Dec 15 02:07:54 ispc sshd[1594434]: Invalid user lanovacentra from 36.134.126.74 Dec 15 02:08:01 ispc CRON[1594444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:08:02 ispc CRON[1594444]: pam_unix(cron:session): session closed for user root Dec 15 02:08:26 ispc postfix/smtpd[1594457]: sql auxprop plugin using mysql engine Dec 15 02:08:57 ispc saslauthd[1594468]: pam_mysql - SELECT returned no result. Dec 15 02:08:57 ispc saslauthd[1594468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:08:57 ispc saslauthd[1594468]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:09:01 ispc CRON[1594469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:09:01 ispc CRON[1594470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:09:01 ispc CRON[1594469]: pam_unix(cron:session): session closed for user root Dec 15 02:09:02 ispc CRON[1594470]: pam_unix(cron:session): session closed for user root Dec 15 02:09:12 ispc su[1594399]: pam_unix(su:session): session closed for user root Dec 15 02:09:12 ispc su[1594497]: Successful su for root by root Dec 15 02:09:12 ispc su[1594497]: + ??? root:root Dec 15 02:09:12 ispc su[1594497]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:09:12 ispc su[1594497]: pam_unix(su:session): session closed for user root Dec 15 02:09:12 ispc su[1594500]: Successful su for root by root Dec 15 02:09:12 ispc su[1594500]: + ??? root:root Dec 15 02:09:12 ispc su[1594500]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:10:00 ispc sshd[1594513]: Invalid user klape from 2.57.217.229 Dec 15 02:10:00 ispc sshd[1594515]: Invalid user ubuntu from 2.57.217.229 Dec 15 02:10:01 ispc CRON[1594517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:10:01 ispc CRON[1594518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:10:01 ispc CRON[1594519]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:10:01 ispc CRON[1594520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:10:01 ispc CRON[1594521]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:10:01 ispc CRON[1594518]: pam_unix(cron:session): session closed for user root Dec 15 02:10:01 ispc CRON[1594519]: pam_unix(cron:session): session closed for user www-data Dec 15 02:10:01 ispc CRON[1594521]: pam_unix(cron:session): session closed for user getmail Dec 15 02:10:02 ispc CRON[1594517]: pam_unix(cron:session): session closed for user root Dec 15 02:10:42 ispc CRON[1594520]: pam_unix(cron:session): session closed for user root Dec 15 02:10:49 ispc su[1594500]: pam_unix(su:session): session closed for user root Dec 15 02:10:49 ispc su[1594634]: Successful su for root by root Dec 15 02:10:49 ispc su[1594634]: + ??? root:root Dec 15 02:10:49 ispc su[1594634]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:10:49 ispc su[1594634]: pam_unix(su:session): session closed for user root Dec 15 02:10:49 ispc su[1594638]: Successful su for root by root Dec 15 02:10:49 ispc su[1594638]: + ??? root:root Dec 15 02:10:49 ispc su[1594638]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:10:51 ispc su[1594638]: pam_unix(su:session): session closed for user root Dec 15 02:10:51 ispc su[1594644]: Successful su for root by root Dec 15 02:10:51 ispc su[1594644]: + ??? root:root Dec 15 02:10:51 ispc su[1594644]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:10:51 ispc su[1594644]: pam_unix(su:session): session closed for user root Dec 15 02:10:51 ispc su[1594647]: Successful su for root by root Dec 15 02:10:51 ispc su[1594647]: + ??? root:root Dec 15 02:10:51 ispc su[1594647]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:01 ispc CRON[1594653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:11:04 ispc su[1594647]: pam_unix(su:session): session closed for user root Dec 15 02:11:04 ispc su[1594668]: Successful su for root by root Dec 15 02:11:04 ispc su[1594668]: + ??? root:root Dec 15 02:11:04 ispc su[1594668]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:04 ispc su[1594668]: pam_unix(su:session): session closed for user root Dec 15 02:11:04 ispc su[1594671]: Successful su for root by root Dec 15 02:11:04 ispc su[1594671]: + ??? root:root Dec 15 02:11:04 ispc su[1594671]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:07 ispc su[1594671]: pam_unix(su:session): session closed for user root Dec 15 02:11:07 ispc su[1594677]: Successful su for root by root Dec 15 02:11:07 ispc su[1594677]: + ??? root:root Dec 15 02:11:07 ispc su[1594677]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:07 ispc su[1594677]: pam_unix(su:session): session closed for user root Dec 15 02:11:07 ispc su[1594680]: Successful su for root by root Dec 15 02:11:07 ispc su[1594680]: + ??? root:root Dec 15 02:11:07 ispc su[1594680]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:09 ispc su[1594680]: pam_unix(su:session): session closed for user root Dec 15 02:11:09 ispc su[1594686]: Successful su for root by root Dec 15 02:11:09 ispc su[1594686]: + ??? root:root Dec 15 02:11:09 ispc su[1594686]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:09 ispc su[1594686]: pam_unix(su:session): session closed for user root Dec 15 02:11:09 ispc su[1594689]: Successful su for root by root Dec 15 02:11:09 ispc su[1594689]: + ??? root:root Dec 15 02:11:09 ispc su[1594689]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:13 ispc su[1594689]: pam_unix(su:session): session closed for user root Dec 15 02:11:13 ispc su[1594699]: Successful su for root by root Dec 15 02:11:13 ispc su[1594699]: + ??? root:root Dec 15 02:11:13 ispc su[1594699]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:13 ispc su[1594699]: pam_unix(su:session): session closed for user root Dec 15 02:11:13 ispc su[1594702]: Successful su for root by root Dec 15 02:11:13 ispc su[1594702]: + ??? root:root Dec 15 02:11:13 ispc su[1594702]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:14 ispc su[1594702]: pam_unix(su:session): session closed for user root Dec 15 02:11:14 ispc su[1594708]: Successful su for root by root Dec 15 02:11:14 ispc su[1594708]: + ??? root:root Dec 15 02:11:14 ispc su[1594708]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:14 ispc su[1594708]: pam_unix(su:session): session closed for user root Dec 15 02:11:14 ispc su[1594711]: Successful su for root by root Dec 15 02:11:14 ispc su[1594711]: + ??? root:root Dec 15 02:11:14 ispc su[1594711]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:15 ispc su[1594711]: pam_unix(su:session): session closed for user root Dec 15 02:11:15 ispc su[1594717]: Successful su for root by root Dec 15 02:11:15 ispc su[1594717]: + ??? root:root Dec 15 02:11:15 ispc su[1594717]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:15 ispc su[1594717]: pam_unix(su:session): session closed for user root Dec 15 02:11:15 ispc su[1594720]: Successful su for root by root Dec 15 02:11:15 ispc su[1594720]: + ??? root:root Dec 15 02:11:15 ispc su[1594720]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:16 ispc su[1594720]: pam_unix(su:session): session closed for user root Dec 15 02:11:16 ispc su[1594726]: Successful su for root by root Dec 15 02:11:16 ispc su[1594726]: + ??? root:root Dec 15 02:11:16 ispc su[1594726]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:16 ispc su[1594726]: pam_unix(su:session): session closed for user root Dec 15 02:11:16 ispc su[1594729]: Successful su for root by root Dec 15 02:11:16 ispc su[1594729]: + ??? root:root Dec 15 02:11:16 ispc su[1594729]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:19 ispc saslauthd[1594733]: pam_mysql - SELECT returned no result. Dec 15 02:11:19 ispc saslauthd[1594733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:11:19 ispc saslauthd[1594733]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:11:21 ispc su[1594729]: pam_unix(su:session): session closed for user root Dec 15 02:11:21 ispc su[1594736]: Successful su for root by root Dec 15 02:11:21 ispc su[1594736]: + ??? root:root Dec 15 02:11:21 ispc su[1594736]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:21 ispc su[1594736]: pam_unix(su:session): session closed for user root Dec 15 02:11:21 ispc su[1594739]: Successful su for root by root Dec 15 02:11:21 ispc su[1594739]: + ??? root:root Dec 15 02:11:21 ispc su[1594739]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:22 ispc su[1594739]: pam_unix(su:session): session closed for user root Dec 15 02:11:22 ispc su[1594745]: Successful su for root by root Dec 15 02:11:22 ispc su[1594745]: + ??? root:root Dec 15 02:11:22 ispc su[1594745]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:22 ispc su[1594745]: pam_unix(su:session): session closed for user root Dec 15 02:11:22 ispc su[1594748]: Successful su for root by root Dec 15 02:11:22 ispc su[1594748]: + ??? root:root Dec 15 02:11:22 ispc su[1594748]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:26 ispc su[1594748]: pam_unix(su:session): session closed for user root Dec 15 02:11:26 ispc su[1594758]: Successful su for root by root Dec 15 02:11:26 ispc su[1594758]: + ??? root:root Dec 15 02:11:26 ispc su[1594758]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:26 ispc su[1594758]: pam_unix(su:session): session closed for user root Dec 15 02:11:26 ispc su[1594761]: Successful su for root by root Dec 15 02:11:26 ispc su[1594761]: + ??? root:root Dec 15 02:11:26 ispc su[1594761]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:26 ispc su[1594761]: pam_unix(su:session): session closed for user root Dec 15 02:11:26 ispc su[1594767]: Successful su for root by root Dec 15 02:11:26 ispc su[1594767]: + ??? root:root Dec 15 02:11:26 ispc su[1594767]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:26 ispc su[1594767]: pam_unix(su:session): session closed for user root Dec 15 02:11:26 ispc su[1594770]: Successful su for root by root Dec 15 02:11:26 ispc su[1594770]: + ??? root:root Dec 15 02:11:26 ispc su[1594770]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:29 ispc su[1594770]: pam_unix(su:session): session closed for user root Dec 15 02:11:29 ispc su[1594776]: Successful su for root by root Dec 15 02:11:29 ispc su[1594776]: + ??? root:root Dec 15 02:11:29 ispc su[1594776]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:29 ispc su[1594776]: pam_unix(su:session): session closed for user root Dec 15 02:11:29 ispc su[1594779]: Successful su for root by root Dec 15 02:11:29 ispc su[1594779]: + ??? root:root Dec 15 02:11:29 ispc su[1594779]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:29 ispc su[1594779]: pam_unix(su:session): session closed for user root Dec 15 02:11:29 ispc su[1594786]: Successful su for root by root Dec 15 02:11:29 ispc su[1594786]: + ??? root:root Dec 15 02:11:29 ispc su[1594786]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:30 ispc su[1594786]: pam_unix(su:session): session closed for user root Dec 15 02:11:30 ispc su[1594789]: Successful su for root by root Dec 15 02:11:30 ispc su[1594789]: + ??? root:root Dec 15 02:11:30 ispc su[1594789]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:44 ispc postfix/smtpd[1594804]: sql auxprop plugin using mysql engine Dec 15 02:11:44 ispc saslauthd[1594806]: pam_mysql - SELECT returned no result. Dec 15 02:11:44 ispc saslauthd[1594806]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:11:44 ispc saslauthd[1594806]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:11:44 ispc saslauthd[1594807]: pam_mysql - SELECT returned no result. Dec 15 02:11:44 ispc saslauthd[1594807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:11:44 ispc saslauthd[1594807]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:11:48 ispc su[1594789]: pam_unix(su:session): session closed for user root Dec 15 02:11:48 ispc su[1594810]: Successful su for root by root Dec 15 02:11:48 ispc su[1594810]: + ??? root:root Dec 15 02:11:48 ispc su[1594810]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:48 ispc su[1594810]: pam_unix(su:session): session closed for user root Dec 15 02:11:48 ispc su[1594813]: Successful su for root by root Dec 15 02:11:48 ispc su[1594813]: + ??? root:root Dec 15 02:11:48 ispc su[1594813]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:11:51 ispc saslauthd[1594817]: pam_mysql - SELECT returned no result. Dec 15 02:11:51 ispc saslauthd[1594817]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:11:51 ispc saslauthd[1594817]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:12:01 ispc CRON[1594825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:12:02 ispc CRON[1594825]: pam_unix(cron:session): session closed for user root Dec 15 02:12:34 ispc saslauthd[1594855]: pam_mysql - SELECT returned no result. Dec 15 02:12:34 ispc saslauthd[1594855]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:12:34 ispc saslauthd[1594855]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:12:37 ispc saslauthd[1594857]: pam_mysql - SELECT returned no result. Dec 15 02:12:37 ispc saslauthd[1594857]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:12:37 ispc saslauthd[1594857]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:13:01 ispc CRON[1594879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:13:01 ispc CRON[1594879]: pam_unix(cron:session): session closed for user root Dec 15 02:13:19 ispc saslauthd[1594900]: pam_mysql - SELECT returned no result. Dec 15 02:13:19 ispc saslauthd[1594900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:13:19 ispc saslauthd[1594900]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:14:01 ispc CRON[1594924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:14:02 ispc CRON[1594924]: pam_unix(cron:session): session closed for user root Dec 15 02:14:26 ispc su[1594813]: pam_unix(su:session): session closed for user root Dec 15 02:14:26 ispc su[1594953]: Successful su for root by root Dec 15 02:14:26 ispc su[1594953]: + ??? root:root Dec 15 02:14:26 ispc su[1594953]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:26 ispc su[1594953]: pam_unix(su:session): session closed for user root Dec 15 02:14:26 ispc su[1594956]: Successful su for root by root Dec 15 02:14:26 ispc su[1594956]: + ??? root:root Dec 15 02:14:26 ispc su[1594956]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:27 ispc su[1594956]: pam_unix(su:session): session closed for user root Dec 15 02:14:27 ispc su[1594962]: Successful su for root by root Dec 15 02:14:27 ispc su[1594962]: + ??? root:root Dec 15 02:14:27 ispc su[1594962]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:27 ispc su[1594962]: pam_unix(su:session): session closed for user root Dec 15 02:14:27 ispc su[1594965]: Successful su for root by root Dec 15 02:14:27 ispc su[1594965]: + ??? root:root Dec 15 02:14:27 ispc su[1594965]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:35 ispc su[1594965]: pam_unix(su:session): session closed for user root Dec 15 02:14:35 ispc su[1594975]: Successful su for root by root Dec 15 02:14:35 ispc su[1594975]: + ??? root:root Dec 15 02:14:35 ispc su[1594975]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:35 ispc su[1594975]: pam_unix(su:session): session closed for user root Dec 15 02:14:35 ispc su[1594978]: Successful su for root by root Dec 15 02:14:35 ispc su[1594978]: + ??? root:root Dec 15 02:14:35 ispc su[1594978]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:36 ispc su[1594978]: pam_unix(su:session): session closed for user root Dec 15 02:14:36 ispc su[1594984]: Successful su for root by root Dec 15 02:14:36 ispc su[1594984]: + ??? root:root Dec 15 02:14:36 ispc su[1594984]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:36 ispc su[1594984]: pam_unix(su:session): session closed for user root Dec 15 02:14:36 ispc su[1594987]: Successful su for root by root Dec 15 02:14:36 ispc su[1594987]: + ??? root:root Dec 15 02:14:36 ispc su[1594987]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:37 ispc su[1594987]: pam_unix(su:session): session closed for user root Dec 15 02:14:37 ispc su[1594993]: Successful su for root by root Dec 15 02:14:37 ispc su[1594993]: + ??? root:root Dec 15 02:14:37 ispc su[1594993]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:37 ispc su[1594993]: pam_unix(su:session): session closed for user root Dec 15 02:14:37 ispc su[1594996]: Successful su for root by root Dec 15 02:14:37 ispc su[1594996]: + ??? root:root Dec 15 02:14:37 ispc su[1594996]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:37 ispc su[1594996]: pam_unix(su:session): session closed for user root Dec 15 02:14:37 ispc su[1595002]: Successful su for root by root Dec 15 02:14:37 ispc su[1595002]: + ??? root:root Dec 15 02:14:37 ispc su[1595002]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:37 ispc su[1595002]: pam_unix(su:session): session closed for user root Dec 15 02:14:37 ispc su[1595005]: Successful su for root by root Dec 15 02:14:37 ispc su[1595005]: + ??? root:root Dec 15 02:14:37 ispc su[1595005]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:41 ispc su[1595005]: pam_unix(su:session): session closed for user root Dec 15 02:14:41 ispc su[1595013]: Successful su for root by root Dec 15 02:14:41 ispc su[1595013]: + ??? root:root Dec 15 02:14:41 ispc su[1595013]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:41 ispc su[1595013]: pam_unix(su:session): session closed for user root Dec 15 02:14:41 ispc su[1595016]: Successful su for root by root Dec 15 02:14:41 ispc su[1595016]: + ??? root:root Dec 15 02:14:41 ispc su[1595016]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:42 ispc su[1595016]: pam_unix(su:session): session closed for user root Dec 15 02:14:42 ispc su[1595022]: Successful su for root by root Dec 15 02:14:42 ispc su[1595022]: + ??? root:root Dec 15 02:14:42 ispc su[1595022]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:42 ispc su[1595022]: pam_unix(su:session): session closed for user root Dec 15 02:14:42 ispc su[1595025]: Successful su for root by root Dec 15 02:14:42 ispc su[1595025]: + ??? root:root Dec 15 02:14:42 ispc su[1595025]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:49 ispc saslauthd[1595033]: pam_mysql - SELECT returned no result. Dec 15 02:14:49 ispc saslauthd[1595033]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:14:49 ispc saslauthd[1595033]: do_auth : auth failure: [user=sysadm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:14:51 ispc su[1595025]: pam_unix(su:session): session closed for user root Dec 15 02:14:51 ispc su[1595036]: Successful su for root by root Dec 15 02:14:51 ispc su[1595036]: + ??? root:root Dec 15 02:14:51 ispc su[1595036]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:51 ispc su[1595036]: pam_unix(su:session): session closed for user root Dec 15 02:14:51 ispc su[1595039]: Successful su for root by root Dec 15 02:14:51 ispc su[1595039]: + ??? root:root Dec 15 02:14:51 ispc su[1595039]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:51 ispc su[1595039]: pam_unix(su:session): session closed for user root Dec 15 02:14:51 ispc su[1595045]: Successful su for root by root Dec 15 02:14:51 ispc su[1595045]: + ??? root:root Dec 15 02:14:51 ispc su[1595045]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:51 ispc su[1595045]: pam_unix(su:session): session closed for user root Dec 15 02:14:51 ispc su[1595048]: Successful su for root by root Dec 15 02:14:51 ispc su[1595048]: + ??? root:root Dec 15 02:14:51 ispc su[1595048]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:54 ispc su[1595048]: pam_unix(su:session): session closed for user root Dec 15 02:14:54 ispc su[1595054]: Successful su for root by root Dec 15 02:14:54 ispc su[1595054]: + ??? root:root Dec 15 02:14:54 ispc su[1595054]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:54 ispc su[1595054]: pam_unix(su:session): session closed for user root Dec 15 02:14:54 ispc su[1595057]: Successful su for root by root Dec 15 02:14:54 ispc su[1595057]: + ??? root:root Dec 15 02:14:54 ispc su[1595057]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:55 ispc su[1595057]: pam_unix(su:session): session closed for user root Dec 15 02:14:55 ispc su[1595067]: Successful su for root by root Dec 15 02:14:55 ispc su[1595067]: + ??? root:root Dec 15 02:14:55 ispc su[1595067]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:14:55 ispc su[1595067]: pam_unix(su:session): session closed for user root Dec 15 02:14:55 ispc su[1595070]: Successful su for root by root Dec 15 02:14:55 ispc su[1595070]: + ??? root:root Dec 15 02:14:55 ispc su[1595070]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:00 ispc su[1595070]: pam_unix(su:session): session closed for user root Dec 15 02:15:00 ispc su[1595078]: Successful su for root by root Dec 15 02:15:00 ispc su[1595078]: + ??? root:root Dec 15 02:15:00 ispc su[1595078]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:00 ispc su[1595078]: pam_unix(su:session): session closed for user root Dec 15 02:15:00 ispc su[1595081]: Successful su for root by root Dec 15 02:15:00 ispc su[1595081]: + ??? root:root Dec 15 02:15:00 ispc su[1595081]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:01 ispc CRON[1595085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:15:01 ispc CRON[1595086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:15:01 ispc CRON[1595087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:15:01 ispc CRON[1595088]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:15:01 ispc CRON[1595086]: pam_unix(cron:session): session closed for user root Dec 15 02:15:01 ispc CRON[1595088]: pam_unix(cron:session): session closed for user getmail Dec 15 02:15:01 ispc CRON[1595087]: pam_unix(cron:session): session closed for user root Dec 15 02:15:01 ispc su[1595081]: pam_unix(su:session): session closed for user root Dec 15 02:15:01 ispc CRON[1595085]: pam_unix(cron:session): session closed for user root Dec 15 02:15:01 ispc su[1595163]: Successful su for root by root Dec 15 02:15:01 ispc su[1595163]: + ??? root:root Dec 15 02:15:01 ispc su[1595163]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:01 ispc su[1595163]: pam_unix(su:session): session closed for user root Dec 15 02:15:01 ispc su[1595166]: Successful su for root by root Dec 15 02:15:01 ispc su[1595166]: + ??? root:root Dec 15 02:15:01 ispc su[1595166]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:12 ispc su[1595166]: pam_unix(su:session): session closed for user root Dec 15 02:15:12 ispc su[1595178]: Successful su for root by root Dec 15 02:15:12 ispc su[1595178]: + ??? root:root Dec 15 02:15:12 ispc su[1595178]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:12 ispc su[1595178]: pam_unix(su:session): session closed for user root Dec 15 02:15:12 ispc su[1595181]: Successful su for root by root Dec 15 02:15:12 ispc su[1595181]: + ??? root:root Dec 15 02:15:12 ispc su[1595181]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:12 ispc su[1595181]: pam_unix(su:session): session closed for user root Dec 15 02:15:12 ispc su[1595187]: Successful su for root by root Dec 15 02:15:12 ispc su[1595187]: + ??? root:root Dec 15 02:15:12 ispc su[1595187]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:12 ispc su[1595187]: pam_unix(su:session): session closed for user root Dec 15 02:15:12 ispc su[1595190]: Successful su for root by root Dec 15 02:15:12 ispc su[1595190]: + ??? root:root Dec 15 02:15:12 ispc su[1595190]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:13 ispc su[1595190]: pam_unix(su:session): session closed for user root Dec 15 02:15:13 ispc su[1595196]: Successful su for root by root Dec 15 02:15:13 ispc su[1595196]: + ??? root:root Dec 15 02:15:13 ispc su[1595196]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:13 ispc su[1595196]: pam_unix(su:session): session closed for user root Dec 15 02:15:13 ispc su[1595199]: Successful su for root by root Dec 15 02:15:13 ispc su[1595199]: + ??? root:root Dec 15 02:15:13 ispc su[1595199]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:15 ispc su[1595199]: pam_unix(su:session): session closed for user root Dec 15 02:15:15 ispc su[1595209]: Successful su for root by root Dec 15 02:15:15 ispc su[1595209]: + ??? root:root Dec 15 02:15:15 ispc su[1595209]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:16 ispc su[1595209]: pam_unix(su:session): session closed for user root Dec 15 02:15:16 ispc su[1595212]: Successful su for root by root Dec 15 02:15:16 ispc su[1595212]: + ??? root:root Dec 15 02:15:16 ispc su[1595212]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:37 ispc su[1595212]: pam_unix(su:session): session closed for user root Dec 15 02:15:37 ispc su[1595228]: Successful su for root by root Dec 15 02:15:37 ispc su[1595228]: + ??? root:root Dec 15 02:15:37 ispc su[1595228]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:37 ispc su[1595228]: pam_unix(su:session): session closed for user root Dec 15 02:15:37 ispc su[1595231]: Successful su for root by root Dec 15 02:15:37 ispc su[1595231]: + ??? root:root Dec 15 02:15:37 ispc su[1595231]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:39 ispc su[1595231]: pam_unix(su:session): session closed for user root Dec 15 02:15:39 ispc su[1595237]: Successful su for root by root Dec 15 02:15:39 ispc su[1595237]: + ??? root:root Dec 15 02:15:39 ispc su[1595237]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:39 ispc su[1595237]: pam_unix(su:session): session closed for user root Dec 15 02:15:39 ispc su[1595240]: Successful su for root by root Dec 15 02:15:39 ispc su[1595240]: + ??? root:root Dec 15 02:15:39 ispc su[1595240]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:42 ispc su[1595240]: pam_unix(su:session): session closed for user root Dec 15 02:15:42 ispc su[1595247]: Successful su for root by root Dec 15 02:15:42 ispc su[1595247]: + ??? root:root Dec 15 02:15:42 ispc su[1595247]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:42 ispc su[1595247]: pam_unix(su:session): session closed for user root Dec 15 02:15:42 ispc su[1595250]: Successful su for root by root Dec 15 02:15:42 ispc su[1595250]: + ??? root:root Dec 15 02:15:42 ispc su[1595250]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:43 ispc su[1595250]: pam_unix(su:session): session closed for user root Dec 15 02:15:43 ispc su[1595256]: Successful su for root by root Dec 15 02:15:43 ispc su[1595256]: + ??? root:root Dec 15 02:15:43 ispc su[1595256]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:43 ispc su[1595256]: pam_unix(su:session): session closed for user root Dec 15 02:15:43 ispc su[1595259]: Successful su for root by root Dec 15 02:15:43 ispc su[1595259]: + ??? root:root Dec 15 02:15:43 ispc su[1595259]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:43 ispc su[1595259]: pam_unix(su:session): session closed for user root Dec 15 02:15:43 ispc su[1595265]: Successful su for root by root Dec 15 02:15:43 ispc su[1595265]: + ??? root:root Dec 15 02:15:43 ispc su[1595265]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:43 ispc su[1595265]: pam_unix(su:session): session closed for user root Dec 15 02:15:43 ispc su[1595268]: Successful su for root by root Dec 15 02:15:43 ispc su[1595268]: + ??? root:root Dec 15 02:15:43 ispc su[1595268]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:43 ispc su[1595268]: pam_unix(su:session): session closed for user root Dec 15 02:15:43 ispc su[1595274]: Successful su for root by root Dec 15 02:15:43 ispc su[1595274]: + ??? root:root Dec 15 02:15:44 ispc su[1595274]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:44 ispc su[1595274]: pam_unix(su:session): session closed for user root Dec 15 02:15:44 ispc su[1595277]: Successful su for root by root Dec 15 02:15:44 ispc su[1595277]: + ??? root:root Dec 15 02:15:44 ispc su[1595277]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:44 ispc su[1595277]: pam_unix(su:session): session closed for user root Dec 15 02:15:44 ispc su[1595283]: Successful su for root by root Dec 15 02:15:44 ispc su[1595283]: + ??? root:root Dec 15 02:15:44 ispc su[1595283]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:44 ispc su[1595283]: pam_unix(su:session): session closed for user root Dec 15 02:15:44 ispc su[1595286]: Successful su for root by root Dec 15 02:15:44 ispc su[1595286]: + ??? root:root Dec 15 02:15:44 ispc su[1595286]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:45 ispc su[1595286]: pam_unix(su:session): session closed for user root Dec 15 02:15:45 ispc su[1595292]: Successful su for root by root Dec 15 02:15:45 ispc su[1595292]: + ??? root:root Dec 15 02:15:45 ispc su[1595292]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:45 ispc su[1595292]: pam_unix(su:session): session closed for user root Dec 15 02:15:45 ispc su[1595295]: Successful su for root by root Dec 15 02:15:45 ispc su[1595295]: + ??? root:root Dec 15 02:15:45 ispc su[1595295]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:45 ispc su[1595295]: pam_unix(su:session): session closed for user root Dec 15 02:15:45 ispc su[1595305]: Successful su for root by root Dec 15 02:15:45 ispc su[1595305]: + ??? root:root Dec 15 02:15:45 ispc su[1595305]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:45 ispc su[1595305]: pam_unix(su:session): session closed for user root Dec 15 02:15:45 ispc su[1595308]: Successful su for root by root Dec 15 02:15:45 ispc su[1595308]: + ??? root:root Dec 15 02:15:45 ispc su[1595308]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:46 ispc su[1595308]: pam_unix(su:session): session closed for user root Dec 15 02:15:46 ispc su[1595314]: Successful su for root by root Dec 15 02:15:46 ispc su[1595314]: + ??? root:root Dec 15 02:15:46 ispc su[1595314]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:46 ispc su[1595314]: pam_unix(su:session): session closed for user root Dec 15 02:15:46 ispc su[1595317]: Successful su for root by root Dec 15 02:15:46 ispc su[1595317]: + ??? root:root Dec 15 02:15:46 ispc su[1595317]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:46 ispc su[1595317]: pam_unix(su:session): session closed for user root Dec 15 02:15:46 ispc su[1595323]: Successful su for root by root Dec 15 02:15:46 ispc su[1595323]: + ??? root:root Dec 15 02:15:46 ispc su[1595323]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:46 ispc su[1595323]: pam_unix(su:session): session closed for user root Dec 15 02:15:46 ispc su[1595326]: Successful su for root by root Dec 15 02:15:46 ispc su[1595326]: + ??? root:root Dec 15 02:15:46 ispc su[1595326]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:48 ispc su[1595326]: pam_unix(su:session): session closed for user root Dec 15 02:15:48 ispc su[1595332]: Successful su for root by root Dec 15 02:15:48 ispc su[1595332]: + ??? root:root Dec 15 02:15:48 ispc su[1595332]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:48 ispc su[1595332]: pam_unix(su:session): session closed for user root Dec 15 02:15:48 ispc su[1595335]: Successful su for root by root Dec 15 02:15:48 ispc su[1595335]: + ??? root:root Dec 15 02:15:48 ispc su[1595335]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:48 ispc su[1595335]: pam_unix(su:session): session closed for user root Dec 15 02:15:48 ispc su[1595341]: Successful su for root by root Dec 15 02:15:48 ispc su[1595341]: + ??? root:root Dec 15 02:15:48 ispc su[1595341]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:48 ispc su[1595341]: pam_unix(su:session): session closed for user root Dec 15 02:15:48 ispc su[1595344]: Successful su for root by root Dec 15 02:15:48 ispc su[1595344]: + ??? root:root Dec 15 02:15:48 ispc su[1595344]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:50 ispc su[1595344]: pam_unix(su:session): session closed for user root Dec 15 02:15:50 ispc su[1595350]: Successful su for root by root Dec 15 02:15:50 ispc su[1595350]: + ??? root:root Dec 15 02:15:50 ispc su[1595350]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:15:50 ispc su[1595350]: pam_unix(su:session): session closed for user root Dec 15 02:15:50 ispc su[1595353]: Successful su for root by root Dec 15 02:15:50 ispc su[1595353]: + ??? root:root Dec 15 02:15:50 ispc su[1595353]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:01 ispc CRON[1595363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:16:02 ispc CRON[1595363]: pam_unix(cron:session): session closed for user root Dec 15 02:16:08 ispc su[1595353]: pam_unix(su:session): session closed for user root Dec 15 02:16:08 ispc su[1595381]: Successful su for root by root Dec 15 02:16:08 ispc su[1595381]: + ??? root:root Dec 15 02:16:08 ispc su[1595381]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:08 ispc su[1595381]: pam_unix(su:session): session closed for user root Dec 15 02:16:08 ispc su[1595384]: Successful su for root by root Dec 15 02:16:08 ispc su[1595384]: + ??? root:root Dec 15 02:16:08 ispc su[1595384]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:11 ispc su[1595384]: pam_unix(su:session): session closed for user root Dec 15 02:16:11 ispc su[1595392]: Successful su for root by root Dec 15 02:16:11 ispc su[1595392]: + ??? root:root Dec 15 02:16:11 ispc su[1595392]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:12 ispc su[1595392]: pam_unix(su:session): session closed for user root Dec 15 02:16:12 ispc su[1595395]: Successful su for root by root Dec 15 02:16:12 ispc su[1595395]: + ??? root:root Dec 15 02:16:12 ispc su[1595395]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:14 ispc su[1595395]: pam_unix(su:session): session closed for user root Dec 15 02:16:14 ispc su[1595402]: Successful su for root by root Dec 15 02:16:14 ispc su[1595402]: + ??? root:root Dec 15 02:16:14 ispc su[1595402]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:14 ispc su[1595402]: pam_unix(su:session): session closed for user root Dec 15 02:16:14 ispc su[1595405]: Successful su for root by root Dec 15 02:16:14 ispc su[1595405]: + ??? root:root Dec 15 02:16:14 ispc su[1595405]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:14 ispc su[1595405]: pam_unix(su:session): session closed for user root Dec 15 02:16:14 ispc su[1595411]: Successful su for root by root Dec 15 02:16:14 ispc su[1595411]: + ??? root:root Dec 15 02:16:14 ispc su[1595411]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:14 ispc su[1595411]: pam_unix(su:session): session closed for user root Dec 15 02:16:14 ispc su[1595414]: Successful su for root by root Dec 15 02:16:14 ispc su[1595414]: + ??? root:root Dec 15 02:16:14 ispc su[1595414]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:19 ispc sshd[1595423]: Did not receive identification string from 115.190.83.12 Dec 15 02:16:22 ispc su[1595414]: pam_unix(su:session): session closed for user root Dec 15 02:16:22 ispc su[1595428]: Successful su for root by root Dec 15 02:16:22 ispc su[1595428]: + ??? root:root Dec 15 02:16:22 ispc su[1595428]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:22 ispc su[1595428]: pam_unix(su:session): session closed for user root Dec 15 02:16:22 ispc su[1595431]: Successful su for root by root Dec 15 02:16:22 ispc su[1595431]: + ??? root:root Dec 15 02:16:22 ispc su[1595431]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:24 ispc su[1595431]: pam_unix(su:session): session closed for user root Dec 15 02:16:24 ispc su[1595439]: Successful su for root by root Dec 15 02:16:24 ispc su[1595439]: + ??? root:root Dec 15 02:16:24 ispc su[1595439]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:24 ispc su[1595439]: pam_unix(su:session): session closed for user root Dec 15 02:16:24 ispc su[1595442]: Successful su for root by root Dec 15 02:16:24 ispc su[1595442]: + ??? root:root Dec 15 02:16:24 ispc su[1595442]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:24 ispc sshd[1595435]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 02:16:24 ispc sshd[1595435]: Invalid user blceu from 193.110.157.47 Dec 15 02:16:26 ispc su[1595442]: pam_unix(su:session): session closed for user root Dec 15 02:16:26 ispc su[1595448]: Successful su for root by root Dec 15 02:16:26 ispc su[1595448]: + ??? root:root Dec 15 02:16:26 ispc su[1595448]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:26 ispc su[1595448]: pam_unix(su:session): session closed for user root Dec 15 02:16:26 ispc su[1595451]: Successful su for root by root Dec 15 02:16:26 ispc su[1595451]: + ??? root:root Dec 15 02:16:26 ispc su[1595451]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:29 ispc su[1595451]: pam_unix(su:session): session closed for user root Dec 15 02:16:29 ispc su[1595461]: Successful su for root by root Dec 15 02:16:29 ispc su[1595461]: + ??? root:root Dec 15 02:16:29 ispc su[1595461]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:29 ispc su[1595461]: pam_unix(su:session): session closed for user root Dec 15 02:16:29 ispc su[1595464]: Successful su for root by root Dec 15 02:16:29 ispc su[1595464]: + ??? root:root Dec 15 02:16:29 ispc su[1595464]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:29 ispc su[1595464]: pam_unix(su:session): session closed for user root Dec 15 02:16:29 ispc su[1595470]: Successful su for root by root Dec 15 02:16:29 ispc su[1595470]: + ??? root:root Dec 15 02:16:29 ispc su[1595470]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:16:29 ispc su[1595470]: pam_unix(su:session): session closed for user root Dec 15 02:16:29 ispc su[1595473]: Successful su for root by root Dec 15 02:16:29 ispc su[1595473]: + ??? root:root Dec 15 02:16:29 ispc su[1595473]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:00 ispc su[1595473]: pam_unix(su:session): session closed for user root Dec 15 02:17:00 ispc su[1595495]: Successful su for root by root Dec 15 02:17:00 ispc su[1595495]: + ??? root:root Dec 15 02:17:00 ispc su[1595495]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:00 ispc su[1595495]: pam_unix(su:session): session closed for user root Dec 15 02:17:00 ispc su[1595498]: Successful su for root by root Dec 15 02:17:00 ispc su[1595498]: + ??? root:root Dec 15 02:17:00 ispc su[1595498]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:01 ispc CRON[1595502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:17:02 ispc CRON[1595502]: pam_unix(cron:session): session closed for user root Dec 15 02:17:21 ispc su[1595498]: pam_unix(su:session): session closed for user root Dec 15 02:17:21 ispc su[1595524]: Successful su for root by root Dec 15 02:17:21 ispc su[1595524]: + ??? root:root Dec 15 02:17:21 ispc su[1595524]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:21 ispc su[1595524]: pam_unix(su:session): session closed for user root Dec 15 02:17:21 ispc su[1595527]: Successful su for root by root Dec 15 02:17:21 ispc su[1595527]: + ??? root:root Dec 15 02:17:21 ispc su[1595527]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:23 ispc su[1595527]: pam_unix(su:session): session closed for user root Dec 15 02:17:23 ispc su[1595533]: Successful su for root by root Dec 15 02:17:23 ispc su[1595533]: + ??? root:root Dec 15 02:17:23 ispc su[1595533]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:23 ispc su[1595533]: pam_unix(su:session): session closed for user root Dec 15 02:17:23 ispc su[1595536]: Successful su for root by root Dec 15 02:17:23 ispc su[1595536]: + ??? root:root Dec 15 02:17:23 ispc su[1595536]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:24 ispc su[1595536]: pam_unix(su:session): session closed for user root Dec 15 02:17:24 ispc su[1595542]: Successful su for root by root Dec 15 02:17:24 ispc su[1595542]: + ??? root:root Dec 15 02:17:24 ispc su[1595542]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:24 ispc su[1595542]: pam_unix(su:session): session closed for user root Dec 15 02:17:24 ispc su[1595545]: Successful su for root by root Dec 15 02:17:24 ispc su[1595545]: + ??? root:root Dec 15 02:17:24 ispc su[1595545]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:25 ispc su[1595545]: pam_unix(su:session): session closed for user root Dec 15 02:17:25 ispc su[1595551]: Successful su for root by root Dec 15 02:17:25 ispc su[1595551]: + ??? root:root Dec 15 02:17:25 ispc su[1595551]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:25 ispc su[1595551]: pam_unix(su:session): session closed for user root Dec 15 02:17:25 ispc su[1595554]: Successful su for root by root Dec 15 02:17:25 ispc su[1595554]: + ??? root:root Dec 15 02:17:25 ispc su[1595554]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:30 ispc su[1595554]: pam_unix(su:session): session closed for user root Dec 15 02:17:31 ispc su[1595564]: Successful su for root by root Dec 15 02:17:31 ispc su[1595564]: + ??? root:root Dec 15 02:17:31 ispc su[1595564]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:31 ispc su[1595564]: pam_unix(su:session): session closed for user root Dec 15 02:17:31 ispc su[1595567]: Successful su for root by root Dec 15 02:17:31 ispc su[1595567]: + ??? root:root Dec 15 02:17:31 ispc su[1595567]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:34 ispc su[1595567]: pam_unix(su:session): session closed for user root Dec 15 02:17:34 ispc su[1595573]: Successful su for root by root Dec 15 02:17:34 ispc su[1595573]: + ??? root:root Dec 15 02:17:34 ispc su[1595573]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:34 ispc su[1595573]: pam_unix(su:session): session closed for user root Dec 15 02:17:34 ispc su[1595576]: Successful su for root by root Dec 15 02:17:34 ispc su[1595576]: + ??? root:root Dec 15 02:17:34 ispc su[1595576]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:35 ispc su[1595576]: pam_unix(su:session): session closed for user root Dec 15 02:17:35 ispc su[1595584]: Successful su for root by root Dec 15 02:17:35 ispc su[1595584]: + ??? root:root Dec 15 02:17:35 ispc su[1595584]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:35 ispc su[1595584]: pam_unix(su:session): session closed for user root Dec 15 02:17:35 ispc su[1595587]: Successful su for root by root Dec 15 02:17:35 ispc su[1595587]: + ??? root:root Dec 15 02:17:35 ispc su[1595587]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:35 ispc su[1595587]: pam_unix(su:session): session closed for user root Dec 15 02:17:35 ispc su[1595595]: Successful su for root by root Dec 15 02:17:35 ispc su[1595595]: + ??? root:root Dec 15 02:17:35 ispc su[1595595]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:35 ispc su[1595595]: pam_unix(su:session): session closed for user root Dec 15 02:17:35 ispc su[1595598]: Successful su for root by root Dec 15 02:17:35 ispc su[1595598]: + ??? root:root Dec 15 02:17:35 ispc su[1595598]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:36 ispc su[1595598]: pam_unix(su:session): session closed for user root Dec 15 02:17:36 ispc su[1595604]: Successful su for root by root Dec 15 02:17:36 ispc su[1595604]: + ??? root:root Dec 15 02:17:36 ispc su[1595604]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:36 ispc su[1595604]: pam_unix(su:session): session closed for user root Dec 15 02:17:36 ispc su[1595607]: Successful su for root by root Dec 15 02:17:36 ispc su[1595607]: + ??? root:root Dec 15 02:17:36 ispc su[1595607]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:39 ispc su[1595607]: pam_unix(su:session): session closed for user root Dec 15 02:17:39 ispc su[1595621]: Successful su for root by root Dec 15 02:17:39 ispc su[1595621]: + ??? root:root Dec 15 02:17:39 ispc su[1595621]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:39 ispc su[1595621]: pam_unix(su:session): session closed for user root Dec 15 02:17:39 ispc su[1595624]: Successful su for root by root Dec 15 02:17:39 ispc su[1595624]: + ??? root:root Dec 15 02:17:39 ispc su[1595624]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:39 ispc su[1595624]: pam_unix(su:session): session closed for user root Dec 15 02:17:39 ispc su[1595630]: Successful su for root by root Dec 15 02:17:39 ispc su[1595630]: + ??? root:root Dec 15 02:17:39 ispc su[1595630]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:40 ispc su[1595630]: pam_unix(su:session): session closed for user root Dec 15 02:17:40 ispc su[1595633]: Successful su for root by root Dec 15 02:17:40 ispc su[1595633]: + ??? root:root Dec 15 02:17:40 ispc su[1595633]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:45 ispc su[1595633]: pam_unix(su:session): session closed for user root Dec 15 02:17:45 ispc su[1595639]: Successful su for root by root Dec 15 02:17:45 ispc su[1595639]: + ??? root:root Dec 15 02:17:45 ispc su[1595639]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:45 ispc su[1595639]: pam_unix(su:session): session closed for user root Dec 15 02:17:45 ispc su[1595642]: Successful su for root by root Dec 15 02:17:45 ispc su[1595642]: + ??? root:root Dec 15 02:17:45 ispc su[1595642]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:50 ispc su[1595642]: pam_unix(su:session): session closed for user root Dec 15 02:17:50 ispc su[1595656]: Successful su for root by root Dec 15 02:17:50 ispc su[1595656]: + ??? root:root Dec 15 02:17:50 ispc su[1595656]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:17:51 ispc su[1595656]: pam_unix(su:session): session closed for user root Dec 15 02:17:51 ispc su[1595660]: Successful su for root by root Dec 15 02:17:51 ispc su[1595660]: + ??? root:root Dec 15 02:17:51 ispc su[1595660]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:01 ispc CRON[1595669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:18:01 ispc CRON[1595669]: pam_unix(cron:session): session closed for user root Dec 15 02:18:01 ispc su[1595660]: pam_unix(su:session): session closed for user root Dec 15 02:18:01 ispc su[1595682]: Successful su for root by root Dec 15 02:18:01 ispc su[1595682]: + ??? root:root Dec 15 02:18:01 ispc su[1595682]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:01 ispc su[1595682]: pam_unix(su:session): session closed for user root Dec 15 02:18:02 ispc su[1595685]: Successful su for root by root Dec 15 02:18:02 ispc su[1595685]: + ??? root:root Dec 15 02:18:02 ispc su[1595685]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:04 ispc su[1595685]: pam_unix(su:session): session closed for user root Dec 15 02:18:04 ispc su[1595692]: Successful su for root by root Dec 15 02:18:04 ispc su[1595692]: + ??? root:root Dec 15 02:18:04 ispc su[1595692]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:04 ispc su[1595692]: pam_unix(su:session): session closed for user root Dec 15 02:18:04 ispc su[1595695]: Successful su for root by root Dec 15 02:18:04 ispc su[1595695]: + ??? root:root Dec 15 02:18:04 ispc su[1595695]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:09 ispc su[1595695]: pam_unix(su:session): session closed for user root Dec 15 02:18:09 ispc su[1595705]: Successful su for root by root Dec 15 02:18:09 ispc su[1595705]: + ??? root:root Dec 15 02:18:09 ispc su[1595705]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:09 ispc su[1595705]: pam_unix(su:session): session closed for user root Dec 15 02:18:09 ispc su[1595708]: Successful su for root by root Dec 15 02:18:09 ispc su[1595708]: + ??? root:root Dec 15 02:18:09 ispc su[1595708]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:09 ispc su[1595708]: pam_unix(su:session): session closed for user root Dec 15 02:18:09 ispc su[1595714]: Successful su for root by root Dec 15 02:18:09 ispc su[1595714]: + ??? root:root Dec 15 02:18:09 ispc su[1595714]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:09 ispc su[1595714]: pam_unix(su:session): session closed for user root Dec 15 02:18:09 ispc su[1595717]: Successful su for root by root Dec 15 02:18:09 ispc su[1595717]: + ??? root:root Dec 15 02:18:09 ispc su[1595717]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:10 ispc su[1595717]: pam_unix(su:session): session closed for user root Dec 15 02:18:10 ispc su[1595723]: Successful su for root by root Dec 15 02:18:10 ispc su[1595723]: + ??? root:root Dec 15 02:18:10 ispc su[1595723]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:10 ispc su[1595723]: pam_unix(su:session): session closed for user root Dec 15 02:18:10 ispc su[1595726]: Successful su for root by root Dec 15 02:18:10 ispc su[1595726]: + ??? root:root Dec 15 02:18:10 ispc su[1595726]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:10 ispc su[1595726]: pam_unix(su:session): session closed for user root Dec 15 02:18:10 ispc su[1595732]: Successful su for root by root Dec 15 02:18:10 ispc su[1595732]: + ??? root:root Dec 15 02:18:10 ispc su[1595732]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:10 ispc su[1595732]: pam_unix(su:session): session closed for user root Dec 15 02:18:10 ispc su[1595735]: Successful su for root by root Dec 15 02:18:10 ispc su[1595735]: + ??? root:root Dec 15 02:18:10 ispc su[1595735]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:24 ispc su[1595735]: pam_unix(su:session): session closed for user root Dec 15 02:18:24 ispc su[1595748]: Successful su for root by root Dec 15 02:18:24 ispc su[1595748]: + ??? root:root Dec 15 02:18:24 ispc su[1595748]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:24 ispc su[1595748]: pam_unix(su:session): session closed for user root Dec 15 02:18:24 ispc su[1595751]: Successful su for root by root Dec 15 02:18:24 ispc su[1595751]: + ??? root:root Dec 15 02:18:24 ispc su[1595751]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:24 ispc su[1595751]: pam_unix(su:session): session closed for user root Dec 15 02:18:24 ispc su[1595757]: Successful su for root by root Dec 15 02:18:24 ispc su[1595757]: + ??? root:root Dec 15 02:18:24 ispc su[1595757]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:24 ispc su[1595757]: pam_unix(su:session): session closed for user root Dec 15 02:18:24 ispc su[1595760]: Successful su for root by root Dec 15 02:18:24 ispc su[1595760]: + ??? root:root Dec 15 02:18:24 ispc su[1595760]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:27 ispc su[1595760]: pam_unix(su:session): session closed for user root Dec 15 02:18:27 ispc su[1595768]: Successful su for root by root Dec 15 02:18:27 ispc su[1595768]: + ??? root:root Dec 15 02:18:27 ispc su[1595768]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:27 ispc su[1595768]: pam_unix(su:session): session closed for user root Dec 15 02:18:27 ispc su[1595771]: Successful su for root by root Dec 15 02:18:27 ispc su[1595771]: + ??? root:root Dec 15 02:18:27 ispc su[1595771]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:27 ispc su[1595771]: pam_unix(su:session): session closed for user root Dec 15 02:18:27 ispc su[1595777]: Successful su for root by root Dec 15 02:18:27 ispc su[1595777]: + ??? root:root Dec 15 02:18:27 ispc su[1595777]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:27 ispc su[1595777]: pam_unix(su:session): session closed for user root Dec 15 02:18:27 ispc su[1595780]: Successful su for root by root Dec 15 02:18:27 ispc su[1595780]: + ??? root:root Dec 15 02:18:27 ispc su[1595780]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:30 ispc su[1595780]: pam_unix(su:session): session closed for user root Dec 15 02:18:30 ispc su[1595790]: Successful su for root by root Dec 15 02:18:30 ispc su[1595790]: + ??? root:root Dec 15 02:18:30 ispc su[1595790]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:30 ispc su[1595790]: pam_unix(su:session): session closed for user root Dec 15 02:18:30 ispc su[1595793]: Successful su for root by root Dec 15 02:18:30 ispc su[1595793]: + ??? root:root Dec 15 02:18:30 ispc su[1595793]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:35 ispc su[1595793]: pam_unix(su:session): session closed for user root Dec 15 02:18:35 ispc su[1595799]: Successful su for root by root Dec 15 02:18:35 ispc su[1595799]: + ??? root:root Dec 15 02:18:35 ispc su[1595799]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:36 ispc su[1595799]: pam_unix(su:session): session closed for user root Dec 15 02:18:36 ispc su[1595802]: Successful su for root by root Dec 15 02:18:36 ispc su[1595802]: + ??? root:root Dec 15 02:18:36 ispc su[1595802]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:42 ispc su[1595802]: pam_unix(su:session): session closed for user root Dec 15 02:18:44 ispc su[1595897]: Successful su for root by root Dec 15 02:18:44 ispc su[1595897]: + ??? root:root Dec 15 02:18:44 ispc su[1595897]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:18:49 ispc su[1595897]: pam_unix(su:session): session closed for user root Dec 15 02:18:49 ispc su[1595904]: Successful su for root by root Dec 15 02:18:49 ispc su[1595904]: + ??? root:root Dec 15 02:18:49 ispc su[1595904]: pam_unix(su:session): session opened for user root by (uid=0) Dec 15 02:19:01 ispc CRON[1595910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:19:01 ispc CRON[1595910]: pam_unix(cron:session): session closed for user root Dec 15 02:19:41 ispc sshd[1595942]: Did not receive identification string from 80.94.92.169 Dec 15 02:20:01 ispc CRON[1595957]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:20:01 ispc CRON[1595955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:20:01 ispc CRON[1595956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:20:01 ispc CRON[1595958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:20:02 ispc CRON[1595959]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:20:02 ispc CRON[1595957]: pam_unix(cron:session): session closed for user www-data Dec 15 02:20:02 ispc CRON[1595956]: pam_unix(cron:session): session closed for user root Dec 15 02:20:02 ispc CRON[1595959]: pam_unix(cron:session): session closed for user getmail Dec 15 02:20:02 ispc CRON[1595958]: pam_unix(cron:session): session closed for user root Dec 15 02:20:03 ispc CRON[1595955]: pam_unix(cron:session): session closed for user root Dec 15 02:20:13 ispc sshd[1596037]: Invalid user admin from 104.248.82.126 Dec 15 02:21:01 ispc CRON[1596060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:21:01 ispc CRON[1596061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:21:01 ispc CRON[1596060]: pam_unix(cron:session): session closed for user root Dec 15 02:21:01 ispc CRON[1596061]: pam_unix(cron:session): session closed for user root Dec 15 02:21:04 ispc sshd[1596078]: Invalid user admin from 104.248.82.126 Dec 15 02:21:36 ispc sshd[1596095]: Invalid user martof from 103.110.84.105 Dec 15 02:21:53 ispc sshd[1596107]: Invalid user admin from 104.248.82.126 Dec 15 02:22:01 ispc CRON[1596111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:22:02 ispc CRON[1596111]: pam_unix(cron:session): session closed for user root Dec 15 02:22:40 ispc sshd[1596149]: Invalid user admin from 104.248.82.126 Dec 15 02:23:01 ispc CRON[1596162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:23:02 ispc CRON[1596162]: pam_unix(cron:session): session closed for user root Dec 15 02:23:22 ispc postfix/smtpd[1596181]: sql auxprop plugin using mysql engine Dec 15 02:23:26 ispc sshd[1596188]: Invalid user admin from 104.248.82.126 Dec 15 02:24:01 ispc CRON[1596207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:24:03 ispc CRON[1596207]: pam_unix(cron:session): session closed for user root Dec 15 02:24:13 ispc sshd[1596222]: Invalid user admin from 104.248.82.126 Dec 15 02:25:01 ispc CRON[1596253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:25:01 ispc CRON[1596254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:25:01 ispc CRON[1596255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:25:01 ispc CRON[1596256]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:25:01 ispc CRON[1596254]: pam_unix(cron:session): session closed for user root Dec 15 02:25:01 ispc CRON[1596256]: pam_unix(cron:session): session closed for user getmail Dec 15 02:25:01 ispc CRON[1596255]: pam_unix(cron:session): session closed for user root Dec 15 02:25:02 ispc CRON[1596253]: pam_unix(cron:session): session closed for user root Dec 15 02:26:01 ispc CRON[1596360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:26:01 ispc CRON[1596360]: pam_unix(cron:session): session closed for user root Dec 15 02:26:16 ispc postfix/smtpd[1596375]: sql auxprop plugin using mysql engine Dec 15 02:26:17 ispc saslauthd[1596377]: pam_mysql - SELECT returned no result. Dec 15 02:26:17 ispc saslauthd[1596377]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:26:17 ispc saslauthd[1596377]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:26:18 ispc saslauthd[1596379]: pam_mysql - SELECT returned no result. Dec 15 02:26:18 ispc saslauthd[1596379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:26:18 ispc saslauthd[1596379]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:26:30 ispc saslauthd[1596389]: pam_mysql - SELECT returned no result. Dec 15 02:26:30 ispc saslauthd[1596389]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:26:30 ispc saslauthd[1596389]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:26:52 ispc saslauthd[1596402]: pam_mysql - SELECT returned no result. Dec 15 02:26:52 ispc saslauthd[1596402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:26:52 ispc saslauthd[1596402]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:26:52 ispc sshd[1596397]: Invalid user sol from 80.94.92.169 Dec 15 02:27:01 ispc postfix/smtpd[1596403]: sql auxprop plugin using mysql engine Dec 15 02:27:01 ispc saslauthd[1596409]: pam_mysql - SELECT returned no result. Dec 15 02:27:01 ispc saslauthd[1596409]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:01 ispc saslauthd[1596409]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:01 ispc saslauthd[1596410]: pam_mysql - SELECT returned no result. Dec 15 02:27:01 ispc saslauthd[1596410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:01 ispc saslauthd[1596410]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:01 ispc CRON[1596411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:27:02 ispc CRON[1596411]: pam_unix(cron:session): session closed for user root Dec 15 02:27:22 ispc saslauthd[1596434]: pam_mysql - SELECT returned no result. Dec 15 02:27:22 ispc saslauthd[1596434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:22 ispc saslauthd[1596434]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:23 ispc saslauthd[1596435]: pam_mysql - SELECT returned no result. Dec 15 02:27:23 ispc saslauthd[1596435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:23 ispc saslauthd[1596435]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:24 ispc saslauthd[1596437]: pam_mysql - SELECT returned no result. Dec 15 02:27:24 ispc saslauthd[1596437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:24 ispc saslauthd[1596437]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:30 ispc saslauthd[1596439]: pam_mysql - SELECT returned no result. Dec 15 02:27:30 ispc saslauthd[1596439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:30 ispc saslauthd[1596439]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:33 ispc saslauthd[1596444]: pam_mysql - SELECT returned no result. Dec 15 02:27:33 ispc saslauthd[1596444]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:33 ispc saslauthd[1596444]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:35 ispc saslauthd[1596445]: pam_mysql - SELECT returned no result. Dec 15 02:27:35 ispc saslauthd[1596445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:35 ispc saslauthd[1596445]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:27:36 ispc saslauthd[1596446]: pam_mysql - SELECT returned no result. Dec 15 02:27:36 ispc saslauthd[1596446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:27:36 ispc saslauthd[1596446]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:28:01 ispc CRON[1596465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:28:02 ispc CRON[1596465]: pam_unix(cron:session): session closed for user root Dec 15 02:28:05 ispc saslauthd[1596481]: pam_mysql - SELECT returned no result. Dec 15 02:28:05 ispc saslauthd[1596481]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:28:05 ispc saslauthd[1596481]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:29:01 ispc CRON[1596510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:29:02 ispc CRON[1596510]: pam_unix(cron:session): session closed for user root Dec 15 02:29:40 ispc saslauthd[1596540]: pam_mysql - SELECT returned no result. Dec 15 02:29:40 ispc saslauthd[1596540]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:29:40 ispc saslauthd[1596540]: do_auth : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:30:01 ispc CRON[1596551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:30:01 ispc CRON[1596552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:30:01 ispc CRON[1596553]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:30:01 ispc CRON[1596554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:30:01 ispc CRON[1596555]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:30:01 ispc CRON[1596553]: pam_unix(cron:session): session closed for user www-data Dec 15 02:30:01 ispc CRON[1596552]: pam_unix(cron:session): session closed for user root Dec 15 02:30:01 ispc CRON[1596555]: pam_unix(cron:session): session closed for user getmail Dec 15 02:30:01 ispc CRON[1596554]: pam_unix(cron:session): session closed for user root Dec 15 02:30:01 ispc CRON[1596551]: pam_unix(cron:session): session closed for user root Dec 15 02:30:15 ispc sshd[1596638]: Invalid user solana from 80.94.92.169 Dec 15 02:31:01 ispc CRON[1596667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:31:02 ispc CRON[1596667]: pam_unix(cron:session): session closed for user root Dec 15 02:31:04 ispc sshd[1596678]: Invalid user matlbula from 175.125.95.234 Dec 15 02:31:25 ispc postfix/smtpd[1596690]: sql auxprop plugin using mysql engine Dec 15 02:31:25 ispc CRON[1594653]: pam_unix(cron:session): session closed for user root Dec 15 02:31:36 ispc sshd[1596696]: Invalid user AdminGPON from 45.148.10.121 Dec 15 02:32:01 ispc CRON[1596700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:32:03 ispc CRON[1596700]: pam_unix(cron:session): session closed for user root Dec 15 02:33:01 ispc CRON[1596728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:33:01 ispc CRON[1596728]: pam_unix(cron:session): session closed for user root Dec 15 02:33:46 ispc sshd[1596742]: Invalid user solana from 80.94.92.169 Dec 15 02:34:01 ispc CRON[1596746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:34:02 ispc CRON[1596746]: pam_unix(cron:session): session closed for user root Dec 15 02:35:01 ispc CRON[1596765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:35:01 ispc CRON[1596766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:35:01 ispc CRON[1596767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:35:01 ispc CRON[1596768]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:35:01 ispc CRON[1596766]: pam_unix(cron:session): session closed for user root Dec 15 02:35:01 ispc CRON[1596768]: pam_unix(cron:session): session closed for user getmail Dec 15 02:35:02 ispc CRON[1596765]: pam_unix(cron:session): session closed for user root Dec 15 02:35:43 ispc CRON[1596767]: pam_unix(cron:session): session closed for user root Dec 15 02:36:01 ispc CRON[1596880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:36:08 ispc sshd[1596892]: Invalid user diamantdi from 51.159.18.215 Dec 15 02:37:01 ispc CRON[1596920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:37:02 ispc CRON[1596920]: pam_unix(cron:session): session closed for user root Dec 15 02:37:04 ispc sshd[1596937]: Invalid user klape from 187.190.35.163 Dec 15 02:37:05 ispc sshd[1596939]: Invalid user ubuntu from 187.190.35.163 Dec 15 02:37:14 ispc sshd[1596941]: Invalid user solana from 80.94.92.169 Dec 15 02:37:22 ispc postfix/smtpd[1596947]: sql auxprop plugin using mysql engine Dec 15 02:37:22 ispc saslauthd[1596950]: pam_mysql - SELECT returned no result. Dec 15 02:37:22 ispc saslauthd[1596950]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:37:22 ispc saslauthd[1596950]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:38:01 ispc CRON[1596978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:38:02 ispc CRON[1596978]: pam_unix(cron:session): session closed for user root Dec 15 02:39:01 ispc CRON[1597019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:39:01 ispc CRON[1597020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:39:01 ispc CRON[1597019]: pam_unix(cron:session): session closed for user root Dec 15 02:39:01 ispc CRON[1597020]: pam_unix(cron:session): session closed for user root Dec 15 02:40:01 ispc CRON[1597071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:40:01 ispc CRON[1597072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:40:01 ispc CRON[1597073]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:40:01 ispc CRON[1597074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:40:01 ispc CRON[1597075]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:40:01 ispc CRON[1597072]: pam_unix(cron:session): session closed for user root Dec 15 02:40:01 ispc CRON[1597073]: pam_unix(cron:session): session closed for user www-data Dec 15 02:40:01 ispc CRON[1597075]: pam_unix(cron:session): session closed for user getmail Dec 15 02:40:02 ispc CRON[1597074]: pam_unix(cron:session): session closed for user root Dec 15 02:40:02 ispc CRON[1597071]: pam_unix(cron:session): session closed for user root Dec 15 02:40:27 ispc sshd[1597159]: Invalid user sol from 80.94.92.169 Dec 15 02:41:02 ispc CRON[1597181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:41:03 ispc CRON[1597181]: pam_unix(cron:session): session closed for user root Dec 15 02:41:37 ispc postfix/smtpd[1597209]: sql auxprop plugin using mysql engine Dec 15 02:41:37 ispc saslauthd[1597212]: pam_mysql - SELECT returned no result. Dec 15 02:41:37 ispc saslauthd[1597212]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:41:37 ispc saslauthd[1597212]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:42:01 ispc CRON[1597227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:42:02 ispc CRON[1597227]: pam_unix(cron:session): session closed for user root Dec 15 02:42:30 ispc postfix/smtpd[1597253]: sql auxprop plugin using mysql engine Dec 15 02:43:01 ispc CRON[1597277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:43:02 ispc CRON[1597277]: pam_unix(cron:session): session closed for user root Dec 15 02:43:11 ispc sshd[1597294]: Invalid user admin from 167.71.71.157 Dec 15 02:43:49 ispc sshd[1597309]: Invalid user sol from 80.94.92.169 Dec 15 02:43:54 ispc sshd[1597321]: Invalid user admin from 167.71.71.157 Dec 15 02:44:01 ispc CRON[1597327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:44:01 ispc CRON[1597327]: pam_unix(cron:session): session closed for user root Dec 15 02:44:05 ispc sshd[1597338]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 02:44:05 ispc sshd[1597338]: Invalid user user from 2.57.121.25 Dec 15 02:44:23 ispc postfix/smtpd[1597348]: sql auxprop plugin using mysql engine Dec 15 02:44:24 ispc saslauthd[1597350]: pam_mysql - SELECT returned no result. Dec 15 02:44:24 ispc saslauthd[1597350]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:44:24 ispc saslauthd[1597350]: do_auth : auth failure: [user=sysbin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:44:37 ispc sshd[1597356]: Invalid user admin from 167.71.71.157 Dec 15 02:45:01 ispc CRON[1597374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:45:01 ispc CRON[1597375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:45:01 ispc CRON[1597376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:45:01 ispc CRON[1597377]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:45:01 ispc CRON[1597375]: pam_unix(cron:session): session closed for user root Dec 15 02:45:02 ispc CRON[1597377]: pam_unix(cron:session): session closed for user getmail Dec 15 02:45:02 ispc CRON[1597376]: pam_unix(cron:session): session closed for user root Dec 15 02:45:02 ispc CRON[1597374]: pam_unix(cron:session): session closed for user root Dec 15 02:45:14 ispc sshd[1597455]: Did not receive identification string from 179.124.39.90 Dec 15 02:45:15 ispc saslauthd[1597456]: pam_mysql - SELECT returned no result. Dec 15 02:45:15 ispc saslauthd[1597456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:45:15 ispc saslauthd[1597456]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:45:19 ispc sshd[1597457]: Invalid user admin from 167.71.71.157 Dec 15 02:45:25 ispc saslauthd[1597463]: pam_mysql - SELECT returned no result. Dec 15 02:45:25 ispc saslauthd[1597463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:45:25 ispc saslauthd[1597463]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:46:01 ispc CRON[1597482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:46:02 ispc CRON[1597482]: pam_unix(cron:session): session closed for user root Dec 15 02:46:03 ispc sshd[1597493]: Invalid user admin from 167.71.71.157 Dec 15 02:46:46 ispc sshd[1597511]: Invalid user admin from 167.71.71.157 Dec 15 02:46:48 ispc sshd[1597514]: Invalid user admin from 221.156.137.104 Dec 15 02:46:50 ispc sshd[1597524]: Invalid user klape from 51.77.222.24 Dec 15 02:46:51 ispc sshd[1597526]: Invalid user ubuntu from 51.77.222.24 Dec 15 02:47:01 ispc CRON[1597536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:47:02 ispc CRON[1597536]: pam_unix(cron:session): session closed for user root Dec 15 02:48:01 ispc CRON[1597583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:48:02 ispc CRON[1597583]: pam_unix(cron:session): session closed for user root Dec 15 02:48:03 ispc postfix/smtpd[1597598]: sql auxprop plugin using mysql engine Dec 15 02:48:04 ispc saslauthd[1597600]: pam_mysql - SELECT returned no result. Dec 15 02:48:04 ispc saslauthd[1597600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:48:04 ispc saslauthd[1597600]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:49:01 ispc CRON[1597624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:49:02 ispc CRON[1597624]: pam_unix(cron:session): session closed for user root Dec 15 02:50:01 ispc CRON[1597665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:50:01 ispc CRON[1597666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:50:01 ispc CRON[1597667]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 02:50:01 ispc CRON[1597668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:50:01 ispc CRON[1597669]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:50:01 ispc CRON[1597666]: pam_unix(cron:session): session closed for user root Dec 15 02:50:01 ispc CRON[1597667]: pam_unix(cron:session): session closed for user www-data Dec 15 02:50:01 ispc CRON[1597669]: pam_unix(cron:session): session closed for user getmail Dec 15 02:50:02 ispc CRON[1597668]: pam_unix(cron:session): session closed for user root Dec 15 02:50:02 ispc CRON[1597665]: pam_unix(cron:session): session closed for user root Dec 15 02:50:30 ispc sshd[1597755]: Invalid user blceu from 51.159.18.215 Dec 15 02:51:01 ispc CRON[1597769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:51:02 ispc CRON[1597769]: pam_unix(cron:session): session closed for user root Dec 15 02:51:18 ispc sshd[1597789]: Invalid user admin from 221.156.137.104 Dec 15 02:51:23 ispc postfix/smtpd[1597797]: sql auxprop plugin using mysql engine Dec 15 02:51:23 ispc postfix/smtpd[1597799]: sql auxprop plugin using mysql engine Dec 15 02:52:01 ispc CRON[1597822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:52:02 ispc CRON[1597822]: pam_unix(cron:session): session closed for user root Dec 15 02:53:01 ispc CRON[1597868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:53:02 ispc CRON[1597868]: pam_unix(cron:session): session closed for user root Dec 15 02:53:14 ispc postfix/smtpd[1597883]: sql auxprop plugin using mysql engine Dec 15 02:53:15 ispc saslauthd[1597885]: pam_mysql - SELECT returned no result. Dec 15 02:53:15 ispc saslauthd[1597885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:53:15 ispc saslauthd[1597885]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:53:33 ispc saslauthd[1597895]: pam_mysql - SELECT returned no result. Dec 15 02:53:33 ispc saslauthd[1597895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:53:33 ispc saslauthd[1597895]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:54:01 ispc CRON[1597914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:54:01 ispc CRON[1597914]: pam_unix(cron:session): session closed for user root Dec 15 02:54:14 ispc sshd[1597929]: Invalid user from 134.199.193.20 Dec 15 02:54:27 ispc saslauthd[1597940]: pam_mysql - SELECT returned no result. Dec 15 02:54:27 ispc saslauthd[1597940]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:54:27 ispc saslauthd[1597940]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:55:01 ispc CRON[1597955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:55:01 ispc CRON[1597956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:55:01 ispc CRON[1597957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:55:01 ispc CRON[1597958]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 02:55:01 ispc CRON[1597956]: pam_unix(cron:session): session closed for user root Dec 15 02:55:01 ispc CRON[1597958]: pam_unix(cron:session): session closed for user getmail Dec 15 02:55:02 ispc CRON[1597957]: pam_unix(cron:session): session closed for user root Dec 15 02:55:02 ispc CRON[1597955]: pam_unix(cron:session): session closed for user root Dec 15 02:55:06 ispc postfix/smtpd[1598031]: sql auxprop plugin using mysql engine Dec 15 02:56:01 ispc CRON[1598062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:56:02 ispc CRON[1598062]: pam_unix(cron:session): session closed for user root Dec 15 02:56:18 ispc postfix/smtpd[1598079]: sql auxprop plugin using mysql engine Dec 15 02:56:18 ispc CRON[1596880]: pam_unix(cron:session): session closed for user root Dec 15 02:56:45 ispc saslauthd[1598086]: pam_mysql - SELECT returned no result. Dec 15 02:56:45 ispc saslauthd[1598086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:56:45 ispc saslauthd[1598086]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:57:01 ispc CRON[1598088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:57:02 ispc CRON[1598088]: pam_unix(cron:session): session closed for user root Dec 15 02:57:17 ispc sshd[1598101]: Did not receive identification string from 45.140.17.97 Dec 15 02:57:42 ispc saslauthd[1598108]: pam_mysql - SELECT returned no result. Dec 15 02:57:42 ispc saslauthd[1598108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:57:42 ispc saslauthd[1598108]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:57:54 ispc postfix/smtpd[1598114]: sql auxprop plugin using mysql engine Dec 15 02:58:01 ispc CRON[1598117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:58:02 ispc CRON[1598117]: pam_unix(cron:session): session closed for user root Dec 15 02:58:38 ispc postfix/smtpd[1598131]: sql auxprop plugin using mysql engine Dec 15 02:58:43 ispc saslauthd[1598135]: pam_mysql - SELECT returned no result. Dec 15 02:58:43 ispc saslauthd[1598135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:58:43 ispc saslauthd[1598135]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 02:59:01 ispc CRON[1598137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 02:59:02 ispc CRON[1598137]: pam_unix(cron:session): session closed for user root Dec 15 02:59:14 ispc saslauthd[1598150]: pam_mysql - SELECT returned no result. Dec 15 02:59:14 ispc saslauthd[1598150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 02:59:14 ispc saslauthd[1598150]: do_auth : auth failure: [user=sysopr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:00:01 ispc CRON[1598154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:00:01 ispc CRON[1598155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:00:01 ispc CRON[1598156]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:00:01 ispc CRON[1598157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:00:01 ispc CRON[1598158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:00:01 ispc CRON[1598159]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:00:01 ispc CRON[1598156]: pam_unix(cron:session): session closed for user www-data Dec 15 03:00:01 ispc CRON[1598155]: pam_unix(cron:session): session closed for user root Dec 15 03:00:01 ispc CRON[1598159]: pam_unix(cron:session): session closed for user getmail Dec 15 03:00:02 ispc CRON[1598157]: pam_unix(cron:session): session closed for user root Dec 15 03:00:03 ispc CRON[1598154]: pam_unix(cron:session): session closed for user root Dec 15 03:01:01 ispc CRON[1598423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:01:02 ispc CRON[1598423]: pam_unix(cron:session): session closed for user root Dec 15 03:01:04 ispc CRON[1598158]: pam_unix(cron:session): session closed for user root Dec 15 03:02:01 ispc CRON[1598437]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 03:02:01 ispc CRON[1598438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:03:01 ispc CRON[1599294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:03:02 ispc CRON[1599294]: pam_unix(cron:session): session closed for user root Dec 15 03:03:36 ispc CRON[1598437]: pam_unix(cron:session): session closed for user logcheck Dec 15 03:04:00 ispc postfix/smtpd[1599546]: sql auxprop plugin using mysql engine Dec 15 03:04:01 ispc CRON[1599550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:04:02 ispc CRON[1599550]: pam_unix(cron:session): session closed for user root Dec 15 03:05:01 ispc CRON[1599588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:05:01 ispc CRON[1599589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:05:01 ispc CRON[1599590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:05:01 ispc CRON[1599591]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:05:01 ispc CRON[1599589]: pam_unix(cron:session): session closed for user root Dec 15 03:05:01 ispc CRON[1599591]: pam_unix(cron:session): session closed for user getmail Dec 15 03:05:01 ispc CRON[1599590]: pam_unix(cron:session): session closed for user root Dec 15 03:05:02 ispc CRON[1599588]: pam_unix(cron:session): session closed for user root Dec 15 03:05:05 ispc postfix/smtpd[1599664]: sql auxprop plugin using mysql engine Dec 15 03:05:05 ispc saslauthd[1599667]: pam_mysql - SELECT returned no result. Dec 15 03:05:05 ispc saslauthd[1599667]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:05:05 ispc saslauthd[1599667]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:05:07 ispc sshd[1599669]: Did not receive identification string from 112.103.253.145 Dec 15 03:05:15 ispc sshd[1599675]: Invalid user ubuntu from 115.190.171.196 Dec 15 03:06:01 ispc CRON[1599703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:06:02 ispc CRON[1599703]: pam_unix(cron:session): session closed for user root Dec 15 03:06:56 ispc sshd[1599739]: Invalid user blceu from 116.120.58.228 Dec 15 03:07:01 ispc CRON[1599745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:07:01 ispc CRON[1599745]: pam_unix(cron:session): session closed for user root Dec 15 03:07:23 ispc postfix/smtpd[1599766]: sql auxprop plugin using mysql engine Dec 15 03:07:23 ispc saslauthd[1599768]: pam_mysql - SELECT returned no result. Dec 15 03:07:23 ispc saslauthd[1599768]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:07:23 ispc saslauthd[1599768]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:07:50 ispc saslauthd[1599787]: pam_mysql - SELECT returned no result. Dec 15 03:07:50 ispc saslauthd[1599787]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:07:50 ispc saslauthd[1599787]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:07:54 ispc saslauthd[1599793]: pam_mysql - SELECT returned no result. Dec 15 03:07:54 ispc saslauthd[1599793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:07:54 ispc saslauthd[1599793]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:07:58 ispc sshd[1599794]: Invalid user messagebus from 45.148.10.121 Dec 15 03:08:01 ispc saslauthd[1599800]: pam_mysql - SELECT returned no result. Dec 15 03:08:01 ispc saslauthd[1599800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:08:01 ispc saslauthd[1599800]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:08:01 ispc CRON[1599801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:08:02 ispc CRON[1599801]: pam_unix(cron:session): session closed for user root Dec 15 03:08:15 ispc sshd[1599818]: Invalid user klape from 70.37.89.177 Dec 15 03:08:16 ispc sshd[1599820]: Invalid user ubuntu from 70.37.89.177 Dec 15 03:09:01 ispc CRON[1599843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:09:01 ispc CRON[1599844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:09:01 ispc CRON[1599843]: pam_unix(cron:session): session closed for user root Dec 15 03:09:02 ispc CRON[1599844]: pam_unix(cron:session): session closed for user root Dec 15 03:09:03 ispc saslauthd[1599869]: pam_mysql - SELECT returned no result. Dec 15 03:09:03 ispc saslauthd[1599869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:09:03 ispc saslauthd[1599869]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:09:06 ispc saslauthd[1599870]: pam_mysql - SELECT returned no result. Dec 15 03:09:06 ispc saslauthd[1599870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:09:06 ispc saslauthd[1599870]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:10:01 ispc CRON[1599893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:10:01 ispc CRON[1599894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:10:01 ispc CRON[1599895]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:10:01 ispc CRON[1599896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:10:01 ispc CRON[1599897]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:10:01 ispc CRON[1599895]: pam_unix(cron:session): session closed for user www-data Dec 15 03:10:01 ispc CRON[1599894]: pam_unix(cron:session): session closed for user root Dec 15 03:10:01 ispc CRON[1599897]: pam_unix(cron:session): session closed for user getmail Dec 15 03:10:01 ispc CRON[1599896]: pam_unix(cron:session): session closed for user root Dec 15 03:10:02 ispc CRON[1599893]: pam_unix(cron:session): session closed for user root Dec 15 03:10:29 ispc sshd[1599983]: Invalid user administrator from 62.60.131.157 Dec 15 03:11:01 ispc CRON[1600009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:11:02 ispc CRON[1600009]: pam_unix(cron:session): session closed for user root Dec 15 03:12:01 ispc CRON[1600050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:12:02 ispc CRON[1600050]: pam_unix(cron:session): session closed for user root Dec 15 03:13:01 ispc CRON[1600098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:13:02 ispc CRON[1600098]: pam_unix(cron:session): session closed for user root Dec 15 03:13:14 ispc postfix/smtpd[1600115]: sql auxprop plugin using mysql engine Dec 15 03:14:00 ispc postfix/smtpd[1600136]: sql auxprop plugin using mysql engine Dec 15 03:14:01 ispc saslauthd[1600138]: pam_mysql - SELECT returned no result. Dec 15 03:14:01 ispc saslauthd[1600138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:14:01 ispc saslauthd[1600138]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:14:01 ispc CRON[1600143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:14:02 ispc CRON[1600143]: pam_unix(cron:session): session closed for user root Dec 15 03:14:11 ispc postfix/smtpd[1600154]: sql auxprop plugin using mysql engine Dec 15 03:15:01 ispc CRON[1600179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:15:01 ispc CRON[1600180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:15:01 ispc CRON[1600181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:15:01 ispc CRON[1600182]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:15:01 ispc CRON[1600180]: pam_unix(cron:session): session closed for user root Dec 15 03:15:01 ispc CRON[1600182]: pam_unix(cron:session): session closed for user getmail Dec 15 03:15:02 ispc CRON[1600181]: pam_unix(cron:session): session closed for user root Dec 15 03:15:03 ispc CRON[1600179]: pam_unix(cron:session): session closed for user root Dec 15 03:16:01 ispc CRON[1600282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:16:02 ispc CRON[1600282]: pam_unix(cron:session): session closed for user root Dec 15 03:17:01 ispc CRON[1600321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:17:01 ispc CRON[1600321]: pam_unix(cron:session): session closed for user root Dec 15 03:17:07 ispc postfix/smtpd[1600336]: sql auxprop plugin using mysql engine Dec 15 03:17:07 ispc saslauthd[1600338]: pam_mysql - SELECT returned no result. Dec 15 03:17:07 ispc saslauthd[1600338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:17:07 ispc saslauthd[1600338]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:18:01 ispc CRON[1600371]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 03:18:01 ispc CRON[1600372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:18:02 ispc CRON[1600372]: pam_unix(cron:session): session closed for user root Dec 15 03:18:08 ispc CRON[1600371]: pam_unix(cron:session): session closed for user amavis Dec 15 03:18:10 ispc postfix/smtpd[1600399]: sql auxprop plugin using mysql engine Dec 15 03:19:01 ispc CRON[1600423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:19:01 ispc CRON[1600423]: pam_unix(cron:session): session closed for user root Dec 15 03:19:05 ispc sshd[1600430]: Did not receive identification string from 58.42.204.29 Dec 15 03:20:01 ispc CRON[1600464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:20:01 ispc CRON[1600465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:20:01 ispc CRON[1600466]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:20:01 ispc CRON[1600467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:20:01 ispc CRON[1600468]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:20:01 ispc CRON[1600465]: pam_unix(cron:session): session closed for user root Dec 15 03:20:01 ispc CRON[1600466]: pam_unix(cron:session): session closed for user www-data Dec 15 03:20:02 ispc CRON[1600468]: pam_unix(cron:session): session closed for user getmail Dec 15 03:20:02 ispc CRON[1600467]: pam_unix(cron:session): session closed for user root Dec 15 03:20:03 ispc CRON[1600464]: pam_unix(cron:session): session closed for user root Dec 15 03:20:11 ispc postfix/smtpd[1600546]: sql auxprop plugin using mysql engine Dec 15 03:20:11 ispc postfix/smtpd[1600548]: sql auxprop plugin using mysql engine Dec 15 03:20:11 ispc saslauthd[1600549]: pam_mysql - SELECT returned no result. Dec 15 03:20:11 ispc saslauthd[1600549]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:11 ispc saslauthd[1600549]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:20:11 ispc saslauthd[1600550]: pam_mysql - SELECT returned no result. Dec 15 03:20:11 ispc saslauthd[1600550]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:11 ispc saslauthd[1600550]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:20:23 ispc saslauthd[1600556]: pam_mysql - SELECT returned no result. Dec 15 03:20:23 ispc saslauthd[1600556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:23 ispc saslauthd[1600556]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:20:46 ispc saslauthd[1600566]: pam_mysql - SELECT returned no result. Dec 15 03:20:46 ispc saslauthd[1600566]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:46 ispc saslauthd[1600566]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:20:48 ispc sshd[1600567]: Invalid user martof from 52.232.19.79 Dec 15 03:20:53 ispc saslauthd[1600573]: pam_mysql - SELECT returned no result. Dec 15 03:20:53 ispc saslauthd[1600573]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:53 ispc saslauthd[1600573]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:20:55 ispc saslauthd[1600574]: pam_mysql - SELECT returned no result. Dec 15 03:20:55 ispc saslauthd[1600574]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:20:55 ispc saslauthd[1600574]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:01 ispc CRON[1600575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:21:01 ispc CRON[1600576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:21:01 ispc CRON[1600575]: pam_unix(cron:session): session closed for user root Dec 15 03:21:02 ispc CRON[1600576]: pam_unix(cron:session): session closed for user root Dec 15 03:21:16 ispc saslauthd[1600598]: pam_mysql - SELECT returned no result. Dec 15 03:21:16 ispc saslauthd[1600598]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:16 ispc saslauthd[1600598]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:19 ispc saslauthd[1600599]: pam_mysql - SELECT returned no result. Dec 15 03:21:19 ispc saslauthd[1600599]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:19 ispc saslauthd[1600599]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:20 ispc saslauthd[1600600]: pam_mysql - SELECT returned no result. Dec 15 03:21:20 ispc saslauthd[1600600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:20 ispc saslauthd[1600600]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:24 ispc saslauthd[1600605]: pam_mysql - SELECT returned no result. Dec 15 03:21:24 ispc saslauthd[1600605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:24 ispc saslauthd[1600605]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:29 ispc saslauthd[1600607]: pam_mysql - SELECT returned no result. Dec 15 03:21:29 ispc saslauthd[1600607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:29 ispc saslauthd[1600607]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:30 ispc saslauthd[1600608]: pam_mysql - SELECT returned no result. Dec 15 03:21:30 ispc saslauthd[1600608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:30 ispc saslauthd[1600608]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:31 ispc saslauthd[1600609]: pam_mysql - SELECT returned no result. Dec 15 03:21:31 ispc saslauthd[1600609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:31 ispc saslauthd[1600609]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:21:55 ispc saslauthd[1600624]: pam_mysql - SELECT returned no result. Dec 15 03:21:55 ispc saslauthd[1600624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:21:55 ispc saslauthd[1600624]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:22:01 ispc CRON[1600625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:22:01 ispc CRON[1600625]: pam_unix(cron:session): session closed for user root Dec 15 03:22:33 ispc CRON[1598438]: pam_unix(cron:session): session closed for user root Dec 15 03:23:01 ispc CRON[1600664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:23:03 ispc CRON[1600664]: pam_unix(cron:session): session closed for user root Dec 15 03:24:01 ispc CRON[1600679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:24:02 ispc CRON[1600679]: pam_unix(cron:session): session closed for user root Dec 15 03:25:01 ispc CRON[1600694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:25:01 ispc CRON[1600695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:25:01 ispc CRON[1600696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:25:01 ispc CRON[1600697]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:25:01 ispc CRON[1600695]: pam_unix(cron:session): session closed for user root Dec 15 03:25:01 ispc CRON[1600697]: pam_unix(cron:session): session closed for user getmail Dec 15 03:25:02 ispc CRON[1600694]: pam_unix(cron:session): session closed for user root Dec 15 03:25:40 ispc CRON[1600696]: pam_unix(cron:session): session closed for user root Dec 15 03:26:01 ispc CRON[1600806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:27:01 ispc CRON[1600840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:27:02 ispc CRON[1600840]: pam_unix(cron:session): session closed for user root Dec 15 03:28:01 ispc CRON[1600887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:28:02 ispc CRON[1600887]: pam_unix(cron:session): session closed for user root Dec 15 03:28:11 ispc postfix/smtpd[1600902]: sql auxprop plugin using mysql engine Dec 15 03:28:41 ispc postfix/smtpd[1600918]: sql auxprop plugin using mysql engine Dec 15 03:28:42 ispc saslauthd[1600920]: pam_mysql - SELECT returned no result. Dec 15 03:28:42 ispc saslauthd[1600920]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:28:42 ispc saslauthd[1600920]: do_auth : auth failure: [user=system_admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:29:01 ispc CRON[1600930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:29:02 ispc CRON[1600930]: pam_unix(cron:session): session closed for user root Dec 15 03:29:30 ispc sshd[1600953]: Invalid user ziplines from 52.232.19.79 Dec 15 03:30:01 ispc CRON[1600972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:30:01 ispc CRON[1600973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:30:01 ispc CRON[1600974]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:30:01 ispc CRON[1600975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:30:01 ispc CRON[1600976]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:30:01 ispc CRON[1600974]: pam_unix(cron:session): session closed for user www-data Dec 15 03:30:01 ispc CRON[1600973]: pam_unix(cron:session): session closed for user root Dec 15 03:30:01 ispc CRON[1600976]: pam_unix(cron:session): session closed for user getmail Dec 15 03:30:01 ispc CRON[1600975]: pam_unix(cron:session): session closed for user root Dec 15 03:30:01 ispc CRON[1600972]: pam_unix(cron:session): session closed for user root Dec 15 03:30:43 ispc su[1595904]: pam_unix(su:session): session closed for user root Dec 15 03:30:43 ispc CRON[1592653]: pam_unix(cron:session): session closed for user root Dec 15 03:30:46 ispc postfix/smtpd[1601110]: sql auxprop plugin using mysql engine Dec 15 03:31:01 ispc CRON[1601116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:31:01 ispc CRON[1601116]: pam_unix(cron:session): session closed for user root Dec 15 03:32:01 ispc CRON[1601157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:32:01 ispc CRON[1601157]: pam_unix(cron:session): session closed for user root Dec 15 03:33:01 ispc postfix/smtpd[1601201]: sql auxprop plugin using mysql engine Dec 15 03:33:01 ispc CRON[1601204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:33:01 ispc saslauthd[1601210]: pam_mysql - SELECT returned no result. Dec 15 03:33:01 ispc saslauthd[1601210]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:33:01 ispc saslauthd[1601210]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:33:02 ispc CRON[1601204]: pam_unix(cron:session): session closed for user root Dec 15 03:33:03 ispc sshd[1601216]: Invalid user blceu from 220.196.191.58 Dec 15 03:34:01 ispc CRON[1601246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:34:01 ispc CRON[1601246]: pam_unix(cron:session): session closed for user root Dec 15 03:35:01 ispc CRON[1601284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:35:01 ispc CRON[1601287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:35:01 ispc CRON[1601288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:35:01 ispc CRON[1601289]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:35:01 ispc CRON[1601287]: pam_unix(cron:session): session closed for user root Dec 15 03:35:01 ispc CRON[1601289]: pam_unix(cron:session): session closed for user getmail Dec 15 03:35:02 ispc CRON[1601288]: pam_unix(cron:session): session closed for user root Dec 15 03:35:02 ispc CRON[1601284]: pam_unix(cron:session): session closed for user root Dec 15 03:36:01 ispc CRON[1601384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:36:01 ispc CRON[1601384]: pam_unix(cron:session): session closed for user root Dec 15 03:36:33 ispc sshd[1601409]: Invalid user admin from 116.120.58.228 Dec 15 03:37:01 ispc CRON[1601423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:37:02 ispc CRON[1601423]: pam_unix(cron:session): session closed for user root Dec 15 03:38:01 ispc CRON[1601484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:38:02 ispc CRON[1601484]: pam_unix(cron:session): session closed for user root Dec 15 03:38:14 ispc postfix/smtpd[1601499]: sql auxprop plugin using mysql engine Dec 15 03:38:15 ispc saslauthd[1601502]: pam_mysql - SELECT returned no result. Dec 15 03:38:15 ispc saslauthd[1601502]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:38:15 ispc saslauthd[1601502]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:39:01 ispc CRON[1601525]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:39:01 ispc CRON[1601524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:39:01 ispc CRON[1601524]: pam_unix(cron:session): session closed for user root Dec 15 03:39:01 ispc CRON[1601525]: pam_unix(cron:session): session closed for user root Dec 15 03:40:01 ispc CRON[1601577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:40:01 ispc CRON[1601580]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:40:01 ispc CRON[1601579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:40:01 ispc CRON[1601576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:40:01 ispc CRON[1601578]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:40:01 ispc CRON[1601577]: pam_unix(cron:session): session closed for user root Dec 15 03:40:01 ispc CRON[1601578]: pam_unix(cron:session): session closed for user www-data Dec 15 03:40:01 ispc CRON[1601580]: pam_unix(cron:session): session closed for user getmail Dec 15 03:40:02 ispc CRON[1601579]: pam_unix(cron:session): session closed for user root Dec 15 03:40:02 ispc CRON[1601576]: pam_unix(cron:session): session closed for user root Dec 15 03:40:14 ispc postfix/smtpd[1601658]: sql auxprop plugin using mysql engine Dec 15 03:40:14 ispc saslauthd[1601660]: pam_mysql - SELECT returned no result. Dec 15 03:40:14 ispc saslauthd[1601660]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:40:14 ispc saslauthd[1601660]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:41:01 ispc CRON[1601683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:41:02 ispc CRON[1601683]: pam_unix(cron:session): session closed for user root Dec 15 03:42:01 ispc CRON[1601721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:42:02 ispc CRON[1601721]: pam_unix(cron:session): session closed for user root Dec 15 03:42:11 ispc postfix/smtpd[1601736]: sql auxprop plugin using mysql engine Dec 15 03:43:01 ispc CRON[1601762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:43:02 ispc CRON[1601762]: pam_unix(cron:session): session closed for user root Dec 15 03:43:35 ispc postfix/smtpd[1601793]: sql auxprop plugin using mysql engine Dec 15 03:43:36 ispc saslauthd[1601795]: pam_mysql - SELECT returned no result. Dec 15 03:43:36 ispc saslauthd[1601795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:43:36 ispc saslauthd[1601795]: do_auth : auth failure: [user=t3admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:44:01 ispc CRON[1601804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:44:02 ispc CRON[1601804]: pam_unix(cron:session): session closed for user root Dec 15 03:45:00 ispc saslauthd[1601844]: pam_mysql - SELECT returned no result. Dec 15 03:45:00 ispc saslauthd[1601844]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:45:00 ispc saslauthd[1601844]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:45:01 ispc CRON[1601845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:45:01 ispc CRON[1601847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:45:01 ispc CRON[1601848]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:45:01 ispc CRON[1601846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:45:01 ispc CRON[1601846]: pam_unix(cron:session): session closed for user root Dec 15 03:45:01 ispc CRON[1601848]: pam_unix(cron:session): session closed for user getmail Dec 15 03:45:01 ispc CRON[1601845]: pam_unix(cron:session): session closed for user root Dec 15 03:45:01 ispc CRON[1601847]: pam_unix(cron:session): session closed for user root Dec 15 03:46:01 ispc CRON[1601950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:46:02 ispc CRON[1601950]: pam_unix(cron:session): session closed for user root Dec 15 03:46:23 ispc sshd[1601972]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 03:46:27 ispc postfix/smtpd[1601974]: sql auxprop plugin using mysql engine Dec 15 03:46:28 ispc CRON[1600806]: pam_unix(cron:session): session closed for user root Dec 15 03:47:01 ispc CRON[1601982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:47:02 ispc CRON[1601982]: pam_unix(cron:session): session closed for user root Dec 15 03:48:01 ispc CRON[1602008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:48:02 ispc CRON[1602008]: pam_unix(cron:session): session closed for user root Dec 15 03:48:59 ispc saslauthd[1602021]: pam_mysql - SELECT returned no result. Dec 15 03:48:59 ispc saslauthd[1602021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:48:59 ispc saslauthd[1602021]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:49:01 ispc CRON[1602022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:49:02 ispc CRON[1602022]: pam_unix(cron:session): session closed for user root Dec 15 03:50:00 ispc sshd[1602039]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 03:50:01 ispc CRON[1602044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:50:01 ispc CRON[1602042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:50:01 ispc CRON[1602041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:50:01 ispc CRON[1602043]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 03:50:01 ispc CRON[1602045]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:50:01 ispc CRON[1602042]: pam_unix(cron:session): session closed for user root Dec 15 03:50:01 ispc CRON[1602043]: pam_unix(cron:session): session closed for user www-data Dec 15 03:50:01 ispc CRON[1602045]: pam_unix(cron:session): session closed for user getmail Dec 15 03:50:02 ispc CRON[1602041]: pam_unix(cron:session): session closed for user root Dec 15 03:50:13 ispc saslauthd[1602151]: pam_mysql - SELECT returned no result. Dec 15 03:50:13 ispc saslauthd[1602151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:50:13 ispc saslauthd[1602151]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:50:36 ispc saslauthd[1602153]: pam_mysql - SELECT returned no result. Dec 15 03:50:36 ispc saslauthd[1602153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:50:36 ispc saslauthd[1602153]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:50:37 ispc CRON[1602044]: pam_unix(cron:session): session closed for user root Dec 15 03:51:01 ispc CRON[1602155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:51:23 ispc saslauthd[1602175]: pam_mysql - SELECT returned no result. Dec 15 03:51:23 ispc saslauthd[1602175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:51:23 ispc saslauthd[1602175]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:52:01 ispc CRON[1602190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:52:01 ispc CRON[1602191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:52:01 ispc CRON[1602191]: pam_unix(cron:session): session closed for user root Dec 15 03:53:01 ispc CRON[1602242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:53:02 ispc CRON[1602242]: pam_unix(cron:session): session closed for user root Dec 15 03:53:32 ispc postfix/smtpd[1602266]: sql auxprop plugin using mysql engine Dec 15 03:53:32 ispc saslauthd[1602268]: pam_mysql - SELECT returned no result. Dec 15 03:53:32 ispc saslauthd[1602268]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:53:32 ispc saslauthd[1602268]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:54:01 ispc CRON[1602282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:54:02 ispc CRON[1602282]: pam_unix(cron:session): session closed for user root Dec 15 03:54:26 ispc sshd[1602309]: Did not receive identification string from 165.22.197.137 Dec 15 03:55:01 ispc CRON[1602323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:55:01 ispc CRON[1602322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:55:01 ispc CRON[1602325]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 03:55:01 ispc CRON[1602324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:55:01 ispc CRON[1602323]: pam_unix(cron:session): session closed for user root Dec 15 03:55:01 ispc CRON[1602325]: pam_unix(cron:session): session closed for user getmail Dec 15 03:55:01 ispc CRON[1602324]: pam_unix(cron:session): session closed for user root Dec 15 03:55:01 ispc CRON[1602322]: pam_unix(cron:session): session closed for user root Dec 15 03:55:02 ispc saslauthd[1602398]: pam_mysql - SELECT returned no result. Dec 15 03:55:02 ispc saslauthd[1602398]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:55:02 ispc saslauthd[1602398]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:55:18 ispc CRON[1602190]: pam_unix(cron:session): session closed for user root Dec 15 03:55:35 ispc sshd[1602413]: Invalid user ziplines from 45.119.213.109 Dec 15 03:56:01 ispc CRON[1602428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:56:02 ispc CRON[1602428]: pam_unix(cron:session): session closed for user root Dec 15 03:57:01 ispc CRON[1602466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:57:01 ispc CRON[1602466]: pam_unix(cron:session): session closed for user root Dec 15 03:58:01 ispc CRON[1602514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:58:02 ispc CRON[1602514]: pam_unix(cron:session): session closed for user root Dec 15 03:58:22 ispc postfix/smtpd[1602537]: sql auxprop plugin using mysql engine Dec 15 03:58:23 ispc saslauthd[1602541]: pam_mysql - SELECT returned no result. Dec 15 03:58:23 ispc saslauthd[1602541]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 03:58:23 ispc saslauthd[1602541]: do_auth : auth failure: [user=tasman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 03:58:44 ispc sshd[1602551]: Invalid user martof from 45.119.213.109 Dec 15 03:58:57 ispc sshd[1602558]: Invalid user solv from 165.22.197.137 Dec 15 03:59:01 ispc CRON[1602560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 03:59:02 ispc CRON[1602560]: pam_unix(cron:session): session closed for user root Dec 15 03:59:28 ispc postfix/smtpd[1602585]: sql auxprop plugin using mysql engine Dec 15 04:00:01 ispc CRON[1602606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:00:01 ispc CRON[1602607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:00:01 ispc CRON[1602603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:00:01 ispc CRON[1602602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:00:01 ispc CRON[1602608]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:00:01 ispc CRON[1602604]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:00:01 ispc CRON[1602605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:00:01 ispc CRON[1602604]: pam_unix(cron:session): session closed for user www-data Dec 15 04:00:01 ispc CRON[1602603]: pam_unix(cron:session): session closed for user root Dec 15 04:00:01 ispc CRON[1602606]: pam_unix(cron:session): session closed for user root Dec 15 04:00:01 ispc CRON[1602608]: pam_unix(cron:session): session closed for user getmail Dec 15 04:00:01 ispc CRON[1602607]: pam_unix(cron:session): session closed for user root Dec 15 04:00:01 ispc CRON[1602602]: pam_unix(cron:session): session closed for user root Dec 15 04:00:01 ispc CRON[1602605]: pam_unix(cron:session): session closed for user root Dec 15 04:00:10 ispc sshd[1602766]: Invalid user from 45.135.233.59 Dec 15 04:01:01 ispc CRON[1602791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:01:01 ispc CRON[1602792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:01:01 ispc CRON[1602792]: pam_unix(cron:session): session closed for user root Dec 15 04:01:03 ispc sshd[1602816]: Invalid user solv from 165.22.197.137 Dec 15 04:01:07 ispc postfix/smtpd[1602931]: sql auxprop plugin using mysql engine Dec 15 04:01:08 ispc saslauthd[1602945]: pam_mysql - SELECT returned no result. Dec 15 04:01:08 ispc saslauthd[1602945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:01:08 ispc saslauthd[1602945]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:01:28 ispc sshd[1603298]: reverse mapping checking getaddrinfo for server.zeron.to [185.61.137.174] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 04:02:01 ispc CRON[1603426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:02:01 ispc CRON[1603425]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 04:02:02 ispc CRON[1603426]: pam_unix(cron:session): session closed for user root Dec 15 04:03:01 ispc CRON[1604409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:03:01 ispc CRON[1604409]: pam_unix(cron:session): session closed for user root Dec 15 04:03:14 ispc sshd[1604521]: Invalid user solv from 165.22.197.137 Dec 15 04:03:27 ispc postfix/smtpd[1604593]: sql auxprop plugin using mysql engine Dec 15 04:03:27 ispc saslauthd[1604595]: pam_mysql - SELECT returned no result. Dec 15 04:03:27 ispc saslauthd[1604595]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:03:27 ispc saslauthd[1604595]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:03:49 ispc CRON[1603425]: pam_unix(cron:session): session closed for user logcheck Dec 15 04:03:52 ispc postfix/smtpd[1604790]: sql auxprop plugin using mysql engine Dec 15 04:03:54 ispc saslauthd[1604792]: pam_mysql - SELECT returned no result. Dec 15 04:03:54 ispc saslauthd[1604792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:03:54 ispc saslauthd[1604792]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:04:00 ispc saslauthd[1604793]: pam_mysql - SELECT returned no result. Dec 15 04:04:00 ispc saslauthd[1604793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:04:00 ispc saslauthd[1604793]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:04:01 ispc CRON[1604798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:04:01 ispc CRON[1604798]: pam_unix(cron:session): session closed for user root Dec 15 04:04:04 ispc saslauthd[1604809]: pam_mysql - SELECT returned no result. Dec 15 04:04:04 ispc saslauthd[1604809]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:04:04 ispc saslauthd[1604809]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:04:13 ispc sshd[1604814]: Invalid user admin from 116.120.58.228 Dec 15 04:04:44 ispc su[1604915]: Successful su for amavis by root Dec 15 04:04:44 ispc su[1604915]: + ??? root:amavis Dec 15 04:04:44 ispc su[1604915]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 15 04:05:01 ispc CRON[1604932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:05:01 ispc CRON[1604933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:05:01 ispc CRON[1604934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:05:01 ispc CRON[1604935]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:05:01 ispc CRON[1604933]: pam_unix(cron:session): session closed for user root Dec 15 04:05:02 ispc CRON[1604935]: pam_unix(cron:session): session closed for user getmail Dec 15 04:05:02 ispc CRON[1604934]: pam_unix(cron:session): session closed for user root Dec 15 04:05:03 ispc CRON[1604932]: pam_unix(cron:session): session closed for user root Dec 15 04:05:06 ispc su[1604915]: pam_unix(su:session): session closed for user amavis Dec 15 04:05:19 ispc sshd[1605120]: Invalid user solv from 165.22.197.137 Dec 15 04:05:36 ispc saslauthd[1605130]: pam_mysql - SELECT returned no result. Dec 15 04:05:36 ispc saslauthd[1605130]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:05:36 ispc saslauthd[1605130]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:05:42 ispc saslauthd[1605132]: pam_mysql - SELECT returned no result. Dec 15 04:05:42 ispc saslauthd[1605132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:05:42 ispc saslauthd[1605132]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:06:01 ispc CRON[1605141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:06:02 ispc CRON[1605141]: pam_unix(cron:session): session closed for user root Dec 15 04:07:01 ispc CRON[1605180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:07:02 ispc CRON[1605180]: pam_unix(cron:session): session closed for user root Dec 15 04:07:16 ispc sshd[1605201]: Invalid user solv from 165.22.197.137 Dec 15 04:07:56 ispc CRON[1602791]: pam_unix(cron:session): session closed for user root Dec 15 04:07:58 ispc postfix/smtpd[1605647]: sql auxprop plugin using mysql engine Dec 15 04:08:01 ispc CRON[1605649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:08:02 ispc CRON[1605649]: pam_unix(cron:session): session closed for user root Dec 15 04:08:25 ispc postfix/smtpd[1605670]: sql auxprop plugin using mysql engine Dec 15 04:09:01 ispc CRON[1605704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:09:01 ispc CRON[1605705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:09:01 ispc CRON[1605704]: pam_unix(cron:session): session closed for user root Dec 15 04:09:01 ispc CRON[1605705]: pam_unix(cron:session): session closed for user root Dec 15 04:09:16 ispc sshd[1605732]: Invalid user solv from 165.22.197.137 Dec 15 04:10:00 ispc sshd[1605760]: Invalid user martof from 175.125.92.77 Dec 15 04:10:01 ispc CRON[1605762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:10:01 ispc CRON[1605763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:10:01 ispc CRON[1605764]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:10:01 ispc CRON[1605765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:10:01 ispc CRON[1605766]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:10:01 ispc CRON[1605764]: pam_unix(cron:session): session closed for user www-data Dec 15 04:10:01 ispc CRON[1605763]: pam_unix(cron:session): session closed for user root Dec 15 04:10:01 ispc CRON[1605766]: pam_unix(cron:session): session closed for user getmail Dec 15 04:10:02 ispc CRON[1605765]: pam_unix(cron:session): session closed for user root Dec 15 04:10:02 ispc CRON[1605762]: pam_unix(cron:session): session closed for user root Dec 15 04:10:33 ispc postfix/smtpd[1605853]: sql auxprop plugin using mysql engine Dec 15 04:11:02 ispc CRON[1605871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:11:02 ispc CRON[1605871]: pam_unix(cron:session): session closed for user root Dec 15 04:11:28 ispc CRON[1602155]: pam_unix(cron:session): session closed for user root Dec 15 04:12:01 ispc CRON[1605900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:12:03 ispc CRON[1605900]: pam_unix(cron:session): session closed for user root Dec 15 04:13:01 ispc CRON[1605923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:13:02 ispc CRON[1605923]: pam_unix(cron:session): session closed for user root Dec 15 04:13:06 ispc saslauthd[1605936]: pam_mysql - SELECT returned no result. Dec 15 04:13:06 ispc saslauthd[1605936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:13:06 ispc saslauthd[1605936]: do_auth : auth failure: [user=teacher] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:13:10 ispc saslauthd[1605937]: pam_mysql - SELECT returned no result. Dec 15 04:13:10 ispc saslauthd[1605937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:13:10 ispc saslauthd[1605937]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:01 ispc CRON[1605942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:14:02 ispc CRON[1605942]: pam_unix(cron:session): session closed for user root Dec 15 04:14:02 ispc postfix/smtpd[1605954]: sql auxprop plugin using mysql engine Dec 15 04:14:03 ispc saslauthd[1605956]: pam_mysql - SELECT returned no result. Dec 15 04:14:03 ispc saslauthd[1605956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:03 ispc saslauthd[1605956]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:03 ispc saslauthd[1605957]: pam_mysql - SELECT returned no result. Dec 15 04:14:03 ispc saslauthd[1605957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:03 ispc saslauthd[1605957]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:10 ispc saslauthd[1605958]: pam_mysql - SELECT returned no result. Dec 15 04:14:10 ispc saslauthd[1605958]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:10 ispc saslauthd[1605958]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:39 ispc saslauthd[1605961]: pam_mysql - SELECT returned no result. Dec 15 04:14:39 ispc saslauthd[1605961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:39 ispc saslauthd[1605961]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:44 ispc saslauthd[1605962]: pam_mysql - SELECT returned no result. Dec 15 04:14:44 ispc saslauthd[1605962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:44 ispc saslauthd[1605962]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:14:44 ispc saslauthd[1605963]: pam_mysql - SELECT returned no result. Dec 15 04:14:44 ispc saslauthd[1605963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:14:44 ispc saslauthd[1605963]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:01 ispc CRON[1605968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:15:01 ispc CRON[1605969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:15:01 ispc CRON[1605971]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:15:01 ispc CRON[1605970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:15:01 ispc CRON[1605969]: pam_unix(cron:session): session closed for user root Dec 15 04:15:01 ispc CRON[1605971]: pam_unix(cron:session): session closed for user getmail Dec 15 04:15:03 ispc CRON[1605968]: pam_unix(cron:session): session closed for user root Dec 15 04:15:07 ispc saslauthd[1606096]: pam_mysql - SELECT returned no result. Dec 15 04:15:07 ispc saslauthd[1606096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:07 ispc saslauthd[1606096]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:15 ispc saslauthd[1606121]: pam_mysql - SELECT returned no result. Dec 15 04:15:15 ispc saslauthd[1606121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:15 ispc saslauthd[1606121]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:16 ispc saslauthd[1606125]: pam_mysql - SELECT returned no result. Dec 15 04:15:16 ispc saslauthd[1606125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:16 ispc saslauthd[1606125]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:18 ispc saslauthd[1606159]: pam_mysql - SELECT returned no result. Dec 15 04:15:18 ispc saslauthd[1606159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:18 ispc saslauthd[1606159]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:21 ispc saslauthd[1606160]: pam_mysql - SELECT returned no result. Dec 15 04:15:21 ispc saslauthd[1606160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:21 ispc saslauthd[1606160]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:22 ispc saslauthd[1606161]: pam_mysql - SELECT returned no result. Dec 15 04:15:22 ispc saslauthd[1606161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:22 ispc saslauthd[1606161]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:25 ispc saslauthd[1606162]: pam_mysql - SELECT returned no result. Dec 15 04:15:25 ispc saslauthd[1606162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:25 ispc saslauthd[1606162]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:40 ispc sshd[1606166]: Invalid user blceu from 52.232.19.79 Dec 15 04:15:46 ispc saslauthd[1606168]: pam_mysql - SELECT returned no result. Dec 15 04:15:46 ispc saslauthd[1606168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:15:46 ispc saslauthd[1606168]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:15:58 ispc CRON[1605970]: pam_unix(cron:session): session closed for user root Dec 15 04:16:01 ispc CRON[1606169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:17:01 ispc CRON[1606204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:17:04 ispc CRON[1606204]: pam_unix(cron:session): session closed for user root Dec 15 04:18:01 ispc CRON[1606252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:18:02 ispc CRON[1606252]: pam_unix(cron:session): session closed for user root Dec 15 04:19:02 ispc CRON[1606289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:19:03 ispc CRON[1606289]: pam_unix(cron:session): session closed for user root Dec 15 04:19:13 ispc postfix/smtpd[1606305]: sql auxprop plugin using mysql engine Dec 15 04:20:01 ispc CRON[1606330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:20:01 ispc CRON[1606331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:20:01 ispc CRON[1606332]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:20:01 ispc CRON[1606333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:20:01 ispc CRON[1606334]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:20:01 ispc CRON[1606332]: pam_unix(cron:session): session closed for user www-data Dec 15 04:20:02 ispc CRON[1606331]: pam_unix(cron:session): session closed for user root Dec 15 04:20:02 ispc CRON[1606334]: pam_unix(cron:session): session closed for user getmail Dec 15 04:20:02 ispc CRON[1606333]: pam_unix(cron:session): session closed for user root Dec 15 04:20:02 ispc CRON[1606330]: pam_unix(cron:session): session closed for user root Dec 15 04:20:56 ispc postfix/smtpd[1606430]: sql auxprop plugin using mysql engine Dec 15 04:20:56 ispc saslauthd[1606432]: pam_mysql - SELECT returned no result. Dec 15 04:20:56 ispc saslauthd[1606432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:20:56 ispc saslauthd[1606432]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:21:01 ispc CRON[1606438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:21:01 ispc CRON[1606437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:21:01 ispc CRON[1606437]: pam_unix(cron:session): session closed for user root Dec 15 04:21:02 ispc CRON[1606438]: pam_unix(cron:session): session closed for user root Dec 15 04:21:18 ispc sshd[1606456]: Invalid user user from 45.148.10.121 Dec 15 04:22:01 ispc CRON[1606482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:22:01 ispc CRON[1606482]: pam_unix(cron:session): session closed for user root Dec 15 04:22:32 ispc postfix/smtpd[1606506]: sql auxprop plugin using mysql engine Dec 15 04:23:01 ispc CRON[1606523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:23:02 ispc CRON[1606523]: pam_unix(cron:session): session closed for user root Dec 15 04:24:01 ispc CRON[1606561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:24:02 ispc CRON[1606561]: pam_unix(cron:session): session closed for user root Dec 15 04:24:51 ispc postfix/smtpd[1606600]: sql auxprop plugin using mysql engine Dec 15 04:25:01 ispc CRON[1606616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:25:01 ispc CRON[1606617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:25:01 ispc CRON[1606618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:25:01 ispc CRON[1606619]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:25:01 ispc CRON[1606617]: pam_unix(cron:session): session closed for user root Dec 15 04:25:01 ispc CRON[1606619]: pam_unix(cron:session): session closed for user getmail Dec 15 04:25:01 ispc CRON[1606618]: pam_unix(cron:session): session closed for user root Dec 15 04:25:02 ispc CRON[1606616]: pam_unix(cron:session): session closed for user root Dec 15 04:26:01 ispc CRON[1606718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:26:02 ispc CRON[1606718]: pam_unix(cron:session): session closed for user root Dec 15 04:27:01 ispc CRON[1606756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:27:02 ispc CRON[1606756]: pam_unix(cron:session): session closed for user root Dec 15 04:27:53 ispc postfix/smtpd[1606798]: sql auxprop plugin using mysql engine Dec 15 04:27:54 ispc saslauthd[1606800]: pam_mysql - SELECT returned no result. Dec 15 04:27:54 ispc saslauthd[1606800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:27:54 ispc saslauthd[1606800]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:28:01 ispc CRON[1606805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:28:02 ispc CRON[1606805]: pam_unix(cron:session): session closed for user root Dec 15 04:28:48 ispc saslauthd[1606837]: pam_mysql - SELECT returned no result. Dec 15 04:28:48 ispc saslauthd[1606837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:28:48 ispc saslauthd[1606837]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:29:01 ispc CRON[1606842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:29:01 ispc CRON[1606842]: pam_unix(cron:session): session closed for user root Dec 15 04:29:33 ispc postfix/smtpd[1606871]: sql auxprop plugin using mysql engine Dec 15 04:30:01 ispc CRON[1606884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:30:01 ispc CRON[1606885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:30:01 ispc CRON[1606886]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:30:01 ispc CRON[1606887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:30:01 ispc CRON[1606888]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:30:01 ispc CRON[1606886]: pam_unix(cron:session): session closed for user www-data Dec 15 04:30:01 ispc CRON[1606885]: pam_unix(cron:session): session closed for user root Dec 15 04:30:01 ispc CRON[1606888]: pam_unix(cron:session): session closed for user getmail Dec 15 04:30:02 ispc CRON[1606887]: pam_unix(cron:session): session closed for user root Dec 15 04:30:03 ispc CRON[1606884]: pam_unix(cron:session): session closed for user root Dec 15 04:31:01 ispc CRON[1606988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:31:03 ispc CRON[1606988]: pam_unix(cron:session): session closed for user root Dec 15 04:32:01 ispc CRON[1607027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:32:01 ispc CRON[1607027]: pam_unix(cron:session): session closed for user root Dec 15 04:32:08 ispc postfix/smtpd[1607042]: sql auxprop plugin using mysql engine Dec 15 04:32:50 ispc sshd[1607070]: Invalid user klape from 67.205.163.146 Dec 15 04:32:51 ispc sshd[1607072]: Invalid user ubuntu from 67.205.163.146 Dec 15 04:33:01 ispc CRON[1607078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:33:02 ispc CRON[1607078]: pam_unix(cron:session): session closed for user root Dec 15 04:34:01 ispc CRON[1607116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:34:02 ispc CRON[1607116]: pam_unix(cron:session): session closed for user root Dec 15 04:34:47 ispc postfix/smtpd[1607147]: sql auxprop plugin using mysql engine Dec 15 04:34:47 ispc saslauthd[1607149]: pam_mysql - SELECT returned no result. Dec 15 04:34:47 ispc saslauthd[1607149]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:34:47 ispc saslauthd[1607149]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:34:59 ispc saslauthd[1607154]: pam_mysql - SELECT returned no result. Dec 15 04:34:59 ispc saslauthd[1607154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:34:59 ispc saslauthd[1607154]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:35:01 ispc CRON[1607159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:35:01 ispc CRON[1607160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:35:01 ispc CRON[1607161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:35:01 ispc CRON[1607162]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:35:01 ispc CRON[1607160]: pam_unix(cron:session): session closed for user root Dec 15 04:35:01 ispc CRON[1607162]: pam_unix(cron:session): session closed for user getmail Dec 15 04:35:02 ispc CRON[1607161]: pam_unix(cron:session): session closed for user root Dec 15 04:35:02 ispc CRON[1607159]: pam_unix(cron:session): session closed for user root Dec 15 04:35:27 ispc postfix/smtpd[1607243]: sql auxprop plugin using mysql engine Dec 15 04:35:32 ispc sshd[1607251]: Invalid user klape from 103.164.20.29 Dec 15 04:35:34 ispc sshd[1607253]: Invalid user ubuntu from 103.164.20.29 Dec 15 04:35:38 ispc sshd[1607255]: Invalid user blceu from 175.125.92.77 Dec 15 04:36:01 ispc CRON[1607266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:36:02 ispc CRON[1607266]: pam_unix(cron:session): session closed for user root Dec 15 04:36:33 ispc CRON[1606169]: pam_unix(cron:session): session closed for user root Dec 15 04:36:37 ispc sshd[1607299]: Invalid user ziplines from 175.125.92.77 Dec 15 04:37:01 ispc CRON[1607301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:37:02 ispc CRON[1607301]: pam_unix(cron:session): session closed for user root Dec 15 04:38:01 ispc CRON[1607327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:38:01 ispc CRON[1607327]: pam_unix(cron:session): session closed for user root Dec 15 04:39:01 ispc CRON[1607343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:39:01 ispc CRON[1607344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:39:02 ispc CRON[1607343]: pam_unix(cron:session): session closed for user root Dec 15 04:39:02 ispc CRON[1607344]: pam_unix(cron:session): session closed for user root Dec 15 04:40:01 ispc CRON[1607370]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:40:01 ispc CRON[1607371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:40:01 ispc CRON[1607368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:40:01 ispc CRON[1607369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:40:01 ispc CRON[1607372]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:40:01 ispc CRON[1607370]: pam_unix(cron:session): session closed for user www-data Dec 15 04:40:01 ispc CRON[1607369]: pam_unix(cron:session): session closed for user root Dec 15 04:40:01 ispc CRON[1607372]: pam_unix(cron:session): session closed for user getmail Dec 15 04:40:03 ispc CRON[1607368]: pam_unix(cron:session): session closed for user root Dec 15 04:40:46 ispc CRON[1607371]: pam_unix(cron:session): session closed for user root Dec 15 04:41:01 ispc CRON[1607481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:41:27 ispc postfix/smtpd[1607503]: sql auxprop plugin using mysql engine Dec 15 04:41:39 ispc sshd[1607512]: Invalid user klape from 77.241.18.2 Dec 15 04:41:40 ispc sshd[1607514]: Invalid user ubuntu from 77.241.18.2 Dec 15 04:41:50 ispc sshd[1607520]: Invalid user matlbula from 80.94.92.180 Dec 15 04:41:54 ispc postfix/smtpd[1607526]: sql auxprop plugin using mysql engine Dec 15 04:41:54 ispc saslauthd[1607528]: pam_mysql - SELECT returned no result. Dec 15 04:41:54 ispc saslauthd[1607528]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:41:54 ispc saslauthd[1607528]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:42:01 ispc CRON[1607529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:42:01 ispc CRON[1607529]: pam_unix(cron:session): session closed for user root Dec 15 04:42:53 ispc saslauthd[1607571]: pam_mysql - SELECT returned no result. Dec 15 04:42:53 ispc saslauthd[1607571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:42:53 ispc saslauthd[1607571]: do_auth : auth failure: [user=technician] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:43:01 ispc CRON[1607577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:43:02 ispc CRON[1607577]: pam_unix(cron:session): session closed for user root Dec 15 04:43:25 ispc sshd[1607604]: Did not receive identification string from 45.140.17.97 Dec 15 04:44:01 ispc CRON[1607620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:44:02 ispc CRON[1607620]: pam_unix(cron:session): session closed for user root Dec 15 04:44:21 ispc postfix/smtpd[1607640]: sql auxprop plugin using mysql engine Dec 15 04:45:01 ispc CRON[1607662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:45:01 ispc CRON[1607663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:45:01 ispc CRON[1607664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:45:01 ispc CRON[1607665]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:45:01 ispc CRON[1607663]: pam_unix(cron:session): session closed for user root Dec 15 04:45:01 ispc CRON[1607665]: pam_unix(cron:session): session closed for user getmail Dec 15 04:45:02 ispc CRON[1607662]: pam_unix(cron:session): session closed for user root Dec 15 04:45:02 ispc CRON[1607664]: pam_unix(cron:session): session closed for user root Dec 15 04:46:01 ispc CRON[1607766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:46:01 ispc CRON[1607766]: pam_unix(cron:session): session closed for user root Dec 15 04:46:14 ispc postfix/smtpd[1607783]: sql auxprop plugin using mysql engine Dec 15 04:46:44 ispc postfix/smtpd[1607800]: sql auxprop plugin using mysql engine Dec 15 04:46:44 ispc saslauthd[1607802]: pam_mysql - SELECT returned no result. Dec 15 04:46:44 ispc saslauthd[1607802]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:46:44 ispc saslauthd[1607802]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:47:01 ispc CRON[1607814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:47:02 ispc CRON[1607814]: pam_unix(cron:session): session closed for user root Dec 15 04:47:07 ispc sshd[1607827]: Invalid user blceu from 35.239.77.168 Dec 15 04:47:42 ispc saslauthd[1607863]: pam_mysql - SELECT returned no result. Dec 15 04:47:42 ispc saslauthd[1607863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:47:42 ispc saslauthd[1607863]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:48:01 ispc CRON[1607886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:48:02 ispc CRON[1607886]: pam_unix(cron:session): session closed for user root Dec 15 04:48:49 ispc postfix/smtpd[1607919]: sql auxprop plugin using mysql engine Dec 15 04:48:55 ispc saslauthd[1607955]: pam_mysql - SELECT returned no result. Dec 15 04:48:55 ispc saslauthd[1607955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:48:55 ispc saslauthd[1607955]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:48:56 ispc sshd[1607991]: Invalid user klape from 200.32.52.150 Dec 15 04:48:58 ispc sshd[1607993]: Invalid user ubuntu from 200.32.52.150 Dec 15 04:49:01 ispc CRON[1608000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:49:02 ispc CRON[1608000]: pam_unix(cron:session): session closed for user root Dec 15 04:50:01 ispc CRON[1608037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:50:01 ispc CRON[1608038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:50:01 ispc CRON[1608039]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 04:50:01 ispc CRON[1608040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:50:01 ispc CRON[1608041]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:50:01 ispc CRON[1608038]: pam_unix(cron:session): session closed for user root Dec 15 04:50:01 ispc CRON[1608039]: pam_unix(cron:session): session closed for user www-data Dec 15 04:50:01 ispc CRON[1608041]: pam_unix(cron:session): session closed for user getmail Dec 15 04:50:02 ispc CRON[1608040]: pam_unix(cron:session): session closed for user root Dec 15 04:50:02 ispc CRON[1608037]: pam_unix(cron:session): session closed for user root Dec 15 04:50:14 ispc saslauthd[1608124]: pam_mysql - SELECT returned no result. Dec 15 04:50:14 ispc saslauthd[1608124]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:50:14 ispc saslauthd[1608124]: do_auth : auth failure: [user=dennis] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:51:01 ispc CRON[1608146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:51:02 ispc CRON[1608146]: pam_unix(cron:session): session closed for user root Dec 15 04:51:05 ispc sshd[1608161]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 04:51:06 ispc sshd[1608164]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 04:51:06 ispc sshd[1608164]: Invalid user klape from 189.89.20.45 Dec 15 04:51:08 ispc sshd[1608168]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 04:51:08 ispc sshd[1608168]: Invalid user ubuntu from 189.89.20.45 Dec 15 04:51:14 ispc saslauthd[1608174]: pam_mysql - SELECT returned no result. Dec 15 04:51:14 ispc saslauthd[1608174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:51:14 ispc saslauthd[1608174]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:51:26 ispc postfix/smtpd[1608179]: sql auxprop plugin using mysql engine Dec 15 04:52:01 ispc CRON[1608197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:52:01 ispc CRON[1608197]: pam_unix(cron:session): session closed for user root Dec 15 04:52:45 ispc saslauthd[1608242]: pam_mysql - SELECT returned no result. Dec 15 04:52:45 ispc saslauthd[1608242]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:52:45 ispc saslauthd[1608242]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:52:51 ispc saslauthd[1608244]: pam_mysql - SELECT returned no result. Dec 15 04:52:51 ispc saslauthd[1608244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:52:51 ispc saslauthd[1608244]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:53:01 ispc CRON[1608251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:53:02 ispc CRON[1608251]: pam_unix(cron:session): session closed for user root Dec 15 04:54:01 ispc CRON[1608293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:54:02 ispc CRON[1608293]: pam_unix(cron:session): session closed for user root Dec 15 04:55:01 ispc CRON[1608334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:55:01 ispc CRON[1608335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:55:01 ispc CRON[1608333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:55:01 ispc CRON[1608336]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 04:55:01 ispc CRON[1608334]: pam_unix(cron:session): session closed for user root Dec 15 04:55:01 ispc CRON[1608336]: pam_unix(cron:session): session closed for user getmail Dec 15 04:55:01 ispc CRON[1608335]: pam_unix(cron:session): session closed for user root Dec 15 04:55:02 ispc CRON[1608333]: pam_unix(cron:session): session closed for user root Dec 15 04:56:01 ispc CRON[1608438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:56:01 ispc CRON[1608438]: pam_unix(cron:session): session closed for user root Dec 15 04:57:01 ispc CRON[1608480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:57:02 ispc CRON[1608480]: pam_unix(cron:session): session closed for user root Dec 15 04:57:20 ispc postfix/smtpd[1608498]: sql auxprop plugin using mysql engine Dec 15 04:57:20 ispc saslauthd[1608501]: pam_mysql - SELECT returned no result. Dec 15 04:57:20 ispc saslauthd[1608501]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:57:20 ispc saslauthd[1608501]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:57:43 ispc sshd[1608521]: Invalid user ubnt from 45.148.10.121 Dec 15 04:57:55 ispc saslauthd[1608534]: pam_mysql - SELECT returned no result. Dec 15 04:57:55 ispc saslauthd[1608534]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:57:55 ispc saslauthd[1608534]: do_auth : auth failure: [user=tele] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 04:58:01 ispc CRON[1608540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:58:02 ispc CRON[1608540]: pam_unix(cron:session): session closed for user root Dec 15 04:59:01 ispc CRON[1608581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 04:59:01 ispc CRON[1608581]: pam_unix(cron:session): session closed for user root Dec 15 04:59:39 ispc postfix/smtpd[1608611]: sql auxprop plugin using mysql engine Dec 15 04:59:40 ispc saslauthd[1608613]: pam_mysql - SELECT returned no result. Dec 15 04:59:40 ispc saslauthd[1608613]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 04:59:40 ispc saslauthd[1608613]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:00:01 ispc CRON[1608627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:00:01 ispc CRON[1608628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:00:01 ispc CRON[1608629]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:00:01 ispc CRON[1608630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:00:01 ispc CRON[1608631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:00:01 ispc CRON[1608632]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:00:01 ispc CRON[1608629]: pam_unix(cron:session): session closed for user www-data Dec 15 05:00:01 ispc CRON[1608628]: pam_unix(cron:session): session closed for user root Dec 15 05:00:01 ispc CRON[1608632]: pam_unix(cron:session): session closed for user getmail Dec 15 05:00:02 ispc CRON[1608631]: pam_unix(cron:session): session closed for user root Dec 15 05:00:02 ispc CRON[1608630]: pam_unix(cron:session): session closed for user root Dec 15 05:00:03 ispc CRON[1608627]: pam_unix(cron:session): session closed for user root Dec 15 05:00:05 ispc saslauthd[1608784]: pam_mysql - SELECT returned no result. Dec 15 05:00:05 ispc saslauthd[1608784]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:00:05 ispc saslauthd[1608784]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:00:08 ispc saslauthd[1608789]: pam_mysql - SELECT returned no result. Dec 15 05:00:08 ispc saslauthd[1608789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:00:08 ispc saslauthd[1608789]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:00:15 ispc saslauthd[1608790]: pam_mysql - SELECT returned no result. Dec 15 05:00:15 ispc saslauthd[1608790]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:00:15 ispc saslauthd[1608790]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:01:01 ispc CRON[1608816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:01:01 ispc CRON[1608816]: pam_unix(cron:session): session closed for user root Dec 15 05:01:28 ispc CRON[1607481]: pam_unix(cron:session): session closed for user root Dec 15 05:01:41 ispc sshd[1608845]: Invalid user klape from 36.50.177.171 Dec 15 05:01:45 ispc sshd[1608848]: Invalid user ubuntu from 36.50.177.171 Dec 15 05:02:01 ispc CRON[1608851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:02:01 ispc CRON[1608850]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 05:02:02 ispc CRON[1608851]: pam_unix(cron:session): session closed for user root Dec 15 05:02:08 ispc saslauthd[1609008]: pam_mysql - SELECT returned no result. Dec 15 05:02:08 ispc saslauthd[1609008]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:02:08 ispc saslauthd[1609008]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:02:11 ispc saslauthd[1609037]: pam_mysql - SELECT returned no result. Dec 15 05:02:11 ispc saslauthd[1609037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:02:11 ispc saslauthd[1609037]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:03:01 ispc CRON[1609751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:03:03 ispc CRON[1609751]: pam_unix(cron:session): session closed for user root Dec 15 05:03:13 ispc CRON[1608850]: pam_unix(cron:session): session closed for user logcheck Dec 15 05:03:30 ispc postfix/smtpd[1609921]: sql auxprop plugin using mysql engine Dec 15 05:04:01 ispc CRON[1609931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:04:03 ispc CRON[1609931]: pam_unix(cron:session): session closed for user root Dec 15 05:04:47 ispc postfix/smtpd[1609947]: sql auxprop plugin using mysql engine Dec 15 05:05:01 ispc CRON[1609951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:05:01 ispc CRON[1609952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:05:01 ispc CRON[1609953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:05:01 ispc CRON[1609954]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:05:01 ispc CRON[1609952]: pam_unix(cron:session): session closed for user root Dec 15 05:05:01 ispc CRON[1609954]: pam_unix(cron:session): session closed for user getmail Dec 15 05:05:02 ispc CRON[1609951]: pam_unix(cron:session): session closed for user root Dec 15 05:05:39 ispc CRON[1609953]: pam_unix(cron:session): session closed for user root Dec 15 05:05:58 ispc sshd[1610061]: Invalid user lanovacentra from 35.239.77.168 Dec 15 05:06:01 ispc CRON[1610063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:07:01 ispc CRON[1610100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:07:02 ispc CRON[1610100]: pam_unix(cron:session): session closed for user root Dec 15 05:07:53 ispc postfix/smtpd[1610140]: sql auxprop plugin using mysql engine Dec 15 05:07:53 ispc saslauthd[1610143]: pam_mysql - SELECT returned no result. Dec 15 05:07:53 ispc saslauthd[1610143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:07:53 ispc saslauthd[1610143]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:07:54 ispc saslauthd[1610147]: pam_mysql - SELECT returned no result. Dec 15 05:07:54 ispc saslauthd[1610147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:07:54 ispc saslauthd[1610147]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:08:01 ispc CRON[1610148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:08:02 ispc CRON[1610148]: pam_unix(cron:session): session closed for user root Dec 15 05:08:08 ispc saslauthd[1610163]: pam_mysql - SELECT returned no result. Dec 15 05:08:08 ispc saslauthd[1610163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:08:08 ispc saslauthd[1610163]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:08:29 ispc saslauthd[1610174]: pam_mysql - SELECT returned no result. Dec 15 05:08:29 ispc saslauthd[1610174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:08:29 ispc saslauthd[1610174]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:08:36 ispc saslauthd[1610179]: pam_mysql - SELECT returned no result. Dec 15 05:08:36 ispc saslauthd[1610179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:08:36 ispc saslauthd[1610179]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:08:37 ispc saslauthd[1610180]: pam_mysql - SELECT returned no result. Dec 15 05:08:37 ispc saslauthd[1610180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:08:37 ispc saslauthd[1610180]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:08:59 ispc saslauthd[1610194]: pam_mysql - SELECT returned no result. Dec 15 05:08:59 ispc saslauthd[1610194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:08:59 ispc saslauthd[1610194]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:01 ispc CRON[1610196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:09:01 ispc CRON[1610197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:09:01 ispc CRON[1610196]: pam_unix(cron:session): session closed for user root Dec 15 05:09:01 ispc CRON[1610197]: pam_unix(cron:session): session closed for user root Dec 15 05:09:09 ispc saslauthd[1610222]: pam_mysql - SELECT returned no result. Dec 15 05:09:09 ispc saslauthd[1610222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:09 ispc saslauthd[1610222]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:10 ispc saslauthd[1610223]: pam_mysql - SELECT returned no result. Dec 15 05:09:10 ispc saslauthd[1610223]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:10 ispc saslauthd[1610223]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:15 ispc saslauthd[1610224]: pam_mysql - SELECT returned no result. Dec 15 05:09:15 ispc saslauthd[1610224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:15 ispc saslauthd[1610224]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:15 ispc saslauthd[1610229]: pam_mysql - SELECT returned no result. Dec 15 05:09:15 ispc saslauthd[1610229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:15 ispc saslauthd[1610229]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:18 ispc saslauthd[1610232]: pam_mysql - SELECT returned no result. Dec 15 05:09:18 ispc saslauthd[1610232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:18 ispc saslauthd[1610232]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:18 ispc postfix/smtpd[1610230]: sql auxprop plugin using mysql engine Dec 15 05:09:18 ispc saslauthd[1610233]: pam_mysql - SELECT returned no result. Dec 15 05:09:18 ispc saslauthd[1610233]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:18 ispc saslauthd[1610233]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:36 ispc saslauthd[1610242]: pam_mysql - SELECT returned no result. Dec 15 05:09:36 ispc saslauthd[1610242]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:09:36 ispc saslauthd[1610242]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:09:50 ispc postfix/smtpd[1610247]: sql auxprop plugin using mysql engine Dec 15 05:10:01 ispc CRON[1610254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:10:01 ispc CRON[1610255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:10:01 ispc CRON[1610257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:10:01 ispc CRON[1610256]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:10:02 ispc CRON[1610258]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:10:02 ispc CRON[1610255]: pam_unix(cron:session): session closed for user root Dec 15 05:10:02 ispc CRON[1610256]: pam_unix(cron:session): session closed for user www-data Dec 15 05:10:02 ispc CRON[1610258]: pam_unix(cron:session): session closed for user getmail Dec 15 05:10:02 ispc CRON[1610257]: pam_unix(cron:session): session closed for user root Dec 15 05:10:03 ispc CRON[1610254]: pam_unix(cron:session): session closed for user root Dec 15 05:11:01 ispc CRON[1610358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:11:01 ispc CRON[1610358]: pam_unix(cron:session): session closed for user root Dec 15 05:12:01 ispc CRON[1610400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:12:02 ispc CRON[1610400]: pam_unix(cron:session): session closed for user root Dec 15 05:12:27 ispc postfix/smtpd[1610421]: sql auxprop plugin using mysql engine Dec 15 05:12:29 ispc saslauthd[1610427]: pam_mysql - SELECT returned no result. Dec 15 05:12:29 ispc saslauthd[1610427]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:12:29 ispc saslauthd[1610427]: do_auth : auth failure: [user=temp1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:13:01 ispc CRON[1610462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:13:02 ispc CRON[1610462]: pam_unix(cron:session): session closed for user root Dec 15 05:13:04 ispc postfix/smtpd[1610475]: sql auxprop plugin using mysql engine Dec 15 05:13:27 ispc sshd[1610486]: Invalid user 1111 from 193.24.211.200 Dec 15 05:14:01 ispc CRON[1610504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:14:02 ispc CRON[1610504]: pam_unix(cron:session): session closed for user root Dec 15 05:15:01 ispc CRON[1610548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:15:01 ispc CRON[1610550]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:15:01 ispc CRON[1610549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:15:01 ispc CRON[1610547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:15:01 ispc CRON[1610548]: pam_unix(cron:session): session closed for user root Dec 15 05:15:01 ispc CRON[1610550]: pam_unix(cron:session): session closed for user getmail Dec 15 05:15:01 ispc CRON[1610549]: pam_unix(cron:session): session closed for user root Dec 15 05:15:02 ispc CRON[1610547]: pam_unix(cron:session): session closed for user root Dec 15 05:16:01 ispc CRON[1610657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:16:01 ispc CRON[1610657]: pam_unix(cron:session): session closed for user root Dec 15 05:16:28 ispc postfix/smtpd[1610677]: sql auxprop plugin using mysql engine Dec 15 05:17:01 ispc CRON[1610696]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:17:01 ispc CRON[1610697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:17:02 ispc CRON[1610697]: pam_unix(cron:session): session closed for user root Dec 15 05:17:02 ispc CRON[1610696]: pam_unix(cron:session): session closed for user www-data Dec 15 05:18:01 ispc CRON[1610745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:18:02 ispc CRON[1610745]: pam_unix(cron:session): session closed for user root Dec 15 05:18:33 ispc sshd[1610774]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 05:19:01 ispc CRON[1610785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:19:01 ispc CRON[1610785]: pam_unix(cron:session): session closed for user root Dec 15 05:19:16 ispc postfix/smtpd[1610805]: sql auxprop plugin using mysql engine Dec 15 05:19:16 ispc postfix/smtpd[1610807]: sql auxprop plugin using mysql engine Dec 15 05:19:16 ispc postfix/smtpd[1610808]: sql auxprop plugin using mysql engine Dec 15 05:20:01 ispc CRON[1610827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:20:01 ispc CRON[1610830]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:20:01 ispc CRON[1610828]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:20:01 ispc CRON[1610829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:20:01 ispc CRON[1610826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:20:01 ispc CRON[1610828]: pam_unix(cron:session): session closed for user www-data Dec 15 05:20:01 ispc CRON[1610827]: pam_unix(cron:session): session closed for user root Dec 15 05:20:01 ispc CRON[1610830]: pam_unix(cron:session): session closed for user getmail Dec 15 05:20:02 ispc CRON[1610829]: pam_unix(cron:session): session closed for user root Dec 15 05:20:02 ispc CRON[1610826]: pam_unix(cron:session): session closed for user root Dec 15 05:21:01 ispc CRON[1610931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:21:01 ispc CRON[1610932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:21:01 ispc CRON[1610931]: pam_unix(cron:session): session closed for user root Dec 15 05:21:02 ispc CRON[1610932]: pam_unix(cron:session): session closed for user root Dec 15 05:22:01 ispc CRON[1610973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:22:01 ispc CRON[1610973]: pam_unix(cron:session): session closed for user root Dec 15 05:22:07 ispc postfix/smtpd[1610988]: sql auxprop plugin using mysql engine Dec 15 05:23:01 ispc CRON[1611021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:23:03 ispc CRON[1611021]: pam_unix(cron:session): session closed for user root Dec 15 05:24:01 ispc CRON[1611059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:24:01 ispc CRON[1611059]: pam_unix(cron:session): session closed for user root Dec 15 05:24:39 ispc postfix/smtpd[1611089]: sql auxprop plugin using mysql engine Dec 15 05:24:39 ispc saslauthd[1611091]: pam_mysql - SELECT returned no result. Dec 15 05:24:39 ispc saslauthd[1611091]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:24:39 ispc saslauthd[1611091]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:24:52 ispc saslauthd[1611098]: pam_mysql - SELECT returned no result. Dec 15 05:24:52 ispc saslauthd[1611098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:24:52 ispc saslauthd[1611098]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:25:01 ispc CRON[1611103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:25:01 ispc CRON[1611104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:25:01 ispc CRON[1611105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:25:01 ispc CRON[1611106]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:25:01 ispc CRON[1611104]: pam_unix(cron:session): session closed for user root Dec 15 05:25:02 ispc CRON[1611106]: pam_unix(cron:session): session closed for user getmail Dec 15 05:25:02 ispc CRON[1611105]: pam_unix(cron:session): session closed for user root Dec 15 05:25:02 ispc CRON[1611103]: pam_unix(cron:session): session closed for user root Dec 15 05:26:01 ispc CRON[1611204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:26:02 ispc CRON[1611204]: pam_unix(cron:session): session closed for user root Dec 15 05:26:07 ispc sshd[1611220]: Did not receive identification string from 161.35.64.97 Dec 15 05:26:17 ispc CRON[1610063]: pam_unix(cron:session): session closed for user root Dec 15 05:27:01 ispc CRON[1611231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:27:01 ispc CRON[1611230]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:27:01 ispc CRON[1611231]: pam_unix(cron:session): session closed for user root Dec 15 05:27:27 ispc saslauthd[1611250]: pam_mysql - SELECT returned no result. Dec 15 05:27:27 ispc saslauthd[1611250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:27:27 ispc saslauthd[1611250]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:27:43 ispc saslauthd[1611256]: pam_mysql - SELECT returned no result. Dec 15 05:27:43 ispc saslauthd[1611256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:27:43 ispc saslauthd[1611256]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:27:50 ispc CRON[1611230]: pam_unix(cron:session): session closed for user www-data Dec 15 05:27:55 ispc postfix/smtpd[1611269]: sql auxprop plugin using mysql engine Dec 15 05:28:01 ispc CRON[1611273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:28:02 ispc CRON[1611273]: pam_unix(cron:session): session closed for user root Dec 15 05:29:01 ispc CRON[1611288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:29:02 ispc CRON[1611288]: pam_unix(cron:session): session closed for user root Dec 15 05:29:08 ispc postfix/smtpd[1611301]: sql auxprop plugin using mysql engine Dec 15 05:29:50 ispc saslauthd[1611307]: pam_mysql - SELECT returned no result. Dec 15 05:29:50 ispc saslauthd[1611307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:29:50 ispc saslauthd[1611307]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:30:01 ispc CRON[1611310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:30:01 ispc CRON[1611313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:30:01 ispc CRON[1611311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:30:01 ispc CRON[1611314]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:30:01 ispc CRON[1611312]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:30:01 ispc CRON[1611311]: pam_unix(cron:session): session closed for user root Dec 15 05:30:01 ispc CRON[1611312]: pam_unix(cron:session): session closed for user www-data Dec 15 05:30:01 ispc CRON[1611314]: pam_unix(cron:session): session closed for user getmail Dec 15 05:30:03 ispc CRON[1611310]: pam_unix(cron:session): session closed for user root Dec 15 05:30:05 ispc sshd[1611418]: Invalid user solv from 161.35.64.97 Dec 15 05:30:17 ispc sshd[1611478]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 05:30:59 ispc CRON[1611313]: pam_unix(cron:session): session closed for user root Dec 15 05:31:01 ispc CRON[1611508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:31:17 ispc saslauthd[1611526]: pam_mysql - SELECT returned no result. Dec 15 05:31:17 ispc saslauthd[1611526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:31:17 ispc saslauthd[1611526]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:32:01 ispc CRON[1611549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:32:02 ispc CRON[1611549]: pam_unix(cron:session): session closed for user root Dec 15 05:32:22 ispc sshd[1611570]: Invalid user solv from 161.35.64.97 Dec 15 05:33:01 ispc CRON[1611595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:33:02 ispc CRON[1611595]: pam_unix(cron:session): session closed for user root Dec 15 05:34:01 ispc CRON[1611634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:34:02 ispc CRON[1611634]: pam_unix(cron:session): session closed for user root Dec 15 05:34:38 ispc sshd[1611658]: Invalid user solv from 161.35.64.97 Dec 15 05:34:41 ispc sshd[1611664]: Invalid user admin from 45.148.10.121 Dec 15 05:35:01 ispc CRON[1611681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:35:01 ispc CRON[1611682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:35:01 ispc CRON[1611683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:35:01 ispc CRON[1611684]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:35:01 ispc CRON[1611682]: pam_unix(cron:session): session closed for user root Dec 15 05:35:01 ispc CRON[1611684]: pam_unix(cron:session): session closed for user getmail Dec 15 05:35:02 ispc CRON[1611683]: pam_unix(cron:session): session closed for user root Dec 15 05:35:03 ispc CRON[1611681]: pam_unix(cron:session): session closed for user root Dec 15 05:36:01 ispc CRON[1611780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:36:02 ispc CRON[1611780]: pam_unix(cron:session): session closed for user root Dec 15 05:36:04 ispc postfix/smtpd[1611794]: sql auxprop plugin using mysql engine Dec 15 05:36:51 ispc sshd[1611815]: Invalid user solv from 161.35.64.97 Dec 15 05:37:01 ispc CRON[1611823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:37:02 ispc CRON[1611823]: pam_unix(cron:session): session closed for user root Dec 15 05:38:01 ispc CRON[1611873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:38:02 ispc CRON[1611873]: pam_unix(cron:session): session closed for user root Dec 15 05:38:38 ispc postfix/smtpd[1611906]: sql auxprop plugin using mysql engine Dec 15 05:38:42 ispc saslauthd[1611908]: pam_mysql - SELECT returned no result. Dec 15 05:38:42 ispc saslauthd[1611908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:38:42 ispc saslauthd[1611908]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:38:58 ispc sshd[1611917]: Invalid user solv from 161.35.64.97 Dec 15 05:39:01 ispc CRON[1611919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:39:01 ispc CRON[1611920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:39:01 ispc CRON[1611919]: pam_unix(cron:session): session closed for user root Dec 15 05:39:02 ispc CRON[1611920]: pam_unix(cron:session): session closed for user root Dec 15 05:39:29 ispc postfix/smtpd[1611954]: sql auxprop plugin using mysql engine Dec 15 05:39:29 ispc postfix/smtpd[1611956]: sql auxprop plugin using mysql engine Dec 15 05:39:30 ispc postfix/smtpd[1611957]: sql auxprop plugin using mysql engine Dec 15 05:40:01 ispc CRON[1611971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:40:01 ispc CRON[1611972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:40:01 ispc CRON[1611973]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:40:01 ispc CRON[1611974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:40:01 ispc CRON[1611975]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:40:01 ispc CRON[1611972]: pam_unix(cron:session): session closed for user root Dec 15 05:40:01 ispc CRON[1611973]: pam_unix(cron:session): session closed for user www-data Dec 15 05:40:01 ispc CRON[1611975]: pam_unix(cron:session): session closed for user getmail Dec 15 05:40:02 ispc CRON[1611971]: pam_unix(cron:session): session closed for user root Dec 15 05:40:02 ispc CRON[1611974]: pam_unix(cron:session): session closed for user root Dec 15 05:40:57 ispc sshd[1612076]: Invalid user solv from 161.35.64.97 Dec 15 05:41:01 ispc CRON[1612088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:41:02 ispc CRON[1612088]: pam_unix(cron:session): session closed for user root Dec 15 05:42:01 ispc CRON[1612129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:42:02 ispc CRON[1612129]: pam_unix(cron:session): session closed for user root Dec 15 05:42:18 ispc postfix/smtpd[1612145]: sql auxprop plugin using mysql engine Dec 15 05:42:19 ispc saslauthd[1612147]: pam_mysql - SELECT returned no result. Dec 15 05:42:19 ispc saslauthd[1612147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:42:19 ispc saslauthd[1612147]: do_auth : auth failure: [user=theman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:42:53 ispc postfix/smtpd[1612172]: sql auxprop plugin using mysql engine Dec 15 05:43:01 ispc CRON[1612175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:43:02 ispc CRON[1612175]: pam_unix(cron:session): session closed for user root Dec 15 05:43:22 ispc saslauthd[1612195]: pam_mysql - SELECT returned no result. Dec 15 05:43:22 ispc saslauthd[1612195]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:43:22 ispc saslauthd[1612195]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:44:01 ispc CRON[1612214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:44:03 ispc CRON[1612214]: pam_unix(cron:session): session closed for user root Dec 15 05:45:01 ispc CRON[1612252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:45:01 ispc CRON[1612253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:45:01 ispc CRON[1612254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:45:01 ispc CRON[1612255]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:45:01 ispc CRON[1612253]: pam_unix(cron:session): session closed for user root Dec 15 05:45:01 ispc CRON[1612255]: pam_unix(cron:session): session closed for user getmail Dec 15 05:45:01 ispc CRON[1612252]: pam_unix(cron:session): session closed for user root Dec 15 05:45:02 ispc CRON[1612254]: pam_unix(cron:session): session closed for user root Dec 15 05:45:05 ispc postfix/smtpd[1612330]: sql auxprop plugin using mysql engine Dec 15 05:45:06 ispc saslauthd[1612332]: pam_mysql - SELECT returned no result. Dec 15 05:45:06 ispc saslauthd[1612332]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:45:06 ispc saslauthd[1612332]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:45:11 ispc postfix/smtpd[1612337]: sql auxprop plugin using mysql engine Dec 15 05:46:01 ispc CRON[1612361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:46:02 ispc CRON[1612361]: pam_unix(cron:session): session closed for user root Dec 15 05:46:04 ispc sshd[1612374]: Invalid user klape from 2.57.217.229 Dec 15 05:46:05 ispc sshd[1612376]: Invalid user ubuntu from 2.57.217.229 Dec 15 05:46:39 ispc saslauthd[1612395]: pam_mysql - SELECT returned no result. Dec 15 05:46:39 ispc saslauthd[1612395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:46:39 ispc saslauthd[1612395]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:47:01 ispc CRON[1612405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:47:03 ispc CRON[1612405]: pam_unix(cron:session): session closed for user root Dec 15 05:47:44 ispc sshd[1612439]: Did not receive identification string from 113.44.87.197 Dec 15 05:48:01 ispc CRON[1612453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:48:02 ispc CRON[1612453]: pam_unix(cron:session): session closed for user root Dec 15 05:48:17 ispc saslauthd[1612468]: pam_mysql - SELECT returned no result. Dec 15 05:48:17 ispc saslauthd[1612468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:48:17 ispc saslauthd[1612468]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:49:01 ispc CRON[1612491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:49:02 ispc CRON[1612491]: pam_unix(cron:session): session closed for user root Dec 15 05:50:01 ispc CRON[1612524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:50:01 ispc CRON[1612525]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:50:01 ispc CRON[1612526]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 05:50:01 ispc CRON[1612527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:50:01 ispc CRON[1612528]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:50:01 ispc CRON[1612525]: pam_unix(cron:session): session closed for user root Dec 15 05:50:01 ispc CRON[1612526]: pam_unix(cron:session): session closed for user www-data Dec 15 05:50:01 ispc CRON[1612528]: pam_unix(cron:session): session closed for user getmail Dec 15 05:50:02 ispc CRON[1612527]: pam_unix(cron:session): session closed for user root Dec 15 05:50:03 ispc CRON[1612524]: pam_unix(cron:session): session closed for user root Dec 15 05:50:21 ispc postfix/smtpd[1612610]: sql auxprop plugin using mysql engine Dec 15 05:50:24 ispc postfix/smtpd[1612616]: sql auxprop plugin using mysql engine Dec 15 05:50:24 ispc saslauthd[1612617]: pam_mysql - SELECT returned no result. Dec 15 05:50:24 ispc saslauthd[1612617]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:50:24 ispc saslauthd[1612617]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:51:01 ispc CRON[1612633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:51:02 ispc CRON[1612633]: pam_unix(cron:session): session closed for user root Dec 15 05:51:36 ispc CRON[1611508]: pam_unix(cron:session): session closed for user root Dec 15 05:51:45 ispc postfix/smtpd[1612662]: sql auxprop plugin using mysql engine Dec 15 05:51:45 ispc postfix/smtpd[1612665]: sql auxprop plugin using mysql engine Dec 15 05:52:01 ispc CRON[1612666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:52:02 ispc CRON[1612666]: pam_unix(cron:session): session closed for user root Dec 15 05:53:01 ispc CRON[1612689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:53:02 ispc CRON[1612689]: pam_unix(cron:session): session closed for user root Dec 15 05:53:30 ispc saslauthd[1612701]: pam_mysql - SELECT returned no result. Dec 15 05:53:30 ispc saslauthd[1612701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:53:30 ispc saslauthd[1612701]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:54:01 ispc CRON[1612705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:54:04 ispc CRON[1612705]: pam_unix(cron:session): session closed for user root Dec 15 05:55:01 ispc CRON[1612720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:55:01 ispc CRON[1612721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:55:01 ispc CRON[1612722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:55:01 ispc CRON[1612723]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 05:55:01 ispc CRON[1612721]: pam_unix(cron:session): session closed for user root Dec 15 05:55:01 ispc CRON[1612723]: pam_unix(cron:session): session closed for user getmail Dec 15 05:55:02 ispc CRON[1612720]: pam_unix(cron:session): session closed for user root Dec 15 05:55:45 ispc sshd[1612830]: Invalid user diamantdi from 35.239.77.168 Dec 15 05:55:47 ispc CRON[1612722]: pam_unix(cron:session): session closed for user root Dec 15 05:55:52 ispc saslauthd[1612832]: pam_mysql - SELECT returned no result. Dec 15 05:55:52 ispc saslauthd[1612832]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:55:52 ispc saslauthd[1612832]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:56:01 ispc CRON[1612833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:56:16 ispc saslauthd[1612850]: pam_mysql - SELECT returned no result. Dec 15 05:56:16 ispc saslauthd[1612850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:56:16 ispc saslauthd[1612850]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:56:20 ispc saslauthd[1612852]: pam_mysql - SELECT returned no result. Dec 15 05:56:20 ispc saslauthd[1612852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:56:20 ispc saslauthd[1612852]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:56:22 ispc saslauthd[1612858]: pam_mysql - SELECT returned no result. Dec 15 05:56:22 ispc saslauthd[1612858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:56:22 ispc saslauthd[1612858]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:56:56 ispc saslauthd[1612872]: pam_mysql - SELECT returned no result. Dec 15 05:56:56 ispc saslauthd[1612872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:56:56 ispc saslauthd[1612872]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:56:58 ispc sshd[1612873]: Bad protocol version identification 'GET / HTTP/1.1' from 64.62.197.182 Dec 15 05:57:01 ispc CRON[1612874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:57:02 ispc CRON[1612874]: pam_unix(cron:session): session closed for user root Dec 15 05:57:15 ispc saslauthd[1612893]: pam_mysql - SELECT returned no result. Dec 15 05:57:15 ispc saslauthd[1612893]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:57:15 ispc saslauthd[1612893]: do_auth : auth failure: [user=tomcat] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:58:01 ispc CRON[1612921]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:58:02 ispc CRON[1612921]: pam_unix(cron:session): session closed for user root Dec 15 05:58:21 ispc postfix/smtpd[1612942]: sql auxprop plugin using mysql engine Dec 15 05:58:45 ispc saslauthd[1612957]: pam_mysql - SELECT returned no result. Dec 15 05:58:45 ispc saslauthd[1612957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:58:45 ispc saslauthd[1612957]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:58:48 ispc saslauthd[1612958]: pam_mysql - SELECT returned no result. Dec 15 05:58:48 ispc saslauthd[1612958]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 05:58:48 ispc saslauthd[1612958]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 05:59:01 ispc CRON[1612964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 05:59:02 ispc CRON[1612964]: pam_unix(cron:session): session closed for user root Dec 15 06:00:01 ispc CRON[1613001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:00:01 ispc CRON[1613002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:00:01 ispc CRON[1613003]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:00:01 ispc CRON[1613004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:00:01 ispc CRON[1613005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:00:01 ispc CRON[1613006]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:00:01 ispc CRON[1613002]: pam_unix(cron:session): session closed for user root Dec 15 06:00:01 ispc CRON[1613003]: pam_unix(cron:session): session closed for user www-data Dec 15 06:00:01 ispc CRON[1613006]: pam_unix(cron:session): session closed for user getmail Dec 15 06:00:02 ispc CRON[1613004]: pam_unix(cron:session): session closed for user root Dec 15 06:00:02 ispc CRON[1613005]: pam_unix(cron:session): session closed for user root Dec 15 06:00:02 ispc CRON[1613001]: pam_unix(cron:session): session closed for user root Dec 15 06:00:29 ispc postfix/smtpd[1613173]: sql auxprop plugin using mysql engine Dec 15 06:00:30 ispc postfix/smtpd[1613175]: sql auxprop plugin using mysql engine Dec 15 06:00:30 ispc postfix/smtpd[1613176]: sql auxprop plugin using mysql engine Dec 15 06:00:59 ispc sshd[1613189]: Did not receive identification string from 167.71.10.51 Dec 15 06:01:01 ispc CRON[1613190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:01:02 ispc CRON[1613190]: pam_unix(cron:session): session closed for user root Dec 15 06:01:48 ispc postfix/smtpd[1613224]: sql auxprop plugin using mysql engine Dec 15 06:01:49 ispc saslauthd[1613225]: pam_mysql - SELECT returned no result. Dec 15 06:01:49 ispc saslauthd[1613225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:01:49 ispc saslauthd[1613225]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:01:49 ispc postfix/smtpd[1613226]: sql auxprop plugin using mysql engine Dec 15 06:01:50 ispc saslauthd[1613227]: pam_mysql - SELECT returned no result. Dec 15 06:01:50 ispc saslauthd[1613227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:01:50 ispc saslauthd[1613227]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:02:01 ispc CRON[1613234]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 06:02:01 ispc CRON[1613235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:02:02 ispc CRON[1613235]: pam_unix(cron:session): session closed for user root Dec 15 06:02:07 ispc saslauthd[1613316]: pam_mysql - SELECT returned no result. Dec 15 06:02:07 ispc saslauthd[1613316]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:02:07 ispc saslauthd[1613316]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:02:28 ispc saslauthd[1613678]: pam_mysql - SELECT returned no result. Dec 15 06:02:28 ispc saslauthd[1613678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:02:28 ispc saslauthd[1613678]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:02:29 ispc saslauthd[1613694]: pam_mysql - SELECT returned no result. Dec 15 06:02:29 ispc saslauthd[1613694]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:02:29 ispc saslauthd[1613694]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:02:33 ispc saslauthd[1613734]: pam_mysql - SELECT returned no result. Dec 15 06:02:33 ispc saslauthd[1613734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:02:33 ispc saslauthd[1613734]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:02:55 ispc saslauthd[1614091]: pam_mysql - SELECT returned no result. Dec 15 06:02:55 ispc saslauthd[1614091]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:02:55 ispc saslauthd[1614091]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:01 ispc CRON[1614114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:03:02 ispc CRON[1614114]: pam_unix(cron:session): session closed for user root Dec 15 06:03:08 ispc saslauthd[1614129]: pam_mysql - SELECT returned no result. Dec 15 06:03:08 ispc saslauthd[1614129]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:08 ispc saslauthd[1614129]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:09 ispc saslauthd[1614131]: pam_mysql - SELECT returned no result. Dec 15 06:03:09 ispc saslauthd[1614131]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:09 ispc saslauthd[1614131]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:13 ispc saslauthd[1614162]: pam_mysql - SELECT returned no result. Dec 15 06:03:13 ispc saslauthd[1614162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:13 ispc saslauthd[1614162]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:14 ispc saslauthd[1614174]: pam_mysql - SELECT returned no result. Dec 15 06:03:14 ispc saslauthd[1614174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:14 ispc saslauthd[1614174]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:18 ispc saslauthd[1614220]: pam_mysql - SELECT returned no result. Dec 15 06:03:18 ispc saslauthd[1614220]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:18 ispc saslauthd[1614220]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:22 ispc saslauthd[1614245]: pam_mysql - SELECT returned no result. Dec 15 06:03:22 ispc saslauthd[1614245]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:22 ispc saslauthd[1614245]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:28 ispc CRON[1613234]: pam_unix(cron:session): session closed for user logcheck Dec 15 06:03:32 ispc saslauthd[1614327]: pam_mysql - SELECT returned no result. Dec 15 06:03:32 ispc saslauthd[1614327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:03:32 ispc saslauthd[1614327]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:03:39 ispc postfix/smtpd[1614333]: sql auxprop plugin using mysql engine Dec 15 06:04:01 ispc CRON[1614349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:04:02 ispc CRON[1614349]: pam_unix(cron:session): session closed for user root Dec 15 06:04:37 ispc postfix/smtpd[1614379]: sql auxprop plugin using mysql engine Dec 15 06:05:01 ispc postfix/smtpd[1614394]: sql auxprop plugin using mysql engine Dec 15 06:05:01 ispc postfix/smtpd[1614396]: sql auxprop plugin using mysql engine Dec 15 06:05:01 ispc CRON[1614397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:05:01 ispc CRON[1614398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:05:01 ispc CRON[1614399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:05:01 ispc CRON[1614400]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:05:01 ispc CRON[1614398]: pam_unix(cron:session): session closed for user root Dec 15 06:05:01 ispc CRON[1614400]: pam_unix(cron:session): session closed for user getmail Dec 15 06:05:02 ispc CRON[1614397]: pam_unix(cron:session): session closed for user root Dec 15 06:05:02 ispc CRON[1614399]: pam_unix(cron:session): session closed for user root Dec 15 06:05:28 ispc sshd[1614482]: Did not receive identification string from 80.94.92.186 Dec 15 06:06:01 ispc CRON[1614503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:06:02 ispc CRON[1614503]: pam_unix(cron:session): session closed for user root Dec 15 06:07:01 ispc CRON[1614539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:07:02 ispc CRON[1614539]: pam_unix(cron:session): session closed for user root Dec 15 06:07:21 ispc sshd[1614554]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 06:07:42 ispc sshd[1614570]: Invalid user admin from 116.120.58.228 Dec 15 06:08:01 ispc CRON[1614590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:08:02 ispc CRON[1614590]: pam_unix(cron:session): session closed for user root Dec 15 06:08:12 ispc sshd[1614608]: Invalid user klape from 51.77.222.24 Dec 15 06:08:12 ispc sshd[1614610]: Invalid user ubuntu from 51.77.222.24 Dec 15 06:09:01 ispc CRON[1614628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:09:01 ispc CRON[1614629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:09:02 ispc CRON[1614628]: pam_unix(cron:session): session closed for user root Dec 15 06:09:03 ispc CRON[1614629]: pam_unix(cron:session): session closed for user root Dec 15 06:10:01 ispc CRON[1614681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:10:01 ispc CRON[1614682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:10:01 ispc CRON[1614683]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:10:01 ispc CRON[1614684]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:10:01 ispc CRON[1614685]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:10:01 ispc CRON[1614683]: pam_unix(cron:session): session closed for user www-data Dec 15 06:10:01 ispc CRON[1614682]: pam_unix(cron:session): session closed for user root Dec 15 06:10:01 ispc CRON[1614685]: pam_unix(cron:session): session closed for user getmail Dec 15 06:10:01 ispc CRON[1614684]: pam_unix(cron:session): session closed for user root Dec 15 06:10:02 ispc CRON[1614681]: pam_unix(cron:session): session closed for user root Dec 15 06:11:01 ispc CRON[1614783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:11:02 ispc CRON[1614783]: pam_unix(cron:session): session closed for user root Dec 15 06:12:01 ispc CRON[1614824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:12:01 ispc CRON[1614824]: pam_unix(cron:session): session closed for user root Dec 15 06:12:24 ispc postfix/smtpd[1614849]: sql auxprop plugin using mysql engine Dec 15 06:12:25 ispc saslauthd[1614856]: pam_mysql - SELECT returned no result. Dec 15 06:12:25 ispc saslauthd[1614856]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:12:25 ispc saslauthd[1614856]: do_auth : auth failure: [user=toor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:13:01 ispc CRON[1614881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:13:02 ispc CRON[1614881]: pam_unix(cron:session): session closed for user root Dec 15 06:13:24 ispc sshd[1614903]: Invalid user sol from 80.94.92.186 Dec 15 06:14:01 ispc CRON[1614924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:14:02 ispc CRON[1614924]: pam_unix(cron:session): session closed for user root Dec 15 06:14:39 ispc postfix/smtpd[1614953]: sql auxprop plugin using mysql engine Dec 15 06:15:01 ispc CRON[1614968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:15:01 ispc CRON[1614969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:15:01 ispc CRON[1614970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:15:01 ispc CRON[1614971]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:15:01 ispc CRON[1614969]: pam_unix(cron:session): session closed for user root Dec 15 06:15:01 ispc CRON[1614971]: pam_unix(cron:session): session closed for user getmail Dec 15 06:15:02 ispc sshd[1614966]: Invalid user test1 from 167.71.10.51 Dec 15 06:15:02 ispc CRON[1614970]: pam_unix(cron:session): session closed for user root Dec 15 06:15:03 ispc CRON[1614968]: pam_unix(cron:session): session closed for user root Dec 15 06:15:44 ispc sshd[1615063]: Invalid user test2 from 167.71.10.51 Dec 15 06:15:55 ispc sshd[1615071]: Invalid user klape from 187.190.35.163 Dec 15 06:15:56 ispc sshd[1615073]: Invalid user ubuntu from 187.190.35.163 Dec 15 06:16:01 ispc CRON[1615079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:16:01 ispc CRON[1615079]: pam_unix(cron:session): session closed for user root Dec 15 06:16:20 ispc postfix/smtpd[1615101]: sql auxprop plugin using mysql engine Dec 15 06:16:20 ispc CRON[1612833]: pam_unix(cron:session): session closed for user root Dec 15 06:16:26 ispc sshd[1615105]: Invalid user test3 from 167.71.10.51 Dec 15 06:17:01 ispc CRON[1615109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:17:01 ispc CRON[1615109]: pam_unix(cron:session): session closed for user root Dec 15 06:18:02 ispc CRON[1615140]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 06:18:02 ispc CRON[1615141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:18:02 ispc CRON[1615141]: pam_unix(cron:session): session closed for user root Dec 15 06:18:05 ispc CRON[1615140]: pam_unix(cron:session): session closed for user amavis Dec 15 06:18:07 ispc postfix/smtpd[1615165]: sql auxprop plugin using mysql engine Dec 15 06:19:01 ispc CRON[1615178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:19:02 ispc CRON[1615178]: pam_unix(cron:session): session closed for user root Dec 15 06:20:01 ispc CRON[1615198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:20:01 ispc CRON[1615199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:20:01 ispc CRON[1615200]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:20:01 ispc CRON[1615201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:20:01 ispc CRON[1615202]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:20:01 ispc CRON[1615199]: pam_unix(cron:session): session closed for user root Dec 15 06:20:01 ispc CRON[1615200]: pam_unix(cron:session): session closed for user www-data Dec 15 06:20:01 ispc CRON[1615202]: pam_unix(cron:session): session closed for user getmail Dec 15 06:20:02 ispc CRON[1615198]: pam_unix(cron:session): session closed for user root Dec 15 06:20:07 ispc sshd[1615309]: Invalid user solana from 80.94.92.186 Dec 15 06:20:36 ispc CRON[1615201]: pam_unix(cron:session): session closed for user root Dec 15 06:20:44 ispc saslauthd[1615317]: pam_mysql - SELECT returned no result. Dec 15 06:20:44 ispc saslauthd[1615317]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:20:44 ispc saslauthd[1615317]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:21:01 ispc CRON[1615318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:21:01 ispc CRON[1615319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:21:01 ispc CRON[1615318]: pam_unix(cron:session): session closed for user root Dec 15 06:21:38 ispc sshd[1615351]: Invalid user postgres from 167.71.10.51 Dec 15 06:22:02 ispc CRON[1615363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:22:02 ispc CRON[1615363]: pam_unix(cron:session): session closed for user root Dec 15 06:22:12 ispc sshd[1615378]: Invalid user oracle from 167.71.10.51 Dec 15 06:22:45 ispc sshd[1615399]: Invalid user user from 167.71.10.51 Dec 15 06:23:01 ispc CRON[1615421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:23:02 ispc CRON[1615421]: pam_unix(cron:session): session closed for user root Dec 15 06:23:03 ispc sshd[1615436]: Invalid user admin from 45.140.17.52 Dec 15 06:23:05 ispc sshd[1615446]: Invalid user admin from 45.140.17.52 Dec 15 06:23:06 ispc sshd[1615448]: Invalid user admin from 45.140.17.52 Dec 15 06:23:07 ispc sshd[1615450]: Invalid user service from 45.140.17.52 Dec 15 06:23:07 ispc sshd[1615452]: Invalid user gitlab from 45.140.17.52 Dec 15 06:23:08 ispc sshd[1615454]: Invalid user ubnt from 45.140.17.52 Dec 15 06:23:08 ispc sshd[1615456]: Invalid user apache from 45.140.17.52 Dec 15 06:24:01 ispc CRON[1615487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:24:02 ispc CRON[1615487]: pam_unix(cron:session): session closed for user root Dec 15 06:24:47 ispc postfix/smtpd[1615521]: sql auxprop plugin using mysql engine Dec 15 06:24:48 ispc saslauthd[1615524]: pam_mysql - SELECT returned no result. Dec 15 06:24:48 ispc saslauthd[1615524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:24:48 ispc saslauthd[1615524]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:25:01 ispc CRON[1615530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:25:01 ispc CRON[1615531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:25:01 ispc CRON[1615532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:25:01 ispc CRON[1615533]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:25:01 ispc CRON[1615531]: pam_unix(cron:session): session closed for user root Dec 15 06:25:01 ispc CRON[1615533]: pam_unix(cron:session): session closed for user getmail Dec 15 06:25:02 ispc CRON[1615532]: pam_unix(cron:session): session closed for user root Dec 15 06:25:02 ispc CRON[1615530]: pam_unix(cron:session): session closed for user root Dec 15 06:26:01 ispc CRON[1615633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:26:02 ispc CRON[1615633]: pam_unix(cron:session): session closed for user root Dec 15 06:26:25 ispc sshd[1615652]: Did not receive identification string from 164.92.156.36 Dec 15 06:27:01 ispc CRON[1615673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:27:03 ispc CRON[1615673]: pam_unix(cron:session): session closed for user root Dec 15 06:27:04 ispc sshd[1615667]: Invalid user node from 80.94.92.186 Dec 15 06:27:18 ispc postfix/smtpd[1615693]: sql auxprop plugin using mysql engine Dec 15 06:27:19 ispc saslauthd[1615695]: pam_mysql - SELECT returned no result. Dec 15 06:27:19 ispc saslauthd[1615695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:27:19 ispc saslauthd[1615695]: do_auth : auth failure: [user=topicalt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:27:53 ispc saslauthd[1615719]: pam_mysql - SELECT returned no result. Dec 15 06:27:53 ispc saslauthd[1615719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:27:53 ispc saslauthd[1615719]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:28:01 ispc CRON[1615725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:28:01 ispc CRON[1615725]: pam_unix(cron:session): session closed for user root Dec 15 06:28:58 ispc saslauthd[1615757]: pam_mysql - SELECT returned no result. Dec 15 06:28:58 ispc saslauthd[1615757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:28:58 ispc saslauthd[1615757]: do_auth : auth failure: [user=sybase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:29:01 ispc CRON[1615764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:29:02 ispc CRON[1615764]: pam_unix(cron:session): session closed for user root Dec 15 06:30:01 ispc CRON[1615801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:30:01 ispc CRON[1615802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:30:01 ispc CRON[1615803]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:30:01 ispc CRON[1615804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:30:01 ispc CRON[1615805]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:30:01 ispc CRON[1615802]: pam_unix(cron:session): session closed for user root Dec 15 06:30:01 ispc CRON[1615803]: pam_unix(cron:session): session closed for user www-data Dec 15 06:30:01 ispc CRON[1615805]: pam_unix(cron:session): session closed for user getmail Dec 15 06:30:02 ispc CRON[1615804]: pam_unix(cron:session): session closed for user root Dec 15 06:30:02 ispc CRON[1615801]: pam_unix(cron:session): session closed for user root Dec 15 06:31:01 ispc CRON[1615908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:31:02 ispc CRON[1615908]: pam_unix(cron:session): session closed for user root Dec 15 06:31:05 ispc sshd[1615920]: Did not receive identification string from 45.140.17.97 Dec 15 06:31:06 ispc postfix/smtpd[1615921]: sql auxprop plugin using mysql engine Dec 15 06:32:01 ispc CRON[1615951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:32:03 ispc CRON[1615951]: pam_unix(cron:session): session closed for user root Dec 15 06:32:28 ispc postfix/smtpd[1615970]: sql auxprop plugin using mysql engine Dec 15 06:33:01 ispc CRON[1615995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:33:02 ispc CRON[1615995]: pam_unix(cron:session): session closed for user root Dec 15 06:33:31 ispc sshd[1616021]: Invalid user ubuntu from 80.94.92.186 Dec 15 06:34:01 ispc CRON[1616038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:34:02 ispc CRON[1616038]: pam_unix(cron:session): session closed for user root Dec 15 06:35:01 ispc CRON[1616080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:35:01 ispc CRON[1616081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:35:01 ispc CRON[1616082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:35:01 ispc CRON[1616083]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:35:01 ispc CRON[1616081]: pam_unix(cron:session): session closed for user root Dec 15 06:35:01 ispc CRON[1616083]: pam_unix(cron:session): session closed for user getmail Dec 15 06:35:02 ispc CRON[1616082]: pam_unix(cron:session): session closed for user root Dec 15 06:35:02 ispc CRON[1616080]: pam_unix(cron:session): session closed for user root Dec 15 06:35:43 ispc postfix/smtpd[1616173]: sql auxprop plugin using mysql engine Dec 15 06:35:43 ispc saslauthd[1616175]: pam_mysql - SELECT returned no result. Dec 15 06:35:43 ispc saslauthd[1616175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:35:43 ispc saslauthd[1616175]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:36:01 ispc CRON[1616185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:36:01 ispc CRON[1616185]: pam_unix(cron:session): session closed for user root Dec 15 06:37:01 ispc CRON[1616224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:37:02 ispc CRON[1616224]: pam_unix(cron:session): session closed for user root Dec 15 06:37:43 ispc sshd[1616260]: Invalid user martof from 116.120.58.228 Dec 15 06:38:01 ispc CRON[1616281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:38:02 ispc CRON[1616281]: pam_unix(cron:session): session closed for user root Dec 15 06:38:33 ispc postfix/smtpd[1616305]: sql auxprop plugin using mysql engine Dec 15 06:38:40 ispc postfix/smtpd[1616321]: sql auxprop plugin using mysql engine Dec 15 06:39:01 ispc CRON[1616341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:39:01 ispc CRON[1616342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:39:01 ispc CRON[1616341]: pam_unix(cron:session): session closed for user root Dec 15 06:39:01 ispc CRON[1616342]: pam_unix(cron:session): session closed for user root Dec 15 06:39:52 ispc sshd[1616385]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 06:39:52 ispc sshd[1616385]: Invalid user user from 2.57.121.25 Dec 15 06:40:01 ispc CRON[1616401]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:40:01 ispc CRON[1616403]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:40:01 ispc CRON[1616400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:40:01 ispc CRON[1616402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:40:01 ispc CRON[1616401]: pam_unix(cron:session): session closed for user www-data Dec 15 06:40:01 ispc CRON[1616400]: pam_unix(cron:session): session closed for user root Dec 15 06:40:01 ispc CRON[1616399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:40:01 ispc CRON[1616403]: pam_unix(cron:session): session closed for user getmail Dec 15 06:40:02 ispc saslauthd[1616424]: pam_mysql - SELECT returned no result. Dec 15 06:40:02 ispc saslauthd[1616424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:40:02 ispc saslauthd[1616424]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:40:02 ispc CRON[1616402]: pam_unix(cron:session): session closed for user root Dec 15 06:40:03 ispc CRON[1616399]: pam_unix(cron:session): session closed for user root Dec 15 06:40:20 ispc sshd[1616483]: Invalid user minima from 80.94.92.186 Dec 15 06:41:01 ispc CRON[1616508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:41:02 ispc CRON[1616508]: pam_unix(cron:session): session closed for user root Dec 15 06:41:21 ispc CRON[1615319]: pam_unix(cron:session): session closed for user root Dec 15 06:42:01 ispc CRON[1616531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:42:02 ispc CRON[1616531]: pam_unix(cron:session): session closed for user root Dec 15 06:42:20 ispc saslauthd[1616546]: pam_mysql - SELECT returned no result. Dec 15 06:42:20 ispc saslauthd[1616546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:42:20 ispc saslauthd[1616546]: do_auth : auth failure: [user=topicnorm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:42:27 ispc saslauthd[1616547]: pam_mysql - SELECT returned no result. Dec 15 06:42:27 ispc saslauthd[1616547]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:42:27 ispc saslauthd[1616547]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:43:00 ispc saslauthd[1616565]: pam_mysql - SELECT returned no result. Dec 15 06:43:00 ispc saslauthd[1616565]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:43:00 ispc saslauthd[1616565]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:43:01 ispc CRON[1616566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:43:02 ispc CRON[1616566]: pam_unix(cron:session): session closed for user root Dec 15 06:43:59 ispc saslauthd[1616582]: pam_mysql - SELECT returned no result. Dec 15 06:43:59 ispc saslauthd[1616582]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:43:59 ispc saslauthd[1616582]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:44:01 ispc CRON[1616583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:44:03 ispc CRON[1616583]: pam_unix(cron:session): session closed for user root Dec 15 06:45:01 ispc CRON[1616601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:45:01 ispc CRON[1616602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:45:01 ispc CRON[1616603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:45:01 ispc CRON[1616604]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:45:01 ispc CRON[1616602]: pam_unix(cron:session): session closed for user root Dec 15 06:45:01 ispc CRON[1616604]: pam_unix(cron:session): session closed for user getmail Dec 15 06:45:02 ispc CRON[1616601]: pam_unix(cron:session): session closed for user root Dec 15 06:45:34 ispc saslauthd[1616790]: pam_mysql - SELECT returned no result. Dec 15 06:45:34 ispc saslauthd[1616790]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:45:34 ispc saslauthd[1616790]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:45:37 ispc postfix/smtpd[1616791]: sql auxprop plugin using mysql engine Dec 15 06:45:58 ispc CRON[1616603]: pam_unix(cron:session): session closed for user root Dec 15 06:46:01 ispc CRON[1616800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:47:01 ispc CRON[1616838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:47:02 ispc CRON[1616838]: pam_unix(cron:session): session closed for user root Dec 15 06:47:11 ispc sshd[1616853]: Invalid user validator from 80.94.92.186 Dec 15 06:47:53 ispc postfix/smtpd[1616892]: sql auxprop plugin using mysql engine Dec 15 06:47:54 ispc saslauthd[1616894]: pam_mysql - SELECT returned no result. Dec 15 06:47:54 ispc saslauthd[1616894]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:47:54 ispc saslauthd[1616894]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:48:01 ispc CRON[1616899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:48:02 ispc CRON[1616899]: pam_unix(cron:session): session closed for user root Dec 15 06:49:01 ispc CRON[1616939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:49:02 ispc CRON[1616939]: pam_unix(cron:session): session closed for user root Dec 15 06:49:43 ispc postfix/smtpd[1616968]: sql auxprop plugin using mysql engine Dec 15 06:49:44 ispc saslauthd[1616970]: pam_mysql - SELECT returned no result. Dec 15 06:49:44 ispc saslauthd[1616970]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:49:44 ispc saslauthd[1616970]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:50:01 ispc CRON[1616981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:50:01 ispc CRON[1616982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:50:01 ispc CRON[1616983]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 06:50:01 ispc CRON[1616984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:50:01 ispc CRON[1616985]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:50:01 ispc CRON[1616983]: pam_unix(cron:session): session closed for user www-data Dec 15 06:50:01 ispc CRON[1616982]: pam_unix(cron:session): session closed for user root Dec 15 06:50:01 ispc CRON[1616985]: pam_unix(cron:session): session closed for user getmail Dec 15 06:50:02 ispc CRON[1616984]: pam_unix(cron:session): session closed for user root Dec 15 06:50:02 ispc CRON[1616981]: pam_unix(cron:session): session closed for user root Dec 15 06:50:55 ispc postfix/smtpd[1617083]: sql auxprop plugin using mysql engine Dec 15 06:51:01 ispc CRON[1617089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:51:02 ispc CRON[1617089]: pam_unix(cron:session): session closed for user root Dec 15 06:52:01 ispc CRON[1617129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:52:01 ispc CRON[1617130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:52:02 ispc CRON[1617130]: pam_unix(cron:session): session closed for user root Dec 15 06:52:06 ispc postfix/smtpd[1617145]: sql auxprop plugin using mysql engine Dec 15 06:52:07 ispc saslauthd[1617147]: pam_mysql - SELECT returned no result. Dec 15 06:52:07 ispc saslauthd[1617147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:52:07 ispc saslauthd[1617147]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:52:29 ispc saslauthd[1617160]: pam_mysql - SELECT returned no result. Dec 15 06:52:29 ispc saslauthd[1617160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:52:29 ispc saslauthd[1617160]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:52:36 ispc saslauthd[1617165]: pam_mysql - SELECT returned no result. Dec 15 06:52:36 ispc saslauthd[1617165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:52:36 ispc saslauthd[1617165]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:52:38 ispc saslauthd[1617169]: pam_mysql - SELECT returned no result. Dec 15 06:52:38 ispc saslauthd[1617169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:52:38 ispc saslauthd[1617169]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:53:01 ispc CRON[1617190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:53:02 ispc CRON[1617190]: pam_unix(cron:session): session closed for user root Dec 15 06:54:01 ispc CRON[1617233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:54:01 ispc CRON[1617233]: pam_unix(cron:session): session closed for user root Dec 15 06:55:01 ispc CRON[1617269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:55:01 ispc CRON[1617270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:55:01 ispc CRON[1617272]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 06:55:01 ispc CRON[1617271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:55:02 ispc CRON[1617270]: pam_unix(cron:session): session closed for user root Dec 15 06:55:02 ispc CRON[1617272]: pam_unix(cron:session): session closed for user getmail Dec 15 06:55:02 ispc CRON[1617271]: pam_unix(cron:session): session closed for user root Dec 15 06:55:02 ispc CRON[1617269]: pam_unix(cron:session): session closed for user root Dec 15 06:55:12 ispc sshd[1617352]: Invalid user klape from 70.37.89.177 Dec 15 06:55:13 ispc sshd[1617354]: Invalid user ubuntu from 70.37.89.177 Dec 15 06:55:19 ispc CRON[1617129]: pam_unix(cron:session): session closed for user root Dec 15 06:55:25 ispc postfix/smtpd[1617364]: sql auxprop plugin using mysql engine Dec 15 06:55:25 ispc saslauthd[1617366]: pam_mysql - SELECT returned no result. Dec 15 06:55:25 ispc saslauthd[1617366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:55:25 ispc saslauthd[1617366]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:55:30 ispc saslauthd[1617367]: pam_mysql - SELECT returned no result. Dec 15 06:55:30 ispc saslauthd[1617367]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:55:30 ispc saslauthd[1617367]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:55:39 ispc saslauthd[1617372]: pam_mysql - SELECT returned no result. Dec 15 06:55:39 ispc saslauthd[1617372]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:55:39 ispc saslauthd[1617372]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:55:41 ispc saslauthd[1617373]: pam_mysql - SELECT returned no result. Dec 15 06:55:41 ispc saslauthd[1617373]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:55:41 ispc saslauthd[1617373]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:56:01 ispc CRON[1617388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:56:02 ispc CRON[1617388]: pam_unix(cron:session): session closed for user root Dec 15 06:56:05 ispc saslauthd[1617403]: pam_mysql - SELECT returned no result. Dec 15 06:56:05 ispc saslauthd[1617403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:56:05 ispc saslauthd[1617403]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:56:20 ispc saslauthd[1617410]: pam_mysql - SELECT returned no result. Dec 15 06:56:20 ispc saslauthd[1617410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:56:20 ispc saslauthd[1617410]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:56:24 ispc saslauthd[1617411]: pam_mysql - SELECT returned no result. Dec 15 06:56:24 ispc saslauthd[1617411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:56:24 ispc saslauthd[1617411]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:56:27 ispc saslauthd[1617417]: pam_mysql - SELECT returned no result. Dec 15 06:56:27 ispc saslauthd[1617417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:56:27 ispc saslauthd[1617417]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:56:49 ispc saslauthd[1617426]: pam_mysql - SELECT returned no result. Dec 15 06:56:49 ispc saslauthd[1617426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:56:49 ispc saslauthd[1617426]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:00 ispc saslauthd[1617431]: pam_mysql - SELECT returned no result. Dec 15 06:57:00 ispc saslauthd[1617431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:00 ispc saslauthd[1617431]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:01 ispc CRON[1617432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:57:01 ispc CRON[1617432]: pam_unix(cron:session): session closed for user root Dec 15 06:57:05 ispc saslauthd[1617443]: pam_mysql - SELECT returned no result. Dec 15 06:57:05 ispc saslauthd[1617443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:05 ispc saslauthd[1617443]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:05 ispc saslauthd[1617444]: pam_mysql - SELECT returned no result. Dec 15 06:57:05 ispc saslauthd[1617444]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:05 ispc saslauthd[1617444]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:08 ispc saslauthd[1617451]: pam_mysql - SELECT returned no result. Dec 15 06:57:08 ispc saslauthd[1617451]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:08 ispc saslauthd[1617451]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:09 ispc saslauthd[1617452]: pam_mysql - SELECT returned no result. Dec 15 06:57:09 ispc saslauthd[1617452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:09 ispc saslauthd[1617452]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:18 ispc saslauthd[1617457]: pam_mysql - SELECT returned no result. Dec 15 06:57:18 ispc saslauthd[1617457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:18 ispc saslauthd[1617457]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:26 ispc saslauthd[1617458]: pam_mysql - SELECT returned no result. Dec 15 06:57:26 ispc saslauthd[1617458]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:26 ispc saslauthd[1617458]: do_auth : auth failure: [user=topicres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:57:28 ispc saslauthd[1617463]: pam_mysql - SELECT returned no result. Dec 15 06:57:28 ispc saslauthd[1617463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 06:57:28 ispc saslauthd[1617463]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 06:58:01 ispc CRON[1617489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:58:02 ispc CRON[1617489]: pam_unix(cron:session): session closed for user root Dec 15 06:59:01 ispc CRON[1617527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 06:59:02 ispc CRON[1617527]: pam_unix(cron:session): session closed for user root Dec 15 06:59:19 ispc sshd[1617542]: Invalid user admin from 164.92.156.36 Dec 15 07:00:01 ispc CRON[1617566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:00:01 ispc CRON[1617567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:00:01 ispc CRON[1617568]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:00:01 ispc CRON[1617569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:00:01 ispc CRON[1617570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:00:01 ispc CRON[1617571]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:00:01 ispc CRON[1617567]: pam_unix(cron:session): session closed for user root Dec 15 07:00:01 ispc CRON[1617568]: pam_unix(cron:session): session closed for user www-data Dec 15 07:00:01 ispc CRON[1617571]: pam_unix(cron:session): session closed for user getmail Dec 15 07:00:02 ispc CRON[1617570]: pam_unix(cron:session): session closed for user root Dec 15 07:00:03 ispc CRON[1617569]: pam_unix(cron:session): session closed for user root Dec 15 07:00:03 ispc CRON[1617566]: pam_unix(cron:session): session closed for user root Dec 15 07:00:24 ispc sshd[1617729]: Invalid user admin from 164.92.156.36 Dec 15 07:00:57 ispc postfix/smtpd[1617747]: sql auxprop plugin using mysql engine Dec 15 07:00:57 ispc saslauthd[1617750]: pam_mysql - SELECT returned no result. Dec 15 07:00:57 ispc saslauthd[1617750]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:00:57 ispc saslauthd[1617750]: do_auth : auth failure: [user=informix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:01:01 ispc CRON[1617751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:01:02 ispc CRON[1617751]: pam_unix(cron:session): session closed for user root Dec 15 07:01:29 ispc sshd[1617774]: Invalid user admin from 164.92.156.36 Dec 15 07:02:01 ispc CRON[1617790]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 07:02:01 ispc CRON[1617791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:02:02 ispc CRON[1617791]: pam_unix(cron:session): session closed for user root Dec 15 07:02:32 ispc sshd[1618318]: Invalid user admin from 164.92.156.36 Dec 15 07:03:01 ispc CRON[1618635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:03:02 ispc CRON[1618635]: pam_unix(cron:session): session closed for user root Dec 15 07:03:35 ispc CRON[1617790]: pam_unix(cron:session): session closed for user logcheck Dec 15 07:03:35 ispc sshd[1618852]: Invalid user admin from 164.92.156.36 Dec 15 07:03:56 ispc postfix/smtpd[1618893]: sql auxprop plugin using mysql engine Dec 15 07:03:57 ispc sshd[1618891]: Invalid user blceu from 45.119.213.109 Dec 15 07:04:01 ispc CRON[1618902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:04:02 ispc CRON[1618902]: pam_unix(cron:session): session closed for user root Dec 15 07:04:39 ispc sshd[1618925]: Invalid user admin from 164.92.156.36 Dec 15 07:05:01 ispc CRON[1618947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:05:01 ispc CRON[1618948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:05:01 ispc CRON[1618949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:05:01 ispc CRON[1618950]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:05:01 ispc CRON[1618948]: pam_unix(cron:session): session closed for user root Dec 15 07:05:01 ispc CRON[1618950]: pam_unix(cron:session): session closed for user getmail Dec 15 07:05:02 ispc CRON[1618949]: pam_unix(cron:session): session closed for user root Dec 15 07:05:03 ispc CRON[1618947]: pam_unix(cron:session): session closed for user root Dec 15 07:05:04 ispc sshd[1619008]: Invalid user ziplines from 116.120.58.228 Dec 15 07:06:01 ispc CRON[1619054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:06:02 ispc CRON[1619054]: pam_unix(cron:session): session closed for user root Dec 15 07:06:29 ispc postfix/smtpd[1619077]: sql auxprop plugin using mysql engine Dec 15 07:06:29 ispc CRON[1616800]: pam_unix(cron:session): session closed for user root Dec 15 07:06:49 ispc sshd[1619087]: Invalid user klape from 103.164.20.29 Dec 15 07:06:51 ispc sshd[1619089]: Invalid user ubuntu from 103.164.20.29 Dec 15 07:07:01 ispc CRON[1619092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:07:02 ispc CRON[1619092]: pam_unix(cron:session): session closed for user root Dec 15 07:07:06 ispc sshd[1619104]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:08:01 ispc CRON[1619116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:08:02 ispc CRON[1619116]: pam_unix(cron:session): session closed for user root Dec 15 07:09:01 ispc CRON[1619135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:09:01 ispc CRON[1619134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:09:01 ispc CRON[1619134]: pam_unix(cron:session): session closed for user root Dec 15 07:09:02 ispc CRON[1619135]: pam_unix(cron:session): session closed for user root Dec 15 07:09:12 ispc sshd[1619157]: Did not receive identification string from 80.94.92.182 Dec 15 07:09:51 ispc postfix/smtpd[1619159]: sql auxprop plugin using mysql engine Dec 15 07:09:51 ispc postfix/smtpd[1619162]: sql auxprop plugin using mysql engine Dec 15 07:09:52 ispc postfix/smtpd[1619164]: sql auxprop plugin using mysql engine Dec 15 07:10:01 ispc CRON[1619166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:10:01 ispc CRON[1619167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:10:01 ispc CRON[1619168]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:10:01 ispc CRON[1619169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:10:01 ispc CRON[1619170]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:10:01 ispc CRON[1619167]: pam_unix(cron:session): session closed for user root Dec 15 07:10:01 ispc CRON[1619168]: pam_unix(cron:session): session closed for user www-data Dec 15 07:10:01 ispc CRON[1619170]: pam_unix(cron:session): session closed for user getmail Dec 15 07:10:02 ispc CRON[1619166]: pam_unix(cron:session): session closed for user root Dec 15 07:10:30 ispc CRON[1619169]: pam_unix(cron:session): session closed for user root Dec 15 07:11:01 ispc CRON[1619280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:12:01 ispc CRON[1619314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:12:02 ispc CRON[1619314]: pam_unix(cron:session): session closed for user root Dec 15 07:12:24 ispc postfix/smtpd[1619340]: sql auxprop plugin using mysql engine Dec 15 07:12:29 ispc postfix/smtpd[1619342]: sql auxprop plugin using mysql engine Dec 15 07:12:31 ispc saslauthd[1619343]: pam_mysql - SELECT returned no result. Dec 15 07:12:31 ispc saslauthd[1619343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:12:31 ispc saslauthd[1619343]: do_auth : auth failure: [user=tour] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:13:01 ispc CRON[1619364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:13:02 ispc CRON[1619364]: pam_unix(cron:session): session closed for user root Dec 15 07:14:01 ispc CRON[1619403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:14:02 ispc CRON[1619403]: pam_unix(cron:session): session closed for user root Dec 15 07:15:01 ispc CRON[1619441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:15:01 ispc CRON[1619442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:15:01 ispc CRON[1619443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:15:01 ispc CRON[1619444]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:15:01 ispc CRON[1619442]: pam_unix(cron:session): session closed for user root Dec 15 07:15:01 ispc CRON[1619444]: pam_unix(cron:session): session closed for user getmail Dec 15 07:15:01 ispc CRON[1619443]: pam_unix(cron:session): session closed for user root Dec 15 07:15:02 ispc CRON[1619441]: pam_unix(cron:session): session closed for user root Dec 15 07:16:01 ispc CRON[1619547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:16:01 ispc CRON[1619547]: pam_unix(cron:session): session closed for user root Dec 15 07:16:07 ispc sshd[1619562]: Invalid user sol from 80.94.92.182 Dec 15 07:16:53 ispc postfix/smtpd[1619582]: sql auxprop plugin using mysql engine Dec 15 07:16:54 ispc saslauthd[1619585]: pam_mysql - SELECT returned no result. Dec 15 07:16:54 ispc saslauthd[1619585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:16:54 ispc saslauthd[1619585]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:17:01 ispc CRON[1619590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:17:02 ispc CRON[1619590]: pam_unix(cron:session): session closed for user root Dec 15 07:18:01 ispc CRON[1619636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:18:02 ispc CRON[1619636]: pam_unix(cron:session): session closed for user root Dec 15 07:19:01 ispc CRON[1619674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:19:01 ispc CRON[1619674]: pam_unix(cron:session): session closed for user root Dec 15 07:19:44 ispc postfix/smtpd[1619709]: sql auxprop plugin using mysql engine Dec 15 07:19:45 ispc saslauthd[1619711]: pam_mysql - SELECT returned no result. Dec 15 07:19:45 ispc saslauthd[1619711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:19:45 ispc saslauthd[1619711]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:20:01 ispc CRON[1619720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:20:01 ispc CRON[1619721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:20:01 ispc CRON[1619722]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:20:01 ispc CRON[1619723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:20:01 ispc CRON[1619724]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:20:02 ispc CRON[1619721]: pam_unix(cron:session): session closed for user root Dec 15 07:20:02 ispc CRON[1619722]: pam_unix(cron:session): session closed for user www-data Dec 15 07:20:02 ispc CRON[1619724]: pam_unix(cron:session): session closed for user getmail Dec 15 07:20:03 ispc CRON[1619723]: pam_unix(cron:session): session closed for user root Dec 15 07:20:03 ispc CRON[1619720]: pam_unix(cron:session): session closed for user root Dec 15 07:20:48 ispc postfix/smtpd[1619824]: sql auxprop plugin using mysql engine Dec 15 07:21:01 ispc CRON[1619838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:21:01 ispc CRON[1619839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:21:01 ispc CRON[1619838]: pam_unix(cron:session): session closed for user root Dec 15 07:21:01 ispc CRON[1619839]: pam_unix(cron:session): session closed for user root Dec 15 07:22:01 ispc CRON[1619880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:22:02 ispc CRON[1619880]: pam_unix(cron:session): session closed for user root Dec 15 07:22:33 ispc sshd[1619905]: Invalid user solana from 80.94.92.182 Dec 15 07:23:01 ispc CRON[1619928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:23:02 ispc CRON[1619928]: pam_unix(cron:session): session closed for user root Dec 15 07:24:01 ispc CRON[1619964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:24:02 ispc CRON[1619964]: pam_unix(cron:session): session closed for user root Dec 15 07:24:35 ispc postfix/smtpd[1619991]: sql auxprop plugin using mysql engine Dec 15 07:24:36 ispc saslauthd[1619994]: pam_mysql - SELECT returned no result. Dec 15 07:24:36 ispc saslauthd[1619994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:24:36 ispc saslauthd[1619994]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:25:01 ispc CRON[1620007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:25:01 ispc CRON[1620010]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:25:01 ispc CRON[1620008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:25:01 ispc CRON[1620009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:25:01 ispc CRON[1620008]: pam_unix(cron:session): session closed for user root Dec 15 07:25:01 ispc CRON[1620010]: pam_unix(cron:session): session closed for user getmail Dec 15 07:25:02 ispc CRON[1620009]: pam_unix(cron:session): session closed for user root Dec 15 07:25:02 ispc CRON[1620007]: pam_unix(cron:session): session closed for user root Dec 15 07:26:01 ispc CRON[1620109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:26:02 ispc CRON[1620109]: pam_unix(cron:session): session closed for user root Dec 15 07:27:01 ispc CRON[1620147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:27:01 ispc CRON[1620147]: pam_unix(cron:session): session closed for user root Dec 15 07:27:14 ispc postfix/smtpd[1620162]: sql auxprop plugin using mysql engine Dec 15 07:27:14 ispc postfix/smtpd[1620164]: sql auxprop plugin using mysql engine Dec 15 07:27:14 ispc postfix/smtpd[1620165]: sql auxprop plugin using mysql engine Dec 15 07:27:34 ispc postfix/smtpd[1620176]: sql auxprop plugin using mysql engine Dec 15 07:27:36 ispc saslauthd[1620177]: pam_mysql - SELECT returned no result. Dec 15 07:27:36 ispc saslauthd[1620177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:27:36 ispc saslauthd[1620177]: do_auth : auth failure: [user=tridium] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:28:01 ispc CRON[1620197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:28:02 ispc CRON[1620197]: pam_unix(cron:session): session closed for user root Dec 15 07:29:01 ispc CRON[1620236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:29:01 ispc CRON[1620236]: pam_unix(cron:session): session closed for user root Dec 15 07:29:07 ispc sshd[1620252]: Invalid user solv from 80.94.92.182 Dec 15 07:30:01 ispc CRON[1620275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:30:01 ispc CRON[1620276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:30:01 ispc CRON[1620277]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:30:01 ispc CRON[1620278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:30:01 ispc CRON[1620279]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:30:01 ispc CRON[1620276]: pam_unix(cron:session): session closed for user root Dec 15 07:30:01 ispc CRON[1620277]: pam_unix(cron:session): session closed for user www-data Dec 15 07:30:01 ispc CRON[1620279]: pam_unix(cron:session): session closed for user getmail Dec 15 07:30:02 ispc CRON[1620278]: pam_unix(cron:session): session closed for user root Dec 15 07:30:02 ispc CRON[1620275]: pam_unix(cron:session): session closed for user root Dec 15 07:31:01 ispc CRON[1620383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:31:01 ispc CRON[1620383]: pam_unix(cron:session): session closed for user root Dec 15 07:31:26 ispc postfix/smtpd[1620405]: sql auxprop plugin using mysql engine Dec 15 07:31:26 ispc CRON[1619280]: pam_unix(cron:session): session closed for user root Dec 15 07:32:01 ispc CRON[1620416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:32:02 ispc CRON[1620416]: pam_unix(cron:session): session closed for user root Dec 15 07:33:00 ispc saslauthd[1620442]: pam_mysql - SELECT returned no result. Dec 15 07:33:00 ispc saslauthd[1620442]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:33:00 ispc saslauthd[1620442]: do_auth : auth failure: [user=oracle8] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:33:01 ispc CRON[1620443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:33:02 ispc CRON[1620443]: pam_unix(cron:session): session closed for user root Dec 15 07:33:20 ispc saslauthd[1620457]: pam_mysql - SELECT returned no result. Dec 15 07:33:20 ispc saslauthd[1620457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:33:20 ispc saslauthd[1620457]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:34:01 ispc CRON[1620459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:34:01 ispc CRON[1620459]: pam_unix(cron:session): session closed for user root Dec 15 07:35:01 ispc CRON[1620474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:35:01 ispc CRON[1620476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:35:01 ispc CRON[1620477]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:35:01 ispc CRON[1620475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:35:01 ispc CRON[1620475]: pam_unix(cron:session): session closed for user root Dec 15 07:35:01 ispc CRON[1620477]: pam_unix(cron:session): session closed for user getmail Dec 15 07:35:02 ispc CRON[1620474]: pam_unix(cron:session): session closed for user root Dec 15 07:35:29 ispc sshd[1620583]: Invalid user sol from 80.94.92.182 Dec 15 07:35:32 ispc CRON[1620476]: pam_unix(cron:session): session closed for user root Dec 15 07:36:01 ispc CRON[1620589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:36:45 ispc postfix/smtpd[1620620]: sql auxprop plugin using mysql engine Dec 15 07:36:45 ispc saslauthd[1620622]: pam_mysql - SELECT returned no result. Dec 15 07:36:45 ispc saslauthd[1620622]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:36:45 ispc saslauthd[1620622]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:37:01 ispc CRON[1620628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:37:02 ispc CRON[1620628]: pam_unix(cron:session): session closed for user root Dec 15 07:38:01 ispc CRON[1620676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:38:02 ispc CRON[1620676]: pam_unix(cron:session): session closed for user root Dec 15 07:38:43 ispc postfix/smtpd[1620704]: sql auxprop plugin using mysql engine Dec 15 07:38:43 ispc postfix/smtpd[1620706]: sql auxprop plugin using mysql engine Dec 15 07:38:44 ispc postfix/smtpd[1620707]: sql auxprop plugin using mysql engine Dec 15 07:39:01 ispc CRON[1620717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:39:01 ispc CRON[1620718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:39:01 ispc CRON[1620717]: pam_unix(cron:session): session closed for user root Dec 15 07:39:02 ispc CRON[1620718]: pam_unix(cron:session): session closed for user root Dec 15 07:40:01 ispc CRON[1620768]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:40:01 ispc CRON[1620769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:40:01 ispc CRON[1620770]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:40:01 ispc CRON[1620766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:40:01 ispc CRON[1620767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:40:01 ispc CRON[1620770]: pam_unix(cron:session): session closed for user getmail Dec 15 07:40:01 ispc CRON[1620768]: pam_unix(cron:session): session closed for user www-data Dec 15 07:40:01 ispc CRON[1620767]: pam_unix(cron:session): session closed for user root Dec 15 07:40:01 ispc CRON[1620769]: pam_unix(cron:session): session closed for user root Dec 15 07:40:02 ispc CRON[1620766]: pam_unix(cron:session): session closed for user root Dec 15 07:40:36 ispc postfix/smtpd[1620857]: sql auxprop plugin using mysql engine Dec 15 07:40:36 ispc saslauthd[1620859]: pam_mysql - SELECT returned no result. Dec 15 07:40:36 ispc saslauthd[1620859]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:40:36 ispc saslauthd[1620859]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:41:01 ispc CRON[1620874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:41:01 ispc CRON[1620874]: pam_unix(cron:session): session closed for user root Dec 15 07:41:05 ispc saslauthd[1620885]: pam_mysql - SELECT returned no result. Dec 15 07:41:05 ispc saslauthd[1620885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:41:05 ispc saslauthd[1620885]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:42:01 ispc CRON[1620919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:42:02 ispc CRON[1620919]: pam_unix(cron:session): session closed for user root Dec 15 07:42:03 ispc postfix/smtpd[1620930]: sql auxprop plugin using mysql engine Dec 15 07:42:25 ispc saslauthd[1620942]: pam_mysql - SELECT returned no result. Dec 15 07:42:25 ispc saslauthd[1620942]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:42:25 ispc saslauthd[1620942]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:42:37 ispc saslauthd[1620948]: pam_mysql - SELECT returned no result. Dec 15 07:42:37 ispc saslauthd[1620948]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:42:37 ispc saslauthd[1620948]: do_auth : auth failure: [user=trmcnfg] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:43:01 ispc CRON[1620968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:43:01 ispc CRON[1620968]: pam_unix(cron:session): session closed for user root Dec 15 07:44:01 ispc CRON[1621002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:44:02 ispc CRON[1621002]: pam_unix(cron:session): session closed for user root Dec 15 07:44:55 ispc sshd[1621039]: Invalid user martof from 221.156.137.103 Dec 15 07:45:01 ispc CRON[1621041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:45:01 ispc CRON[1621043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:45:01 ispc CRON[1621044]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:45:01 ispc CRON[1621042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:45:01 ispc CRON[1621042]: pam_unix(cron:session): session closed for user root Dec 15 07:45:01 ispc CRON[1621044]: pam_unix(cron:session): session closed for user getmail Dec 15 07:45:01 ispc CRON[1621043]: pam_unix(cron:session): session closed for user root Dec 15 07:45:02 ispc CRON[1621041]: pam_unix(cron:session): session closed for user root Dec 15 07:45:37 ispc postfix/smtpd[1621137]: sql auxprop plugin using mysql engine Dec 15 07:45:38 ispc saslauthd[1621139]: pam_mysql - SELECT returned no result. Dec 15 07:45:38 ispc saslauthd[1621139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:45:38 ispc saslauthd[1621139]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:46:01 ispc CRON[1621150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:46:01 ispc saslauthd[1621157]: pam_mysql - SELECT returned no result. Dec 15 07:46:01 ispc saslauthd[1621157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:46:01 ispc saslauthd[1621157]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:46:01 ispc CRON[1621150]: pam_unix(cron:session): session closed for user root Dec 15 07:47:01 ispc CRON[1621189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:47:02 ispc CRON[1621189]: pam_unix(cron:session): session closed for user root Dec 15 07:47:09 ispc sshd[1621204]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:48:01 ispc CRON[1621237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:48:01 ispc CRON[1621237]: pam_unix(cron:session): session closed for user root Dec 15 07:48:26 ispc postfix/smtpd[1621263]: sql auxprop plugin using mysql engine Dec 15 07:48:26 ispc saslauthd[1621265]: pam_mysql - SELECT returned no result. Dec 15 07:48:26 ispc saslauthd[1621265]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:48:26 ispc saslauthd[1621265]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:48:48 ispc saslauthd[1621277]: pam_mysql - SELECT returned no result. Dec 15 07:48:48 ispc saslauthd[1621277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:48:48 ispc saslauthd[1621277]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:48:52 ispc saslauthd[1621278]: pam_mysql - SELECT returned no result. Dec 15 07:48:52 ispc saslauthd[1621278]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:48:52 ispc saslauthd[1621278]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:48:56 ispc saslauthd[1621279]: pam_mysql - SELECT returned no result. Dec 15 07:48:56 ispc saslauthd[1621279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:48:56 ispc saslauthd[1621279]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:49:01 ispc CRON[1621285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:49:03 ispc CRON[1621285]: pam_unix(cron:session): session closed for user root Dec 15 07:49:41 ispc saslauthd[1621315]: pam_mysql - SELECT returned no result. Dec 15 07:49:41 ispc saslauthd[1621315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:49:41 ispc saslauthd[1621315]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:49:42 ispc saslauthd[1621316]: pam_mysql - SELECT returned no result. Dec 15 07:49:42 ispc saslauthd[1621316]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:49:42 ispc saslauthd[1621316]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:50:01 ispc CRON[1621325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:50:01 ispc CRON[1621326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:50:01 ispc CRON[1621327]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 07:50:01 ispc CRON[1621328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:50:01 ispc CRON[1621329]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:50:01 ispc CRON[1621327]: pam_unix(cron:session): session closed for user www-data Dec 15 07:50:01 ispc CRON[1621326]: pam_unix(cron:session): session closed for user root Dec 15 07:50:01 ispc CRON[1621329]: pam_unix(cron:session): session closed for user getmail Dec 15 07:50:01 ispc CRON[1621328]: pam_unix(cron:session): session closed for user root Dec 15 07:50:02 ispc CRON[1621325]: pam_unix(cron:session): session closed for user root Dec 15 07:50:04 ispc saslauthd[1621403]: pam_mysql - SELECT returned no result. Dec 15 07:50:04 ispc saslauthd[1621403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:50:04 ispc saslauthd[1621403]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:50:13 ispc saslauthd[1621408]: pam_mysql - SELECT returned no result. Dec 15 07:50:13 ispc saslauthd[1621408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:50:13 ispc saslauthd[1621408]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:50:18 ispc saslauthd[1621413]: pam_mysql - SELECT returned no result. Dec 15 07:50:18 ispc saslauthd[1621413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:50:18 ispc saslauthd[1621413]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:50:28 ispc saslauthd[1621424]: pam_mysql - SELECT returned no result. Dec 15 07:50:28 ispc saslauthd[1621424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:50:28 ispc saslauthd[1621424]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:50:50 ispc saslauthd[1621436]: pam_mysql - SELECT returned no result. Dec 15 07:50:50 ispc saslauthd[1621436]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:50:50 ispc saslauthd[1621436]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:01 ispc CRON[1621442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:51:01 ispc saslauthd[1621446]: pam_mysql - SELECT returned no result. Dec 15 07:51:01 ispc saslauthd[1621446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:01 ispc saslauthd[1621446]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:02 ispc CRON[1621442]: pam_unix(cron:session): session closed for user root Dec 15 07:51:06 ispc saslauthd[1621454]: pam_mysql - SELECT returned no result. Dec 15 07:51:06 ispc saslauthd[1621454]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:06 ispc saslauthd[1621454]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:08 ispc saslauthd[1621455]: pam_mysql - SELECT returned no result. Dec 15 07:51:08 ispc saslauthd[1621455]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:08 ispc saslauthd[1621455]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:13 ispc saslauthd[1621460]: pam_mysql - SELECT returned no result. Dec 15 07:51:13 ispc saslauthd[1621460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:13 ispc saslauthd[1621460]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:15 ispc postfix/smtpd[1621461]: sql auxprop plugin using mysql engine Dec 15 07:51:15 ispc postfix/smtpd[1621463]: sql auxprop plugin using mysql engine Dec 15 07:51:16 ispc postfix/smtpd[1621464]: sql auxprop plugin using mysql engine Dec 15 07:51:17 ispc saslauthd[1621465]: pam_mysql - SELECT returned no result. Dec 15 07:51:17 ispc saslauthd[1621465]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:17 ispc saslauthd[1621465]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:28 ispc saslauthd[1621470]: pam_mysql - SELECT returned no result. Dec 15 07:51:28 ispc saslauthd[1621470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:28 ispc saslauthd[1621470]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:51:33 ispc saslauthd[1621475]: pam_mysql - SELECT returned no result. Dec 15 07:51:33 ispc saslauthd[1621475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:51:33 ispc saslauthd[1621475]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:52:01 ispc CRON[1621489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:52:02 ispc CRON[1621489]: pam_unix(cron:session): session closed for user root Dec 15 07:52:14 ispc saslauthd[1621504]: pam_mysql - SELECT returned no result. Dec 15 07:52:14 ispc saslauthd[1621504]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:52:14 ispc saslauthd[1621504]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:52:19 ispc saslauthd[1621505]: pam_mysql - SELECT returned no result. Dec 15 07:52:19 ispc saslauthd[1621505]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:52:19 ispc saslauthd[1621505]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:53:01 ispc CRON[1621538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:53:01 ispc CRON[1621538]: pam_unix(cron:session): session closed for user root Dec 15 07:54:01 ispc CRON[1621580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:54:02 ispc CRON[1621580]: pam_unix(cron:session): session closed for user root Dec 15 07:54:36 ispc postfix/smtpd[1621607]: sql auxprop plugin using mysql engine Dec 15 07:54:37 ispc postfix/smtpd[1621609]: sql auxprop plugin using mysql engine Dec 15 07:54:37 ispc postfix/smtpd[1621610]: sql auxprop plugin using mysql engine Dec 15 07:54:51 ispc postfix/smtpd[1621617]: sql auxprop plugin using mysql engine Dec 15 07:55:01 ispc CRON[1621625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:55:01 ispc CRON[1621626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:55:01 ispc CRON[1621627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:55:01 ispc CRON[1621628]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 07:55:01 ispc CRON[1621626]: pam_unix(cron:session): session closed for user root Dec 15 07:55:01 ispc CRON[1621628]: pam_unix(cron:session): session closed for user getmail Dec 15 07:55:02 ispc CRON[1621627]: pam_unix(cron:session): session closed for user root Dec 15 07:55:02 ispc CRON[1621625]: pam_unix(cron:session): session closed for user root Dec 15 07:56:02 ispc CRON[1621731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:56:02 ispc CRON[1621731]: pam_unix(cron:session): session closed for user root Dec 15 07:56:24 ispc CRON[1620589]: pam_unix(cron:session): session closed for user root Dec 15 07:57:01 ispc CRON[1621762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:57:01 ispc saslauthd[1621764]: pam_mysql - SELECT returned no result. Dec 15 07:57:01 ispc saslauthd[1621764]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:57:01 ispc saslauthd[1621764]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:57:02 ispc CRON[1621762]: pam_unix(cron:session): session closed for user root Dec 15 07:57:20 ispc postfix/smtpd[1621776]: sql auxprop plugin using mysql engine Dec 15 07:57:32 ispc sshd[1621780]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:57:42 ispc saslauthd[1621789]: pam_mysql - SELECT returned no result. Dec 15 07:57:42 ispc saslauthd[1621789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 07:57:42 ispc saslauthd[1621789]: do_auth : auth failure: [user=trouble] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 07:58:01 ispc CRON[1621797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:58:02 ispc CRON[1621797]: pam_unix(cron:session): session closed for user root Dec 15 07:59:01 ispc CRON[1621815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 07:59:02 ispc CRON[1621815]: pam_unix(cron:session): session closed for user root Dec 15 07:59:39 ispc sshd[1621829]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:59:41 ispc sshd[1621834]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:59:41 ispc sshd[1621834]: Invalid user klape from 189.89.20.45 Dec 15 07:59:43 ispc sshd[1621836]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 07:59:43 ispc sshd[1621836]: Invalid user ubuntu from 189.89.20.45 Dec 15 08:00:01 ispc CRON[1621838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:00:01 ispc CRON[1621839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:00:01 ispc CRON[1621840]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:00:01 ispc CRON[1621841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:00:01 ispc CRON[1621842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:00:01 ispc CRON[1621843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:00:01 ispc CRON[1621844]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:00:01 ispc CRON[1621839]: pam_unix(cron:session): session closed for user root Dec 15 08:00:01 ispc CRON[1621840]: pam_unix(cron:session): session closed for user www-data Dec 15 08:00:01 ispc CRON[1621842]: pam_unix(cron:session): session closed for user root Dec 15 08:00:01 ispc CRON[1621844]: pam_unix(cron:session): session closed for user getmail Dec 15 08:00:02 ispc CRON[1621838]: pam_unix(cron:session): session closed for user root Dec 15 08:00:02 ispc CRON[1621841]: pam_unix(cron:session): session closed for user root Dec 15 08:00:50 ispc CRON[1621843]: pam_unix(cron:session): session closed for user root Dec 15 08:01:01 ispc CRON[1622121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:01:07 ispc sshd[1622133]: Invalid user ziplines from 5.133.121.104 Dec 15 08:02:01 ispc CRON[1622161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:02:01 ispc CRON[1622160]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 08:02:02 ispc CRON[1622161]: pam_unix(cron:session): session closed for user root Dec 15 08:02:14 ispc sshd[1622372]: Invalid user blceu from 5.133.121.104 Dec 15 08:03:01 ispc CRON[1623014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:03:01 ispc CRON[1623014]: pam_unix(cron:session): session closed for user root Dec 15 08:03:42 ispc CRON[1622160]: pam_unix(cron:session): session closed for user logcheck Dec 15 08:04:00 ispc postfix/smtpd[1623271]: sql auxprop plugin using mysql engine Dec 15 08:04:01 ispc CRON[1623275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:04:01 ispc CRON[1623275]: pam_unix(cron:session): session closed for user root Dec 15 08:04:58 ispc sshd[1623318]: Invalid user klape from 36.50.177.171 Dec 15 08:05:01 ispc CRON[1623328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:05:01 ispc CRON[1623331]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:05:01 ispc CRON[1623329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:05:01 ispc CRON[1623330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:05:01 ispc CRON[1623329]: pam_unix(cron:session): session closed for user root Dec 15 08:05:01 ispc CRON[1623331]: pam_unix(cron:session): session closed for user getmail Dec 15 08:05:02 ispc CRON[1623330]: pam_unix(cron:session): session closed for user root Dec 15 08:05:02 ispc CRON[1623328]: pam_unix(cron:session): session closed for user root Dec 15 08:05:04 ispc postfix/smtpd[1623404]: sql auxprop plugin using mysql engine Dec 15 08:05:04 ispc saslauthd[1623407]: pam_mysql - SELECT returned no result. Dec 15 08:05:04 ispc saslauthd[1623407]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:05:04 ispc saslauthd[1623407]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:05:08 ispc sshd[1623320]: Invalid user ubuntu from 36.50.177.171 Dec 15 08:06:01 ispc CRON[1623438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:06:02 ispc CRON[1623438]: pam_unix(cron:session): session closed for user root Dec 15 08:06:46 ispc postfix/smtpd[1623470]: sql auxprop plugin using mysql engine Dec 15 08:06:46 ispc saslauthd[1623472]: pam_mysql - SELECT returned no result. Dec 15 08:06:46 ispc saslauthd[1623472]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:06:46 ispc saslauthd[1623472]: do_auth : auth failure: [user=finance] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:07:01 ispc CRON[1623485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:07:01 ispc CRON[1623485]: pam_unix(cron:session): session closed for user root Dec 15 08:08:01 ispc CRON[1623536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:08:02 ispc CRON[1623536]: pam_unix(cron:session): session closed for user root Dec 15 08:09:01 ispc CRON[1623578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:09:01 ispc CRON[1623579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:09:01 ispc CRON[1623578]: pam_unix(cron:session): session closed for user root Dec 15 08:09:02 ispc CRON[1623579]: pam_unix(cron:session): session closed for user root Dec 15 08:10:01 ispc CRON[1623630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:10:01 ispc CRON[1623634]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:10:01 ispc CRON[1623632]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:10:01 ispc CRON[1623633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:10:01 ispc CRON[1623631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:10:01 ispc CRON[1623632]: pam_unix(cron:session): session closed for user www-data Dec 15 08:10:01 ispc CRON[1623631]: pam_unix(cron:session): session closed for user root Dec 15 08:10:01 ispc CRON[1623634]: pam_unix(cron:session): session closed for user getmail Dec 15 08:10:01 ispc CRON[1623633]: pam_unix(cron:session): session closed for user root Dec 15 08:10:01 ispc CRON[1623630]: pam_unix(cron:session): session closed for user root Dec 15 08:11:01 ispc CRON[1623739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:11:02 ispc CRON[1623739]: pam_unix(cron:session): session closed for user root Dec 15 08:12:01 ispc CRON[1623772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:12:02 ispc CRON[1623772]: pam_unix(cron:session): session closed for user root Dec 15 08:12:51 ispc postfix/smtpd[1623813]: sql auxprop plugin using mysql engine Dec 15 08:12:53 ispc saslauthd[1623816]: pam_mysql - SELECT returned no result. Dec 15 08:12:53 ispc saslauthd[1623816]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:12:53 ispc saslauthd[1623816]: do_auth : auth failure: [user=tutor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:13:01 ispc CRON[1623821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:13:02 ispc CRON[1623821]: pam_unix(cron:session): session closed for user root Dec 15 08:13:08 ispc saslauthd[1623837]: pam_mysql - SELECT returned no result. Dec 15 08:13:08 ispc saslauthd[1623837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:13:08 ispc saslauthd[1623837]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:13:28 ispc postfix/smtpd[1623848]: sql auxprop plugin using mysql engine Dec 15 08:14:01 ispc CRON[1623863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:14:02 ispc CRON[1623863]: pam_unix(cron:session): session closed for user root Dec 15 08:14:48 ispc saslauthd[1623897]: pam_mysql - SELECT returned no result. Dec 15 08:14:48 ispc saslauthd[1623897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:14:48 ispc saslauthd[1623897]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:15:01 ispc CRON[1623902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:15:01 ispc CRON[1623903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:15:01 ispc CRON[1623904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:15:01 ispc CRON[1623905]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:15:01 ispc CRON[1623903]: pam_unix(cron:session): session closed for user root Dec 15 08:15:01 ispc CRON[1623905]: pam_unix(cron:session): session closed for user getmail Dec 15 08:15:01 ispc CRON[1623904]: pam_unix(cron:session): session closed for user root Dec 15 08:15:01 ispc CRON[1623902]: pam_unix(cron:session): session closed for user root Dec 15 08:16:01 ispc CRON[1624006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:16:02 ispc CRON[1624006]: pam_unix(cron:session): session closed for user root Dec 15 08:17:01 ispc CRON[1624045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:17:02 ispc CRON[1624045]: pam_unix(cron:session): session closed for user root Dec 15 08:18:01 ispc CRON[1624092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:18:01 ispc sshd[1624091]: Did not receive identification string from 45.140.17.97 Dec 15 08:18:01 ispc postfix/smtpd[1624099]: sql auxprop plugin using mysql engine Dec 15 08:18:02 ispc CRON[1624092]: pam_unix(cron:session): session closed for user root Dec 15 08:19:01 ispc CRON[1624135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:19:01 ispc CRON[1624135]: pam_unix(cron:session): session closed for user root Dec 15 08:20:01 ispc CRON[1624174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:20:01 ispc CRON[1624175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:20:01 ispc CRON[1624176]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:20:01 ispc CRON[1624177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:20:01 ispc CRON[1624178]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:20:01 ispc CRON[1624175]: pam_unix(cron:session): session closed for user root Dec 15 08:20:01 ispc CRON[1624176]: pam_unix(cron:session): session closed for user www-data Dec 15 08:20:01 ispc CRON[1624178]: pam_unix(cron:session): session closed for user getmail Dec 15 08:20:01 ispc CRON[1624174]: pam_unix(cron:session): session closed for user root Dec 15 08:20:02 ispc CRON[1624177]: pam_unix(cron:session): session closed for user root Dec 15 08:21:01 ispc CRON[1624281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:21:01 ispc CRON[1624282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:21:01 ispc CRON[1624281]: pam_unix(cron:session): session closed for user root Dec 15 08:21:02 ispc CRON[1624282]: pam_unix(cron:session): session closed for user root Dec 15 08:21:28 ispc postfix/smtpd[1624308]: sql auxprop plugin using mysql engine Dec 15 08:21:28 ispc CRON[1622121]: pam_unix(cron:session): session closed for user root Dec 15 08:21:32 ispc saslauthd[1624312]: pam_mysql - SELECT returned no result. Dec 15 08:21:32 ispc saslauthd[1624312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:21:32 ispc saslauthd[1624312]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:22:01 ispc CRON[1624315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:22:02 ispc CRON[1624315]: pam_unix(cron:session): session closed for user root Dec 15 08:23:01 ispc CRON[1624339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:23:02 ispc CRON[1624339]: pam_unix(cron:session): session closed for user root Dec 15 08:24:01 ispc CRON[1624354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:24:02 ispc sshd[1624352]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 08:24:02 ispc sshd[1624352]: Invalid user blceu from 157.245.115.125 Dec 15 08:24:02 ispc CRON[1624354]: pam_unix(cron:session): session closed for user root Dec 15 08:25:01 ispc CRON[1624374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:25:01 ispc CRON[1624372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:25:01 ispc CRON[1624373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:25:01 ispc CRON[1624375]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:25:01 ispc CRON[1624373]: pam_unix(cron:session): session closed for user root Dec 15 08:25:01 ispc CRON[1624375]: pam_unix(cron:session): session closed for user getmail Dec 15 08:25:02 ispc CRON[1624372]: pam_unix(cron:session): session closed for user root Dec 15 08:25:32 ispc CRON[1624374]: pam_unix(cron:session): session closed for user root Dec 15 08:26:01 ispc CRON[1624484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:27:01 ispc CRON[1624523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:27:01 ispc CRON[1624523]: pam_unix(cron:session): session closed for user root Dec 15 08:27:06 ispc sshd[1624540]: Invalid user ziplines from 211.57.200.145 Dec 15 08:28:01 ispc CRON[1624570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:28:02 ispc postfix/smtpd[1624577]: sql auxprop plugin using mysql engine Dec 15 08:28:02 ispc CRON[1624570]: pam_unix(cron:session): session closed for user root Dec 15 08:28:03 ispc saslauthd[1624587]: pam_mysql - SELECT returned no result. Dec 15 08:28:03 ispc saslauthd[1624587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:28:03 ispc saslauthd[1624587]: do_auth : auth failure: [user=umountfs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:28:46 ispc postfix/smtpd[1624607]: sql auxprop plugin using mysql engine Dec 15 08:29:01 ispc CRON[1624615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:29:02 ispc CRON[1624615]: pam_unix(cron:session): session closed for user root Dec 15 08:29:19 ispc sshd[1624638]: Invalid user klape from 77.241.18.2 Dec 15 08:29:19 ispc sshd[1624640]: Invalid user ubuntu from 77.241.18.2 Dec 15 08:30:01 ispc CRON[1624661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:30:01 ispc CRON[1624658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:30:01 ispc CRON[1624660]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:30:01 ispc CRON[1624662]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:30:01 ispc CRON[1624659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:30:01 ispc CRON[1624660]: pam_unix(cron:session): session closed for user www-data Dec 15 08:30:01 ispc CRON[1624659]: pam_unix(cron:session): session closed for user root Dec 15 08:30:01 ispc CRON[1624662]: pam_unix(cron:session): session closed for user getmail Dec 15 08:30:01 ispc CRON[1624661]: pam_unix(cron:session): session closed for user root Dec 15 08:30:01 ispc CRON[1624658]: pam_unix(cron:session): session closed for user root Dec 15 08:30:16 ispc postfix/smtpd[1624746]: sql auxprop plugin using mysql engine Dec 15 08:30:17 ispc saslauthd[1624748]: pam_mysql - SELECT returned no result. Dec 15 08:30:17 ispc saslauthd[1624748]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:30:17 ispc saslauthd[1624748]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:31:01 ispc CRON[1624767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:31:02 ispc CRON[1624767]: pam_unix(cron:session): session closed for user root Dec 15 08:32:01 ispc CRON[1624806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:32:01 ispc CRON[1624806]: pam_unix(cron:session): session closed for user root Dec 15 08:32:40 ispc postfix/smtpd[1624841]: sql auxprop plugin using mysql engine Dec 15 08:33:02 ispc CRON[1624853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:33:02 ispc CRON[1624853]: pam_unix(cron:session): session closed for user root Dec 15 08:33:38 ispc postfix/smtpd[1624882]: sql auxprop plugin using mysql engine Dec 15 08:33:38 ispc saslauthd[1624884]: pam_mysql - SELECT returned no result. Dec 15 08:33:38 ispc saslauthd[1624884]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:33:38 ispc saslauthd[1624884]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:34:01 ispc CRON[1624893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:34:02 ispc CRON[1624893]: pam_unix(cron:session): session closed for user root Dec 15 08:35:01 ispc CRON[1624931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:35:01 ispc CRON[1624930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:35:01 ispc CRON[1624933]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:35:01 ispc CRON[1624932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:35:01 ispc CRON[1624931]: pam_unix(cron:session): session closed for user root Dec 15 08:35:01 ispc CRON[1624933]: pam_unix(cron:session): session closed for user getmail Dec 15 08:35:01 ispc CRON[1624932]: pam_unix(cron:session): session closed for user root Dec 15 08:35:02 ispc CRON[1624930]: pam_unix(cron:session): session closed for user root Dec 15 08:36:01 ispc CRON[1625032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:36:01 ispc CRON[1625032]: pam_unix(cron:session): session closed for user root Dec 15 08:36:11 ispc sshd[1625048]: Invalid user martof from 5.133.121.104 Dec 15 08:37:01 ispc CRON[1625072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:37:02 ispc CRON[1625072]: pam_unix(cron:session): session closed for user root Dec 15 08:37:04 ispc postfix/smtpd[1625083]: sql auxprop plugin using mysql engine Dec 15 08:37:04 ispc saslauthd[1625086]: pam_mysql - SELECT returned no result. Dec 15 08:37:04 ispc saslauthd[1625086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:37:04 ispc saslauthd[1625086]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:37:45 ispc saslauthd[1625110]: pam_mysql - SELECT returned no result. Dec 15 08:37:45 ispc saslauthd[1625110]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:37:45 ispc saslauthd[1625110]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:38:01 ispc CRON[1625120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:38:01 ispc CRON[1625120]: pam_unix(cron:session): session closed for user root Dec 15 08:38:06 ispc saslauthd[1625135]: pam_mysql - SELECT returned no result. Dec 15 08:38:06 ispc saslauthd[1625135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:38:06 ispc saslauthd[1625135]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:38:51 ispc sshd[1625154]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 08:38:51 ispc sshd[1625154]: Invalid user ziplines from 157.245.115.125 Dec 15 08:39:01 ispc CRON[1625161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:39:01 ispc CRON[1625162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:39:02 ispc CRON[1625161]: pam_unix(cron:session): session closed for user root Dec 15 08:39:02 ispc CRON[1625162]: pam_unix(cron:session): session closed for user root Dec 15 08:39:37 ispc saslauthd[1625201]: pam_mysql - SELECT returned no result. Dec 15 08:39:37 ispc saslauthd[1625201]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:39:37 ispc saslauthd[1625201]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:40:01 ispc CRON[1625213]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:40:01 ispc CRON[1625211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:40:01 ispc CRON[1625212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:40:01 ispc CRON[1625214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:40:01 ispc CRON[1625215]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:40:01 ispc CRON[1625213]: pam_unix(cron:session): session closed for user www-data Dec 15 08:40:01 ispc CRON[1625212]: pam_unix(cron:session): session closed for user root Dec 15 08:40:01 ispc CRON[1625215]: pam_unix(cron:session): session closed for user getmail Dec 15 08:40:02 ispc CRON[1625211]: pam_unix(cron:session): session closed for user root Dec 15 08:40:02 ispc CRON[1625214]: pam_unix(cron:session): session closed for user root Dec 15 08:41:01 ispc CRON[1625315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:41:01 ispc CRON[1625315]: pam_unix(cron:session): session closed for user root Dec 15 08:42:01 ispc CRON[1625353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:42:02 ispc CRON[1625353]: pam_unix(cron:session): session closed for user root Dec 15 08:42:30 ispc postfix/smtpd[1625377]: sql auxprop plugin using mysql engine Dec 15 08:42:30 ispc saslauthd[1625379]: pam_mysql - SELECT returned no result. Dec 15 08:42:30 ispc saslauthd[1625379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:42:30 ispc saslauthd[1625379]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:43:01 ispc CRON[1625410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:43:02 ispc CRON[1625410]: pam_unix(cron:session): session closed for user root Dec 15 08:43:04 ispc saslauthd[1625422]: pam_mysql - SELECT returned no result. Dec 15 08:43:04 ispc saslauthd[1625422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:43:04 ispc saslauthd[1625422]: do_auth : auth failure: [user=umountfsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:43:27 ispc saslauthd[1625437]: pam_mysql - SELECT returned no result. Dec 15 08:43:27 ispc saslauthd[1625437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:43:27 ispc saslauthd[1625437]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:43:45 ispc saslauthd[1625443]: pam_mysql - SELECT returned no result. Dec 15 08:43:45 ispc saslauthd[1625443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:43:45 ispc saslauthd[1625443]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:43:46 ispc saslauthd[1625445]: pam_mysql - SELECT returned no result. Dec 15 08:43:46 ispc saslauthd[1625445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:43:46 ispc saslauthd[1625445]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:44:01 ispc CRON[1625453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:44:01 ispc CRON[1625453]: pam_unix(cron:session): session closed for user root Dec 15 08:44:03 ispc saslauthd[1625464]: pam_mysql - SELECT returned no result. Dec 15 08:44:03 ispc saslauthd[1625464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:44:03 ispc saslauthd[1625464]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:44:17 ispc saslauthd[1625474]: pam_mysql - SELECT returned no result. Dec 15 08:44:17 ispc saslauthd[1625474]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:44:17 ispc saslauthd[1625474]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:44:25 ispc saslauthd[1625476]: pam_mysql - SELECT returned no result. Dec 15 08:44:25 ispc saslauthd[1625476]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:44:25 ispc saslauthd[1625476]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:44:34 ispc saslauthd[1625482]: pam_mysql - SELECT returned no result. Dec 15 08:44:34 ispc saslauthd[1625482]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:44:34 ispc saslauthd[1625482]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:44:53 ispc saslauthd[1625491]: pam_mysql - SELECT returned no result. Dec 15 08:44:53 ispc saslauthd[1625491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:44:53 ispc saslauthd[1625491]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:00 ispc saslauthd[1625496]: pam_mysql - SELECT returned no result. Dec 15 08:45:00 ispc saslauthd[1625496]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:00 ispc saslauthd[1625496]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:01 ispc CRON[1625500]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:45:01 ispc CRON[1625497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:45:01 ispc CRON[1625498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:45:01 ispc CRON[1625499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:45:01 ispc CRON[1625498]: pam_unix(cron:session): session closed for user root Dec 15 08:45:01 ispc CRON[1625500]: pam_unix(cron:session): session closed for user getmail Dec 15 08:45:02 ispc CRON[1625499]: pam_unix(cron:session): session closed for user root Dec 15 08:45:03 ispc CRON[1625497]: pam_unix(cron:session): session closed for user root Dec 15 08:45:07 ispc saslauthd[1625580]: pam_mysql - SELECT returned no result. Dec 15 08:45:07 ispc saslauthd[1625580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:07 ispc saslauthd[1625580]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:10 ispc saslauthd[1625581]: pam_mysql - SELECT returned no result. Dec 15 08:45:10 ispc saslauthd[1625581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:10 ispc saslauthd[1625581]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:13 ispc saslauthd[1625582]: pam_mysql - SELECT returned no result. Dec 15 08:45:13 ispc saslauthd[1625582]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:13 ispc saslauthd[1625582]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:19 ispc postfix/smtpd[1625588]: sql auxprop plugin using mysql engine Dec 15 08:45:19 ispc saslauthd[1625590]: pam_mysql - SELECT returned no result. Dec 15 08:45:19 ispc saslauthd[1625590]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:19 ispc saslauthd[1625590]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:20 ispc saslauthd[1625591]: pam_mysql - SELECT returned no result. Dec 15 08:45:20 ispc saslauthd[1625591]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:20 ispc saslauthd[1625591]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:20 ispc saslauthd[1625592]: pam_mysql - SELECT returned no result. Dec 15 08:45:20 ispc saslauthd[1625592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:20 ispc saslauthd[1625592]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:24 ispc saslauthd[1625593]: pam_mysql - SELECT returned no result. Dec 15 08:45:24 ispc saslauthd[1625593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:24 ispc saslauthd[1625593]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:26 ispc saslauthd[1625594]: pam_mysql - SELECT returned no result. Dec 15 08:45:26 ispc saslauthd[1625594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:26 ispc saslauthd[1625594]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:43 ispc saslauthd[1625603]: pam_mysql - SELECT returned no result. Dec 15 08:45:43 ispc saslauthd[1625603]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:43 ispc saslauthd[1625603]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:45:45 ispc saslauthd[1625605]: pam_mysql - SELECT returned no result. Dec 15 08:45:45 ispc saslauthd[1625605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:45:45 ispc saslauthd[1625605]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:46:01 ispc CRON[1625615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:46:01 ispc CRON[1625615]: pam_unix(cron:session): session closed for user root Dec 15 08:46:04 ispc postfix/smtpd[1625626]: sql auxprop plugin using mysql engine Dec 15 08:46:04 ispc postfix/smtpd[1625628]: sql auxprop plugin using mysql engine Dec 15 08:46:04 ispc postfix/smtpd[1625629]: sql auxprop plugin using mysql engine Dec 15 08:46:18 ispc CRON[1624484]: pam_unix(cron:session): session closed for user root Dec 15 08:47:01 ispc CRON[1625640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:47:02 ispc CRON[1625640]: pam_unix(cron:session): session closed for user root Dec 15 08:47:57 ispc sshd[1625669]: Invalid user klape from 200.32.52.150 Dec 15 08:47:59 ispc sshd[1625671]: Invalid user ubuntu from 200.32.52.150 Dec 15 08:48:01 ispc CRON[1625673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:48:02 ispc CRON[1625673]: pam_unix(cron:session): session closed for user root Dec 15 08:49:01 ispc CRON[1625687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:49:02 ispc CRON[1625687]: pam_unix(cron:session): session closed for user root Dec 15 08:49:11 ispc saslauthd[1625699]: pam_mysql - SELECT returned no result. Dec 15 08:49:11 ispc saslauthd[1625699]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:49:11 ispc saslauthd[1625699]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:49:16 ispc saslauthd[1625700]: pam_mysql - SELECT returned no result. Dec 15 08:49:16 ispc saslauthd[1625700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:49:16 ispc saslauthd[1625700]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:49:41 ispc postfix/smtpd[1625706]: sql auxprop plugin using mysql engine Dec 15 08:50:01 ispc CRON[1625709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:50:01 ispc CRON[1625710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:50:01 ispc CRON[1625711]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 08:50:01 ispc CRON[1625712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:50:01 ispc CRON[1625713]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:50:01 ispc CRON[1625710]: pam_unix(cron:session): session closed for user root Dec 15 08:50:01 ispc CRON[1625711]: pam_unix(cron:session): session closed for user www-data Dec 15 08:50:01 ispc CRON[1625713]: pam_unix(cron:session): session closed for user getmail Dec 15 08:50:02 ispc CRON[1625709]: pam_unix(cron:session): session closed for user root Dec 15 08:50:18 ispc sshd[1625820]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 08:50:33 ispc CRON[1625712]: pam_unix(cron:session): session closed for user root Dec 15 08:51:01 ispc CRON[1625835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:52:01 ispc CRON[1625870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:52:01 ispc CRON[1625870]: pam_unix(cron:session): session closed for user root Dec 15 08:53:01 ispc CRON[1625917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:53:01 ispc CRON[1625917]: pam_unix(cron:session): session closed for user root Dec 15 08:53:12 ispc postfix/smtpd[1625932]: sql auxprop plugin using mysql engine Dec 15 08:54:01 ispc CRON[1625960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:54:02 ispc CRON[1625960]: pam_unix(cron:session): session closed for user root Dec 15 08:55:01 ispc CRON[1625998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:55:01 ispc CRON[1625999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:55:01 ispc CRON[1626000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:55:01 ispc CRON[1626001]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 08:55:01 ispc CRON[1625999]: pam_unix(cron:session): session closed for user root Dec 15 08:55:01 ispc CRON[1626001]: pam_unix(cron:session): session closed for user getmail Dec 15 08:55:02 ispc CRON[1626000]: pam_unix(cron:session): session closed for user root Dec 15 08:55:02 ispc CRON[1625998]: pam_unix(cron:session): session closed for user root Dec 15 08:56:01 ispc CRON[1626105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:56:02 ispc CRON[1626105]: pam_unix(cron:session): session closed for user root Dec 15 08:56:52 ispc postfix/smtpd[1626137]: sql auxprop plugin using mysql engine Dec 15 08:56:52 ispc postfix/smtpd[1626139]: sql auxprop plugin using mysql engine Dec 15 08:56:52 ispc postfix/smtpd[1626141]: sql auxprop plugin using mysql engine Dec 15 08:57:01 ispc CRON[1626146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:57:02 ispc CRON[1626146]: pam_unix(cron:session): session closed for user root Dec 15 08:58:01 ispc CRON[1626201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:58:01 ispc CRON[1626201]: pam_unix(cron:session): session closed for user root Dec 15 08:58:08 ispc postfix/smtpd[1626216]: sql auxprop plugin using mysql engine Dec 15 08:58:09 ispc saslauthd[1626217]: pam_mysql - SELECT returned no result. Dec 15 08:58:09 ispc saslauthd[1626217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 08:58:09 ispc saslauthd[1626217]: do_auth : auth failure: [user=umountsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 08:59:01 ispc CRON[1626243]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 08:59:02 ispc CRON[1626243]: pam_unix(cron:session): session closed for user root Dec 15 09:00:01 ispc CRON[1626281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:00:01 ispc CRON[1626283]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:00:01 ispc CRON[1626284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:00:01 ispc CRON[1626285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:00:01 ispc CRON[1626286]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:00:01 ispc CRON[1626282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:00:01 ispc CRON[1626283]: pam_unix(cron:session): session closed for user www-data Dec 15 09:00:01 ispc CRON[1626286]: pam_unix(cron:session): session closed for user getmail Dec 15 09:00:01 ispc CRON[1626282]: pam_unix(cron:session): session closed for user root Dec 15 09:00:01 ispc CRON[1626281]: pam_unix(cron:session): session closed for user root Dec 15 09:00:02 ispc CRON[1626285]: pam_unix(cron:session): session closed for user root Dec 15 09:00:02 ispc CRON[1626284]: pam_unix(cron:session): session closed for user root Dec 15 09:01:01 ispc CRON[1626467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:01:02 ispc CRON[1626467]: pam_unix(cron:session): session closed for user root Dec 15 09:02:01 ispc CRON[1626505]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 09:02:01 ispc CRON[1626506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:02:01 ispc CRON[1626506]: pam_unix(cron:session): session closed for user root Dec 15 09:03:01 ispc CRON[1627505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:03:02 ispc CRON[1627505]: pam_unix(cron:session): session closed for user root Dec 15 09:03:05 ispc CRON[1626505]: pam_unix(cron:session): session closed for user logcheck Dec 15 09:03:14 ispc postfix/smtpd[1627579]: sql auxprop plugin using mysql engine Dec 15 09:03:54 ispc postfix/smtpd[1627602]: sql auxprop plugin using mysql engine Dec 15 09:04:01 ispc CRON[1627605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:04:01 ispc CRON[1627605]: pam_unix(cron:session): session closed for user root Dec 15 09:04:24 ispc postfix/smtpd[1627629]: sql auxprop plugin using mysql engine Dec 15 09:04:24 ispc postfix/smtpd[1627631]: sql auxprop plugin using mysql engine Dec 15 09:05:01 ispc CRON[1627645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:05:01 ispc CRON[1627646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:05:01 ispc CRON[1627647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:05:01 ispc CRON[1627648]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:05:01 ispc CRON[1627646]: pam_unix(cron:session): session closed for user root Dec 15 09:05:01 ispc CRON[1627648]: pam_unix(cron:session): session closed for user getmail Dec 15 09:05:02 ispc CRON[1627647]: pam_unix(cron:session): session closed for user root Dec 15 09:05:02 ispc CRON[1627645]: pam_unix(cron:session): session closed for user root Dec 15 09:05:26 ispc sshd[1627735]: Invalid user blceu from 211.57.200.145 Dec 15 09:06:01 ispc CRON[1627753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:06:01 ispc CRON[1627753]: pam_unix(cron:session): session closed for user root Dec 15 09:07:01 ispc CRON[1627791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:07:02 ispc CRON[1627791]: pam_unix(cron:session): session closed for user root Dec 15 09:08:00 ispc sshd[1627835]: Invalid user blceu from 116.120.58.228 Dec 15 09:08:01 ispc CRON[1627841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:08:01 ispc CRON[1627841]: pam_unix(cron:session): session closed for user root Dec 15 09:08:36 ispc sshd[1627864]: Invalid user matlbula from 51.159.18.215 Dec 15 09:09:01 ispc CRON[1627883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:09:01 ispc CRON[1627884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:09:01 ispc CRON[1627883]: pam_unix(cron:session): session closed for user root Dec 15 09:09:02 ispc CRON[1627884]: pam_unix(cron:session): session closed for user root Dec 15 09:09:02 ispc postfix/smtpd[1627905]: sql auxprop plugin using mysql engine Dec 15 09:09:03 ispc saslauthd[1627908]: pam_mysql - SELECT returned no result. Dec 15 09:09:03 ispc saslauthd[1627908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:09:03 ispc saslauthd[1627908]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:09:06 ispc saslauthd[1627909]: pam_mysql - SELECT returned no result. Dec 15 09:09:06 ispc saslauthd[1627909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:09:06 ispc saslauthd[1627909]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:09:38 ispc sshd[1627922]: Invalid user ziplines from 45.119.213.109 Dec 15 09:09:46 ispc saslauthd[1627928]: pam_mysql - SELECT returned no result. Dec 15 09:09:46 ispc saslauthd[1627928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:09:46 ispc saslauthd[1627928]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:10:01 ispc CRON[1627935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:10:01 ispc CRON[1627937]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:10:01 ispc CRON[1627938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:10:01 ispc CRON[1627939]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:10:01 ispc CRON[1627936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:10:01 ispc CRON[1627936]: pam_unix(cron:session): session closed for user root Dec 15 09:10:01 ispc CRON[1627939]: pam_unix(cron:session): session closed for user getmail Dec 15 09:10:01 ispc CRON[1627937]: pam_unix(cron:session): session closed for user www-data Dec 15 09:10:01 ispc CRON[1627938]: pam_unix(cron:session): session closed for user root Dec 15 09:10:01 ispc CRON[1627935]: pam_unix(cron:session): session closed for user root Dec 15 09:11:01 ispc CRON[1628039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:11:02 ispc CRON[1628039]: pam_unix(cron:session): session closed for user root Dec 15 09:11:25 ispc CRON[1625835]: pam_unix(cron:session): session closed for user root Dec 15 09:11:43 ispc saslauthd[1628065]: pam_mysql - SELECT returned no result. Dec 15 09:11:43 ispc saslauthd[1628065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:11:43 ispc saslauthd[1628065]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:12:01 ispc CRON[1628068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:12:01 ispc CRON[1628068]: pam_unix(cron:session): session closed for user root Dec 15 09:12:01 ispc postfix/smtpd[1628080]: sql auxprop plugin using mysql engine Dec 15 09:12:44 ispc sshd[1628092]: Invalid user martof from 45.119.213.109 Dec 15 09:12:46 ispc saslauthd[1628094]: pam_mysql - SELECT returned no result. Dec 15 09:12:46 ispc saslauthd[1628094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:12:46 ispc saslauthd[1628094]: do_auth : auth failure: [user=unix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:13:01 ispc CRON[1628096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:13:03 ispc CRON[1628096]: pam_unix(cron:session): session closed for user root Dec 15 09:14:01 ispc CRON[1628110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:14:01 ispc CRON[1628110]: pam_unix(cron:session): session closed for user root Dec 15 09:15:01 ispc CRON[1628127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:15:01 ispc CRON[1628129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:15:01 ispc CRON[1628130]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:15:01 ispc CRON[1628128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:15:01 ispc CRON[1628130]: pam_unix(cron:session): session closed for user getmail Dec 15 09:15:01 ispc CRON[1628128]: pam_unix(cron:session): session closed for user root Dec 15 09:15:02 ispc CRON[1628127]: pam_unix(cron:session): session closed for user root Dec 15 09:15:37 ispc CRON[1628129]: pam_unix(cron:session): session closed for user root Dec 15 09:15:53 ispc sshd[1628317]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 09:15:53 ispc sshd[1628317]: Invalid user user from 2.57.121.25 Dec 15 09:16:01 ispc CRON[1628319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:17:01 ispc CRON[1628354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:17:01 ispc CRON[1628354]: pam_unix(cron:session): session closed for user root Dec 15 09:17:01 ispc sshd[1628365]: Bad protocol version identification '' from 3.130.96.91 Dec 15 09:17:02 ispc sshd[1628370]: Bad protocol version identification 'GET / HTTP/1.1' from 3.130.96.91 Dec 15 09:18:01 ispc CRON[1628406]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 09:18:01 ispc CRON[1628407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:18:01 ispc CRON[1628407]: pam_unix(cron:session): session closed for user root Dec 15 09:18:04 ispc CRON[1628406]: pam_unix(cron:session): session closed for user amavis Dec 15 09:18:06 ispc postfix/smtpd[1628434]: sql auxprop plugin using mysql engine Dec 15 09:18:13 ispc postfix/smtpd[1628446]: sql auxprop plugin using mysql engine Dec 15 09:18:13 ispc saslauthd[1628448]: pam_mysql - SELECT returned no result. Dec 15 09:18:13 ispc saslauthd[1628448]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:18:14 ispc saslauthd[1628448]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:18:20 ispc postfix/smtpd[1628450]: sql auxprop plugin using mysql engine Dec 15 09:18:43 ispc sshd[1628461]: Bad protocol version identification 'GET / HTTP/1.1' from 3.130.96.91 Dec 15 09:19:01 ispc CRON[1628471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:19:02 ispc CRON[1628471]: pam_unix(cron:session): session closed for user root Dec 15 09:20:01 ispc CRON[1628512]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:20:01 ispc CRON[1628510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:20:01 ispc CRON[1628513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:20:01 ispc CRON[1628514]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:20:01 ispc CRON[1628511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:20:01 ispc CRON[1628512]: pam_unix(cron:session): session closed for user www-data Dec 15 09:20:01 ispc CRON[1628514]: pam_unix(cron:session): session closed for user getmail Dec 15 09:20:01 ispc CRON[1628511]: pam_unix(cron:session): session closed for user root Dec 15 09:20:01 ispc CRON[1628513]: pam_unix(cron:session): session closed for user root Dec 15 09:20:03 ispc CRON[1628510]: pam_unix(cron:session): session closed for user root Dec 15 09:20:06 ispc sshd[1628588]: Bad protocol version identification '\026\003\001' from 3.130.96.91 Dec 15 09:20:33 ispc postfix/smtpd[1628608]: sql auxprop plugin using mysql engine Dec 15 09:20:33 ispc postfix/smtpd[1628610]: sql auxprop plugin using mysql engine Dec 15 09:21:01 ispc CRON[1628625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:21:01 ispc CRON[1628626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:21:01 ispc CRON[1628625]: pam_unix(cron:session): session closed for user root Dec 15 09:21:01 ispc CRON[1628626]: pam_unix(cron:session): session closed for user root Dec 15 09:21:44 ispc sshd[1628656]: Bad protocol version identification '\026\003\001' from 3.130.96.91 Dec 15 09:22:01 ispc CRON[1628666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:22:02 ispc CRON[1628666]: pam_unix(cron:session): session closed for user root Dec 15 09:23:01 ispc CRON[1628714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:23:02 ispc CRON[1628714]: pam_unix(cron:session): session closed for user root Dec 15 09:23:12 ispc sshd[1628731]: Invalid user klape from 2.57.217.229 Dec 15 09:23:13 ispc sshd[1628733]: Invalid user ubuntu from 2.57.217.229 Dec 15 09:23:42 ispc sshd[1628748]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 09:23:47 ispc sshd[1628750]: Invalid user admin from 211.45.175.153 Dec 15 09:24:01 ispc CRON[1628758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:24:01 ispc CRON[1628758]: pam_unix(cron:session): session closed for user root Dec 15 09:25:01 ispc CRON[1628802]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:25:01 ispc CRON[1628799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:25:01 ispc CRON[1628800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:25:01 ispc CRON[1628801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:25:01 ispc CRON[1628800]: pam_unix(cron:session): session closed for user root Dec 15 09:25:01 ispc CRON[1628802]: pam_unix(cron:session): session closed for user getmail Dec 15 09:25:02 ispc CRON[1628801]: pam_unix(cron:session): session closed for user root Dec 15 09:25:02 ispc CRON[1628799]: pam_unix(cron:session): session closed for user root Dec 15 09:26:01 ispc CRON[1628902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:26:02 ispc CRON[1628902]: pam_unix(cron:session): session closed for user root Dec 15 09:27:01 ispc CRON[1628939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:27:01 ispc CRON[1628939]: pam_unix(cron:session): session closed for user root Dec 15 09:27:34 ispc postfix/smtpd[1628967]: sql auxprop plugin using mysql engine Dec 15 09:27:35 ispc saslauthd[1628971]: pam_mysql - SELECT returned no result. Dec 15 09:27:35 ispc saslauthd[1628971]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:27:35 ispc saslauthd[1628971]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:27:37 ispc sshd[1628974]: Invalid user klape from 51.77.222.24 Dec 15 09:27:37 ispc sshd[1628976]: Invalid user ubuntu from 51.77.222.24 Dec 15 09:27:49 ispc saslauthd[1628985]: pam_mysql - SELECT returned no result. Dec 15 09:27:49 ispc saslauthd[1628985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:27:49 ispc saslauthd[1628985]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:28:01 ispc CRON[1628997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:28:02 ispc CRON[1628997]: pam_unix(cron:session): session closed for user root Dec 15 09:29:01 ispc CRON[1629034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:29:02 ispc CRON[1629034]: pam_unix(cron:session): session closed for user root Dec 15 09:30:01 ispc CRON[1629075]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:30:01 ispc CRON[1629076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:30:01 ispc CRON[1629077]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:30:01 ispc CRON[1629073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:30:01 ispc CRON[1629074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:30:01 ispc CRON[1629074]: pam_unix(cron:session): session closed for user root Dec 15 09:30:01 ispc CRON[1629075]: pam_unix(cron:session): session closed for user www-data Dec 15 09:30:01 ispc CRON[1629077]: pam_unix(cron:session): session closed for user getmail Dec 15 09:30:01 ispc CRON[1629076]: pam_unix(cron:session): session closed for user root Dec 15 09:30:02 ispc CRON[1629073]: pam_unix(cron:session): session closed for user root Dec 15 09:30:26 ispc postfix/smtpd[1629162]: sql auxprop plugin using mysql engine Dec 15 09:30:26 ispc saslauthd[1629164]: pam_mysql - SELECT returned no result. Dec 15 09:30:26 ispc saslauthd[1629164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:30:26 ispc saslauthd[1629164]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:31:01 ispc CRON[1629181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:31:01 ispc CRON[1629181]: pam_unix(cron:session): session closed for user root Dec 15 09:32:01 ispc CRON[1629219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:32:01 ispc CRON[1629219]: pam_unix(cron:session): session closed for user root Dec 15 09:33:01 ispc CRON[1629263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:33:02 ispc CRON[1629263]: pam_unix(cron:session): session closed for user root Dec 15 09:34:01 ispc CRON[1629317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:34:02 ispc CRON[1629317]: pam_unix(cron:session): session closed for user root Dec 15 09:35:01 ispc CRON[1629354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:35:01 ispc CRON[1629356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:35:01 ispc CRON[1629357]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:35:01 ispc CRON[1629355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:35:01 ispc CRON[1629355]: pam_unix(cron:session): session closed for user root Dec 15 09:35:01 ispc CRON[1629357]: pam_unix(cron:session): session closed for user getmail Dec 15 09:35:01 ispc CRON[1629356]: pam_unix(cron:session): session closed for user root Dec 15 09:35:03 ispc CRON[1629354]: pam_unix(cron:session): session closed for user root Dec 15 09:35:14 ispc postfix/smtpd[1629434]: sql auxprop plugin using mysql engine Dec 15 09:35:18 ispc saslauthd[1629438]: pam_mysql - SELECT returned no result. Dec 15 09:35:18 ispc saslauthd[1629438]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:35:18 ispc saslauthd[1629438]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:35:29 ispc postfix/smtpd[1629445]: sql auxprop plugin using mysql engine Dec 15 09:35:40 ispc postfix/smtpd[1629451]: sql auxprop plugin using mysql engine Dec 15 09:35:40 ispc saslauthd[1629457]: pam_mysql - SELECT returned no result. Dec 15 09:35:40 ispc saslauthd[1629457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:35:40 ispc saslauthd[1629457]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:35:51 ispc sshd[1629460]: Invalid user hyundaicz from 114.246.241.87 Dec 15 09:36:01 ispc CRON[1629470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:36:02 ispc CRON[1629470]: pam_unix(cron:session): session closed for user root Dec 15 09:36:21 ispc CRON[1628319]: pam_unix(cron:session): session closed for user root Dec 15 09:37:01 ispc CRON[1629493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:37:01 ispc CRON[1629493]: pam_unix(cron:session): session closed for user root Dec 15 09:37:34 ispc saslauthd[1629506]: pam_mysql - SELECT returned no result. Dec 15 09:37:34 ispc saslauthd[1629506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:37:34 ispc saslauthd[1629506]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:37:46 ispc saslauthd[1629513]: pam_mysql - SELECT returned no result. Dec 15 09:37:46 ispc saslauthd[1629513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:37:46 ispc saslauthd[1629513]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:37:48 ispc saslauthd[1629514]: pam_mysql - SELECT returned no result. Dec 15 09:37:48 ispc saslauthd[1629514]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:37:48 ispc saslauthd[1629514]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:37:52 ispc sshd[1629524]: Invalid user martof from 116.120.58.228 Dec 15 09:38:01 ispc CRON[1629527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:38:02 ispc CRON[1629527]: pam_unix(cron:session): session closed for user root Dec 15 09:38:11 ispc saslauthd[1629538]: pam_mysql - SELECT returned no result. Dec 15 09:38:11 ispc saslauthd[1629538]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:38:11 ispc saslauthd[1629538]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:38:22 ispc saslauthd[1629540]: pam_mysql - SELECT returned no result. Dec 15 09:38:22 ispc saslauthd[1629540]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:38:22 ispc saslauthd[1629540]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:38:32 ispc saslauthd[1629541]: pam_mysql - SELECT returned no result. Dec 15 09:38:32 ispc saslauthd[1629541]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:38:32 ispc saslauthd[1629541]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:38:38 ispc saslauthd[1629543]: pam_mysql - SELECT returned no result. Dec 15 09:38:38 ispc saslauthd[1629543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:38:38 ispc saslauthd[1629543]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:38:51 ispc saslauthd[1629544]: pam_mysql - SELECT returned no result. Dec 15 09:38:51 ispc saslauthd[1629544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:38:51 ispc saslauthd[1629544]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:38:54 ispc sshd[1629547]: Invalid user klape from 103.164.20.29 Dec 15 09:38:55 ispc sshd[1629549]: Invalid user ubuntu from 103.164.20.29 Dec 15 09:39:01 ispc CRON[1629552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:39:01 ispc CRON[1629553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:39:01 ispc CRON[1629552]: pam_unix(cron:session): session closed for user root Dec 15 09:39:02 ispc CRON[1629553]: pam_unix(cron:session): session closed for user root Dec 15 09:39:04 ispc sshd[1629576]: Invalid user martof from 175.125.92.77 Dec 15 09:39:14 ispc saslauthd[1629579]: pam_mysql - SELECT returned no result. Dec 15 09:39:14 ispc saslauthd[1629579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:14 ispc saslauthd[1629579]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:16 ispc saslauthd[1629580]: pam_mysql - SELECT returned no result. Dec 15 09:39:16 ispc saslauthd[1629580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:16 ispc saslauthd[1629580]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:21 ispc saslauthd[1629581]: pam_mysql - SELECT returned no result. Dec 15 09:39:21 ispc saslauthd[1629581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:21 ispc saslauthd[1629581]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:32 ispc saslauthd[1629582]: pam_mysql - SELECT returned no result. Dec 15 09:39:32 ispc saslauthd[1629582]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:32 ispc saslauthd[1629582]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:34 ispc saslauthd[1629583]: pam_mysql - SELECT returned no result. Dec 15 09:39:34 ispc saslauthd[1629583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:34 ispc saslauthd[1629583]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:35 ispc saslauthd[1629584]: pam_mysql - SELECT returned no result. Dec 15 09:39:35 ispc saslauthd[1629584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:35 ispc saslauthd[1629584]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:54 ispc saslauthd[1629586]: pam_mysql - SELECT returned no result. Dec 15 09:39:54 ispc saslauthd[1629586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:54 ispc saslauthd[1629586]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:39:57 ispc saslauthd[1629587]: pam_mysql - SELECT returned no result. Dec 15 09:39:57 ispc saslauthd[1629587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:39:57 ispc saslauthd[1629587]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:40:01 ispc CRON[1629588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:40:01 ispc CRON[1629589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:40:01 ispc CRON[1629590]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:40:01 ispc CRON[1629591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:40:01 ispc CRON[1629592]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:40:01 ispc CRON[1629590]: pam_unix(cron:session): session closed for user www-data Dec 15 09:40:01 ispc CRON[1629589]: pam_unix(cron:session): session closed for user root Dec 15 09:40:01 ispc CRON[1629592]: pam_unix(cron:session): session closed for user getmail Dec 15 09:40:01 ispc CRON[1629588]: pam_unix(cron:session): session closed for user root Dec 15 09:40:36 ispc CRON[1629591]: pam_unix(cron:session): session closed for user root Dec 15 09:41:00 ispc saslauthd[1629706]: pam_mysql - SELECT returned no result. Dec 15 09:41:00 ispc saslauthd[1629706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:00 ispc saslauthd[1629706]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:41:01 ispc CRON[1629707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:41:18 ispc saslauthd[1629725]: pam_mysql - SELECT returned no result. Dec 15 09:41:18 ispc saslauthd[1629725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:18 ispc saslauthd[1629725]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:41:39 ispc saslauthd[1629734]: pam_mysql - SELECT returned no result. Dec 15 09:41:39 ispc saslauthd[1629734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:39 ispc saslauthd[1629734]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:41:40 ispc saslauthd[1629735]: pam_mysql - SELECT returned no result. Dec 15 09:41:40 ispc saslauthd[1629735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:40 ispc saslauthd[1629735]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:41:45 ispc saslauthd[1629740]: pam_mysql - SELECT returned no result. Dec 15 09:41:45 ispc saslauthd[1629740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:45 ispc saslauthd[1629740]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:41:48 ispc saslauthd[1629742]: pam_mysql - SELECT returned no result. Dec 15 09:41:48 ispc saslauthd[1629742]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:41:48 ispc saslauthd[1629742]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:42:01 ispc CRON[1629747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:42:02 ispc CRON[1629747]: pam_unix(cron:session): session closed for user root Dec 15 09:42:57 ispc saslauthd[1629793]: pam_mysql - SELECT returned no result. Dec 15 09:42:57 ispc saslauthd[1629793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:42:57 ispc saslauthd[1629793]: do_auth : auth failure: [user=username] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:43:01 ispc CRON[1629794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:43:01 ispc CRON[1629794]: pam_unix(cron:session): session closed for user root Dec 15 09:44:01 ispc CRON[1629831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:44:02 ispc CRON[1629831]: pam_unix(cron:session): session closed for user root Dec 15 09:44:15 ispc sshd[1629847]: Invalid user tshombeknife from 114.246.241.87 Dec 15 09:44:51 ispc postfix/smtpd[1629870]: sql auxprop plugin using mysql engine Dec 15 09:44:51 ispc postfix/smtpd[1629872]: sql auxprop plugin using mysql engine Dec 15 09:44:54 ispc postfix/smtpd[1629873]: sql auxprop plugin using mysql engine Dec 15 09:45:01 ispc CRON[1629881]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:45:01 ispc CRON[1629878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:45:01 ispc CRON[1629879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:45:01 ispc CRON[1629880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:45:01 ispc CRON[1629879]: pam_unix(cron:session): session closed for user root Dec 15 09:45:01 ispc CRON[1629881]: pam_unix(cron:session): session closed for user getmail Dec 15 09:45:01 ispc CRON[1629880]: pam_unix(cron:session): session closed for user root Dec 15 09:45:01 ispc CRON[1629878]: pam_unix(cron:session): session closed for user root Dec 15 09:46:01 ispc CRON[1629981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:46:02 ispc postfix/smtpd[1629988]: sql auxprop plugin using mysql engine Dec 15 09:46:02 ispc saslauthd[1629989]: pam_mysql - SELECT returned no result. Dec 15 09:46:02 ispc saslauthd[1629989]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:46:02 ispc saslauthd[1629989]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:46:02 ispc CRON[1629981]: pam_unix(cron:session): session closed for user root Dec 15 09:46:08 ispc saslauthd[1629996]: pam_mysql - SELECT returned no result. Dec 15 09:46:08 ispc saslauthd[1629996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:46:08 ispc saslauthd[1629996]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:46:42 ispc sshd[1630010]: Invalid user ziplines from 5.133.121.104 Dec 15 09:47:01 ispc CRON[1630022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:47:02 ispc CRON[1630022]: pam_unix(cron:session): session closed for user root Dec 15 09:47:42 ispc sshd[1630057]: Did not receive identification string from 120.211.99.34 Dec 15 09:47:51 ispc sshd[1630064]: Invalid user blceu from 5.133.121.104 Dec 15 09:48:01 ispc CRON[1630076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:48:01 ispc CRON[1630076]: pam_unix(cron:session): session closed for user root Dec 15 09:49:01 ispc CRON[1630116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:49:02 ispc CRON[1630116]: pam_unix(cron:session): session closed for user root Dec 15 09:50:01 ispc CRON[1630158]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:50:01 ispc CRON[1630154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:50:01 ispc CRON[1630155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:50:01 ispc CRON[1630156]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 09:50:01 ispc CRON[1630157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:50:01 ispc CRON[1630155]: pam_unix(cron:session): session closed for user root Dec 15 09:50:01 ispc CRON[1630156]: pam_unix(cron:session): session closed for user www-data Dec 15 09:50:01 ispc CRON[1630158]: pam_unix(cron:session): session closed for user getmail Dec 15 09:50:01 ispc CRON[1630157]: pam_unix(cron:session): session closed for user root Dec 15 09:50:01 ispc CRON[1630154]: pam_unix(cron:session): session closed for user root Dec 15 09:50:04 ispc postfix/smtpd[1630232]: sql auxprop plugin using mysql engine Dec 15 09:50:04 ispc postfix/smtpd[1630234]: sql auxprop plugin using mysql engine Dec 15 09:50:06 ispc postfix/smtpd[1630236]: sql auxprop plugin using mysql engine Dec 15 09:51:02 ispc CRON[1630264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:51:02 ispc CRON[1630264]: pam_unix(cron:session): session closed for user root Dec 15 09:52:01 ispc CRON[1630303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:52:01 ispc CRON[1630304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:52:01 ispc CRON[1630304]: pam_unix(cron:session): session closed for user root Dec 15 09:52:25 ispc postfix/smtpd[1630330]: sql auxprop plugin using mysql engine Dec 15 09:53:01 ispc CRON[1630357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:53:02 ispc CRON[1630357]: pam_unix(cron:session): session closed for user root Dec 15 09:53:08 ispc postfix/smtpd[1630369]: sql auxprop plugin using mysql engine Dec 15 09:54:01 ispc CRON[1630397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:54:01 ispc CRON[1630397]: pam_unix(cron:session): session closed for user root Dec 15 09:54:06 ispc sshd[1630408]: Invalid user martof from 211.57.200.145 Dec 15 09:55:01 ispc CRON[1630437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:55:01 ispc CRON[1630438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:55:01 ispc CRON[1630439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:55:01 ispc CRON[1630440]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 09:55:01 ispc CRON[1630438]: pam_unix(cron:session): session closed for user root Dec 15 09:55:01 ispc CRON[1630440]: pam_unix(cron:session): session closed for user getmail Dec 15 09:55:02 ispc CRON[1630439]: pam_unix(cron:session): session closed for user root Dec 15 09:55:02 ispc CRON[1630437]: pam_unix(cron:session): session closed for user root Dec 15 09:55:18 ispc CRON[1630303]: pam_unix(cron:session): session closed for user root Dec 15 09:55:34 ispc sshd[1630529]: Invalid user klape from 187.190.35.163 Dec 15 09:55:35 ispc sshd[1630531]: Invalid user ubuntu from 187.190.35.163 Dec 15 09:56:01 ispc CRON[1630555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:56:02 ispc CRON[1630555]: pam_unix(cron:session): session closed for user root Dec 15 09:56:59 ispc postfix/smtpd[1630589]: sql auxprop plugin using mysql engine Dec 15 09:56:59 ispc postfix/smtpd[1630591]: sql auxprop plugin using mysql engine Dec 15 09:56:59 ispc postfix/smtpd[1630592]: sql auxprop plugin using mysql engine Dec 15 09:57:01 ispc CRON[1630593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:57:01 ispc CRON[1630593]: pam_unix(cron:session): session closed for user root Dec 15 09:57:56 ispc postfix/smtpd[1630639]: sql auxprop plugin using mysql engine Dec 15 09:57:57 ispc saslauthd[1630640]: pam_mysql - SELECT returned no result. Dec 15 09:57:57 ispc saslauthd[1630640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 09:57:57 ispc saslauthd[1630640]: do_auth : auth failure: [user=uucp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 09:58:01 ispc CRON[1630641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:58:02 ispc CRON[1630641]: pam_unix(cron:session): session closed for user root Dec 15 09:59:01 ispc CRON[1630684]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 09:59:02 ispc CRON[1630684]: pam_unix(cron:session): session closed for user root Dec 15 10:00:01 ispc CRON[1630725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:00:01 ispc CRON[1630726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:00:01 ispc CRON[1630727]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:00:01 ispc CRON[1630728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:00:01 ispc CRON[1630729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:00:01 ispc CRON[1630730]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:00:01 ispc CRON[1630727]: pam_unix(cron:session): session closed for user www-data Dec 15 10:00:01 ispc CRON[1630726]: pam_unix(cron:session): session closed for user root Dec 15 10:00:01 ispc CRON[1630730]: pam_unix(cron:session): session closed for user getmail Dec 15 10:00:01 ispc CRON[1630729]: pam_unix(cron:session): session closed for user root Dec 15 10:00:01 ispc CRON[1630725]: pam_unix(cron:session): session closed for user root Dec 15 10:00:01 ispc CRON[1630728]: pam_unix(cron:session): session closed for user root Dec 15 10:01:01 ispc CRON[1630912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:01:02 ispc CRON[1630912]: pam_unix(cron:session): session closed for user root Dec 15 10:01:24 ispc CRON[1629707]: pam_unix(cron:session): session closed for user root Dec 15 10:01:25 ispc postfix/smtpd[1630934]: sql auxprop plugin using mysql engine Dec 15 10:02:01 ispc CRON[1630941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:02:01 ispc CRON[1630940]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 10:02:02 ispc CRON[1630941]: pam_unix(cron:session): session closed for user root Dec 15 10:03:01 ispc CRON[1631796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:03:02 ispc CRON[1631796]: pam_unix(cron:session): session closed for user root Dec 15 10:03:12 ispc CRON[1630940]: pam_unix(cron:session): session closed for user logcheck Dec 15 10:03:13 ispc postfix/smtpd[1631988]: sql auxprop plugin using mysql engine Dec 15 10:04:01 ispc CRON[1631992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:04:02 ispc CRON[1631992]: pam_unix(cron:session): session closed for user root Dec 15 10:04:44 ispc sshd[1632008]: Invalid user blceu from 175.125.92.77 Dec 15 10:04:56 ispc saslauthd[1632011]: pam_mysql - SELECT returned no result. Dec 15 10:04:56 ispc saslauthd[1632011]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:04:56 ispc saslauthd[1632011]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:05:01 ispc CRON[1632012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:05:01 ispc CRON[1632013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:05:01 ispc CRON[1632014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:05:01 ispc CRON[1632015]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:05:01 ispc CRON[1632015]: pam_unix(cron:session): session closed for user getmail Dec 15 10:05:01 ispc CRON[1632013]: pam_unix(cron:session): session closed for user root Dec 15 10:05:02 ispc CRON[1632012]: pam_unix(cron:session): session closed for user root Dec 15 10:05:08 ispc saslauthd[1632120]: pam_mysql - SELECT returned no result. Dec 15 10:05:08 ispc saslauthd[1632120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:05:08 ispc saslauthd[1632120]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:05:20 ispc sshd[1632121]: Invalid user ziplines from 116.120.58.228 Dec 15 10:05:25 ispc sshd[1632124]: Did not receive identification string from 45.140.17.97 Dec 15 10:05:33 ispc CRON[1632014]: pam_unix(cron:session): session closed for user root Dec 15 10:05:41 ispc sshd[1632127]: Invalid user ziplines from 175.125.92.77 Dec 15 10:06:01 ispc CRON[1632129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:07:01 ispc CRON[1632167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:07:01 ispc CRON[1632167]: pam_unix(cron:session): session closed for user root Dec 15 10:07:14 ispc postfix/smtpd[1632186]: sql auxprop plugin using mysql engine Dec 15 10:07:14 ispc postfix/smtpd[1632188]: sql auxprop plugin using mysql engine Dec 15 10:07:15 ispc postfix/smtpd[1632189]: sql auxprop plugin using mysql engine Dec 15 10:08:02 ispc CRON[1632220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:08:02 ispc CRON[1632220]: pam_unix(cron:session): session closed for user root Dec 15 10:09:01 ispc CRON[1632261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:09:02 ispc CRON[1632262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:09:02 ispc CRON[1632261]: pam_unix(cron:session): session closed for user root Dec 15 10:09:02 ispc CRON[1632262]: pam_unix(cron:session): session closed for user root Dec 15 10:10:01 ispc CRON[1632309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:10:01 ispc CRON[1632310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:10:01 ispc CRON[1632311]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:10:01 ispc CRON[1632312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:10:01 ispc CRON[1632313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:10:01 ispc CRON[1632311]: pam_unix(cron:session): session closed for user www-data Dec 15 10:10:01 ispc CRON[1632313]: pam_unix(cron:session): session closed for user getmail Dec 15 10:10:01 ispc CRON[1632310]: pam_unix(cron:session): session closed for user root Dec 15 10:10:01 ispc CRON[1632312]: pam_unix(cron:session): session closed for user root Dec 15 10:10:02 ispc CRON[1632309]: pam_unix(cron:session): session closed for user root Dec 15 10:11:01 ispc CRON[1632423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:11:01 ispc CRON[1632423]: pam_unix(cron:session): session closed for user root Dec 15 10:12:01 ispc postfix/smtpd[1632461]: sql auxprop plugin using mysql engine Dec 15 10:12:01 ispc postfix/smtpd[1632463]: sql auxprop plugin using mysql engine Dec 15 10:12:01 ispc CRON[1632464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:12:02 ispc CRON[1632464]: pam_unix(cron:session): session closed for user root Dec 15 10:12:03 ispc postfix/smtpd[1632476]: sql auxprop plugin using mysql engine Dec 15 10:12:57 ispc postfix/smtpd[1632511]: sql auxprop plugin using mysql engine Dec 15 10:12:58 ispc saslauthd[1632512]: pam_mysql - SELECT returned no result. Dec 15 10:12:58 ispc saslauthd[1632512]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:12:58 ispc saslauthd[1632512]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:13:01 ispc CRON[1632513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:13:01 ispc CRON[1632513]: pam_unix(cron:session): session closed for user root Dec 15 10:13:05 ispc saslauthd[1632524]: pam_mysql - SELECT returned no result. Dec 15 10:13:05 ispc saslauthd[1632524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:13:05 ispc saslauthd[1632524]: do_auth : auth failure: [user=uucpadm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:14:01 ispc CRON[1632553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:14:02 ispc CRON[1632553]: pam_unix(cron:session): session closed for user root Dec 15 10:15:01 ispc CRON[1632589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:15:01 ispc CRON[1632592]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:15:01 ispc CRON[1632591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:15:01 ispc CRON[1632590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:15:01 ispc CRON[1632592]: pam_unix(cron:session): session closed for user getmail Dec 15 10:15:01 ispc CRON[1632590]: pam_unix(cron:session): session closed for user root Dec 15 10:15:01 ispc CRON[1632591]: pam_unix(cron:session): session closed for user root Dec 15 10:15:02 ispc CRON[1632589]: pam_unix(cron:session): session closed for user root Dec 15 10:15:03 ispc postfix/smtpd[1632665]: sql auxprop plugin using mysql engine Dec 15 10:15:04 ispc saslauthd[1632667]: pam_mysql - SELECT returned no result. Dec 15 10:15:04 ispc saslauthd[1632667]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:15:04 ispc saslauthd[1632667]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:16:01 ispc CRON[1632698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:16:01 ispc CRON[1632698]: pam_unix(cron:session): session closed for user root Dec 15 10:17:01 ispc CRON[1632738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:17:03 ispc CRON[1632738]: pam_unix(cron:session): session closed for user root Dec 15 10:17:12 ispc postfix/smtpd[1632755]: sql auxprop plugin using mysql engine Dec 15 10:18:01 ispc CRON[1632787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:18:01 ispc CRON[1632787]: pam_unix(cron:session): session closed for user root Dec 15 10:19:01 ispc CRON[1632824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:19:02 ispc CRON[1632824]: pam_unix(cron:session): session closed for user root Dec 15 10:19:29 ispc sshd[1632848]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 10:19:29 ispc sshd[1632848]: Invalid user ziplines from 103.146.203.212 Dec 15 10:20:01 ispc CRON[1632863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:20:01 ispc CRON[1632867]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:20:01 ispc CRON[1632864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:20:01 ispc CRON[1632865]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:20:01 ispc CRON[1632866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:20:01 ispc CRON[1632865]: pam_unix(cron:session): session closed for user www-data Dec 15 10:20:01 ispc CRON[1632864]: pam_unix(cron:session): session closed for user root Dec 15 10:20:01 ispc CRON[1632867]: pam_unix(cron:session): session closed for user getmail Dec 15 10:20:01 ispc CRON[1632866]: pam_unix(cron:session): session closed for user root Dec 15 10:20:03 ispc CRON[1632863]: pam_unix(cron:session): session closed for user root Dec 15 10:20:30 ispc postfix/smtpd[1632955]: sql auxprop plugin using mysql engine Dec 15 10:20:31 ispc postfix/smtpd[1632957]: sql auxprop plugin using mysql engine Dec 15 10:20:32 ispc postfix/smtpd[1632958]: sql auxprop plugin using mysql engine Dec 15 10:21:01 ispc CRON[1632972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:21:01 ispc CRON[1632973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:21:01 ispc CRON[1632972]: pam_unix(cron:session): session closed for user root Dec 15 10:21:01 ispc CRON[1632973]: pam_unix(cron:session): session closed for user root Dec 15 10:22:01 ispc CRON[1633014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:22:02 ispc CRON[1633014]: pam_unix(cron:session): session closed for user root Dec 15 10:22:31 ispc sshd[1633038]: Invalid user martof from 5.133.121.104 Dec 15 10:23:01 ispc CRON[1633067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:23:01 ispc CRON[1633067]: pam_unix(cron:session): session closed for user root Dec 15 10:24:01 ispc CRON[1633103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:24:02 ispc CRON[1633103]: pam_unix(cron:session): session closed for user root Dec 15 10:24:56 ispc postfix/smtpd[1633142]: sql auxprop plugin using mysql engine Dec 15 10:25:01 ispc CRON[1633150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:25:01 ispc CRON[1633151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:25:01 ispc CRON[1633152]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:25:01 ispc CRON[1633149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:25:01 ispc CRON[1633150]: pam_unix(cron:session): session closed for user root Dec 15 10:25:01 ispc CRON[1633152]: pam_unix(cron:session): session closed for user getmail Dec 15 10:25:01 ispc CRON[1633151]: pam_unix(cron:session): session closed for user root Dec 15 10:25:01 ispc CRON[1633149]: pam_unix(cron:session): session closed for user root Dec 15 10:25:10 ispc postfix/smtpd[1633229]: sql auxprop plugin using mysql engine Dec 15 10:25:11 ispc saslauthd[1633231]: pam_mysql - SELECT returned no result. Dec 15 10:25:11 ispc saslauthd[1633231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:25:11 ispc saslauthd[1633231]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:26:01 ispc CRON[1633259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:26:02 ispc CRON[1633259]: pam_unix(cron:session): session closed for user root Dec 15 10:26:19 ispc CRON[1632129]: pam_unix(cron:session): session closed for user root Dec 15 10:26:27 ispc saslauthd[1633283]: pam_mysql - SELECT returned no result. Dec 15 10:26:27 ispc saslauthd[1633283]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:26:27 ispc saslauthd[1633283]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:27:01 ispc CRON[1633290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:27:02 ispc CRON[1633290]: pam_unix(cron:session): session closed for user root Dec 15 10:27:14 ispc saslauthd[1633304]: pam_mysql - SELECT returned no result. Dec 15 10:27:14 ispc saslauthd[1633304]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:27:14 ispc saslauthd[1633304]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:28:01 ispc CRON[1633317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:28:01 ispc CRON[1633317]: pam_unix(cron:session): session closed for user root Dec 15 10:28:10 ispc saslauthd[1633330]: pam_mysql - SELECT returned no result. Dec 15 10:28:10 ispc saslauthd[1633330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:28:10 ispc saslauthd[1633330]: do_auth : auth failure: [user=uwmadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:28:13 ispc postfix/smtpd[1633331]: sql auxprop plugin using mysql engine Dec 15 10:28:14 ispc postfix/smtpd[1633333]: sql auxprop plugin using mysql engine Dec 15 10:28:20 ispc sshd[1633335]: Invalid user admin from 211.45.175.153 Dec 15 10:29:01 ispc sshd[1633341]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 10:29:01 ispc CRON[1633343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:29:02 ispc CRON[1633343]: pam_unix(cron:session): session closed for user root Dec 15 10:30:01 ispc CRON[1633359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:30:01 ispc CRON[1633360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:30:01 ispc CRON[1633361]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:30:01 ispc CRON[1633362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:30:01 ispc CRON[1633363]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:30:01 ispc CRON[1633361]: pam_unix(cron:session): session closed for user www-data Dec 15 10:30:01 ispc CRON[1633363]: pam_unix(cron:session): session closed for user getmail Dec 15 10:30:01 ispc CRON[1633360]: pam_unix(cron:session): session closed for user root Dec 15 10:30:02 ispc CRON[1633359]: pam_unix(cron:session): session closed for user root Dec 15 10:30:45 ispc CRON[1633362]: pam_unix(cron:session): session closed for user root Dec 15 10:31:01 ispc CRON[1633549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:32:01 ispc CRON[1633584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:32:01 ispc CRON[1633584]: pam_unix(cron:session): session closed for user root Dec 15 10:32:11 ispc postfix/smtpd[1633599]: sql auxprop plugin using mysql engine Dec 15 10:32:11 ispc postfix/smtpd[1633601]: sql auxprop plugin using mysql engine Dec 15 10:32:11 ispc saslauthd[1633602]: pam_mysql - SELECT returned no result. Dec 15 10:32:11 ispc saslauthd[1633602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:11 ispc saslauthd[1633602]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:11 ispc saslauthd[1633603]: pam_mysql - SELECT returned no result. Dec 15 10:32:11 ispc saslauthd[1633603]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:11 ispc saslauthd[1633603]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:31 ispc saslauthd[1633613]: pam_mysql - SELECT returned no result. Dec 15 10:32:31 ispc saslauthd[1633613]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:31 ispc saslauthd[1633613]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:32 ispc saslauthd[1633614]: pam_mysql - SELECT returned no result. Dec 15 10:32:32 ispc saslauthd[1633614]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:32 ispc saslauthd[1633614]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:35 ispc saslauthd[1633619]: pam_mysql - SELECT returned no result. Dec 15 10:32:35 ispc saslauthd[1633619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:35 ispc saslauthd[1633619]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:45 ispc saslauthd[1633632]: pam_mysql - SELECT returned no result. Dec 15 10:32:45 ispc saslauthd[1633632]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:45 ispc saslauthd[1633632]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:32:57 ispc saslauthd[1633637]: pam_mysql - SELECT returned no result. Dec 15 10:32:57 ispc saslauthd[1633637]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:32:57 ispc saslauthd[1633637]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:01 ispc CRON[1633640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:33:01 ispc saslauthd[1633639]: pam_mysql - SELECT returned no result. Dec 15 10:33:01 ispc saslauthd[1633639]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:01 ispc saslauthd[1633639]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:02 ispc CRON[1633640]: pam_unix(cron:session): session closed for user root Dec 15 10:33:36 ispc saslauthd[1633668]: pam_mysql - SELECT returned no result. Dec 15 10:33:36 ispc saslauthd[1633668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:36 ispc saslauthd[1633668]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:43 ispc saslauthd[1633670]: pam_mysql - SELECT returned no result. Dec 15 10:33:43 ispc saslauthd[1633670]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:43 ispc saslauthd[1633670]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:44 ispc saslauthd[1633671]: pam_mysql - SELECT returned no result. Dec 15 10:33:44 ispc saslauthd[1633671]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:44 ispc saslauthd[1633671]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:55 ispc saslauthd[1633676]: pam_mysql - SELECT returned no result. Dec 15 10:33:55 ispc saslauthd[1633676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:55 ispc saslauthd[1633676]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:33:59 ispc saslauthd[1633681]: pam_mysql - SELECT returned no result. Dec 15 10:33:59 ispc saslauthd[1633681]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:33:59 ispc saslauthd[1633681]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:34:00 ispc saslauthd[1633682]: pam_mysql - SELECT returned no result. Dec 15 10:34:00 ispc saslauthd[1633682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:34:00 ispc saslauthd[1633682]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:34:01 ispc CRON[1633683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:34:01 ispc CRON[1633683]: pam_unix(cron:session): session closed for user root Dec 15 10:34:10 ispc postfix/smtpd[1633702]: sql auxprop plugin using mysql engine Dec 15 10:34:11 ispc postfix/smtpd[1633704]: sql auxprop plugin using mysql engine Dec 15 10:34:16 ispc postfix/smtpd[1633710]: sql auxprop plugin using mysql engine Dec 15 10:34:20 ispc saslauthd[1633711]: pam_mysql - SELECT returned no result. Dec 15 10:34:20 ispc saslauthd[1633711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:34:20 ispc saslauthd[1633711]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:34:24 ispc saslauthd[1633713]: pam_mysql - SELECT returned no result. Dec 15 10:34:24 ispc saslauthd[1633713]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:34:24 ispc saslauthd[1633713]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:34:42 ispc saslauthd[1633724]: pam_mysql - SELECT returned no result. Dec 15 10:34:42 ispc saslauthd[1633724]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:34:42 ispc saslauthd[1633724]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:34:50 ispc sshd[1633729]: Did not receive identification string from 172.234.162.31 Dec 15 10:35:01 ispc CRON[1633737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:35:01 ispc CRON[1633738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:35:01 ispc CRON[1633739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:35:01 ispc CRON[1633740]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:35:02 ispc CRON[1633738]: pam_unix(cron:session): session closed for user root Dec 15 10:35:02 ispc CRON[1633740]: pam_unix(cron:session): session closed for user getmail Dec 15 10:35:02 ispc CRON[1633739]: pam_unix(cron:session): session closed for user root Dec 15 10:35:02 ispc CRON[1633737]: pam_unix(cron:session): session closed for user root Dec 15 10:35:20 ispc saslauthd[1633825]: pam_mysql - SELECT returned no result. Dec 15 10:35:20 ispc saslauthd[1633825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:35:20 ispc saslauthd[1633825]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:35:27 ispc sshd[1633838]: Did not receive identification string from 172.234.162.31 Dec 15 10:35:33 ispc postfix/smtpd[1633840]: sql auxprop plugin using mysql engine Dec 15 10:35:35 ispc sshd[1633844]: Protocol major versions differ for 172.234.162.31: SSH-2.0-OpenSSH_5.1p1 Debian-5 vs. SSH-1.5-Nmap-SSH1-Hostkey Dec 15 10:35:40 ispc sshd[1633869]: Did not receive identification string from 172.234.162.31 Dec 15 10:35:57 ispc sshd[1633905]: Protocol major versions differ for 172.234.162.31: SSH-2.0-OpenSSH_5.1p1 Debian-5 vs. SSH-1.5-NmapNSE_1.0 Dec 15 10:35:58 ispc sshd[1633906]: Invalid user kxxfi from 172.234.162.31 Dec 15 10:36:01 ispc CRON[1633914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:36:02 ispc CRON[1633914]: pam_unix(cron:session): session closed for user root Dec 15 10:36:24 ispc postfix/smtpd[1634001]: sql auxprop plugin using mysql engine Dec 15 10:36:32 ispc postfix/smtpd[1634032]: sql auxprop plugin using mysql engine Dec 15 10:36:35 ispc postfix/smtpd[1634107]: sql auxprop plugin using mysql engine Dec 15 10:37:01 ispc CRON[1634128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:37:01 ispc CRON[1634128]: pam_unix(cron:session): session closed for user root Dec 15 10:37:45 ispc saslauthd[1634159]: pam_mysql - SELECT returned no result. Dec 15 10:37:45 ispc saslauthd[1634159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:37:45 ispc saslauthd[1634159]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:37:53 ispc sshd[1634169]: Did not receive identification string from 192.227.134.84 Dec 15 10:38:01 ispc CRON[1634175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:38:02 ispc CRON[1634175]: pam_unix(cron:session): session closed for user root Dec 15 10:38:05 ispc saslauthd[1634186]: pam_mysql - SELECT returned no result. Dec 15 10:38:05 ispc saslauthd[1634186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:38:05 ispc saslauthd[1634186]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:38:13 ispc saslauthd[1634191]: pam_mysql - SELECT returned no result. Dec 15 10:38:13 ispc saslauthd[1634191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:38:13 ispc saslauthd[1634191]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:38:16 ispc saslauthd[1634192]: pam_mysql - SELECT returned no result. Dec 15 10:38:16 ispc saslauthd[1634192]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:38:16 ispc saslauthd[1634192]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:38:32 ispc sshd[1634202]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 10:38:32 ispc sshd[1634202]: Invalid user martof from 103.146.203.212 Dec 15 10:39:01 ispc CRON[1634215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:39:01 ispc CRON[1634214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:39:01 ispc CRON[1634214]: pam_unix(cron:session): session closed for user root Dec 15 10:39:01 ispc CRON[1634215]: pam_unix(cron:session): session closed for user root Dec 15 10:39:58 ispc saslauthd[1634261]: pam_mysql - SELECT returned no result. Dec 15 10:39:58 ispc saslauthd[1634261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:39:58 ispc saslauthd[1634261]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:40:01 ispc CRON[1634262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:40:01 ispc CRON[1634264]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:40:01 ispc CRON[1634263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:40:01 ispc CRON[1634266]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:40:01 ispc CRON[1634265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:40:01 ispc CRON[1634263]: pam_unix(cron:session): session closed for user root Dec 15 10:40:01 ispc CRON[1634264]: pam_unix(cron:session): session closed for user www-data Dec 15 10:40:01 ispc CRON[1634266]: pam_unix(cron:session): session closed for user getmail Dec 15 10:40:02 ispc CRON[1634265]: pam_unix(cron:session): session closed for user root Dec 15 10:40:02 ispc CRON[1634262]: pam_unix(cron:session): session closed for user root Dec 15 10:41:01 ispc CRON[1634368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:41:02 ispc CRON[1634368]: pam_unix(cron:session): session closed for user root Dec 15 10:42:01 ispc CRON[1634406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:42:01 ispc CRON[1634406]: pam_unix(cron:session): session closed for user root Dec 15 10:42:45 ispc sshd[1634451]: Invalid user klape from 70.37.89.177 Dec 15 10:42:47 ispc sshd[1634453]: Invalid user ubuntu from 70.37.89.177 Dec 15 10:43:01 ispc CRON[1634463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:43:02 ispc CRON[1634463]: pam_unix(cron:session): session closed for user root Dec 15 10:43:03 ispc postfix/smtpd[1634474]: sql auxprop plugin using mysql engine Dec 15 10:43:04 ispc saslauthd[1634476]: pam_mysql - SELECT returned no result. Dec 15 10:43:04 ispc saslauthd[1634476]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:43:04 ispc saslauthd[1634476]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:43:10 ispc saslauthd[1634481]: pam_mysql - SELECT returned no result. Dec 15 10:43:10 ispc saslauthd[1634481]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:43:10 ispc saslauthd[1634481]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:43:14 ispc saslauthd[1634483]: pam_mysql - SELECT returned no result. Dec 15 10:43:14 ispc saslauthd[1634483]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:43:14 ispc saslauthd[1634483]: do_auth : auth failure: [user=vcr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:44:01 ispc CRON[1634507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:44:01 ispc CRON[1634507]: pam_unix(cron:session): session closed for user root Dec 15 10:44:04 ispc sshd[1634518]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 10:44:28 ispc sshd[1634529]: Invalid user ftpuser from 45.134.26.237 Dec 15 10:44:28 ispc sshd[1634531]: Invalid user dean from 45.134.26.237 Dec 15 10:44:33 ispc sshd[1634547]: Invalid user media from 45.134.26.237 Dec 15 10:44:35 ispc sshd[1634551]: Invalid user openhabian from 45.134.26.237 Dec 15 10:44:36 ispc sshd[1634553]: Invalid user ftpuser from 45.134.26.237 Dec 15 10:44:37 ispc sshd[1634558]: Invalid user 1 from 45.134.26.237 Dec 15 10:44:38 ispc sshd[1634560]: Invalid user vagrant from 45.134.26.237 Dec 15 10:44:53 ispc saslauthd[1634576]: pam_mysql - SELECT returned no result. Dec 15 10:44:53 ispc saslauthd[1634576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:44:53 ispc saslauthd[1634576]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:45:01 ispc CRON[1634581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:45:01 ispc CRON[1634583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:45:01 ispc CRON[1634582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:45:01 ispc CRON[1634584]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:45:01 ispc CRON[1634582]: pam_unix(cron:session): session closed for user root Dec 15 10:45:01 ispc CRON[1634584]: pam_unix(cron:session): session closed for user getmail Dec 15 10:45:02 ispc CRON[1634583]: pam_unix(cron:session): session closed for user root Dec 15 10:45:02 ispc CRON[1634581]: pam_unix(cron:session): session closed for user root Dec 15 10:46:01 ispc CRON[1634685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:46:01 ispc CRON[1634685]: pam_unix(cron:session): session closed for user root Dec 15 10:46:05 ispc postfix/smtpd[1634696]: sql auxprop plugin using mysql engine Dec 15 10:47:01 ispc sshd[1634722]: Invalid user martof from 211.110.229.128 Dec 15 10:47:01 ispc CRON[1634729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:47:02 ispc CRON[1634729]: pam_unix(cron:session): session closed for user root Dec 15 10:48:01 ispc CRON[1634775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:48:02 ispc CRON[1634775]: pam_unix(cron:session): session closed for user root Dec 15 10:49:01 ispc CRON[1634808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:49:01 ispc CRON[1634808]: pam_unix(cron:session): session closed for user root Dec 15 10:50:01 ispc CRON[1634846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:50:01 ispc CRON[1634847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:50:01 ispc CRON[1634848]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 10:50:01 ispc CRON[1634850]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:50:01 ispc CRON[1634849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:50:01 ispc CRON[1634847]: pam_unix(cron:session): session closed for user root Dec 15 10:50:01 ispc CRON[1634848]: pam_unix(cron:session): session closed for user www-data Dec 15 10:50:01 ispc CRON[1634850]: pam_unix(cron:session): session closed for user getmail Dec 15 10:50:02 ispc CRON[1634849]: pam_unix(cron:session): session closed for user root Dec 15 10:50:02 ispc CRON[1634846]: pam_unix(cron:session): session closed for user root Dec 15 10:51:01 ispc CRON[1634953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:51:02 ispc CRON[1634953]: pam_unix(cron:session): session closed for user root Dec 15 10:51:23 ispc postfix/smtpd[1634974]: sql auxprop plugin using mysql engine Dec 15 10:51:23 ispc CRON[1633549]: pam_unix(cron:session): session closed for user root Dec 15 10:52:01 ispc CRON[1634981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:52:02 ispc CRON[1634981]: pam_unix(cron:session): session closed for user root Dec 15 10:52:15 ispc sshd[1634993]: Invalid user ziplines from 211.57.200.145 Dec 15 10:53:01 ispc CRON[1635004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:53:01 ispc CRON[1635004]: pam_unix(cron:session): session closed for user root Dec 15 10:54:01 ispc CRON[1635019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:54:02 ispc CRON[1635019]: pam_unix(cron:session): session closed for user root Dec 15 10:54:38 ispc sshd[1635034]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 10:54:38 ispc sshd[1635034]: Invalid user martof from 193.110.157.47 Dec 15 10:55:01 ispc CRON[1635036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:55:01 ispc CRON[1635037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:55:01 ispc CRON[1635038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:55:01 ispc CRON[1635039]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 10:55:01 ispc CRON[1635037]: pam_unix(cron:session): session closed for user root Dec 15 10:55:01 ispc CRON[1635039]: pam_unix(cron:session): session closed for user getmail Dec 15 10:55:01 ispc CRON[1635036]: pam_unix(cron:session): session closed for user root Dec 15 10:55:30 ispc CRON[1635038]: pam_unix(cron:session): session closed for user root Dec 15 10:56:01 ispc CRON[1635146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:56:06 ispc postfix/smtpd[1635159]: sql auxprop plugin using mysql engine Dec 15 10:57:01 ispc CRON[1635185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:57:01 ispc CRON[1635185]: pam_unix(cron:session): session closed for user root Dec 15 10:58:01 ispc CRON[1635233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:58:01 ispc CRON[1635233]: pam_unix(cron:session): session closed for user root Dec 15 10:58:17 ispc postfix/smtpd[1635252]: sql auxprop plugin using mysql engine Dec 15 10:58:19 ispc saslauthd[1635254]: pam_mysql - SELECT returned no result. Dec 15 10:58:19 ispc saslauthd[1635254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 10:58:19 ispc saslauthd[1635254]: do_auth : auth failure: [user=vgnadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 10:59:01 ispc CRON[1635275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 10:59:02 ispc CRON[1635275]: pam_unix(cron:session): session closed for user root Dec 15 11:00:01 ispc CRON[1635311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:00:01 ispc CRON[1635312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:00:01 ispc CRON[1635313]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:00:01 ispc CRON[1635314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:00:01 ispc CRON[1635315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:00:01 ispc CRON[1635316]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:00:01 ispc CRON[1635312]: pam_unix(cron:session): session closed for user root Dec 15 11:00:01 ispc CRON[1635313]: pam_unix(cron:session): session closed for user www-data Dec 15 11:00:01 ispc CRON[1635316]: pam_unix(cron:session): session closed for user getmail Dec 15 11:00:01 ispc CRON[1635315]: pam_unix(cron:session): session closed for user root Dec 15 11:00:01 ispc CRON[1635314]: pam_unix(cron:session): session closed for user root Dec 15 11:00:01 ispc CRON[1635311]: pam_unix(cron:session): session closed for user root Dec 15 11:00:19 ispc postfix/smtpd[1635478]: sql auxprop plugin using mysql engine Dec 15 11:00:19 ispc saslauthd[1635480]: pam_mysql - SELECT returned no result. Dec 15 11:00:19 ispc saslauthd[1635480]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:00:19 ispc saslauthd[1635480]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:01:01 ispc CRON[1635499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:01:02 ispc CRON[1635499]: pam_unix(cron:session): session closed for user root Dec 15 11:01:21 ispc saslauthd[1635519]: pam_mysql - SELECT returned no result. Dec 15 11:01:21 ispc saslauthd[1635519]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:01:21 ispc saslauthd[1635519]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:01:55 ispc postfix/smtpd[1635534]: sql auxprop plugin using mysql engine Dec 15 11:02:01 ispc CRON[1635537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:02:01 ispc CRON[1635536]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 11:02:02 ispc CRON[1635537]: pam_unix(cron:session): session closed for user root Dec 15 11:03:01 ispc CRON[1636380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:03:01 ispc CRON[1636380]: pam_unix(cron:session): session closed for user root Dec 15 11:03:25 ispc CRON[1635536]: pam_unix(cron:session): session closed for user logcheck Dec 15 11:03:30 ispc sshd[1636617]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:03:30 ispc sshd[1636617]: Invalid user blceu from 103.146.203.212 Dec 15 11:03:59 ispc postfix/smtpd[1636633]: sql auxprop plugin using mysql engine Dec 15 11:04:01 ispc CRON[1636637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:04:02 ispc CRON[1636637]: pam_unix(cron:session): session closed for user root Dec 15 11:05:01 ispc CRON[1636674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:05:01 ispc CRON[1636676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:05:01 ispc CRON[1636677]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:05:01 ispc CRON[1636675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:05:01 ispc CRON[1636675]: pam_unix(cron:session): session closed for user root Dec 15 11:05:01 ispc CRON[1636677]: pam_unix(cron:session): session closed for user getmail Dec 15 11:05:01 ispc CRON[1636676]: pam_unix(cron:session): session closed for user root Dec 15 11:05:01 ispc CRON[1636674]: pam_unix(cron:session): session closed for user root Dec 15 11:06:01 ispc CRON[1636780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:06:02 ispc CRON[1636780]: pam_unix(cron:session): session closed for user root Dec 15 11:07:01 ispc CRON[1636822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:07:01 ispc CRON[1636822]: pam_unix(cron:session): session closed for user root Dec 15 11:07:47 ispc postfix/smtpd[1636855]: sql auxprop plugin using mysql engine Dec 15 11:07:47 ispc postfix/smtpd[1636857]: sql auxprop plugin using mysql engine Dec 15 11:07:47 ispc postfix/smtpd[1636859]: sql auxprop plugin using mysql engine Dec 15 11:07:56 ispc sshd[1636870]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:07:58 ispc sshd[1636872]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:07:58 ispc sshd[1636872]: Invalid user klape from 189.89.20.45 Dec 15 11:08:00 ispc sshd[1636878]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:08:00 ispc sshd[1636878]: Invalid user ubuntu from 189.89.20.45 Dec 15 11:08:01 ispc CRON[1636880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:08:02 ispc CRON[1636880]: pam_unix(cron:session): session closed for user root Dec 15 11:09:01 ispc CRON[1636920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:09:01 ispc CRON[1636919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:09:01 ispc CRON[1636919]: pam_unix(cron:session): session closed for user root Dec 15 11:09:02 ispc CRON[1636920]: pam_unix(cron:session): session closed for user root Dec 15 11:10:01 ispc CRON[1636968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:10:01 ispc CRON[1636972]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:10:01 ispc CRON[1636969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:10:01 ispc CRON[1636970]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:10:01 ispc CRON[1636971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:10:01 ispc CRON[1636970]: pam_unix(cron:session): session closed for user www-data Dec 15 11:10:01 ispc CRON[1636969]: pam_unix(cron:session): session closed for user root Dec 15 11:10:01 ispc CRON[1636972]: pam_unix(cron:session): session closed for user getmail Dec 15 11:10:01 ispc CRON[1636971]: pam_unix(cron:session): session closed for user root Dec 15 11:10:02 ispc CRON[1636968]: pam_unix(cron:session): session closed for user root Dec 15 11:11:01 ispc CRON[1637073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:11:02 ispc CRON[1637073]: pam_unix(cron:session): session closed for user root Dec 15 11:12:00 ispc sshd[1637108]: Invalid user klape from 36.50.177.171 Dec 15 11:12:00 ispc postfix/smtpd[1637112]: sql auxprop plugin using mysql engine Dec 15 11:12:01 ispc CRON[1637116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:12:01 ispc saslauthd[1637120]: pam_mysql - SELECT returned no result. Dec 15 11:12:01 ispc saslauthd[1637120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:12:01 ispc saslauthd[1637120]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:12:01 ispc CRON[1637116]: pam_unix(cron:session): session closed for user root Dec 15 11:12:08 ispc sshd[1637110]: Invalid user ubuntu from 36.50.177.171 Dec 15 11:13:01 ispc CRON[1637161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:13:02 ispc CRON[1637161]: pam_unix(cron:session): session closed for user root Dec 15 11:13:20 ispc saslauthd[1637180]: pam_mysql - SELECT returned no result. Dec 15 11:13:20 ispc saslauthd[1637180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:13:20 ispc saslauthd[1637180]: do_auth : auth failure: [user=viewer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:14:01 ispc CRON[1637198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:14:02 ispc CRON[1637198]: pam_unix(cron:session): session closed for user root Dec 15 11:14:38 ispc postfix/smtpd[1637228]: sql auxprop plugin using mysql engine Dec 15 11:14:38 ispc postfix/smtpd[1637230]: sql auxprop plugin using mysql engine Dec 15 11:14:39 ispc postfix/smtpd[1637231]: sql auxprop plugin using mysql engine Dec 15 11:15:01 ispc CRON[1637240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:15:01 ispc CRON[1637241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:15:01 ispc CRON[1637242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:15:01 ispc CRON[1637243]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:15:01 ispc CRON[1637241]: pam_unix(cron:session): session closed for user root Dec 15 11:15:01 ispc CRON[1637243]: pam_unix(cron:session): session closed for user getmail Dec 15 11:15:01 ispc CRON[1637242]: pam_unix(cron:session): session closed for user root Dec 15 11:15:02 ispc CRON[1637240]: pam_unix(cron:session): session closed for user root Dec 15 11:16:01 ispc CRON[1637347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:16:01 ispc CRON[1637347]: pam_unix(cron:session): session closed for user root Dec 15 11:16:24 ispc CRON[1635146]: pam_unix(cron:session): session closed for user root Dec 15 11:16:24 ispc postfix/smtpd[1637377]: sql auxprop plugin using mysql engine Dec 15 11:16:51 ispc saslauthd[1637381]: pam_mysql - SELECT returned no result. Dec 15 11:16:51 ispc saslauthd[1637381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:16:51 ispc saslauthd[1637381]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:17:01 ispc CRON[1637382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:17:01 ispc CRON[1637382]: pam_unix(cron:session): session closed for user root Dec 15 11:17:42 ispc postfix/smtpd[1637401]: sql auxprop plugin using mysql engine Dec 15 11:17:42 ispc postfix/smtpd[1637402]: sql auxprop plugin using mysql engine Dec 15 11:17:43 ispc postfix/smtpd[1637403]: sql auxprop plugin using mysql engine Dec 15 11:18:01 ispc CRON[1637407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:18:02 ispc CRON[1637407]: pam_unix(cron:session): session closed for user root Dec 15 11:19:01 ispc CRON[1637424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:19:01 ispc CRON[1637424]: pam_unix(cron:session): session closed for user root Dec 15 11:20:01 ispc CRON[1637441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:20:01 ispc CRON[1637440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:20:01 ispc CRON[1637442]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:20:01 ispc CRON[1637444]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:20:01 ispc CRON[1637443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:20:01 ispc CRON[1637441]: pam_unix(cron:session): session closed for user root Dec 15 11:20:01 ispc CRON[1637442]: pam_unix(cron:session): session closed for user www-data Dec 15 11:20:01 ispc CRON[1637444]: pam_unix(cron:session): session closed for user getmail Dec 15 11:20:02 ispc CRON[1637440]: pam_unix(cron:session): session closed for user root Dec 15 11:20:20 ispc postfix/smtpd[1637553]: sql auxprop plugin using mysql engine Dec 15 11:20:28 ispc CRON[1637443]: pam_unix(cron:session): session closed for user root Dec 15 11:21:01 ispc CRON[1637558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:21:01 ispc CRON[1637557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:21:02 ispc CRON[1637557]: pam_unix(cron:session): session closed for user root Dec 15 11:21:52 ispc sshd[1637590]: Invalid user blceu from 103.110.84.105 Dec 15 11:22:01 ispc CRON[1637596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:22:01 ispc CRON[1637596]: pam_unix(cron:session): session closed for user root Dec 15 11:22:07 ispc postfix/smtpd[1637612]: sql auxprop plugin using mysql engine Dec 15 11:22:08 ispc postfix/smtpd[1637614]: sql auxprop plugin using mysql engine Dec 15 11:22:08 ispc postfix/smtpd[1637615]: sql auxprop plugin using mysql engine Dec 15 11:22:18 ispc postfix/smtpd[1637622]: sql auxprop plugin using mysql engine Dec 15 11:22:19 ispc saslauthd[1637623]: pam_mysql - SELECT returned no result. Dec 15 11:22:19 ispc saslauthd[1637623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:22:19 ispc saslauthd[1637623]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:23:01 ispc CRON[1637648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:23:01 ispc CRON[1637648]: pam_unix(cron:session): session closed for user root Dec 15 11:23:41 ispc saslauthd[1637678]: pam_mysql - SELECT returned no result. Dec 15 11:23:41 ispc saslauthd[1637678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:23:41 ispc saslauthd[1637678]: do_auth : auth failure: [user=prova] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:24:01 ispc CRON[1637687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:24:02 ispc CRON[1637687]: pam_unix(cron:session): session closed for user root Dec 15 11:24:07 ispc sshd[1637698]: Did not receive identification string from 174.138.6.215 Dec 15 11:24:12 ispc saslauthd[1637704]: pam_mysql - SELECT returned no result. Dec 15 11:24:12 ispc saslauthd[1637704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:24:12 ispc saslauthd[1637704]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:25:01 ispc CRON[1637728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:25:01 ispc CRON[1637731]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:25:01 ispc CRON[1637729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:25:01 ispc CRON[1637730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:25:01 ispc CRON[1637729]: pam_unix(cron:session): session closed for user root Dec 15 11:25:01 ispc CRON[1637731]: pam_unix(cron:session): session closed for user getmail Dec 15 11:25:01 ispc CRON[1637730]: pam_unix(cron:session): session closed for user root Dec 15 11:25:02 ispc CRON[1637728]: pam_unix(cron:session): session closed for user root Dec 15 11:25:24 ispc sshd[1637813]: Invalid user test1 from 174.138.6.215 Dec 15 11:26:01 ispc CRON[1637832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:26:01 ispc CRON[1637832]: pam_unix(cron:session): session closed for user root Dec 15 11:26:09 ispc sshd[1637847]: Did not receive identification string from 174.138.14.234 Dec 15 11:26:15 ispc sshd[1637848]: Invalid user test2 from 174.138.6.215 Dec 15 11:26:28 ispc sshd[1637855]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:26:30 ispc postfix/smtpd[1637861]: sql auxprop plugin using mysql engine Dec 15 11:26:30 ispc postfix/smtpd[1637863]: sql auxprop plugin using mysql engine Dec 15 11:26:31 ispc postfix/smtpd[1637864]: sql auxprop plugin using mysql engine Dec 15 11:26:43 ispc postfix/smtpd[1637869]: sql auxprop plugin using mysql engine Dec 15 11:26:44 ispc saslauthd[1637870]: pam_mysql - SELECT returned no result. Dec 15 11:26:44 ispc saslauthd[1637870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:26:44 ispc saslauthd[1637870]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:26:44 ispc saslauthd[1637871]: pam_mysql - SELECT returned no result. Dec 15 11:26:44 ispc saslauthd[1637871]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:26:44 ispc saslauthd[1637871]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:27:01 ispc CRON[1637882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:27:02 ispc CRON[1637882]: pam_unix(cron:session): session closed for user root Dec 15 11:27:04 ispc sshd[1637893]: Invalid user test3 from 174.138.6.215 Dec 15 11:27:06 ispc saslauthd[1637895]: pam_mysql - SELECT returned no result. Dec 15 11:27:06 ispc saslauthd[1637895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:27:06 ispc saslauthd[1637895]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:27:19 ispc saslauthd[1637904]: pam_mysql - SELECT returned no result. Dec 15 11:27:19 ispc saslauthd[1637904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:27:19 ispc saslauthd[1637904]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:27:28 ispc saslauthd[1637906]: pam_mysql - SELECT returned no result. Dec 15 11:27:28 ispc saslauthd[1637906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:27:28 ispc saslauthd[1637906]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:27:33 ispc saslauthd[1637911]: pam_mysql - SELECT returned no result. Dec 15 11:27:33 ispc saslauthd[1637911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:27:33 ispc saslauthd[1637911]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:01 ispc CRON[1637934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:28:02 ispc CRON[1637934]: pam_unix(cron:session): session closed for user root Dec 15 11:28:08 ispc saslauthd[1637946]: pam_mysql - SELECT returned no result. Dec 15 11:28:08 ispc saslauthd[1637946]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:08 ispc saslauthd[1637946]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:13 ispc saslauthd[1637951]: pam_mysql - SELECT returned no result. Dec 15 11:28:13 ispc saslauthd[1637951]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:13 ispc saslauthd[1637951]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:18 ispc saslauthd[1637956]: pam_mysql - SELECT returned no result. Dec 15 11:28:18 ispc saslauthd[1637956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:18 ispc saslauthd[1637956]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:18 ispc postfix/smtpd[1637955]: sql auxprop plugin using mysql engine Dec 15 11:28:20 ispc saslauthd[1637966]: pam_mysql - SELECT returned no result. Dec 15 11:28:20 ispc saslauthd[1637966]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:20 ispc saslauthd[1637966]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:20 ispc postfix/smtpd[1637968]: sql auxprop plugin using mysql engine Dec 15 11:28:20 ispc saslauthd[1637969]: pam_mysql - SELECT returned no result. Dec 15 11:28:20 ispc saslauthd[1637969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:20 ispc saslauthd[1637969]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:21 ispc postfix/smtpd[1637970]: sql auxprop plugin using mysql engine Dec 15 11:28:21 ispc saslauthd[1637971]: pam_mysql - SELECT returned no result. Dec 15 11:28:21 ispc saslauthd[1637971]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:21 ispc saslauthd[1637971]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:22 ispc saslauthd[1637972]: pam_mysql - SELECT returned no result. Dec 15 11:28:22 ispc saslauthd[1637972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:22 ispc saslauthd[1637972]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:23 ispc saslauthd[1637973]: pam_mysql - SELECT returned no result. Dec 15 11:28:23 ispc saslauthd[1637973]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:23 ispc saslauthd[1637973]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:23 ispc postfix/smtpd[1637974]: sql auxprop plugin using mysql engine Dec 15 11:28:23 ispc saslauthd[1637975]: pam_mysql - SELECT returned no result. Dec 15 11:28:23 ispc saslauthd[1637975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:23 ispc saslauthd[1637975]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:24 ispc saslauthd[1637976]: pam_mysql - SELECT returned no result. Dec 15 11:28:24 ispc saslauthd[1637976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:24 ispc saslauthd[1637976]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:25 ispc postfix/smtpd[1637977]: sql auxprop plugin using mysql engine Dec 15 11:28:25 ispc saslauthd[1637978]: pam_mysql - SELECT returned no result. Dec 15 11:28:25 ispc saslauthd[1637978]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:25 ispc saslauthd[1637978]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:25 ispc postfix/smtpd[1637979]: sql auxprop plugin using mysql engine Dec 15 11:28:25 ispc saslauthd[1637980]: pam_mysql - SELECT returned no result. Dec 15 11:28:25 ispc saslauthd[1637980]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:25 ispc saslauthd[1637980]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:26 ispc saslauthd[1637981]: pam_mysql - SELECT returned no result. Dec 15 11:28:26 ispc saslauthd[1637981]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:26 ispc saslauthd[1637981]: do_auth : auth failure: [user=viewuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:26 ispc saslauthd[1637982]: pam_mysql - SELECT returned no result. Dec 15 11:28:26 ispc saslauthd[1637982]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:26 ispc saslauthd[1637982]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:27 ispc saslauthd[1637983]: pam_mysql - SELECT returned no result. Dec 15 11:28:27 ispc saslauthd[1637983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:27 ispc saslauthd[1637983]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:27 ispc saslauthd[1637984]: pam_mysql - SELECT returned no result. Dec 15 11:28:27 ispc saslauthd[1637984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:27 ispc saslauthd[1637984]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:28 ispc saslauthd[1637985]: pam_mysql - SELECT returned no result. Dec 15 11:28:28 ispc saslauthd[1637985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:28 ispc saslauthd[1637985]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:28 ispc saslauthd[1637986]: pam_mysql - SELECT returned no result. Dec 15 11:28:28 ispc saslauthd[1637986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:28 ispc saslauthd[1637986]: do_auth : auth failure: [user=username] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:29 ispc saslauthd[1637987]: pam_mysql - SELECT returned no result. Dec 15 11:28:29 ispc saslauthd[1637987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:29 ispc saslauthd[1637987]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:29 ispc saslauthd[1637988]: pam_mysql - SELECT returned no result. Dec 15 11:28:29 ispc saslauthd[1637988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:29 ispc saslauthd[1637988]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:29 ispc saslauthd[1637989]: pam_mysql - SELECT returned no result. Dec 15 11:28:29 ispc saslauthd[1637989]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:29 ispc saslauthd[1637989]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:30 ispc saslauthd[1637990]: pam_mysql - SELECT returned no result. Dec 15 11:28:30 ispc saslauthd[1637990]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:30 ispc saslauthd[1637990]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:30 ispc saslauthd[1637996]: pam_mysql - SELECT returned no result. Dec 15 11:28:30 ispc saslauthd[1637996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:30 ispc saslauthd[1637996]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:31 ispc saslauthd[1637997]: pam_mysql - SELECT returned no result. Dec 15 11:28:31 ispc saslauthd[1637997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:31 ispc saslauthd[1637997]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:32 ispc saslauthd[1637998]: pam_mysql - SELECT returned no result. Dec 15 11:28:32 ispc saslauthd[1637998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:32 ispc saslauthd[1637998]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:32 ispc saslauthd[1638000]: pam_mysql - SELECT returned no result. Dec 15 11:28:32 ispc saslauthd[1638000]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:32 ispc saslauthd[1638000]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:33 ispc saslauthd[1638001]: pam_mysql - SELECT returned no result. Dec 15 11:28:33 ispc saslauthd[1638001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:33 ispc saslauthd[1638001]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:33 ispc saslauthd[1638002]: pam_mysql - SELECT returned no result. Dec 15 11:28:33 ispc saslauthd[1638002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:33 ispc saslauthd[1638002]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:34 ispc saslauthd[1638003]: pam_mysql - SELECT returned no result. Dec 15 11:28:34 ispc saslauthd[1638003]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:34 ispc saslauthd[1638003]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:34 ispc saslauthd[1638004]: pam_mysql - SELECT returned no result. Dec 15 11:28:34 ispc saslauthd[1638004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:34 ispc saslauthd[1638004]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:35 ispc saslauthd[1638005]: pam_mysql - SELECT returned no result. Dec 15 11:28:35 ispc saslauthd[1638005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:35 ispc saslauthd[1638005]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:35 ispc saslauthd[1638008]: pam_mysql - SELECT returned no result. Dec 15 11:28:35 ispc saslauthd[1638008]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:35 ispc saslauthd[1638008]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:49 ispc saslauthd[1638013]: pam_mysql - SELECT returned no result. Dec 15 11:28:49 ispc saslauthd[1638013]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:49 ispc saslauthd[1638013]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:28:56 ispc saslauthd[1638019]: pam_mysql - SELECT returned no result. Dec 15 11:28:56 ispc saslauthd[1638019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:28:56 ispc saslauthd[1638019]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:29:01 ispc CRON[1638024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:29:01 ispc CRON[1638024]: pam_unix(cron:session): session closed for user root Dec 15 11:29:20 ispc saslauthd[1638041]: pam_mysql - SELECT returned no result. Dec 15 11:29:20 ispc saslauthd[1638041]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:29:20 ispc saslauthd[1638041]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:29:37 ispc sshd[1638050]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:29:37 ispc sshd[1638050]: Invalid user martof from 157.245.115.125 Dec 15 11:29:41 ispc saslauthd[1638056]: pam_mysql - SELECT returned no result. Dec 15 11:29:41 ispc saslauthd[1638056]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:29:41 ispc saslauthd[1638056]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:30:01 ispc CRON[1638069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:30:01 ispc CRON[1638070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:30:01 ispc CRON[1638071]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:30:01 ispc CRON[1638072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:30:01 ispc CRON[1638073]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:30:01 ispc CRON[1638071]: pam_unix(cron:session): session closed for user www-data Dec 15 11:30:01 ispc CRON[1638070]: pam_unix(cron:session): session closed for user root Dec 15 11:30:01 ispc CRON[1638073]: pam_unix(cron:session): session closed for user getmail Dec 15 11:30:01 ispc CRON[1638072]: pam_unix(cron:session): session closed for user root Dec 15 11:30:02 ispc CRON[1638069]: pam_unix(cron:session): session closed for user root Dec 15 11:31:01 ispc CRON[1638175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:31:01 ispc CRON[1638175]: pam_unix(cron:session): session closed for user root Dec 15 11:31:58 ispc postfix/smtpd[1638219]: sql auxprop plugin using mysql engine Dec 15 11:31:59 ispc saslauthd[1638221]: pam_mysql - SELECT returned no result. Dec 15 11:31:59 ispc saslauthd[1638221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:31:59 ispc saslauthd[1638221]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:32:01 ispc CRON[1638222]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:32:01 ispc CRON[1638222]: pam_unix(cron:session): session closed for user root Dec 15 11:32:24 ispc postfix/smtpd[1638248]: sql auxprop plugin using mysql engine Dec 15 11:32:24 ispc postfix/smtpd[1638250]: sql auxprop plugin using mysql engine Dec 15 11:32:35 ispc saslauthd[1638257]: pam_mysql - SELECT returned no result. Dec 15 11:32:35 ispc saslauthd[1638257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:32:35 ispc saslauthd[1638257]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:32:42 ispc sshd[1638258]: Did not receive identification string from 192.227.134.84 Dec 15 11:33:01 ispc CRON[1638282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:33:02 ispc CRON[1638282]: pam_unix(cron:session): session closed for user root Dec 15 11:33:34 ispc sshd[1638314]: Invalid user postgres from 174.138.6.215 Dec 15 11:34:01 ispc CRON[1638326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:34:01 ispc CRON[1638326]: pam_unix(cron:session): session closed for user root Dec 15 11:34:17 ispc sshd[1638348]: Invalid user oracle from 174.138.6.215 Dec 15 11:34:23 ispc sshd[1638354]: Invalid user klape from 67.205.163.146 Dec 15 11:34:24 ispc postfix/smtpd[1638362]: sql auxprop plugin using mysql engine Dec 15 11:34:24 ispc sshd[1638360]: Invalid user ubuntu from 67.205.163.146 Dec 15 11:34:24 ispc saslauthd[1638364]: pam_mysql - SELECT returned no result. Dec 15 11:34:24 ispc saslauthd[1638364]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:34:24 ispc saslauthd[1638364]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:34:46 ispc saslauthd[1638376]: pam_mysql - SELECT returned no result. Dec 15 11:34:46 ispc saslauthd[1638376]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:34:46 ispc saslauthd[1638376]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:34:53 ispc saslauthd[1638377]: pam_mysql - SELECT returned no result. Dec 15 11:34:53 ispc saslauthd[1638377]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:34:53 ispc saslauthd[1638377]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:34:56 ispc saslauthd[1638382]: pam_mysql - SELECT returned no result. Dec 15 11:34:56 ispc saslauthd[1638382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:34:56 ispc saslauthd[1638382]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:34:58 ispc sshd[1638383]: Invalid user user from 174.138.6.215 Dec 15 11:35:01 ispc CRON[1638395]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:35:01 ispc CRON[1638392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:35:01 ispc CRON[1638394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:35:01 ispc CRON[1638393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:35:01 ispc CRON[1638393]: pam_unix(cron:session): session closed for user root Dec 15 11:35:01 ispc CRON[1638395]: pam_unix(cron:session): session closed for user getmail Dec 15 11:35:02 ispc CRON[1638392]: pam_unix(cron:session): session closed for user root Dec 15 11:35:02 ispc CRON[1638394]: pam_unix(cron:session): session closed for user root Dec 15 11:35:16 ispc sshd[1638489]: Did not receive identification string from 47.93.81.231 Dec 15 11:35:16 ispc postfix/smtpd[1638490]: sql auxprop plugin using mysql engine Dec 15 11:35:39 ispc postfix/smtpd[1638515]: sql auxprop plugin using mysql engine Dec 15 11:35:39 ispc postfix/smtpd[1638516]: sql auxprop plugin using mysql engine Dec 15 11:35:40 ispc sshd[1638513]: Invalid user ziplines from 221.156.137.103 Dec 15 11:35:41 ispc postfix/smtpd[1638518]: sql auxprop plugin using mysql engine Dec 15 11:36:01 ispc CRON[1638534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:36:02 ispc CRON[1638534]: pam_unix(cron:session): session closed for user root Dec 15 11:37:01 ispc CRON[1638583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:37:01 ispc CRON[1638583]: pam_unix(cron:session): session closed for user root Dec 15 11:37:42 ispc postfix/smtpd[1638617]: sql auxprop plugin using mysql engine Dec 15 11:37:47 ispc saslauthd[1638619]: pam_mysql - SELECT returned no result. Dec 15 11:37:47 ispc saslauthd[1638619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:37:47 ispc saslauthd[1638619]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:38:01 ispc CRON[1638635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:38:01 ispc CRON[1638635]: pam_unix(cron:session): session closed for user root Dec 15 11:38:39 ispc sshd[1638660]: Invalid user blceu from 221.156.137.103 Dec 15 11:39:01 ispc CRON[1638688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:39:01 ispc CRON[1638687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:39:02 ispc CRON[1638687]: pam_unix(cron:session): session closed for user root Dec 15 11:39:02 ispc CRON[1638688]: pam_unix(cron:session): session closed for user root Dec 15 11:40:01 ispc postfix/smtpd[1638734]: sql auxprop plugin using mysql engine Dec 15 11:40:01 ispc CRON[1638736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:40:01 ispc CRON[1638737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:40:01 ispc CRON[1638738]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:40:01 ispc CRON[1638739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:40:01 ispc CRON[1638740]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:40:01 ispc CRON[1638738]: pam_unix(cron:session): session closed for user www-data Dec 15 11:40:01 ispc CRON[1638737]: pam_unix(cron:session): session closed for user root Dec 15 11:40:01 ispc CRON[1638740]: pam_unix(cron:session): session closed for user getmail Dec 15 11:40:01 ispc CRON[1638739]: pam_unix(cron:session): session closed for user root Dec 15 11:40:02 ispc CRON[1638736]: pam_unix(cron:session): session closed for user root Dec 15 11:40:21 ispc saslauthd[1638824]: pam_mysql - SELECT returned no result. Dec 15 11:40:21 ispc saslauthd[1638824]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:40:21 ispc saslauthd[1638824]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:40:29 ispc saslauthd[1638829]: pam_mysql - SELECT returned no result. Dec 15 11:40:29 ispc saslauthd[1638829]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:40:29 ispc saslauthd[1638829]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:41:01 ispc CRON[1638846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:41:01 ispc CRON[1638846]: pam_unix(cron:session): session closed for user root Dec 15 11:41:05 ispc saslauthd[1638858]: pam_mysql - SELECT returned no result. Dec 15 11:41:05 ispc saslauthd[1638858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:41:05 ispc saslauthd[1638858]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:41:27 ispc CRON[1637558]: pam_unix(cron:session): session closed for user root Dec 15 11:42:01 ispc CRON[1638875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:42:02 ispc CRON[1638875]: pam_unix(cron:session): session closed for user root Dec 15 11:42:45 ispc sshd[1638901]: Invalid user admin from 174.138.14.234 Dec 15 11:43:01 ispc CRON[1638910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:43:02 ispc CRON[1638910]: pam_unix(cron:session): session closed for user root Dec 15 11:43:27 ispc sshd[1638922]: Invalid user admin from 174.138.14.234 Dec 15 11:43:32 ispc saslauthd[1638924]: pam_mysql - SELECT returned no result. Dec 15 11:43:32 ispc saslauthd[1638924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:43:32 ispc saslauthd[1638924]: do_auth : auth failure: [user=voadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:44:01 ispc CRON[1638926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:44:02 ispc CRON[1638926]: pam_unix(cron:session): session closed for user root Dec 15 11:44:08 ispc sshd[1638939]: Invalid user admin from 174.138.14.234 Dec 15 11:44:12 ispc sshd[1638941]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:44:12 ispc sshd[1638941]: Invalid user ziplines from 193.110.157.47 Dec 15 11:44:19 ispc postfix/smtpd[1638944]: sql auxprop plugin using mysql engine Dec 15 11:44:29 ispc sshd[1638947]: Invalid user ftp from 211.45.175.153 Dec 15 11:44:40 ispc sshd[1638950]: Invalid user blceu from 203.146.21.153 Dec 15 11:44:50 ispc sshd[1638952]: Invalid user admin from 174.138.14.234 Dec 15 11:45:01 ispc CRON[1638954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:45:01 ispc CRON[1638955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:45:01 ispc CRON[1638956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:45:01 ispc CRON[1638957]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:45:01 ispc CRON[1638955]: pam_unix(cron:session): session closed for user root Dec 15 11:45:01 ispc CRON[1638957]: pam_unix(cron:session): session closed for user getmail Dec 15 11:45:02 ispc CRON[1638954]: pam_unix(cron:session): session closed for user root Dec 15 11:45:31 ispc sshd[1639147]: Invalid user admin from 174.138.14.234 Dec 15 11:45:37 ispc sshd[1639149]: Invalid user blceu from 185.181.182.252 Dec 15 11:45:41 ispc CRON[1638956]: pam_unix(cron:session): session closed for user root Dec 15 11:46:01 ispc CRON[1639151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:46:10 ispc sshd[1639163]: Invalid user admin from 174.138.14.234 Dec 15 11:47:01 ispc CRON[1639199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:47:02 ispc CRON[1639199]: pam_unix(cron:session): session closed for user root Dec 15 11:47:12 ispc sshd[1639215]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:47:12 ispc sshd[1639215]: Invalid user user from 2.57.121.25 Dec 15 11:48:01 ispc CRON[1639248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:48:01 ispc CRON[1639248]: pam_unix(cron:session): session closed for user root Dec 15 11:48:50 ispc postfix/smtpd[1639281]: sql auxprop plugin using mysql engine Dec 15 11:48:50 ispc saslauthd[1639284]: pam_mysql - SELECT returned no result. Dec 15 11:48:50 ispc saslauthd[1639284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:48:50 ispc saslauthd[1639284]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:49:01 ispc CRON[1639289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:49:02 ispc CRON[1639289]: pam_unix(cron:session): session closed for user root Dec 15 11:49:34 ispc sshd[1639313]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:50:01 ispc CRON[1639328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:50:01 ispc CRON[1639329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:50:01 ispc CRON[1639330]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 11:50:01 ispc CRON[1639331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:50:01 ispc CRON[1639332]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:50:01 ispc CRON[1639330]: pam_unix(cron:session): session closed for user www-data Dec 15 11:50:01 ispc CRON[1639329]: pam_unix(cron:session): session closed for user root Dec 15 11:50:01 ispc CRON[1639332]: pam_unix(cron:session): session closed for user getmail Dec 15 11:50:02 ispc CRON[1639331]: pam_unix(cron:session): session closed for user root Dec 15 11:50:02 ispc CRON[1639328]: pam_unix(cron:session): session closed for user root Dec 15 11:51:01 ispc CRON[1639435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:51:02 ispc CRON[1639435]: pam_unix(cron:session): session closed for user root Dec 15 11:51:09 ispc sshd[1639450]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 11:51:09 ispc sshd[1639450]: Invalid user ziplines from 114.7.163.154 Dec 15 11:51:34 ispc postfix/smtpd[1639460]: sql auxprop plugin using mysql engine Dec 15 11:52:01 ispc CRON[1639476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:52:02 ispc CRON[1639476]: pam_unix(cron:session): session closed for user root Dec 15 11:52:57 ispc sshd[1639520]: Did not receive identification string from 45.140.17.97 Dec 15 11:52:57 ispc postfix/smtpd[1639521]: sql auxprop plugin using mysql engine Dec 15 11:53:01 ispc CRON[1639527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:53:03 ispc CRON[1639527]: pam_unix(cron:session): session closed for user root Dec 15 11:54:01 ispc CRON[1639564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:54:01 ispc CRON[1639564]: pam_unix(cron:session): session closed for user root Dec 15 11:54:45 ispc sshd[1639595]: Invalid user blceu from 117.50.70.169 Dec 15 11:55:01 ispc CRON[1639605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:55:01 ispc CRON[1639606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:55:01 ispc CRON[1639607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:55:02 ispc CRON[1639608]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 11:55:02 ispc CRON[1639606]: pam_unix(cron:session): session closed for user root Dec 15 11:55:02 ispc CRON[1639608]: pam_unix(cron:session): session closed for user getmail Dec 15 11:55:02 ispc CRON[1639607]: pam_unix(cron:session): session closed for user root Dec 15 11:55:02 ispc CRON[1639605]: pam_unix(cron:session): session closed for user root Dec 15 11:55:48 ispc postfix/smtpd[1639700]: sql auxprop plugin using mysql engine Dec 15 11:55:48 ispc saslauthd[1639702]: pam_mysql - SELECT returned no result. Dec 15 11:55:48 ispc saslauthd[1639702]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:55:48 ispc saslauthd[1639702]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:55:56 ispc sshd[1639709]: Invalid user martof from 203.146.21.153 Dec 15 11:56:01 ispc CRON[1639711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:56:03 ispc CRON[1639711]: pam_unix(cron:session): session closed for user root Dec 15 11:56:05 ispc sshd[1639727]: Invalid user ziplines from 211.110.229.128 Dec 15 11:57:01 ispc CRON[1639752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:57:02 ispc CRON[1639752]: pam_unix(cron:session): session closed for user root Dec 15 11:57:45 ispc postfix/smtpd[1639788]: sql auxprop plugin using mysql engine Dec 15 11:57:46 ispc saslauthd[1639789]: pam_mysql - SELECT returned no result. Dec 15 11:57:46 ispc saslauthd[1639789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:57:46 ispc saslauthd[1639789]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:57:54 ispc postfix/smtpd[1639794]: sql auxprop plugin using mysql engine Dec 15 11:57:58 ispc postfix/smtpd[1639800]: sql auxprop plugin using mysql engine Dec 15 11:58:01 ispc CRON[1639802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:58:02 ispc CRON[1639802]: pam_unix(cron:session): session closed for user root Dec 15 11:58:30 ispc saslauthd[1639830]: pam_mysql - SELECT returned no result. Dec 15 11:58:30 ispc saslauthd[1639830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 11:58:30 ispc saslauthd[1639830]: do_auth : auth failure: [user=volition] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 11:59:01 ispc CRON[1639843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 11:59:02 ispc CRON[1639843]: pam_unix(cron:session): session closed for user root Dec 15 12:00:01 ispc CRON[1639881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:00:01 ispc CRON[1639882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:00:01 ispc CRON[1639883]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:00:01 ispc CRON[1639884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:00:01 ispc CRON[1639885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:00:01 ispc CRON[1639886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:00:01 ispc CRON[1639887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:00:01 ispc CRON[1639882]: pam_unix(cron:session): session closed for user root Dec 15 12:00:01 ispc CRON[1639883]: pam_unix(cron:session): session closed for user www-data Dec 15 12:00:01 ispc CRON[1639885]: pam_unix(cron:session): session closed for user root Dec 15 12:00:01 ispc CRON[1639887]: pam_unix(cron:session): session closed for user getmail Dec 15 12:00:02 ispc CRON[1639886]: pam_unix(cron:session): session closed for user root Dec 15 12:00:02 ispc CRON[1639881]: pam_unix(cron:session): session closed for user root Dec 15 12:00:02 ispc CRON[1639884]: pam_unix(cron:session): session closed for user root Dec 15 12:01:01 ispc CRON[1640070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:01:02 ispc CRON[1640070]: pam_unix(cron:session): session closed for user root Dec 15 12:02:01 ispc CRON[1640107]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 12:02:01 ispc CRON[1640108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:02:02 ispc CRON[1640108]: pam_unix(cron:session): session closed for user root Dec 15 12:03:01 ispc CRON[1641061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:03:01 ispc CRON[1641061]: pam_unix(cron:session): session closed for user root Dec 15 12:03:12 ispc CRON[1640107]: pam_unix(cron:session): session closed for user logcheck Dec 15 12:03:22 ispc postfix/smtpd[1641190]: sql auxprop plugin using mysql engine Dec 15 12:04:01 ispc CRON[1641218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:04:01 ispc CRON[1641218]: pam_unix(cron:session): session closed for user root Dec 15 12:05:01 ispc CRON[1641260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:05:01 ispc CRON[1641261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:05:01 ispc CRON[1641262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:05:01 ispc CRON[1641263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:05:01 ispc CRON[1641264]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:05:01 ispc CRON[1641262]: pam_unix(cron:session): session closed for user root Dec 15 12:05:02 ispc CRON[1641264]: pam_unix(cron:session): session closed for user getmail Dec 15 12:05:02 ispc CRON[1641261]: pam_unix(cron:session): session closed for user root Dec 15 12:05:03 ispc CRON[1641263]: pam_unix(cron:session): session closed for user root Dec 15 12:05:05 ispc CRON[1641260]: pam_unix(cron:session): session closed for user root Dec 15 12:05:51 ispc postfix/smtpd[1641361]: sql auxprop plugin using mysql engine Dec 15 12:05:51 ispc postfix/smtpd[1641363]: sql auxprop plugin using mysql engine Dec 15 12:05:52 ispc postfix/smtpd[1641369]: sql auxprop plugin using mysql engine Dec 15 12:06:01 ispc CRON[1641375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:06:02 ispc CRON[1641375]: pam_unix(cron:session): session closed for user root Dec 15 12:06:21 ispc postfix/smtpd[1641394]: sql auxprop plugin using mysql engine Dec 15 12:06:21 ispc CRON[1639151]: pam_unix(cron:session): session closed for user root Dec 15 12:07:01 ispc CRON[1641401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:07:02 ispc CRON[1641401]: pam_unix(cron:session): session closed for user root Dec 15 12:08:01 ispc CRON[1641428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:08:02 ispc sshd[1641425]: Invalid user ziplines from 203.146.21.153 Dec 15 12:08:02 ispc CRON[1641428]: pam_unix(cron:session): session closed for user root Dec 15 12:08:17 ispc sshd[1641440]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:08:17 ispc sshd[1641440]: Invalid user blceu from 114.7.163.154 Dec 15 12:09:01 ispc CRON[1641445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:09:01 ispc CRON[1641446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:09:01 ispc CRON[1641445]: pam_unix(cron:session): session closed for user root Dec 15 12:09:02 ispc CRON[1641446]: pam_unix(cron:session): session closed for user root Dec 15 12:09:08 ispc saslauthd[1641470]: pam_mysql - SELECT returned no result. Dec 15 12:09:08 ispc saslauthd[1641470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:09:08 ispc saslauthd[1641470]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:09:12 ispc postfix/smtpd[1641471]: sql auxprop plugin using mysql engine Dec 15 12:10:01 ispc CRON[1641476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:10:01 ispc CRON[1641477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:10:01 ispc CRON[1641478]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:10:01 ispc CRON[1641479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:10:01 ispc CRON[1641480]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:10:01 ispc CRON[1641478]: pam_unix(cron:session): session closed for user www-data Dec 15 12:10:01 ispc CRON[1641477]: pam_unix(cron:session): session closed for user root Dec 15 12:10:01 ispc CRON[1641480]: pam_unix(cron:session): session closed for user getmail Dec 15 12:10:02 ispc CRON[1641476]: pam_unix(cron:session): session closed for user root Dec 15 12:10:35 ispc CRON[1641479]: pam_unix(cron:session): session closed for user root Dec 15 12:10:42 ispc sshd[1641591]: Invalid user klape from 103.164.20.29 Dec 15 12:10:44 ispc sshd[1641593]: Invalid user ubuntu from 103.164.20.29 Dec 15 12:11:01 ispc CRON[1641596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:12:01 ispc CRON[1641631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:12:01 ispc CRON[1641631]: pam_unix(cron:session): session closed for user root Dec 15 12:12:22 ispc sshd[1641650]: Invalid user blceu from 116.120.58.228 Dec 15 12:12:47 ispc sshd[1641674]: Invalid user matlbula from 35.239.77.168 Dec 15 12:13:01 ispc CRON[1641682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:13:02 ispc CRON[1641682]: pam_unix(cron:session): session closed for user root Dec 15 12:13:09 ispc sshd[1641697]: Invalid user ftp from 211.45.175.153 Dec 15 12:13:40 ispc saslauthd[1641716]: pam_mysql - SELECT returned no result. Dec 15 12:13:40 ispc saslauthd[1641716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:13:40 ispc saslauthd[1641716]: do_auth : auth failure: [user=vpasp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:14:01 ispc CRON[1641731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:14:03 ispc CRON[1641731]: pam_unix(cron:session): session closed for user root Dec 15 12:14:42 ispc sshd[1641759]: Did not receive identification string from 40.172.158.14 Dec 15 12:14:43 ispc sshd[1641760]: Invalid user a from 40.172.158.14 Dec 15 12:15:01 ispc CRON[1641771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:15:01 ispc CRON[1641772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:15:01 ispc CRON[1641773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:15:01 ispc CRON[1641774]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:15:01 ispc CRON[1641772]: pam_unix(cron:session): session closed for user root Dec 15 12:15:01 ispc CRON[1641774]: pam_unix(cron:session): session closed for user getmail Dec 15 12:15:01 ispc CRON[1641773]: pam_unix(cron:session): session closed for user root Dec 15 12:15:02 ispc CRON[1641771]: pam_unix(cron:session): session closed for user root Dec 15 12:16:01 ispc CRON[1641874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:16:02 ispc CRON[1641874]: pam_unix(cron:session): session closed for user root Dec 15 12:16:28 ispc sshd[1641898]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:16:36 ispc postfix/smtpd[1641904]: sql auxprop plugin using mysql engine Dec 15 12:16:37 ispc postfix/smtpd[1641906]: sql auxprop plugin using mysql engine Dec 15 12:17:01 ispc CRON[1641917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:17:02 ispc CRON[1641917]: pam_unix(cron:session): session closed for user root Dec 15 12:18:01 ispc CRON[1641963]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 12:18:01 ispc CRON[1641964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:18:02 ispc CRON[1641964]: pam_unix(cron:session): session closed for user root Dec 15 12:18:06 ispc CRON[1641963]: pam_unix(cron:session): session closed for user amavis Dec 15 12:18:08 ispc postfix/smtpd[1641990]: sql auxprop plugin using mysql engine Dec 15 12:18:58 ispc postfix/smtpd[1642015]: sql auxprop plugin using mysql engine Dec 15 12:19:01 ispc CRON[1642018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:19:01 ispc CRON[1642018]: pam_unix(cron:session): session closed for user root Dec 15 12:19:33 ispc saslauthd[1642043]: pam_mysql - SELECT returned no result. Dec 15 12:19:33 ispc saslauthd[1642043]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:19:33 ispc saslauthd[1642043]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:20:01 ispc CRON[1642062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:20:01 ispc CRON[1642063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:20:01 ispc CRON[1642064]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:20:01 ispc CRON[1642065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:20:01 ispc CRON[1642066]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:20:02 ispc CRON[1642064]: pam_unix(cron:session): session closed for user www-data Dec 15 12:20:02 ispc CRON[1642063]: pam_unix(cron:session): session closed for user root Dec 15 12:20:02 ispc CRON[1642066]: pam_unix(cron:session): session closed for user getmail Dec 15 12:20:02 ispc CRON[1642065]: pam_unix(cron:session): session closed for user root Dec 15 12:20:03 ispc CRON[1642062]: pam_unix(cron:session): session closed for user root Dec 15 12:20:18 ispc sshd[1642145]: Invalid user blceu from 45.119.213.109 Dec 15 12:20:55 ispc saslauthd[1642165]: pam_mysql - SELECT returned no result. Dec 15 12:20:55 ispc saslauthd[1642165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:20:55 ispc saslauthd[1642165]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:21:01 ispc CRON[1642170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:21:01 ispc CRON[1642171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:21:01 ispc CRON[1642170]: pam_unix(cron:session): session closed for user root Dec 15 12:21:02 ispc CRON[1642171]: pam_unix(cron:session): session closed for user root Dec 15 12:21:18 ispc saslauthd[1642190]: pam_mysql - SELECT returned no result. Dec 15 12:21:18 ispc saslauthd[1642190]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:21:18 ispc saslauthd[1642190]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:21:19 ispc saslauthd[1642195]: pam_mysql - SELECT returned no result. Dec 15 12:21:19 ispc saslauthd[1642195]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:21:19 ispc saslauthd[1642195]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:21:20 ispc saslauthd[1642196]: pam_mysql - SELECT returned no result. Dec 15 12:21:20 ispc saslauthd[1642196]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:21:20 ispc saslauthd[1642196]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:21:38 ispc saslauthd[1642202]: pam_mysql - SELECT returned no result. Dec 15 12:21:38 ispc saslauthd[1642202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:21:38 ispc saslauthd[1642202]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:21:56 ispc saslauthd[1642212]: pam_mysql - SELECT returned no result. Dec 15 12:21:56 ispc saslauthd[1642212]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:21:56 ispc saslauthd[1642212]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:22:02 ispc CRON[1642217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:22:03 ispc saslauthd[1642228]: pam_mysql - SELECT returned no result. Dec 15 12:22:03 ispc saslauthd[1642228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:22:03 ispc saslauthd[1642228]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:22:03 ispc CRON[1642217]: pam_unix(cron:session): session closed for user root Dec 15 12:22:08 ispc saslauthd[1642229]: pam_mysql - SELECT returned no result. Dec 15 12:22:08 ispc saslauthd[1642229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:22:08 ispc saslauthd[1642229]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:22:43 ispc saslauthd[1642254]: pam_mysql - SELECT returned no result. Dec 15 12:22:43 ispc saslauthd[1642254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:22:43 ispc saslauthd[1642254]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:22:51 ispc saslauthd[1642259]: pam_mysql - SELECT returned no result. Dec 15 12:22:51 ispc saslauthd[1642259]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:22:51 ispc saslauthd[1642259]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:22:52 ispc saslauthd[1642260]: pam_mysql - SELECT returned no result. Dec 15 12:22:52 ispc saslauthd[1642260]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:22:52 ispc saslauthd[1642260]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:01 ispc CRON[1642267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:23:02 ispc CRON[1642267]: pam_unix(cron:session): session closed for user root Dec 15 12:23:03 ispc saslauthd[1642278]: pam_mysql - SELECT returned no result. Dec 15 12:23:03 ispc saslauthd[1642278]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:23:03 ispc saslauthd[1642278]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:05 ispc saslauthd[1642280]: pam_mysql - SELECT returned no result. Dec 15 12:23:05 ispc saslauthd[1642280]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:23:05 ispc saslauthd[1642280]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:08 ispc saslauthd[1642281]: pam_mysql - SELECT returned no result. Dec 15 12:23:08 ispc saslauthd[1642281]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:23:08 ispc saslauthd[1642281]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:27 ispc saslauthd[1642291]: pam_mysql - SELECT returned no result. Dec 15 12:23:27 ispc saslauthd[1642291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:23:27 ispc saslauthd[1642291]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:32 ispc saslauthd[1642296]: pam_mysql - SELECT returned no result. Dec 15 12:23:32 ispc saslauthd[1642296]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:23:32 ispc saslauthd[1642296]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:23:43 ispc postfix/smtpd[1642301]: sql auxprop plugin using mysql engine Dec 15 12:23:50 ispc sshd[1642306]: Invalid user klape from 77.241.18.2 Dec 15 12:23:50 ispc sshd[1642308]: Invalid user ubuntu from 77.241.18.2 Dec 15 12:24:01 ispc CRON[1642314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:24:02 ispc CRON[1642314]: pam_unix(cron:session): session closed for user root Dec 15 12:24:53 ispc postfix/smtpd[1642353]: sql auxprop plugin using mysql engine Dec 15 12:24:54 ispc postfix/smtpd[1642355]: sql auxprop plugin using mysql engine Dec 15 12:25:01 ispc CRON[1642356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:25:01 ispc CRON[1642357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:25:01 ispc CRON[1642358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:25:01 ispc CRON[1642359]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:25:01 ispc CRON[1642357]: pam_unix(cron:session): session closed for user root Dec 15 12:25:01 ispc CRON[1642359]: pam_unix(cron:session): session closed for user getmail Dec 15 12:25:01 ispc CRON[1642358]: pam_unix(cron:session): session closed for user root Dec 15 12:25:01 ispc CRON[1642356]: pam_unix(cron:session): session closed for user root Dec 15 12:25:59 ispc sshd[1642461]: Invalid user ziplines from 103.110.84.105 Dec 15 12:26:01 ispc CRON[1642463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:26:02 ispc CRON[1642463]: pam_unix(cron:session): session closed for user root Dec 15 12:26:25 ispc postfix/smtpd[1642490]: sql auxprop plugin using mysql engine Dec 15 12:26:25 ispc saslauthd[1642491]: pam_mysql - SELECT returned no result. Dec 15 12:26:25 ispc saslauthd[1642491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:26:25 ispc saslauthd[1642491]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:26:43 ispc saslauthd[1642500]: pam_mysql - SELECT returned no result. Dec 15 12:26:43 ispc saslauthd[1642500]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:26:43 ispc saslauthd[1642500]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:27:01 ispc CRON[1642506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:27:02 ispc CRON[1642506]: pam_unix(cron:session): session closed for user root Dec 15 12:28:01 ispc CRON[1642554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:28:01 ispc CRON[1642554]: pam_unix(cron:session): session closed for user root Dec 15 12:28:42 ispc postfix/smtpd[1642586]: sql auxprop plugin using mysql engine Dec 15 12:28:43 ispc saslauthd[1642588]: pam_mysql - SELECT returned no result. Dec 15 12:28:43 ispc saslauthd[1642588]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:28:43 ispc saslauthd[1642588]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:28:49 ispc saslauthd[1642594]: pam_mysql - SELECT returned no result. Dec 15 12:28:49 ispc saslauthd[1642594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:28:49 ispc saslauthd[1642594]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:29:01 ispc CRON[1642599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:29:02 ispc CRON[1642599]: pam_unix(cron:session): session closed for user root Dec 15 12:29:51 ispc saslauthd[1642633]: pam_mysql - SELECT returned no result. Dec 15 12:29:51 ispc saslauthd[1642633]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:29:51 ispc saslauthd[1642633]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:30:01 ispc CRON[1642638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:30:01 ispc CRON[1642639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:30:01 ispc CRON[1642640]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:30:01 ispc CRON[1642641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:30:01 ispc CRON[1642642]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:30:01 ispc CRON[1642639]: pam_unix(cron:session): session closed for user root Dec 15 12:30:01 ispc CRON[1642640]: pam_unix(cron:session): session closed for user www-data Dec 15 12:30:01 ispc CRON[1642642]: pam_unix(cron:session): session closed for user getmail Dec 15 12:30:02 ispc CRON[1642641]: pam_unix(cron:session): session closed for user root Dec 15 12:30:03 ispc CRON[1642638]: pam_unix(cron:session): session closed for user root Dec 15 12:30:19 ispc postfix/smtpd[1642725]: sql auxprop plugin using mysql engine Dec 15 12:30:19 ispc postfix/smtpd[1642727]: sql auxprop plugin using mysql engine Dec 15 12:30:20 ispc postfix/smtpd[1642728]: sql auxprop plugin using mysql engine Dec 15 12:31:01 ispc CRON[1642751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:31:01 ispc CRON[1642751]: pam_unix(cron:session): session closed for user root Dec 15 12:31:09 ispc saslauthd[1642767]: pam_mysql - SELECT returned no result. Dec 15 12:31:09 ispc saslauthd[1642767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:31:09 ispc saslauthd[1642767]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:31:17 ispc CRON[1641596]: pam_unix(cron:session): session closed for user root Dec 15 12:31:32 ispc saslauthd[1642773]: pam_mysql - SELECT returned no result. Dec 15 12:31:32 ispc saslauthd[1642773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:31:32 ispc saslauthd[1642773]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:31:38 ispc saslauthd[1642774]: pam_mysql - SELECT returned no result. Dec 15 12:31:38 ispc saslauthd[1642774]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:31:38 ispc saslauthd[1642774]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:31:42 ispc saslauthd[1642775]: pam_mysql - SELECT returned no result. Dec 15 12:31:42 ispc saslauthd[1642775]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:31:42 ispc saslauthd[1642775]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:32:01 ispc CRON[1642780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:32:03 ispc CRON[1642780]: pam_unix(cron:session): session closed for user root Dec 15 12:32:52 ispc postfix/smtpd[1642805]: sql auxprop plugin using mysql engine Dec 15 12:33:01 ispc CRON[1642807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:33:01 ispc CRON[1642807]: pam_unix(cron:session): session closed for user root Dec 15 12:34:02 ispc CRON[1642822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:34:03 ispc CRON[1642822]: pam_unix(cron:session): session closed for user root Dec 15 12:34:12 ispc postfix/smtpd[1642835]: sql auxprop plugin using mysql engine Dec 15 12:34:14 ispc sshd[1642837]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:34:14 ispc sshd[1642837]: Invalid user blceu from 157.245.115.125 Dec 15 12:34:18 ispc postfix/smtpd[1642839]: sql auxprop plugin using mysql engine Dec 15 12:35:01 ispc sshd[1642842]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:35:01 ispc CRON[1642844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:35:01 ispc CRON[1642845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:35:01 ispc CRON[1642846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:35:01 ispc CRON[1642847]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:35:01 ispc CRON[1642845]: pam_unix(cron:session): session closed for user root Dec 15 12:35:01 ispc CRON[1642847]: pam_unix(cron:session): session closed for user getmail Dec 15 12:35:02 ispc CRON[1642844]: pam_unix(cron:session): session closed for user root Dec 15 12:35:30 ispc postfix/smtpd[1642960]: sql auxprop plugin using mysql engine Dec 15 12:35:33 ispc CRON[1642846]: pam_unix(cron:session): session closed for user root Dec 15 12:35:40 ispc postfix/smtpd[1642962]: sql auxprop plugin using mysql engine Dec 15 12:35:41 ispc saslauthd[1642963]: pam_mysql - SELECT returned no result. Dec 15 12:35:41 ispc saslauthd[1642963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:35:41 ispc saslauthd[1642963]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:36:01 ispc CRON[1642966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:37:01 ispc CRON[1643001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:37:01 ispc CRON[1643001]: pam_unix(cron:session): session closed for user root Dec 15 12:37:45 ispc postfix/smtpd[1643045]: sql auxprop plugin using mysql engine Dec 15 12:37:46 ispc saslauthd[1643046]: pam_mysql - SELECT returned no result. Dec 15 12:37:46 ispc saslauthd[1643046]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:37:46 ispc saslauthd[1643046]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:37:54 ispc saslauthd[1643057]: pam_mysql - SELECT returned no result. Dec 15 12:37:54 ispc saslauthd[1643057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:37:54 ispc saslauthd[1643057]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:38:01 ispc CRON[1643063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:38:02 ispc CRON[1643063]: pam_unix(cron:session): session closed for user root Dec 15 12:39:01 ispc CRON[1643108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:39:01 ispc CRON[1643109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:39:01 ispc CRON[1643108]: pam_unix(cron:session): session closed for user root Dec 15 12:39:01 ispc CRON[1643109]: pam_unix(cron:session): session closed for user root Dec 15 12:39:39 ispc postfix/smtpd[1643147]: sql auxprop plugin using mysql engine Dec 15 12:39:48 ispc sshd[1643149]: Invalid user blceu from 211.110.229.128 Dec 15 12:40:01 ispc CRON[1643159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:40:01 ispc CRON[1643160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:40:01 ispc CRON[1643161]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:40:01 ispc CRON[1643162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:40:01 ispc CRON[1643163]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:40:02 ispc CRON[1643161]: pam_unix(cron:session): session closed for user www-data Dec 15 12:40:02 ispc CRON[1643160]: pam_unix(cron:session): session closed for user root Dec 15 12:40:02 ispc CRON[1643163]: pam_unix(cron:session): session closed for user getmail Dec 15 12:40:03 ispc CRON[1643162]: pam_unix(cron:session): session closed for user root Dec 15 12:40:05 ispc CRON[1643159]: pam_unix(cron:session): session closed for user root Dec 15 12:41:01 ispc CRON[1643265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:41:02 ispc CRON[1643265]: pam_unix(cron:session): session closed for user root Dec 15 12:42:01 ispc CRON[1643300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:42:01 ispc CRON[1643300]: pam_unix(cron:session): session closed for user root Dec 15 12:43:01 ispc CRON[1643342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:43:02 ispc CRON[1643342]: pam_unix(cron:session): session closed for user root Dec 15 12:43:28 ispc sshd[1643367]: Invalid user ftp from 220.196.191.58 Dec 15 12:43:29 ispc postfix/smtpd[1643369]: sql auxprop plugin using mysql engine Dec 15 12:44:00 ispc postfix/smtpd[1643384]: sql auxprop plugin using mysql engine Dec 15 12:44:01 ispc CRON[1643386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:44:01 ispc saslauthd[1643397]: pam_mysql - SELECT returned no result. Dec 15 12:44:01 ispc saslauthd[1643397]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:44:01 ispc saslauthd[1643397]: do_auth : auth failure: [user=web_api] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:44:01 ispc CRON[1643386]: pam_unix(cron:session): session closed for user root Dec 15 12:44:56 ispc sshd[1643433]: Invalid user martof from 116.120.58.228 Dec 15 12:45:01 ispc CRON[1643436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:45:01 ispc CRON[1643437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:45:01 ispc CRON[1643438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:45:01 ispc CRON[1643439]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:45:01 ispc CRON[1643437]: pam_unix(cron:session): session closed for user root Dec 15 12:45:02 ispc CRON[1643439]: pam_unix(cron:session): session closed for user getmail Dec 15 12:45:02 ispc CRON[1643438]: pam_unix(cron:session): session closed for user root Dec 15 12:45:03 ispc CRON[1643436]: pam_unix(cron:session): session closed for user root Dec 15 12:46:01 ispc CRON[1643537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:46:01 ispc CRON[1643537]: pam_unix(cron:session): session closed for user root Dec 15 12:47:01 ispc CRON[1643576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:47:02 ispc CRON[1643576]: pam_unix(cron:session): session closed for user root Dec 15 12:47:09 ispc sshd[1643595]: Invalid user klape from 51.77.222.24 Dec 15 12:47:10 ispc sshd[1643597]: Invalid user ubuntu from 51.77.222.24 Dec 15 12:47:26 ispc sshd[1643605]: Invalid user klape from 200.32.52.150 Dec 15 12:47:27 ispc sshd[1643607]: Invalid user ubuntu from 200.32.52.150 Dec 15 12:48:01 ispc CRON[1643636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:48:02 ispc CRON[1643636]: pam_unix(cron:session): session closed for user root Dec 15 12:48:53 ispc sshd[1643670]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:48:53 ispc sshd[1643670]: Invalid user ziplines from 157.245.115.125 Dec 15 12:49:01 ispc CRON[1643676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:49:02 ispc CRON[1643676]: pam_unix(cron:session): session closed for user root Dec 15 12:50:01 ispc CRON[1643713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:50:01 ispc CRON[1643714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:50:01 ispc CRON[1643715]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 12:50:01 ispc CRON[1643716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:50:01 ispc CRON[1643717]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:50:01 ispc CRON[1643715]: pam_unix(cron:session): session closed for user www-data Dec 15 12:50:01 ispc CRON[1643714]: pam_unix(cron:session): session closed for user root Dec 15 12:50:01 ispc CRON[1643717]: pam_unix(cron:session): session closed for user getmail Dec 15 12:50:02 ispc CRON[1643716]: pam_unix(cron:session): session closed for user root Dec 15 12:50:02 ispc CRON[1643713]: pam_unix(cron:session): session closed for user root Dec 15 12:51:01 ispc CRON[1643817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:51:01 ispc CRON[1643817]: pam_unix(cron:session): session closed for user root Dec 15 12:51:23 ispc postfix/smtpd[1643837]: sql auxprop plugin using mysql engine Dec 15 12:51:24 ispc saslauthd[1643840]: pam_mysql - SELECT returned no result. Dec 15 12:51:24 ispc saslauthd[1643840]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:51:24 ispc saslauthd[1643840]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:51:47 ispc sshd[1643850]: Did not receive identification string from 192.227.134.84 Dec 15 12:52:01 ispc CRON[1643860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:52:01 ispc CRON[1643861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:52:02 ispc CRON[1643861]: pam_unix(cron:session): session closed for user root Dec 15 12:53:01 ispc CRON[1643914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:53:02 ispc CRON[1643914]: pam_unix(cron:session): session closed for user root Dec 15 12:53:07 ispc postfix/smtpd[1643926]: sql auxprop plugin using mysql engine Dec 15 12:53:07 ispc saslauthd[1643928]: pam_mysql - SELECT returned no result. Dec 15 12:53:07 ispc saslauthd[1643928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:53:07 ispc saslauthd[1643928]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:53:18 ispc postfix/smtpd[1643933]: sql auxprop plugin using mysql engine Dec 15 12:53:18 ispc postfix/smtpd[1643935]: sql auxprop plugin using mysql engine Dec 15 12:53:19 ispc postfix/smtpd[1643936]: sql auxprop plugin using mysql engine Dec 15 12:53:28 ispc postfix/smtpd[1643947]: sql auxprop plugin using mysql engine Dec 15 12:53:41 ispc sshd[1643964]: Did not receive identification string from 209.38.107.9 Dec 15 12:54:01 ispc CRON[1643976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:54:01 ispc CRON[1643976]: pam_unix(cron:session): session closed for user root Dec 15 12:54:07 ispc sshd[1643987]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:54:29 ispc sshd[1643999]: Invalid user ftp from 211.45.175.153 Dec 15 12:54:35 ispc saslauthd[1644005]: pam_mysql - SELECT returned no result. Dec 15 12:54:35 ispc saslauthd[1644005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:54:35 ispc saslauthd[1644005]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:54:54 ispc sshd[1644018]: Invalid user matlbula from 159.223.17.60 Dec 15 12:55:00 ispc sshd[1644026]: Address 172.233.76.111 maps to yuccichou.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:55:00 ispc sshd[1644026]: Invalid user diamantdi from 172.233.76.111 Dec 15 12:55:01 ispc CRON[1644032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:55:01 ispc CRON[1644033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:55:01 ispc CRON[1644034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:55:01 ispc CRON[1644035]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 12:55:01 ispc CRON[1644033]: pam_unix(cron:session): session closed for user root Dec 15 12:55:01 ispc CRON[1644035]: pam_unix(cron:session): session closed for user getmail Dec 15 12:55:02 ispc CRON[1644034]: pam_unix(cron:session): session closed for user root Dec 15 12:55:03 ispc CRON[1644032]: pam_unix(cron:session): session closed for user root Dec 15 12:55:06 ispc sshd[1644110]: Invalid user matlbula from 185.129.51.216 Dec 15 12:55:19 ispc CRON[1643860]: pam_unix(cron:session): session closed for user root Dec 15 12:55:33 ispc sshd[1644123]: reverse mapping checking getaddrinfo for 103.14.121.65-static-reverse.gooddomainregistry.com [103.14.121.65] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:55:49 ispc saslauthd[1644141]: pam_mysql - SELECT returned no result. Dec 15 12:55:49 ispc saslauthd[1644141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:55:49 ispc saslauthd[1644141]: do_auth : auth failure: [user=desk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:56:01 ispc CRON[1644151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:56:02 ispc CRON[1644151]: pam_unix(cron:session): session closed for user root Dec 15 12:56:22 ispc CRON[1642966]: pam_unix(cron:session): session closed for user root Dec 15 12:56:26 ispc postfix/smtpd[1644187]: sql auxprop plugin using mysql engine Dec 15 12:56:32 ispc sshd[1644196]: Invalid user diamantdi from 217.182.206.144 Dec 15 12:57:01 ispc CRON[1644202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:57:02 ispc CRON[1644202]: pam_unix(cron:session): session closed for user root Dec 15 12:57:03 ispc sshd[1644200]: Invalid user martof from 103.110.84.105 Dec 15 12:57:32 ispc sshd[1644217]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:57:32 ispc sshd[1644217]: Invalid user diamantdi from 203.151.66.147 Dec 15 12:57:34 ispc sshd[1644219]: Invalid user diamantdi from 178.162.244.167 Dec 15 12:58:01 ispc CRON[1644236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:58:02 ispc CRON[1644236]: pam_unix(cron:session): session closed for user root Dec 15 12:58:25 ispc sshd[1644248]: Invalid user blceu from 4.211.205.96 Dec 15 12:58:40 ispc sshd[1644251]: Invalid user matlbula from 217.182.79.136 Dec 15 12:59:01 ispc CRON[1644253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 12:59:01 ispc CRON[1644253]: pam_unix(cron:session): session closed for user root Dec 15 12:59:07 ispc saslauthd[1644267]: pam_mysql - SELECT returned no result. Dec 15 12:59:07 ispc saslauthd[1644267]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 12:59:07 ispc saslauthd[1644267]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 12:59:22 ispc sshd[1644271]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:59:27 ispc sshd[1644276]: Address 149.28.199.122 maps to 149.28.199.122.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:59:27 ispc sshd[1644276]: Invalid user matlbula from 149.28.199.122 Dec 15 12:59:31 ispc postfix/smtpd[1644278]: sql auxprop plugin using mysql engine Dec 15 12:59:31 ispc postfix/smtpd[1644281]: sql auxprop plugin using mysql engine Dec 15 12:59:32 ispc postfix/smtpd[1644282]: sql auxprop plugin using mysql engine Dec 15 12:59:44 ispc sshd[1644285]: Invalid user blceu from 213.199.52.202 Dec 15 12:59:55 ispc sshd[1644289]: Invalid user blceu from 173.249.50.116 Dec 15 12:59:58 ispc sshd[1644293]: Invalid user blceu from 178.162.244.167 Dec 15 12:59:58 ispc sshd[1644291]: Address 149.28.199.122 maps to 149.28.199.122.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 12:59:58 ispc sshd[1644291]: Invalid user blceu from 149.28.199.122 Dec 15 13:00:01 ispc CRON[1644295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:00:01 ispc CRON[1644296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:00:01 ispc CRON[1644297]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:00:01 ispc CRON[1644298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:00:01 ispc CRON[1644299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:00:01 ispc CRON[1644300]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:00:01 ispc CRON[1644297]: pam_unix(cron:session): session closed for user www-data Dec 15 13:00:01 ispc CRON[1644296]: pam_unix(cron:session): session closed for user root Dec 15 13:00:02 ispc CRON[1644300]: pam_unix(cron:session): session closed for user getmail Dec 15 13:00:02 ispc CRON[1644298]: pam_unix(cron:session): session closed for user root Dec 15 13:00:02 ispc CRON[1644295]: pam_unix(cron:session): session closed for user root Dec 15 13:00:04 ispc sshd[1644493]: Invalid user matlbula from 168.119.110.30 Dec 15 13:00:28 ispc sshd[1644568]: reverse mapping checking getaddrinfo for vds1507797.hosted-by-itldc.com [46.28.71.92] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:00:28 ispc sshd[1644568]: Invalid user matlbula from 46.28.71.92 Dec 15 13:00:41 ispc CRON[1644299]: pam_unix(cron:session): session closed for user root Dec 15 13:00:43 ispc saslauthd[1644570]: pam_mysql - SELECT returned no result. Dec 15 13:00:43 ispc saslauthd[1644570]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:00:43 ispc saslauthd[1644570]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:00:47 ispc saslauthd[1644571]: pam_mysql - SELECT returned no result. Dec 15 13:00:47 ispc saslauthd[1644571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:00:47 ispc saslauthd[1644571]: do_auth : auth failure: [user=sales@pracavzdravotnictve.sk] [service=smtp] [realm=pracavzdravotnictve.sk] [mech=pam] [reason=PAM auth error] Dec 15 13:01:01 ispc CRON[1644578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:01:16 ispc sshd[1644600]: Invalid user klape from 2.57.217.229 Dec 15 13:01:16 ispc sshd[1644602]: Invalid user ubuntu from 2.57.217.229 Dec 15 13:01:48 ispc sshd[1644618]: Invalid user blceu from 72.61.101.84 Dec 15 13:02:01 ispc CRON[1644626]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 13:02:01 ispc CRON[1644627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:02:02 ispc CRON[1644627]: pam_unix(cron:session): session closed for user root Dec 15 13:02:24 ispc sshd[1645075]: Address 51.222.13.66 maps to send.vemver.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:02:24 ispc sshd[1645075]: Invalid user matlbula from 51.222.13.66 Dec 15 13:02:42 ispc postfix/smtpd[1645484]: sql auxprop plugin using mysql engine Dec 15 13:03:01 ispc CRON[1645609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:03:02 ispc CRON[1645609]: pam_unix(cron:session): session closed for user root Dec 15 13:03:04 ispc sshd[1645659]: Invalid user matlbula from 51.91.149.112 Dec 15 13:03:06 ispc sshd[1645673]: Invalid user matlbula from 158.220.107.65 Dec 15 13:03:12 ispc CRON[1644626]: pam_unix(cron:session): session closed for user logcheck Dec 15 13:03:27 ispc postfix/smtpd[1645726]: sql auxprop plugin using mysql engine Dec 15 13:03:34 ispc sshd[1645731]: reverse mapping checking getaddrinfo for 121.127.34.123.static.ryamer.net [121.127.34.123] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:03:34 ispc sshd[1645731]: Invalid user blceu from 121.127.34.123 Dec 15 13:04:01 ispc CRON[1645747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:04:01 ispc CRON[1645747]: pam_unix(cron:session): session closed for user root Dec 15 13:04:13 ispc sshd[1645764]: Invalid user martof from 222.236.46.74 Dec 15 13:04:25 ispc sshd[1645771]: reverse mapping checking getaddrinfo for vps3185612.trouble-free.net [69.164.244.79] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:04:25 ispc sshd[1645771]: Invalid user blceu from 69.164.244.79 Dec 15 13:04:53 ispc sshd[1645789]: Invalid user matlbula from 157.173.100.19 Dec 15 13:05:01 ispc CRON[1645799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:05:01 ispc CRON[1645800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:05:01 ispc CRON[1645801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:05:01 ispc CRON[1645802]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:05:01 ispc CRON[1645800]: pam_unix(cron:session): session closed for user root Dec 15 13:05:01 ispc CRON[1645802]: pam_unix(cron:session): session closed for user getmail Dec 15 13:05:02 ispc CRON[1645801]: pam_unix(cron:session): session closed for user root Dec 15 13:05:02 ispc CRON[1645799]: pam_unix(cron:session): session closed for user root Dec 15 13:05:07 ispc sshd[1645879]: Invalid user blceu from 147.79.102.35 Dec 15 13:06:01 ispc CRON[1645911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:06:02 ispc CRON[1645911]: pam_unix(cron:session): session closed for user root Dec 15 13:06:36 ispc postfix/smtpd[1645943]: sql auxprop plugin using mysql engine Dec 15 13:06:37 ispc saslauthd[1645950]: pam_mysql - SELECT returned no result. Dec 15 13:06:37 ispc saslauthd[1645950]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:06:37 ispc saslauthd[1645950]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:06:50 ispc sshd[1645955]: reverse mapping checking getaddrinfo for 1263056.cloudwaysapps.com [170.64.209.186] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:07:01 ispc CRON[1645961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:07:01 ispc CRON[1645961]: pam_unix(cron:session): session closed for user root Dec 15 13:07:09 ispc sshd[1645976]: Invalid user diamantdi from 185.129.51.216 Dec 15 13:07:15 ispc sshd[1645978]: Invalid user antiqkabinet from 139.196.127.178 Dec 15 13:07:18 ispc sshd[1645980]: Invalid user blceu from 104.248.2.26 Dec 15 13:07:36 ispc sshd[1645992]: reverse mapping checking getaddrinfo for reverse.isimkayit.com [185.92.3.32] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:07:47 ispc sshd[1646005]: Address 51.222.13.66 maps to send.vemver.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:07:47 ispc sshd[1646005]: Invalid user blceu from 51.222.13.66 Dec 15 13:07:48 ispc sshd[1646006]: Invalid user martof from 221.156.137.103 Dec 15 13:07:57 ispc sshd[1646017]: Address 162.0.225.218 maps to server1.jefamed.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:08:01 ispc CRON[1646023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:08:02 ispc CRON[1646023]: pam_unix(cron:session): session closed for user root Dec 15 13:08:33 ispc sshd[1646050]: Invalid user blceu from 148.222.185.96 Dec 15 13:09:01 ispc CRON[1646065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:09:01 ispc CRON[1646066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:09:02 ispc CRON[1646065]: pam_unix(cron:session): session closed for user root Dec 15 13:09:02 ispc CRON[1646066]: pam_unix(cron:session): session closed for user root Dec 15 13:09:04 ispc sshd[1646090]: Did not receive identification string from 161.35.87.56 Dec 15 13:09:06 ispc sshd[1646091]: Invalid user matlbula from 217.154.112.123 Dec 15 13:10:01 ispc sshd[1646115]: Invalid user matlbula from 72.61.229.13 Dec 15 13:10:01 ispc CRON[1646117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:10:01 ispc CRON[1646118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:10:01 ispc CRON[1646119]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:10:01 ispc CRON[1646120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:10:01 ispc CRON[1646121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:10:01 ispc CRON[1646118]: pam_unix(cron:session): session closed for user root Dec 15 13:10:01 ispc CRON[1646119]: pam_unix(cron:session): session closed for user www-data Dec 15 13:10:01 ispc CRON[1646121]: pam_unix(cron:session): session closed for user getmail Dec 15 13:10:02 ispc CRON[1646120]: pam_unix(cron:session): session closed for user root Dec 15 13:10:02 ispc CRON[1646117]: pam_unix(cron:session): session closed for user root Dec 15 13:10:50 ispc sshd[1646229]: Invalid user diamantdi from 161.35.195.132 Dec 15 13:10:51 ispc sshd[1646227]: reverse mapping checking getaddrinfo for whdaa07.nxcloud.inet.co.th [203.150.199.190] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:11:01 ispc CRON[1646238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:11:02 ispc CRON[1646238]: pam_unix(cron:session): session closed for user root Dec 15 13:11:23 ispc sshd[1646261]: Invalid user matlbula from 45.56.68.219 Dec 15 13:11:26 ispc sshd[1646269]: Invalid user perl from 185.98.139.209 Dec 15 13:11:50 ispc sshd[1646282]: Invalid user perl from 185.98.139.209 Dec 15 13:12:01 ispc CRON[1646289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:12:02 ispc CRON[1646289]: pam_unix(cron:session): session closed for user root Dec 15 13:12:30 ispc sshd[1646321]: Invalid user matlbula from 2.56.152.243 Dec 15 13:12:32 ispc sshd[1646323]: Invalid user matlbula from 92.113.149.215 Dec 15 13:12:50 ispc sshd[1646339]: Invalid user matlbula from 74.208.113.203 Dec 15 13:13:01 ispc CRON[1646349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:13:02 ispc CRON[1646349]: pam_unix(cron:session): session closed for user root Dec 15 13:13:16 ispc sshd[1646366]: Invalid user matlbula from 79.137.79.129 Dec 15 13:13:18 ispc sshd[1646369]: Invalid user matlbula from 173.249.50.116 Dec 15 13:13:30 ispc sshd[1646381]: Invalid user matlbula from 103.1.101.238 Dec 15 13:13:38 ispc sshd[1646383]: Invalid user diamantdi from 80.87.106.85 Dec 15 13:13:43 ispc sshd[1646392]: Invalid user matlbula from 212.227.185.39 Dec 15 13:13:49 ispc postfix/smtpd[1646400]: sql auxprop plugin using mysql engine Dec 15 13:13:51 ispc saslauthd[1646403]: pam_mysql - SELECT returned no result. Dec 15 13:13:51 ispc saslauthd[1646403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:13:51 ispc saslauthd[1646403]: do_auth : auth failure: [user=weblogic] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:14:01 ispc CRON[1646408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:14:02 ispc CRON[1646408]: pam_unix(cron:session): session closed for user root Dec 15 13:14:10 ispc sshd[1646421]: Invalid user matlbula from 40.160.57.133 Dec 15 13:14:52 ispc sshd[1646449]: Invalid user perl from 95.216.90.219 Dec 15 13:15:01 ispc CRON[1646458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:15:01 ispc CRON[1646459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:15:01 ispc CRON[1646460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:15:01 ispc CRON[1646461]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:15:01 ispc CRON[1646459]: pam_unix(cron:session): session closed for user root Dec 15 13:15:01 ispc CRON[1646461]: pam_unix(cron:session): session closed for user getmail Dec 15 13:15:02 ispc CRON[1646460]: pam_unix(cron:session): session closed for user root Dec 15 13:15:02 ispc CRON[1646458]: pam_unix(cron:session): session closed for user root Dec 15 13:15:22 ispc sshd[1646546]: Invalid user ziplines from 116.120.58.228 Dec 15 13:15:47 ispc sshd[1646558]: Invalid user test from 207.244.235.16 Dec 15 13:16:01 ispc CRON[1646570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:16:03 ispc CRON[1646570]: pam_unix(cron:session): session closed for user root Dec 15 13:16:13 ispc postfix/smtpd[1646587]: sql auxprop plugin using mysql engine Dec 15 13:16:13 ispc saslauthd[1646589]: pam_mysql - SELECT returned no result. Dec 15 13:16:13 ispc saslauthd[1646589]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:16:13 ispc saslauthd[1646589]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:16:15 ispc saslauthd[1646590]: pam_mysql - SELECT returned no result. Dec 15 13:16:15 ispc saslauthd[1646590]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:16:15 ispc saslauthd[1646590]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:16:21 ispc sshd[1646597]: Invalid user blceu from 20.76.245.76 Dec 15 13:16:28 ispc sshd[1646601]: Invalid user blceu from 207.180.230.28 Dec 15 13:16:37 ispc saslauthd[1646608]: pam_mysql - SELECT returned no result. Dec 15 13:16:37 ispc saslauthd[1646608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:16:37 ispc saslauthd[1646608]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:16:47 ispc sshd[1646613]: Invalid user matlbula from 31.220.103.41 Dec 15 13:16:49 ispc sshd[1646618]: Invalid user blceu from 84.46.248.198 Dec 15 13:16:53 ispc saslauthd[1646625]: pam_mysql - SELECT returned no result. Dec 15 13:16:53 ispc saslauthd[1646625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:16:53 ispc saslauthd[1646625]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:01 ispc CRON[1646626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:17:01 ispc CRON[1646626]: pam_unix(cron:session): session closed for user root Dec 15 13:17:04 ispc saslauthd[1646643]: pam_mysql - SELECT returned no result. Dec 15 13:17:04 ispc saslauthd[1646643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:04 ispc saslauthd[1646643]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:07 ispc saslauthd[1646644]: pam_mysql - SELECT returned no result. Dec 15 13:17:07 ispc saslauthd[1646644]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:07 ispc saslauthd[1646644]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:29 ispc saslauthd[1646653]: pam_mysql - SELECT returned no result. Dec 15 13:17:29 ispc saslauthd[1646653]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:29 ispc saslauthd[1646653]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:36 ispc saslauthd[1646658]: pam_mysql - SELECT returned no result. Dec 15 13:17:36 ispc saslauthd[1646658]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:36 ispc saslauthd[1646658]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:46 ispc saslauthd[1646677]: pam_mysql - SELECT returned no result. Dec 15 13:17:46 ispc saslauthd[1646677]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:46 ispc saslauthd[1646677]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:48 ispc saslauthd[1646678]: pam_mysql - SELECT returned no result. Dec 15 13:17:48 ispc saslauthd[1646678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:48 ispc saslauthd[1646678]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:17:58 ispc saslauthd[1646690]: pam_mysql - SELECT returned no result. Dec 15 13:17:58 ispc saslauthd[1646690]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:17:58 ispc saslauthd[1646690]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:18:00 ispc saslauthd[1646692]: pam_mysql - SELECT returned no result. Dec 15 13:18:00 ispc saslauthd[1646692]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:18:00 ispc saslauthd[1646692]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:18:01 ispc CRON[1646693]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 15 13:18:01 ispc CRON[1646694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:18:02 ispc CRON[1646694]: pam_unix(cron:session): session closed for user root Dec 15 13:18:04 ispc CRON[1646693]: pam_unix(cron:session): session closed for user web324 Dec 15 13:18:04 ispc saslauthd[1646712]: pam_mysql - SELECT returned no result. Dec 15 13:18:04 ispc saslauthd[1646712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:18:04 ispc saslauthd[1646712]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:18:25 ispc sshd[1646725]: Invalid user matlbula from 86.48.31.70 Dec 15 13:18:26 ispc sshd[1646727]: Invalid user matlbula from 64.227.182.109 Dec 15 13:18:26 ispc saslauthd[1646729]: pam_mysql - SELECT returned no result. Dec 15 13:18:26 ispc saslauthd[1646729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:18:26 ispc saslauthd[1646729]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:18:29 ispc saslauthd[1646730]: pam_mysql - SELECT returned no result. Dec 15 13:18:29 ispc saslauthd[1646730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:18:29 ispc saslauthd[1646730]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:18:47 ispc saslauthd[1646743]: pam_mysql - SELECT returned no result. Dec 15 13:18:47 ispc saslauthd[1646743]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:18:47 ispc saslauthd[1646743]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:19:00 ispc sshd[1646751]: Invalid user blceu from 159.223.17.60 Dec 15 13:19:01 ispc CRON[1646753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:19:02 ispc CRON[1646753]: pam_unix(cron:session): session closed for user root Dec 15 13:19:57 ispc postfix/smtpd[1646798]: sql auxprop plugin using mysql engine Dec 15 13:20:01 ispc CRON[1646800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:20:01 ispc CRON[1646801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:20:01 ispc CRON[1646802]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:20:01 ispc CRON[1646803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:20:01 ispc CRON[1646804]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:20:01 ispc CRON[1646802]: pam_unix(cron:session): session closed for user www-data Dec 15 13:20:01 ispc CRON[1646801]: pam_unix(cron:session): session closed for user root Dec 15 13:20:01 ispc CRON[1646804]: pam_unix(cron:session): session closed for user getmail Dec 15 13:20:02 ispc CRON[1646803]: pam_unix(cron:session): session closed for user root Dec 15 13:20:03 ispc CRON[1646800]: pam_unix(cron:session): session closed for user root Dec 15 13:21:01 ispc CRON[1646907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:21:01 ispc CRON[1646908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:21:01 ispc CRON[1646907]: pam_unix(cron:session): session closed for user root Dec 15 13:21:01 ispc CRON[1646908]: pam_unix(cron:session): session closed for user root Dec 15 13:21:06 ispc sshd[1646925]: Invalid user matlbula from 217.182.206.144 Dec 15 13:21:24 ispc CRON[1644578]: pam_unix(cron:session): session closed for user root Dec 15 13:21:24 ispc postfix/smtpd[1646936]: sql auxprop plugin using mysql engine Dec 15 13:22:01 ispc CRON[1646948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:22:02 ispc CRON[1646948]: pam_unix(cron:session): session closed for user root Dec 15 13:22:18 ispc sshd[1646961]: Invalid user diamantdi from 85.143.173.172 Dec 15 13:22:21 ispc postfix/smtpd[1646963]: sql auxprop plugin using mysql engine Dec 15 13:22:26 ispc sshd[1646966]: Invalid user matlbula from 103.216.117.93 Dec 15 13:23:01 ispc CRON[1646982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:23:02 ispc CRON[1646982]: pam_unix(cron:session): session closed for user root Dec 15 13:23:46 ispc sshd[1647000]: Invalid user matlbula from 102.68.87.13 Dec 15 13:23:47 ispc sshd[1647002]: Invalid user diamantdi from 35.200.246.108 Dec 15 13:24:01 ispc CRON[1647007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:24:02 ispc saslauthd[1647015]: pam_mysql - SELECT returned no result. Dec 15 13:24:02 ispc saslauthd[1647015]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:24:02 ispc saslauthd[1647015]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:24:02 ispc postfix/smtpd[1647019]: sql auxprop plugin using mysql engine Dec 15 13:24:02 ispc CRON[1647007]: pam_unix(cron:session): session closed for user root Dec 15 13:24:11 ispc saslauthd[1647022]: pam_mysql - SELECT returned no result. Dec 15 13:24:11 ispc saslauthd[1647022]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:24:11 ispc saslauthd[1647022]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:24:13 ispc sshd[1647023]: Invalid user diamantdi from 84.46.254.19 Dec 15 13:24:36 ispc sshd[1647027]: Invalid user matlbula from 69.62.105.44 Dec 15 13:24:42 ispc sshd[1647031]: Invalid user blceu from 195.201.95.88 Dec 15 13:25:01 ispc CRON[1647045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:25:01 ispc CRON[1647046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:25:01 ispc CRON[1647047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:25:01 ispc CRON[1647048]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:25:01 ispc CRON[1647046]: pam_unix(cron:session): session closed for user root Dec 15 13:25:01 ispc CRON[1647048]: pam_unix(cron:session): session closed for user getmail Dec 15 13:25:04 ispc CRON[1647045]: pam_unix(cron:session): session closed for user root Dec 15 13:25:07 ispc sshd[1647151]: Invalid user blceu from 213.199.52.202 Dec 15 13:25:13 ispc postfix/smtpd[1647156]: sql auxprop plugin using mysql engine Dec 15 13:25:13 ispc postfix/smtpd[1647158]: sql auxprop plugin using mysql engine Dec 15 13:25:15 ispc sshd[1647159]: Invalid user admin from 161.35.87.56 Dec 15 13:25:26 ispc saslauthd[1647162]: pam_mysql - SELECT returned no result. Dec 15 13:25:26 ispc saslauthd[1647162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:25:26 ispc saslauthd[1647162]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:25:27 ispc sshd[1647163]: Invalid user matlbula from 217.150.245.233 Dec 15 13:25:33 ispc CRON[1647047]: pam_unix(cron:session): session closed for user root Dec 15 13:25:44 ispc saslauthd[1647167]: pam_mysql - SELECT returned no result. Dec 15 13:25:44 ispc saslauthd[1647167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:25:44 ispc saslauthd[1647167]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:25:53 ispc sshd[1647172]: Invalid user admin from 161.35.87.56 Dec 15 13:26:01 ispc CRON[1647174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:26:28 ispc sshd[1647197]: Invalid user admin from 161.35.87.56 Dec 15 13:27:01 ispc CRON[1647217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:27:02 ispc CRON[1647217]: pam_unix(cron:session): session closed for user root Dec 15 13:27:03 ispc sshd[1647232]: Invalid user admin from 161.35.87.56 Dec 15 13:27:19 ispc sshd[1647240]: Invalid user admin from 209.38.107.9 Dec 15 13:27:38 ispc sshd[1647253]: Invalid user admin from 161.35.87.56 Dec 15 13:27:43 ispc sshd[1647259]: reverse mapping checking getaddrinfo for mktdireto.online [173.214.173.121] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:27:43 ispc sshd[1647259]: Invalid user matlbula from 173.214.173.121 Dec 15 13:27:58 ispc sshd[1647275]: Invalid user ziplines from 185.181.182.252 Dec 15 13:27:59 ispc postfix/smtpd[1647277]: sql auxprop plugin using mysql engine Dec 15 13:28:01 ispc saslauthd[1647281]: pam_mysql - SELECT returned no result. Dec 15 13:28:01 ispc saslauthd[1647281]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:01 ispc saslauthd[1647281]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:28:01 ispc CRON[1647282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:28:01 ispc sshd[1647279]: Invalid user diamantdi from 82.202.170.29 Dec 15 13:28:01 ispc CRON[1647282]: pam_unix(cron:session): session closed for user root Dec 15 13:28:11 ispc sshd[1647299]: Invalid user diamantdi from 83.228.195.155 Dec 15 13:28:13 ispc saslauthd[1647303]: pam_mysql - SELECT returned no result. Dec 15 13:28:13 ispc saslauthd[1647303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:13 ispc saslauthd[1647303]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:28:13 ispc sshd[1647301]: Invalid user admin from 161.35.87.56 Dec 15 13:28:35 ispc saslauthd[1647328]: pam_mysql - SELECT returned no result. Dec 15 13:28:35 ispc saslauthd[1647328]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:35 ispc saslauthd[1647328]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:28:38 ispc sshd[1647329]: Invalid user blceu from 103.88.243.44 Dec 15 13:28:42 ispc saslauthd[1647333]: pam_mysql - SELECT returned no result. Dec 15 13:28:42 ispc saslauthd[1647333]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:42 ispc saslauthd[1647333]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:28:43 ispc sshd[1647331]: Invalid user admin from 209.38.107.9 Dec 15 13:28:43 ispc postfix/smtpd[1647334]: sql auxprop plugin using mysql engine Dec 15 13:28:43 ispc saslauthd[1647336]: pam_mysql - SELECT returned no result. Dec 15 13:28:43 ispc saslauthd[1647336]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:43 ispc saslauthd[1647336]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:28:44 ispc saslauthd[1647337]: pam_mysql - SELECT returned no result. Dec 15 13:28:44 ispc saslauthd[1647337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:28:44 ispc saslauthd[1647337]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:29:01 ispc CRON[1647348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:29:02 ispc CRON[1647348]: pam_unix(cron:session): session closed for user root Dec 15 13:29:20 ispc sshd[1647369]: Invalid user anoraksro from 117.50.70.169 Dec 15 13:29:39 ispc sshd[1647385]: Invalid user diamantdi from 217.160.218.56 Dec 15 13:29:45 ispc sshd[1647387]: Invalid user blceu from 103.216.117.93 Dec 15 13:30:01 ispc CRON[1647400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:30:01 ispc CRON[1647401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:30:01 ispc CRON[1647402]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:30:01 ispc CRON[1647403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:30:01 ispc CRON[1647404]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:30:01 ispc CRON[1647401]: pam_unix(cron:session): session closed for user root Dec 15 13:30:01 ispc CRON[1647402]: pam_unix(cron:session): session closed for user www-data Dec 15 13:30:01 ispc CRON[1647404]: pam_unix(cron:session): session closed for user getmail Dec 15 13:30:01 ispc CRON[1647403]: pam_unix(cron:session): session closed for user root Dec 15 13:30:02 ispc CRON[1647400]: pam_unix(cron:session): session closed for user root Dec 15 13:30:08 ispc sshd[1647478]: Invalid user admin from 209.38.107.9 Dec 15 13:30:32 ispc sshd[1647495]: Invalid user matlbula from 35.239.77.168 Dec 15 13:30:36 ispc postfix/smtpd[1647505]: sql auxprop plugin using mysql engine Dec 15 13:30:36 ispc postfix/smtpd[1647509]: sql auxprop plugin using mysql engine Dec 15 13:30:36 ispc postfix/smtpd[1647512]: sql auxprop plugin using mysql engine Dec 15 13:30:37 ispc postfix/smtpd[1647516]: sql auxprop plugin using mysql engine Dec 15 13:31:01 ispc CRON[1647535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:31:01 ispc CRON[1647535]: pam_unix(cron:session): session closed for user root Dec 15 13:31:33 ispc sshd[1647561]: Invalid user admin from 209.38.107.9 Dec 15 13:32:01 ispc CRON[1647577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:32:02 ispc CRON[1647577]: pam_unix(cron:session): session closed for user root Dec 15 13:33:01 ispc CRON[1647625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:33:02 ispc CRON[1647625]: pam_unix(cron:session): session closed for user root Dec 15 13:33:02 ispc sshd[1647623]: Invalid user admin from 209.38.107.9 Dec 15 13:33:28 ispc postfix/smtpd[1647648]: sql auxprop plugin using mysql engine Dec 15 13:33:29 ispc saslauthd[1647650]: pam_mysql - SELECT returned no result. Dec 15 13:33:29 ispc saslauthd[1647650]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:33:29 ispc saslauthd[1647650]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:33:49 ispc sshd[1647660]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:34:01 ispc CRON[1647671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:34:01 ispc CRON[1647671]: pam_unix(cron:session): session closed for user root Dec 15 13:34:29 ispc sshd[1647692]: Invalid user admin from 209.38.107.9 Dec 15 13:34:34 ispc sshd[1647708]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:34:34 ispc sshd[1647708]: Invalid user blceu from 193.110.157.47 Dec 15 13:34:36 ispc sshd[1647714]: Invalid user demo from 45.134.26.236 Dec 15 13:34:37 ispc sshd[1647718]: Invalid user arma3server from 45.134.26.236 Dec 15 13:34:38 ispc sshd[1647720]: Invalid user operator from 45.134.26.236 Dec 15 13:34:39 ispc sshd[1647722]: Invalid user temp from 45.134.26.236 Dec 15 13:34:40 ispc sshd[1647725]: Invalid user train1 from 45.134.26.236 Dec 15 13:34:41 ispc sshd[1647727]: Invalid user openvpn from 45.134.26.236 Dec 15 13:35:01 ispc CRON[1647746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:35:01 ispc CRON[1647748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:35:01 ispc CRON[1647749]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:35:01 ispc CRON[1647747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:35:01 ispc CRON[1647747]: pam_unix(cron:session): session closed for user root Dec 15 13:35:01 ispc CRON[1647749]: pam_unix(cron:session): session closed for user getmail Dec 15 13:35:02 ispc CRON[1647748]: pam_unix(cron:session): session closed for user root Dec 15 13:35:02 ispc CRON[1647746]: pam_unix(cron:session): session closed for user root Dec 15 13:35:24 ispc postfix/smtpd[1647837]: sql auxprop plugin using mysql engine Dec 15 13:35:24 ispc saslauthd[1647839]: pam_mysql - SELECT returned no result. Dec 15 13:35:24 ispc saslauthd[1647839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:35:24 ispc saslauthd[1647839]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:35:33 ispc saslauthd[1647844]: pam_mysql - SELECT returned no result. Dec 15 13:35:33 ispc saslauthd[1647844]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:35:33 ispc saslauthd[1647844]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:35:35 ispc sshd[1647847]: Invalid user klape from 187.190.35.163 Dec 15 13:35:37 ispc sshd[1647849]: Invalid user ubuntu from 187.190.35.163 Dec 15 13:36:01 ispc CRON[1647860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:36:02 ispc CRON[1647860]: pam_unix(cron:session): session closed for user root Dec 15 13:36:29 ispc sshd[1647885]: Invalid user blceu from 139.59.66.222 Dec 15 13:37:01 ispc CRON[1647901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:37:02 ispc CRON[1647901]: pam_unix(cron:session): session closed for user root Dec 15 13:37:19 ispc postfix/smtpd[1647920]: sql auxprop plugin using mysql engine Dec 15 13:38:01 ispc CRON[1647949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:38:02 ispc CRON[1647949]: pam_unix(cron:session): session closed for user root Dec 15 13:39:01 ispc CRON[1647986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:39:01 ispc CRON[1647987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:39:02 ispc CRON[1647986]: pam_unix(cron:session): session closed for user root Dec 15 13:39:02 ispc CRON[1647987]: pam_unix(cron:session): session closed for user root Dec 15 13:39:05 ispc postfix/smtpd[1648013]: sql auxprop plugin using mysql engine Dec 15 13:40:01 ispc CRON[1648040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:40:01 ispc CRON[1648041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:40:01 ispc CRON[1648042]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:40:01 ispc CRON[1648043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:40:01 ispc CRON[1648044]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:40:01 ispc CRON[1648042]: pam_unix(cron:session): session closed for user www-data Dec 15 13:40:01 ispc CRON[1648041]: pam_unix(cron:session): session closed for user root Dec 15 13:40:01 ispc CRON[1648044]: pam_unix(cron:session): session closed for user getmail Dec 15 13:40:02 ispc CRON[1648043]: pam_unix(cron:session): session closed for user root Dec 15 13:40:03 ispc CRON[1648040]: pam_unix(cron:session): session closed for user root Dec 15 13:40:40 ispc sshd[1648138]: Did not receive identification string from 45.140.17.97 Dec 15 13:40:40 ispc postfix/smtpd[1648139]: sql auxprop plugin using mysql engine Dec 15 13:41:01 ispc CRON[1648150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:41:01 ispc CRON[1648150]: pam_unix(cron:session): session closed for user root Dec 15 13:42:02 ispc CRON[1648187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:42:02 ispc CRON[1648187]: pam_unix(cron:session): session closed for user root Dec 15 13:43:01 ispc CRON[1648232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:43:02 ispc CRON[1648232]: pam_unix(cron:session): session closed for user root Dec 15 13:43:59 ispc postfix/smtpd[1648271]: sql auxprop plugin using mysql engine Dec 15 13:44:00 ispc saslauthd[1648273]: pam_mysql - SELECT returned no result. Dec 15 13:44:00 ispc saslauthd[1648273]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:44:00 ispc saslauthd[1648273]: do_auth : auth failure: [user=whd] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:44:01 ispc CRON[1648274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:44:01 ispc CRON[1648274]: pam_unix(cron:session): session closed for user root Dec 15 13:45:01 ispc CRON[1648315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:45:01 ispc CRON[1648316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:45:01 ispc CRON[1648317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:45:01 ispc CRON[1648318]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:45:01 ispc CRON[1648316]: pam_unix(cron:session): session closed for user root Dec 15 13:45:01 ispc CRON[1648318]: pam_unix(cron:session): session closed for user getmail Dec 15 13:45:02 ispc CRON[1648317]: pam_unix(cron:session): session closed for user root Dec 15 13:45:02 ispc CRON[1648315]: pam_unix(cron:session): session closed for user root Dec 15 13:46:01 ispc CRON[1648418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:46:02 ispc CRON[1648418]: pam_unix(cron:session): session closed for user root Dec 15 13:46:04 ispc sshd[1648429]: Invalid user blceu from 203.146.21.153 Dec 15 13:46:22 ispc postfix/smtpd[1648439]: sql auxprop plugin using mysql engine Dec 15 13:46:22 ispc CRON[1647174]: pam_unix(cron:session): session closed for user root Dec 15 13:47:01 ispc CRON[1648444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:47:03 ispc CRON[1648444]: pam_unix(cron:session): session closed for user root Dec 15 13:47:30 ispc saslauthd[1648458]: pam_mysql - SELECT returned no result. Dec 15 13:47:30 ispc saslauthd[1648458]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:47:30 ispc saslauthd[1648458]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:47:44 ispc sshd[1648465]: Invalid user ziplines from 139.59.66.222 Dec 15 13:48:01 ispc CRON[1648473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:48:02 ispc CRON[1648473]: pam_unix(cron:session): session closed for user root Dec 15 13:49:01 ispc CRON[1648487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:49:02 ispc CRON[1648487]: pam_unix(cron:session): session closed for user root Dec 15 13:49:23 ispc postfix/smtpd[1648499]: sql auxprop plugin using mysql engine Dec 15 13:50:01 ispc CRON[1648504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:50:01 ispc CRON[1648505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:50:01 ispc CRON[1648506]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 13:50:01 ispc CRON[1648507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:50:01 ispc CRON[1648508]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:50:01 ispc CRON[1648505]: pam_unix(cron:session): session closed for user root Dec 15 13:50:01 ispc CRON[1648506]: pam_unix(cron:session): session closed for user www-data Dec 15 13:50:01 ispc CRON[1648508]: pam_unix(cron:session): session closed for user getmail Dec 15 13:50:02 ispc CRON[1648504]: pam_unix(cron:session): session closed for user root Dec 15 13:50:41 ispc CRON[1648507]: pam_unix(cron:session): session closed for user root Dec 15 13:51:01 ispc CRON[1648624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:51:23 ispc sshd[1648644]: Invalid user blceu from 54.38.55.13 Dec 15 13:51:23 ispc sshd[1648647]: Invalid user matlbula from 185.238.72.142 Dec 15 13:51:28 ispc sshd[1648653]: Invalid user blceu from 95.217.223.25 Dec 15 13:51:28 ispc sshd[1648652]: Address 149.28.199.122 maps to 149.28.199.122.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:51:41 ispc sshd[1648661]: Invalid user matlbula from 138.199.169.157 Dec 15 13:51:48 ispc sshd[1648667]: Did not receive identification string from 146.190.235.169 Dec 15 13:51:49 ispc postfix/smtpd[1648668]: sql auxprop plugin using mysql engine Dec 15 13:51:51 ispc sshd[1648670]: Invalid user diamantdi from 159.203.59.222 Dec 15 13:51:52 ispc saslauthd[1648674]: pam_mysql - SELECT returned no result. Dec 15 13:51:52 ispc saslauthd[1648674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:51:52 ispc saslauthd[1648674]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:52:01 ispc sshd[1648680]: Invalid user perl from 91.99.198.164 Dec 15 13:52:01 ispc CRON[1648682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:52:02 ispc CRON[1648682]: pam_unix(cron:session): session closed for user root Dec 15 13:52:14 ispc sshd[1648699]: Invalid user matlbula from 49.212.165.33 Dec 15 13:52:24 ispc sshd[1648706]: Invalid user matlbula from 161.35.36.25 Dec 15 13:52:50 ispc sshd[1648730]: Invalid user matlbula from 35.209.20.175 Dec 15 13:53:01 ispc CRON[1648740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:53:03 ispc CRON[1648740]: pam_unix(cron:session): session closed for user root Dec 15 13:53:07 ispc sshd[1648755]: Invalid user diamantdi from 54.38.55.13 Dec 15 13:53:10 ispc sshd[1648757]: Invalid user matlbula from 54.37.71.181 Dec 15 13:53:11 ispc sshd[1648758]: Invalid user diamantdi from 37.76.121.162 Dec 15 13:53:59 ispc sshd[1648787]: Address 162.0.220.2 maps to nc-ph-3056.web-hosting.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:53:59 ispc sshd[1648787]: Invalid user matlbula from 162.0.220.2 Dec 15 13:54:01 ispc CRON[1648789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:54:01 ispc CRON[1648789]: pam_unix(cron:session): session closed for user root Dec 15 13:54:18 ispc sshd[1648804]: Invalid user matlbula from 146.190.79.229 Dec 15 13:54:29 ispc sshd[1648813]: reverse mapping checking getaddrinfo for india.mdvpsindia.com [103.86.177.165] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:54:29 ispc sshd[1648813]: Invalid user matlbula from 103.86.177.165 Dec 15 13:54:47 ispc sshd[1648824]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:55:01 ispc CRON[1648839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:55:01 ispc CRON[1648840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:55:01 ispc CRON[1648841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:55:01 ispc CRON[1648842]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 13:55:02 ispc CRON[1648840]: pam_unix(cron:session): session closed for user root Dec 15 13:55:02 ispc CRON[1648842]: pam_unix(cron:session): session closed for user getmail Dec 15 13:55:02 ispc CRON[1648841]: pam_unix(cron:session): session closed for user root Dec 15 13:55:03 ispc CRON[1648839]: pam_unix(cron:session): session closed for user root Dec 15 13:55:52 ispc sshd[1648940]: Invalid user blceu from 51.83.71.191 Dec 15 13:56:01 ispc CRON[1648949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:56:02 ispc CRON[1648949]: pam_unix(cron:session): session closed for user root Dec 15 13:56:02 ispc sshd[1648943]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:56:02 ispc sshd[1648943]: Invalid user martof from 114.7.163.154 Dec 15 13:56:38 ispc sshd[1648985]: Invalid user matlbula from 64.23.183.61 Dec 15 13:56:41 ispc sshd[1648992]: Invalid user diamantdi from 72.61.229.13 Dec 15 13:57:01 ispc CRON[1649007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:57:02 ispc CRON[1649007]: pam_unix(cron:session): session closed for user root Dec 15 13:57:15 ispc sshd[1649027]: Invalid user matlbula from 103.10.61.114 Dec 15 13:57:15 ispc postfix/smtpd[1649034]: sql auxprop plugin using mysql engine Dec 15 13:57:16 ispc sshd[1649033]: Invalid user blceu from 148.113.202.131 Dec 15 13:57:38 ispc sshd[1649048]: Invalid user matlbula from 103.10.61.114 Dec 15 13:57:44 ispc postfix/smtpd[1649058]: sql auxprop plugin using mysql engine Dec 15 13:57:44 ispc saslauthd[1649063]: pam_mysql - SELECT returned no result. Dec 15 13:57:44 ispc saslauthd[1649063]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:57:44 ispc saslauthd[1649063]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:57:50 ispc sshd[1649065]: Invalid user diamantdi from 84.46.254.19 Dec 15 13:58:01 ispc CRON[1649078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:58:02 ispc sshd[1649067]: Invalid user diamantdi from 45.67.35.108 Dec 15 13:58:02 ispc CRON[1649078]: pam_unix(cron:session): session closed for user root Dec 15 13:58:04 ispc sshd[1649086]: Invalid user martof from 119.205.233.162 Dec 15 13:58:08 ispc sshd[1649097]: Invalid user martof from 203.146.21.153 Dec 15 13:58:22 ispc sshd[1649103]: Invalid user matlbula from 185.226.118.110 Dec 15 13:58:24 ispc sshd[1649105]: Invalid user perl from 185.98.139.209 Dec 15 13:58:30 ispc sshd[1649111]: Invalid user matlbula from 146.59.86.72 Dec 15 13:58:39 ispc sshd[1649120]: Invalid user diamantdi from 95.111.230.54 Dec 15 13:58:45 ispc sshd[1649125]: reverse mapping checking getaddrinfo for galore.argosover.net [63.141.245.194] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 13:58:45 ispc sshd[1649125]: Invalid user diamantdi from 63.141.245.194 Dec 15 13:59:01 ispc CRON[1649135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 13:59:03 ispc CRON[1649135]: pam_unix(cron:session): session closed for user root Dec 15 13:59:10 ispc saslauthd[1649151]: pam_mysql - SELECT returned no result. Dec 15 13:59:10 ispc saslauthd[1649151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 13:59:10 ispc saslauthd[1649151]: do_auth : auth failure: [user=wlcsystem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 13:59:23 ispc sshd[1649158]: Invalid user matlbula from 147.93.152.74 Dec 15 13:59:28 ispc sshd[1649164]: Invalid user matlbula from 35.203.95.64 Dec 15 14:00:01 ispc CRON[1649189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:00:01 ispc CRON[1649190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:00:01 ispc CRON[1649191]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:00:01 ispc CRON[1649192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:00:01 ispc CRON[1649193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:00:01 ispc CRON[1649194]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:00:01 ispc CRON[1649191]: pam_unix(cron:session): session closed for user www-data Dec 15 14:00:01 ispc CRON[1649190]: pam_unix(cron:session): session closed for user root Dec 15 14:00:01 ispc CRON[1649194]: pam_unix(cron:session): session closed for user getmail Dec 15 14:00:01 ispc CRON[1649193]: pam_unix(cron:session): session closed for user root Dec 15 14:00:02 ispc CRON[1649189]: pam_unix(cron:session): session closed for user root Dec 15 14:00:02 ispc CRON[1649192]: pam_unix(cron:session): session closed for user root Dec 15 14:00:18 ispc sshd[1649354]: Invalid user matlbula from 147.182.226.203 Dec 15 14:00:36 ispc sshd[1649368]: Invalid user matlbula from 103.191.76.179 Dec 15 14:00:56 ispc sshd[1649384]: Invalid user diamantdi from 31.220.81.20 Dec 15 14:00:59 ispc sshd[1649387]: Invalid user blceu from 176.98.191.12 Dec 15 14:01:01 ispc CRON[1649393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:01:01 ispc sshd[1649400]: Invalid user diamantdi from 64.226.109.250 Dec 15 14:01:02 ispc CRON[1649393]: pam_unix(cron:session): session closed for user root Dec 15 14:01:03 ispc sshd[1649402]: Address 65.20.68.39 maps to 65.20.68.39.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:01:03 ispc sshd[1649402]: Invalid user matlbula from 65.20.68.39 Dec 15 14:02:01 ispc CRON[1649441]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 14:02:01 ispc CRON[1649442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:02:02 ispc CRON[1649442]: pam_unix(cron:session): session closed for user root Dec 15 14:02:37 ispc sshd[1650209]: Invalid user matlbula from 46.62.138.83 Dec 15 14:02:55 ispc sshd[1650318]: Invalid user matlbula from 137.184.72.134 Dec 15 14:02:56 ispc postfix/smtpd[1650344]: sql auxprop plugin using mysql engine Dec 15 14:03:01 ispc CRON[1650398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:03:02 ispc CRON[1650398]: pam_unix(cron:session): session closed for user root Dec 15 14:03:11 ispc CRON[1649441]: pam_unix(cron:session): session closed for user logcheck Dec 15 14:03:13 ispc postfix/smtpd[1650522]: sql auxprop plugin using mysql engine Dec 15 14:04:01 ispc CRON[1650544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:04:02 ispc CRON[1650544]: pam_unix(cron:session): session closed for user root Dec 15 14:04:27 ispc postfix/smtpd[1650567]: sql auxprop plugin using mysql engine Dec 15 14:04:27 ispc saslauthd[1650569]: pam_mysql - SELECT returned no result. Dec 15 14:04:27 ispc saslauthd[1650569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:04:27 ispc saslauthd[1650569]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:04:51 ispc postfix/smtpd[1650582]: sql auxprop plugin using mysql engine Dec 15 14:05:01 ispc CRON[1650588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:05:01 ispc CRON[1650589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:05:01 ispc CRON[1650590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:05:01 ispc CRON[1650591]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:05:01 ispc CRON[1650589]: pam_unix(cron:session): session closed for user root Dec 15 14:05:01 ispc CRON[1650591]: pam_unix(cron:session): session closed for user getmail Dec 15 14:05:01 ispc CRON[1650590]: pam_unix(cron:session): session closed for user root Dec 15 14:05:01 ispc CRON[1650588]: pam_unix(cron:session): session closed for user root Dec 15 14:05:50 ispc sshd[1650691]: Invalid user matlbula from 91.107.213.61 Dec 15 14:06:01 ispc CRON[1650700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:06:02 ispc CRON[1650700]: pam_unix(cron:session): session closed for user root Dec 15 14:06:17 ispc sshd[1650722]: Invalid user blceu from 75.119.142.45 Dec 15 14:06:35 ispc sshd[1650728]: Invalid user diamantdi from 138.199.169.157 Dec 15 14:06:35 ispc sshd[1650730]: Address 87.106.39.91 maps to vo-onderwijs.nl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:06:35 ispc sshd[1650730]: Invalid user matlbula from 87.106.39.91 Dec 15 14:07:01 ispc CRON[1650748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:07:02 ispc CRON[1650748]: pam_unix(cron:session): session closed for user root Dec 15 14:07:22 ispc sshd[1650767]: Invalid user matlbula from 101.53.135.34 Dec 15 14:08:01 ispc CRON[1650797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:08:01 ispc CRON[1650797]: pam_unix(cron:session): session closed for user root Dec 15 14:08:33 ispc sshd[1650820]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:08:42 ispc postfix/smtpd[1650834]: sql auxprop plugin using mysql engine Dec 15 14:08:45 ispc postfix/smtpd[1650837]: sql auxprop plugin using mysql engine Dec 15 14:09:01 ispc CRON[1650848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:09:01 ispc CRON[1650849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:09:02 ispc CRON[1650848]: pam_unix(cron:session): session closed for user root Dec 15 14:09:03 ispc CRON[1650849]: pam_unix(cron:session): session closed for user root Dec 15 14:09:43 ispc sshd[1650891]: Invalid user matlbula from 161.97.172.115 Dec 15 14:10:01 ispc CRON[1650903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:10:02 ispc CRON[1650904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:10:02 ispc CRON[1650905]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:10:02 ispc CRON[1650906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:10:02 ispc CRON[1650907]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:10:02 ispc CRON[1650905]: pam_unix(cron:session): session closed for user www-data Dec 15 14:10:02 ispc CRON[1650904]: pam_unix(cron:session): session closed for user root Dec 15 14:10:02 ispc CRON[1650907]: pam_unix(cron:session): session closed for user getmail Dec 15 14:10:02 ispc CRON[1650906]: pam_unix(cron:session): session closed for user root Dec 15 14:10:03 ispc CRON[1650903]: pam_unix(cron:session): session closed for user root Dec 15 14:10:04 ispc sshd[1650981]: Invalid user blceu from 178.156.132.245 Dec 15 14:10:32 ispc postfix/smtpd[1650998]: sql auxprop plugin using mysql engine Dec 15 14:10:55 ispc postfix/smtpd[1651012]: sql auxprop plugin using mysql engine Dec 15 14:10:56 ispc saslauthd[1651014]: pam_mysql - SELECT returned no result. Dec 15 14:10:56 ispc saslauthd[1651014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:10:56 ispc saslauthd[1651014]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:11:01 ispc CRON[1651017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:11:02 ispc CRON[1651017]: pam_unix(cron:session): session closed for user root Dec 15 14:11:17 ispc sshd[1651042]: reverse mapping checking getaddrinfo for 249.46.114.37.in-addr.arpa [37.114.46.249] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:11:17 ispc sshd[1651044]: Invalid user matlbula from 104.248.2.26 Dec 15 14:11:19 ispc postfix/smtpd[1651046]: sql auxprop plugin using mysql engine Dec 15 14:11:19 ispc saslauthd[1651050]: pam_mysql - SELECT returned no result. Dec 15 14:11:19 ispc saslauthd[1651050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:11:19 ispc saslauthd[1651050]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:11:20 ispc saslauthd[1651051]: pam_mysql - SELECT returned no result. Dec 15 14:11:20 ispc saslauthd[1651051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:11:20 ispc saslauthd[1651051]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:11:32 ispc sshd[1651057]: Invalid user matlbula from 143.198.144.10 Dec 15 14:11:33 ispc CRON[1648624]: pam_unix(cron:session): session closed for user root Dec 15 14:11:34 ispc sshd[1651059]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:11:34 ispc sshd[1651059]: Invalid user ziplines from 103.146.203.212 Dec 15 14:11:40 ispc saslauthd[1651065]: pam_mysql - SELECT returned no result. Dec 15 14:11:40 ispc saslauthd[1651065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:11:40 ispc saslauthd[1651065]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:11:57 ispc saslauthd[1651070]: pam_mysql - SELECT returned no result. Dec 15 14:11:57 ispc saslauthd[1651070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:11:57 ispc saslauthd[1651070]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:12:00 ispc sshd[1651071]: Invalid user ziplines from 203.146.21.153 Dec 15 14:12:01 ispc CRON[1651073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:12:02 ispc CRON[1651073]: pam_unix(cron:session): session closed for user root Dec 15 14:12:05 ispc sshd[1651091]: Invalid user perl from 91.99.198.164 Dec 15 14:12:08 ispc saslauthd[1651093]: pam_mysql - SELECT returned no result. Dec 15 14:12:08 ispc saslauthd[1651093]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:12:08 ispc saslauthd[1651093]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:12:10 ispc saslauthd[1651094]: pam_mysql - SELECT returned no result. Dec 15 14:12:10 ispc saslauthd[1651094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:12:10 ispc saslauthd[1651094]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:12:36 ispc sshd[1651102]: Did not receive identification string from 134.209.94.144 Dec 15 14:12:40 ispc saslauthd[1651103]: pam_mysql - SELECT returned no result. Dec 15 14:12:40 ispc saslauthd[1651103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:12:40 ispc saslauthd[1651103]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:12:47 ispc saslauthd[1651112]: pam_mysql - SELECT returned no result. Dec 15 14:12:47 ispc saslauthd[1651112]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:12:47 ispc saslauthd[1651112]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:12:52 ispc saslauthd[1651113]: pam_mysql - SELECT returned no result. Dec 15 14:12:52 ispc saslauthd[1651113]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:12:52 ispc saslauthd[1651113]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:01 ispc CRON[1651114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:13:02 ispc CRON[1651114]: pam_unix(cron:session): session closed for user root Dec 15 14:13:02 ispc saslauthd[1651126]: pam_mysql - SELECT returned no result. Dec 15 14:13:02 ispc saslauthd[1651126]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:13:02 ispc saslauthd[1651126]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:03 ispc saslauthd[1651127]: pam_mysql - SELECT returned no result. Dec 15 14:13:03 ispc saslauthd[1651127]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:13:03 ispc saslauthd[1651127]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:07 ispc saslauthd[1651128]: pam_mysql - SELECT returned no result. Dec 15 14:13:07 ispc saslauthd[1651128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:13:07 ispc saslauthd[1651128]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:25 ispc saslauthd[1651137]: pam_mysql - SELECT returned no result. Dec 15 14:13:25 ispc saslauthd[1651137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:13:25 ispc saslauthd[1651137]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:33 ispc saslauthd[1651141]: pam_mysql - SELECT returned no result. Dec 15 14:13:33 ispc saslauthd[1651141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:13:33 ispc saslauthd[1651141]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:13:45 ispc sshd[1651142]: Invalid user matlbula from 161.35.29.93 Dec 15 14:13:46 ispc sshd[1651144]: Invalid user matlbula from 159.89.161.19 Dec 15 14:13:51 ispc sshd[1651146]: Invalid user diamantdi from 66.175.239.44 Dec 15 14:13:54 ispc postfix/smtpd[1651151]: sql auxprop plugin using mysql engine Dec 15 14:14:01 ispc CRON[1651159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:14:01 ispc sshd[1651157]: Invalid user matlbula from 188.166.241.95 Dec 15 14:14:03 ispc CRON[1651159]: pam_unix(cron:session): session closed for user root Dec 15 14:14:11 ispc sshd[1651172]: Invalid user klape from 36.50.177.171 Dec 15 14:14:13 ispc sshd[1651174]: Invalid user ubuntu from 36.50.177.171 Dec 15 14:14:30 ispc saslauthd[1651176]: pam_mysql - SELECT returned no result. Dec 15 14:14:30 ispc saslauthd[1651176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:14:30 ispc saslauthd[1651176]: do_auth : auth failure: [user=wlpisystem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:14:38 ispc sshd[1651178]: Invalid user matlbula from 189.2.192.150 Dec 15 14:14:38 ispc sshd[1651180]: Invalid user blceu from 34.34.216.115 Dec 15 14:15:01 ispc CRON[1651186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:15:01 ispc CRON[1651187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:15:01 ispc CRON[1651188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:15:01 ispc CRON[1651189]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:15:01 ispc CRON[1651187]: pam_unix(cron:session): session closed for user root Dec 15 14:15:01 ispc CRON[1651189]: pam_unix(cron:session): session closed for user getmail Dec 15 14:15:03 ispc CRON[1651186]: pam_unix(cron:session): session closed for user root Dec 15 14:15:12 ispc saslauthd[1651372]: pam_mysql - SELECT returned no result. Dec 15 14:15:12 ispc saslauthd[1651372]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:15:12 ispc saslauthd[1651372]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:15:16 ispc sshd[1651373]: Invalid user blceu from 213.199.39.76 Dec 15 14:15:39 ispc sshd[1651385]: Invalid user admin from 51.79.36.60 Dec 15 14:15:40 ispc CRON[1651188]: pam_unix(cron:session): session closed for user root Dec 15 14:15:44 ispc sshd[1651387]: Invalid user matlbula from 172.104.206.182 Dec 15 14:15:49 ispc sshd[1651389]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:15:51 ispc sshd[1651391]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:15:51 ispc sshd[1651391]: Invalid user klape from 189.89.20.45 Dec 15 14:15:53 ispc sshd[1651393]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:15:53 ispc sshd[1651393]: Invalid user ubuntu from 189.89.20.45 Dec 15 14:16:00 ispc postfix/smtpd[1651395]: sql auxprop plugin using mysql engine Dec 15 14:16:01 ispc CRON[1651400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:16:02 ispc sshd[1651398]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:16:31 ispc sshd[1651425]: Invalid user martof from 139.59.66.222 Dec 15 14:16:36 ispc sshd[1651433]: Did not receive identification string from 188.166.121.41 Dec 15 14:16:45 ispc saslauthd[1651440]: pam_mysql - SELECT returned no result. Dec 15 14:16:45 ispc saslauthd[1651440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:16:45 ispc saslauthd[1651440]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:17:01 ispc CRON[1651448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:17:02 ispc CRON[1651448]: pam_unix(cron:session): session closed for user root Dec 15 14:17:24 ispc sshd[1651470]: Invalid user blceu from 103.216.117.93 Dec 15 14:17:26 ispc postfix/smtpd[1651477]: sql auxprop plugin using mysql engine Dec 15 14:17:26 ispc postfix/smtpd[1651479]: sql auxprop plugin using mysql engine Dec 15 14:17:34 ispc sshd[1651480]: Invalid user matlbula from 31.220.90.251 Dec 15 14:18:01 ispc CRON[1651504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:18:02 ispc CRON[1651504]: pam_unix(cron:session): session closed for user root Dec 15 14:18:24 ispc sshd[1651524]: Invalid user matlbula from 72.61.104.98 Dec 15 14:18:28 ispc sshd[1651531]: Invalid user blceu from 173.212.244.142 Dec 15 14:19:00 ispc sshd[1651551]: Invalid user matlbula from 72.61.229.13 Dec 15 14:19:01 ispc CRON[1651553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:19:02 ispc CRON[1651553]: pam_unix(cron:session): session closed for user root Dec 15 14:19:36 ispc sshd[1651585]: reverse mapping checking getaddrinfo for 249.46.114.37.in-addr.arpa [37.114.46.249] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:19:39 ispc sshd[1651589]: Invalid user matlbula from 164.68.119.99 Dec 15 14:19:42 ispc postfix/smtpd[1651596]: sql auxprop plugin using mysql engine Dec 15 14:19:53 ispc sshd[1651602]: Invalid user matlbula from 31.207.34.135 Dec 15 14:20:01 ispc CRON[1651609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:20:01 ispc CRON[1651610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:20:01 ispc CRON[1651611]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:20:01 ispc CRON[1651612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:20:01 ispc CRON[1651613]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:20:01 ispc CRON[1651611]: pam_unix(cron:session): session closed for user www-data Dec 15 14:20:01 ispc CRON[1651610]: pam_unix(cron:session): session closed for user root Dec 15 14:20:01 ispc CRON[1651613]: pam_unix(cron:session): session closed for user getmail Dec 15 14:20:02 ispc CRON[1651612]: pam_unix(cron:session): session closed for user root Dec 15 14:20:02 ispc CRON[1651609]: pam_unix(cron:session): session closed for user root Dec 15 14:20:53 ispc sshd[1651718]: Invalid user blceu from 209.145.48.233 Dec 15 14:21:01 ispc CRON[1651726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:21:01 ispc CRON[1651727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:21:01 ispc CRON[1651726]: pam_unix(cron:session): session closed for user root Dec 15 14:21:02 ispc CRON[1651727]: pam_unix(cron:session): session closed for user root Dec 15 14:21:21 ispc sshd[1651750]: Invalid user diamantdi from 51.75.125.30 Dec 15 14:21:23 ispc sshd[1651752]: Invalid user diamantdi from 31.97.215.104 Dec 15 14:21:36 ispc postfix/smtpd[1651758]: sql auxprop plugin using mysql engine Dec 15 14:21:37 ispc saslauthd[1651760]: pam_mysql - SELECT returned no result. Dec 15 14:21:37 ispc saslauthd[1651760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:21:37 ispc saslauthd[1651760]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:21:50 ispc saslauthd[1651767]: pam_mysql - SELECT returned no result. Dec 15 14:21:50 ispc saslauthd[1651767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:21:50 ispc saslauthd[1651767]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:21:58 ispc sshd[1651772]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:22:01 ispc CRON[1651777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:22:02 ispc CRON[1651777]: pam_unix(cron:session): session closed for user root Dec 15 14:22:09 ispc sshd[1651795]: Invalid user blceu from 217.154.118.187 Dec 15 14:22:32 ispc sshd[1651809]: Invalid user matlbula from 213.199.39.76 Dec 15 14:22:49 ispc sshd[1651827]: Invalid user diamantdi from 168.231.101.5 Dec 15 14:23:00 ispc saslauthd[1651836]: pam_mysql - SELECT returned no result. Dec 15 14:23:00 ispc saslauthd[1651836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:23:00 ispc saslauthd[1651836]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:23:01 ispc CRON[1651837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:23:02 ispc CRON[1651837]: pam_unix(cron:session): session closed for user root Dec 15 14:23:50 ispc sshd[1651878]: Invalid user blceu from 89.116.28.199 Dec 15 14:24:01 ispc CRON[1651887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:24:02 ispc CRON[1651887]: pam_unix(cron:session): session closed for user root Dec 15 14:24:41 ispc sshd[1651924]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:24:41 ispc sshd[1651924]: Invalid user blceu from 202.80.231.51 Dec 15 14:24:50 ispc sshd[1651931]: Invalid user diamantdi from 160.251.215.3 Dec 15 14:25:01 ispc CRON[1651937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:25:01 ispc CRON[1651938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:25:01 ispc CRON[1651939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:25:01 ispc CRON[1651940]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:25:01 ispc CRON[1651938]: pam_unix(cron:session): session closed for user root Dec 15 14:25:01 ispc CRON[1651940]: pam_unix(cron:session): session closed for user getmail Dec 15 14:25:03 ispc CRON[1651939]: pam_unix(cron:session): session closed for user root Dec 15 14:25:04 ispc sshd[1651984]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:25:04 ispc sshd[1651984]: Invalid user user from 2.57.121.25 Dec 15 14:25:04 ispc CRON[1651937]: pam_unix(cron:session): session closed for user root Dec 15 14:25:27 ispc postfix/smtpd[1652029]: sql auxprop plugin using mysql engine Dec 15 14:25:27 ispc postfix/smtpd[1652031]: sql auxprop plugin using mysql engine Dec 15 14:25:27 ispc saslauthd[1652032]: pam_mysql - SELECT returned no result. Dec 15 14:25:27 ispc saslauthd[1652032]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:25:27 ispc saslauthd[1652032]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:25:35 ispc sshd[1652039]: Invalid user klape from 67.205.163.146 Dec 15 14:25:36 ispc sshd[1652041]: Invalid user ubuntu from 67.205.163.146 Dec 15 14:25:49 ispc saslauthd[1652051]: pam_mysql - SELECT returned no result. Dec 15 14:25:49 ispc saslauthd[1652051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:25:49 ispc saslauthd[1652051]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:25:58 ispc postfix/smtpd[1652052]: sql auxprop plugin using mysql engine Dec 15 14:25:58 ispc saslauthd[1652054]: pam_mysql - SELECT returned no result. Dec 15 14:25:58 ispc saslauthd[1652054]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:25:58 ispc saslauthd[1652054]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:25:58 ispc saslauthd[1652055]: pam_mysql - SELECT returned no result. Dec 15 14:25:58 ispc saslauthd[1652055]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:25:58 ispc saslauthd[1652055]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:26:01 ispc CRON[1652060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:26:02 ispc CRON[1652060]: pam_unix(cron:session): session closed for user root Dec 15 14:26:07 ispc saslauthd[1652076]: pam_mysql - SELECT returned no result. Dec 15 14:26:07 ispc saslauthd[1652076]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:26:07 ispc saslauthd[1652076]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:26:46 ispc sshd[1652095]: Invalid user ziplines from 221.156.137.103 Dec 15 14:27:01 ispc CRON[1652112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:27:02 ispc CRON[1652112]: pam_unix(cron:session): session closed for user root Dec 15 14:27:19 ispc sshd[1652110]: reverse mapping checking getaddrinfo for ip-81-26-205-105.digicom-al.net [81.26.205.105] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:27:19 ispc sshd[1652110]: Invalid user cyberoam from 81.26.205.105 Dec 15 14:28:01 ispc CRON[1652161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:28:02 ispc CRON[1652161]: pam_unix(cron:session): session closed for user root Dec 15 14:28:23 ispc postfix/smtpd[1652187]: sql auxprop plugin using mysql engine Dec 15 14:29:01 ispc CRON[1652209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:29:01 ispc CRON[1652209]: pam_unix(cron:session): session closed for user root Dec 15 14:29:11 ispc sshd[1652228]: Invalid user diamantdi from 167.86.72.250 Dec 15 14:29:29 ispc sshd[1652240]: Invalid user diamantdi from 37.252.22.6 Dec 15 14:29:30 ispc sshd[1652241]: Invalid user vmware from 157.66.80.124 Dec 15 14:29:38 ispc sshd[1652249]: Invalid user ubuntu from 86.48.31.70 Dec 15 14:29:41 ispc sshd[1652251]: Address 87.106.39.91 maps to vo-onderwijs.nl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:29:48 ispc postfix/smtpd[1652262]: sql auxprop plugin using mysql engine Dec 15 14:29:49 ispc saslauthd[1652264]: pam_mysql - SELECT returned no result. Dec 15 14:29:49 ispc saslauthd[1652264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:29:49 ispc saslauthd[1652264]: do_auth : auth failure: [user=wlse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:29:52 ispc sshd[1652265]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:29:52 ispc sshd[1652265]: Invalid user martof from 103.146.203.212 Dec 15 14:30:00 ispc sshd[1652277]: Invalid user blceu from 221.156.137.103 Dec 15 14:30:02 ispc CRON[1652279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:30:02 ispc CRON[1652280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:30:02 ispc CRON[1652281]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:30:02 ispc CRON[1652282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:30:02 ispc CRON[1652283]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:30:02 ispc CRON[1652280]: pam_unix(cron:session): session closed for user root Dec 15 14:30:02 ispc CRON[1652281]: pam_unix(cron:session): session closed for user www-data Dec 15 14:30:02 ispc CRON[1652283]: pam_unix(cron:session): session closed for user getmail Dec 15 14:30:02 ispc CRON[1652279]: pam_unix(cron:session): session closed for user root Dec 15 14:30:02 ispc CRON[1652282]: pam_unix(cron:session): session closed for user root Dec 15 14:30:03 ispc saslauthd[1652357]: pam_mysql - SELECT returned no result. Dec 15 14:30:03 ispc saslauthd[1652357]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:30:03 ispc saslauthd[1652357]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:30:14 ispc sshd[1652363]: Invalid user blceu from 94.250.202.116 Dec 15 14:30:37 ispc sshd[1652381]: Invalid user matlbula from 45.56.68.219 Dec 15 14:30:44 ispc sshd[1652389]: Invalid user klape from 70.37.89.177 Dec 15 14:30:45 ispc sshd[1652391]: Invalid user ubuntu from 70.37.89.177 Dec 15 14:31:02 ispc CRON[1652404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:31:02 ispc CRON[1652404]: pam_unix(cron:session): session closed for user root Dec 15 14:31:42 ispc sshd[1652439]: Invalid user mgeweb from 89.23.112.188 Dec 15 14:31:52 ispc postfix/smtpd[1652448]: sql auxprop plugin using mysql engine Dec 15 14:31:52 ispc saslauthd[1652450]: pam_mysql - SELECT returned no result. Dec 15 14:31:52 ispc saslauthd[1652450]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:31:52 ispc saslauthd[1652450]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:32:00 ispc sshd[1652455]: User zabbix not allowed because account is locked Dec 15 14:32:01 ispc CRON[1652457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:32:02 ispc CRON[1652457]: pam_unix(cron:session): session closed for user root Dec 15 14:32:06 ispc sshd[1652470]: reverse mapping checking getaddrinfo for india.mdvpsindia.com [103.86.177.165] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:32:06 ispc sshd[1652470]: Invalid user matlbula from 103.86.177.165 Dec 15 14:32:47 ispc sshd[1652505]: Invalid user ziplines from 45.119.213.109 Dec 15 14:32:49 ispc sshd[1652508]: Invalid user matlbula from 5.223.56.77 Dec 15 14:32:55 ispc postfix/smtpd[1652517]: sql auxprop plugin using mysql engine Dec 15 14:32:56 ispc postfix/smtpd[1652519]: sql auxprop plugin using mysql engine Dec 15 14:33:01 ispc CRON[1652526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:33:02 ispc CRON[1652526]: pam_unix(cron:session): session closed for user root Dec 15 14:33:07 ispc sshd[1652539]: Invalid user prueba from 4.211.205.96 Dec 15 14:33:19 ispc sshd[1652545]: reverse mapping checking getaddrinfo for static.120.253.208.85.clients.irandns.com [85.208.253.120] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:33:19 ispc sshd[1652545]: Invalid user ctrac from 85.208.253.120 Dec 15 14:33:26 ispc saslauthd[1652551]: pam_mysql - SELECT returned no result. Dec 15 14:33:26 ispc saslauthd[1652551]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:33:26 ispc saslauthd[1652551]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:33:29 ispc saslauthd[1652552]: pam_mysql - SELECT returned no result. Dec 15 14:33:29 ispc saslauthd[1652552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:33:29 ispc saslauthd[1652552]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:33:32 ispc sshd[1652559]: Invalid user butter from 87.236.23.10 Dec 15 14:33:35 ispc sshd[1652561]: Invalid user eugenio from 104.248.2.26 Dec 15 14:33:39 ispc sshd[1652566]: Invalid user ubuntu from 185.208.181.141 Dec 15 14:33:50 ispc sshd[1652575]: Invalid user matlbula from 38.70.71.37 Dec 15 14:33:57 ispc sshd[1652583]: Invalid user dev from 35.201.254.134 Dec 15 14:33:59 ispc sshd[1652585]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:34:01 ispc CRON[1652589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:34:02 ispc CRON[1652589]: pam_unix(cron:session): session closed for user root Dec 15 14:34:09 ispc sshd[1652604]: Invalid user matlbula from 168.231.124.240 Dec 15 14:35:01 ispc CRON[1652636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:35:01 ispc CRON[1652637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:35:01 ispc CRON[1652639]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:35:01 ispc CRON[1652638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:35:01 ispc CRON[1652637]: pam_unix(cron:session): session closed for user root Dec 15 14:35:01 ispc CRON[1652639]: pam_unix(cron:session): session closed for user getmail Dec 15 14:35:01 ispc sshd[1652634]: Invalid user matlbula from 91.107.124.173 Dec 15 14:35:01 ispc CRON[1652638]: pam_unix(cron:session): session closed for user root Dec 15 14:35:02 ispc CRON[1652636]: pam_unix(cron:session): session closed for user root Dec 15 14:35:05 ispc postfix/smtpd[1652716]: sql auxprop plugin using mysql engine Dec 15 14:35:08 ispc sshd[1652718]: reverse mapping checking getaddrinfo for galore.argosover.net [63.141.245.194] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:35:08 ispc sshd[1652718]: Invalid user matlbula from 63.141.245.194 Dec 15 14:35:19 ispc sshd[1652729]: reverse mapping checking getaddrinfo for mail.gig-facility.com [146.19.212.19] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:35:19 ispc sshd[1652729]: Invalid user ubuntu from 146.19.212.19 Dec 15 14:35:20 ispc sshd[1652731]: Invalid user matlbula from 217.154.118.187 Dec 15 14:35:47 ispc sshd[1652747]: Invalid user matlbula from 64.225.53.31 Dec 15 14:36:00 ispc sshd[1652756]: Invalid user martof from 45.119.213.109 Dec 15 14:36:01 ispc CRON[1652758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:36:01 ispc CRON[1652758]: pam_unix(cron:session): session closed for user root Dec 15 14:36:33 ispc postfix/smtpd[1652788]: sql auxprop plugin using mysql engine Dec 15 14:36:33 ispc CRON[1651400]: pam_unix(cron:session): session closed for user root Dec 15 14:37:01 ispc CRON[1652800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:37:02 ispc CRON[1652800]: pam_unix(cron:session): session closed for user root Dec 15 14:37:11 ispc sshd[1652813]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:37:21 ispc sshd[1652818]: Invalid user matlbula from 209.145.48.233 Dec 15 14:37:25 ispc sshd[1652820]: reverse mapping checking getaddrinfo for whdaa07.nxcloud.inet.co.th [203.150.199.190] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:37:25 ispc sshd[1652820]: Invalid user matlbula from 203.150.199.190 Dec 15 14:37:29 ispc sshd[1652822]: Invalid user chris from 164.68.104.179 Dec 15 14:37:29 ispc sshd[1652824]: Invalid user admin from 134.209.94.144 Dec 15 14:37:53 ispc sshd[1652843]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:37:53 ispc sshd[1652843]: Invalid user matlbula from 84.234.29.234 Dec 15 14:38:01 ispc CRON[1652846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:38:02 ispc CRON[1652846]: pam_unix(cron:session): session closed for user root Dec 15 14:38:12 ispc sshd[1652858]: Invalid user admin from 134.209.94.144 Dec 15 14:38:21 ispc sshd[1652863]: reverse mapping checking getaddrinfo for 103.14.121.65-static-reverse.gooddomainregistry.com [103.14.121.65] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:38:29 ispc sshd[1652866]: Invalid user ubnt from 37.128.204.70 Dec 15 14:38:53 ispc sshd[1652868]: Invalid user admin from 134.209.94.144 Dec 15 14:39:01 ispc CRON[1652871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:39:01 ispc CRON[1652872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:39:01 ispc CRON[1652871]: pam_unix(cron:session): session closed for user root Dec 15 14:39:02 ispc CRON[1652872]: pam_unix(cron:session): session closed for user root Dec 15 14:39:35 ispc sshd[1652902]: Invalid user admin from 134.209.94.144 Dec 15 14:40:01 ispc CRON[1652907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:40:01 ispc CRON[1652908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:40:01 ispc CRON[1652909]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:40:01 ispc CRON[1652910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:40:01 ispc CRON[1652911]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:40:01 ispc CRON[1652908]: pam_unix(cron:session): session closed for user root Dec 15 14:40:01 ispc CRON[1652909]: pam_unix(cron:session): session closed for user www-data Dec 15 14:40:01 ispc CRON[1652911]: pam_unix(cron:session): session closed for user getmail Dec 15 14:40:03 ispc CRON[1652907]: pam_unix(cron:session): session closed for user root Dec 15 14:40:17 ispc sshd[1653020]: Invalid user admin from 134.209.94.144 Dec 15 14:40:22 ispc sshd[1653022]: Invalid user perl from 65.108.245.179 Dec 15 14:40:30 ispc sshd[1653026]: Invalid user viet from 38.3.137.48 Dec 15 14:40:36 ispc CRON[1652910]: pam_unix(cron:session): session closed for user root Dec 15 14:40:53 ispc sshd[1653028]: Invalid user upload from 20.52.1.238 Dec 15 14:40:57 ispc sshd[1653030]: Invalid user admin from 134.209.94.144 Dec 15 14:40:58 ispc saslauthd[1653034]: pam_mysql - SELECT returned no result. Dec 15 14:40:58 ispc saslauthd[1653034]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:40:58 ispc saslauthd[1653034]: do_auth : auth failure: [user=site] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:41:01 ispc CRON[1653043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:41:05 ispc sshd[1653054]: Invalid user mb from 43.163.97.57 Dec 15 14:41:57 ispc sshd[1653083]: Invalid user matlbula from 146.190.119.108 Dec 15 14:42:01 ispc CRON[1653087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:42:01 ispc sshd[1653085]: Invalid user matlbula from 34.34.216.115 Dec 15 14:42:02 ispc CRON[1653087]: pam_unix(cron:session): session closed for user root Dec 15 14:42:26 ispc sshd[1653113]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:42:26 ispc sshd[1653113]: Invalid user ziplines from 114.7.163.154 Dec 15 14:42:40 ispc sshd[1653121]: reverse mapping checking getaddrinfo for static.145.164.213.185.clients.irandns.com [185.213.164.145] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:42:40 ispc sshd[1653121]: Invalid user joon from 185.213.164.145 Dec 15 14:43:01 ispc CRON[1653141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:43:02 ispc CRON[1653141]: pam_unix(cron:session): session closed for user root Dec 15 14:43:04 ispc sshd[1653156]: Address 149.28.199.122 maps to 149.28.199.122.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:43:04 ispc sshd[1653156]: Invalid user matlbula from 149.28.199.122 Dec 15 14:43:29 ispc postfix/smtpd[1653173]: sql auxprop plugin using mysql engine Dec 15 14:43:29 ispc saslauthd[1653175]: pam_mysql - SELECT returned no result. Dec 15 14:43:29 ispc saslauthd[1653175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:43:29 ispc saslauthd[1653175]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:44:01 ispc CRON[1653192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:44:01 ispc CRON[1653192]: pam_unix(cron:session): session closed for user root Dec 15 14:44:08 ispc sshd[1653211]: Invalid user klape from 103.164.20.29 Dec 15 14:44:09 ispc sshd[1653213]: Invalid user ubuntu from 103.164.20.29 Dec 15 14:45:01 ispc CRON[1653240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:45:01 ispc CRON[1653241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:45:01 ispc CRON[1653242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:45:01 ispc CRON[1653243]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:45:01 ispc CRON[1653241]: pam_unix(cron:session): session closed for user root Dec 15 14:45:01 ispc CRON[1653243]: pam_unix(cron:session): session closed for user getmail Dec 15 14:45:02 ispc CRON[1653240]: pam_unix(cron:session): session closed for user root Dec 15 14:45:02 ispc CRON[1653242]: pam_unix(cron:session): session closed for user root Dec 15 14:45:06 ispc saslauthd[1653320]: pam_mysql - SELECT returned no result. Dec 15 14:45:06 ispc saslauthd[1653320]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:45:06 ispc saslauthd[1653320]: do_auth : auth failure: [user=wradmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:46:01 ispc CRON[1653347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:46:02 ispc CRON[1653347]: pam_unix(cron:session): session closed for user root Dec 15 14:46:33 ispc sshd[1653371]: Invalid user tanya from 195.201.38.9 Dec 15 14:46:54 ispc sshd[1653384]: Invalid user blceu from 31.97.159.167 Dec 15 14:47:01 ispc CRON[1653392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:47:02 ispc CRON[1653392]: pam_unix(cron:session): session closed for user root Dec 15 14:47:07 ispc sshd[1653408]: Invalid user diamantdi from 148.222.185.96 Dec 15 14:47:13 ispc sshd[1653412]: Invalid user formation from 51.83.143.109 Dec 15 14:47:45 ispc sshd[1653435]: Invalid user gnoses from 46.101.247.45 Dec 15 14:47:47 ispc sshd[1653433]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:47:47 ispc sshd[1653433]: Invalid user ubnt from 27.79.47.135 Dec 15 14:47:51 ispc sshd[1653441]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:47:51 ispc sshd[1653441]: Invalid user squid from 171.231.199.41 Dec 15 14:47:54 ispc sshd[1653445]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:47:54 ispc sshd[1653445]: Invalid user system from 27.79.47.135 Dec 15 14:47:59 ispc sshd[1653454]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:47:59 ispc sshd[1653454]: Invalid user support from 27.79.47.135 Dec 15 14:48:01 ispc CRON[1653456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:48:02 ispc CRON[1653456]: pam_unix(cron:session): session closed for user root Dec 15 14:48:07 ispc sshd[1653467]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:07 ispc sshd[1653467]: Invalid user admin from 171.231.199.41 Dec 15 14:48:12 ispc sshd[1653475]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:12 ispc sshd[1653475]: Invalid user admin from 171.231.199.41 Dec 15 14:48:13 ispc sshd[1653477]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:13 ispc sshd[1653477]: Invalid user username from 27.79.47.135 Dec 15 14:48:15 ispc sshd[1653481]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:16 ispc sshd[1653491]: Invalid user alfresco from 185.252.233.149 Dec 15 14:48:18 ispc sshd[1653495]: Invalid user matlbula from 167.99.241.111 Dec 15 14:48:20 ispc sshd[1653483]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:21 ispc sshd[1653493]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:21 ispc sshd[1653493]: Invalid user oracle from 171.231.199.41 Dec 15 14:48:22 ispc sshd[1653479]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:22 ispc sshd[1653479]: Invalid user admin from 171.231.199.41 Dec 15 14:48:25 ispc sshd[1653497]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:25 ispc sshd[1653497]: Invalid user operator from 27.79.47.135 Dec 15 14:48:26 ispc sshd[1653485]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:26 ispc sshd[1653485]: Invalid user guest from 171.231.199.41 Dec 15 14:48:26 ispc sshd[1653499]: Address 171.231.199.41 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:26 ispc sshd[1653499]: Invalid user ftp from 171.231.199.41 Dec 15 14:48:27 ispc sshd[1653515]: Address 77.68.25.23 maps to exchange-out-45.livemail.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:27 ispc sshd[1653515]: Invalid user matlbula from 77.68.25.23 Dec 15 14:48:31 ispc sshd[1653511]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:33 ispc sshd[1653517]: Address 27.79.47.135 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:48:33 ispc sshd[1653517]: Invalid user btf from 27.79.47.135 Dec 15 14:48:35 ispc sshd[1653526]: Invalid user tanya from 195.201.38.9 Dec 15 14:48:37 ispc sshd[1653528]: Invalid user matlbula from 86.48.31.70 Dec 15 14:49:01 ispc CRON[1653546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:49:02 ispc CRON[1653546]: pam_unix(cron:session): session closed for user root Dec 15 14:49:03 ispc postfix/smtpd[1653557]: sql auxprop plugin using mysql engine Dec 15 14:49:04 ispc saslauthd[1653560]: pam_mysql - SELECT returned no result. Dec 15 14:49:04 ispc saslauthd[1653560]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 14:49:04 ispc saslauthd[1653560]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 14:50:01 ispc CRON[1653586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:50:01 ispc CRON[1653587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:50:01 ispc CRON[1653588]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 14:50:01 ispc CRON[1653589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:50:01 ispc CRON[1653590]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:50:01 ispc CRON[1653588]: pam_unix(cron:session): session closed for user www-data Dec 15 14:50:01 ispc CRON[1653587]: pam_unix(cron:session): session closed for user root Dec 15 14:50:01 ispc CRON[1653590]: pam_unix(cron:session): session closed for user getmail Dec 15 14:50:02 ispc CRON[1653589]: pam_unix(cron:session): session closed for user root Dec 15 14:50:03 ispc CRON[1653586]: pam_unix(cron:session): session closed for user root Dec 15 14:50:11 ispc sshd[1653670]: Did not receive identification string from 167.99.44.253 Dec 15 14:50:45 ispc postfix/smtpd[1653686]: sql auxprop plugin using mysql engine Dec 15 14:50:47 ispc sshd[1653696]: Invalid user teamspeak3 from 91.107.213.61 Dec 15 14:50:52 ispc postfix/smtpd[1653706]: sql auxprop plugin using mysql engine Dec 15 14:50:52 ispc sshd[1653704]: Invalid user matlbula from 72.61.112.210 Dec 15 14:50:56 ispc sshd[1653715]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:50:56 ispc sshd[1653715]: Invalid user web from 170.205.37.134 Dec 15 14:51:01 ispc CRON[1653723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:51:01 ispc sshd[1653721]: Invalid user blceu from 167.99.53.62 Dec 15 14:51:01 ispc CRON[1653723]: pam_unix(cron:session): session closed for user root Dec 15 14:51:07 ispc sshd[1653734]: Invalid user bot from 20.238.172.224 Dec 15 14:51:34 ispc sshd[1653753]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:51:42 ispc sshd[1653759]: Invalid user mcserver from 40.76.167.156 Dec 15 14:51:47 ispc postfix/smtpd[1653761]: sql auxprop plugin using mysql engine Dec 15 14:52:01 ispc CRON[1653772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:52:02 ispc CRON[1653772]: pam_unix(cron:session): session closed for user root Dec 15 14:52:08 ispc sshd[1653785]: Invalid user nico from 138.201.35.187 Dec 15 14:52:44 ispc sshd[1653812]: Invalid user diamantdi from 167.99.240.76 Dec 15 14:53:00 ispc sshd[1653823]: Invalid user manager from 104.248.2.26 Dec 15 14:53:01 ispc CRON[1653827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:53:01 ispc CRON[1653827]: pam_unix(cron:session): session closed for user root Dec 15 14:53:02 ispc sshd[1653825]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:53:02 ispc sshd[1653825]: Invalid user blceu from 103.146.203.212 Dec 15 14:53:11 ispc sshd[1653852]: Invalid user matlbula from 208.109.34.86 Dec 15 14:53:15 ispc sshd[1653854]: Invalid user perl from 51.195.100.96 Dec 15 14:53:31 ispc sshd[1653868]: Invalid user debian from 217.182.253.42 Dec 15 14:53:31 ispc sshd[1653870]: Invalid user adam from 5.129.205.86 Dec 15 14:54:01 ispc CRON[1653896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:54:02 ispc CRON[1653896]: pam_unix(cron:session): session closed for user root Dec 15 14:54:47 ispc sshd[1653928]: Invalid user blceu from 185.98.137.45 Dec 15 14:54:52 ispc sshd[1653935]: Invalid user vbox from 92.222.164.170 Dec 15 14:54:54 ispc sshd[1653937]: Invalid user blceu from 212.227.185.39 Dec 15 14:55:01 ispc CRON[1653947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:55:01 ispc CRON[1653948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:55:01 ispc CRON[1653949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:55:01 ispc CRON[1653950]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 14:55:02 ispc CRON[1653948]: pam_unix(cron:session): session closed for user root Dec 15 14:55:02 ispc CRON[1653950]: pam_unix(cron:session): session closed for user getmail Dec 15 14:55:03 ispc CRON[1653949]: pam_unix(cron:session): session closed for user root Dec 15 14:55:04 ispc CRON[1653947]: pam_unix(cron:session): session closed for user root Dec 15 14:55:43 ispc sshd[1654043]: Invalid user blceu from 94.103.173.243 Dec 15 14:55:54 ispc sshd[1654051]: reverse mapping checking getaddrinfo for mktdireto.online [173.214.173.121] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 14:56:01 ispc CRON[1654053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:56:01 ispc sshd[1654055]: Invalid user pi from 212.227.28.185 Dec 15 14:56:02 ispc CRON[1654053]: pam_unix(cron:session): session closed for user root Dec 15 14:56:22 ispc sshd[1654077]: Invalid user matlbula from 217.154.1.18 Dec 15 14:56:54 ispc sshd[1654104]: Invalid user matlbula from 185.30.34.189 Dec 15 14:56:56 ispc sshd[1654106]: Invalid user kamal from 37.128.204.70 Dec 15 14:57:01 ispc CRON[1654110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:57:02 ispc CRON[1654110]: pam_unix(cron:session): session closed for user root Dec 15 14:57:38 ispc sshd[1654143]: Invalid user matlbula from 93.93.117.8 Dec 15 14:57:50 ispc postfix/smtpd[1654155]: sql auxprop plugin using mysql engine Dec 15 14:57:50 ispc postfix/smtpd[1654157]: sql auxprop plugin using mysql engine Dec 15 14:58:01 ispc CRON[1654169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:58:01 ispc CRON[1654169]: pam_unix(cron:session): session closed for user root Dec 15 14:58:59 ispc sshd[1654211]: Invalid user www from 164.68.104.179 Dec 15 14:59:02 ispc CRON[1654213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 14:59:03 ispc CRON[1654213]: pam_unix(cron:session): session closed for user root Dec 15 14:59:04 ispc sshd[1654219]: Invalid user acer from 159.203.89.10 Dec 15 14:59:14 ispc sshd[1654232]: Invalid user klape from 35.240.174.82 Dec 15 14:59:15 ispc sshd[1654234]: Invalid user ubuntu from 35.240.174.82 Dec 15 15:00:01 ispc CRON[1654261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:00:01 ispc CRON[1654262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:00:01 ispc CRON[1654263]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:00:01 ispc CRON[1654264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:00:01 ispc CRON[1654265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:00:01 ispc CRON[1654266]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:00:01 ispc CRON[1654263]: pam_unix(cron:session): session closed for user www-data Dec 15 15:00:01 ispc CRON[1654262]: pam_unix(cron:session): session closed for user root Dec 15 15:00:01 ispc CRON[1654266]: pam_unix(cron:session): session closed for user getmail Dec 15 15:00:02 ispc CRON[1654261]: pam_unix(cron:session): session closed for user root Dec 15 15:00:02 ispc CRON[1654265]: pam_unix(cron:session): session closed for user root Dec 15 15:00:02 ispc CRON[1654264]: pam_unix(cron:session): session closed for user root Dec 15 15:00:20 ispc postfix/smtpd[1654428]: sql auxprop plugin using mysql engine Dec 15 15:00:22 ispc saslauthd[1654430]: pam_mysql - SELECT returned no result. Dec 15 15:00:22 ispc saslauthd[1654430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:00:22 ispc saslauthd[1654430]: do_auth : auth failure: [user=write] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:00:26 ispc sshd[1654431]: Invalid user diamantdi from 167.99.53.62 Dec 15 15:00:27 ispc postfix/smtpd[1654437]: sql auxprop plugin using mysql engine Dec 15 15:00:33 ispc sshd[1654439]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:00:43 ispc sshd[1654448]: Invalid user matlbula from 31.220.81.20 Dec 15 15:00:45 ispc sshd[1654450]: Invalid user perl from 185.98.139.209 Dec 15 15:00:52 ispc sshd[1654458]: Did not receive identification string from 202.165.17.107 Dec 15 15:01:01 ispc CRON[1654469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:01:02 ispc CRON[1654469]: pam_unix(cron:session): session closed for user root Dec 15 15:01:18 ispc CRON[1653043]: pam_unix(cron:session): session closed for user root Dec 15 15:01:23 ispc sshd[1654490]: Invalid user blceu from 51.81.54.117 Dec 15 15:01:34 ispc sshd[1654492]: Invalid user erik from 38.70.71.37 Dec 15 15:01:53 ispc sshd[1654497]: Invalid user diamantdi from 176.9.178.209 Dec 15 15:02:01 ispc CRON[1654499]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 15:02:01 ispc CRON[1654500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:02:02 ispc saslauthd[1654513]: pam_mysql - SELECT returned no result. Dec 15 15:02:02 ispc saslauthd[1654513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:02:02 ispc saslauthd[1654513]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:02:02 ispc postfix/smtpd[1654516]: sql auxprop plugin using mysql engine Dec 15 15:02:02 ispc CRON[1654500]: pam_unix(cron:session): session closed for user root Dec 15 15:02:17 ispc sshd[1654860]: Invalid user blceu from 106.12.215.233 Dec 15 15:02:22 ispc sshd[1654973]: Invalid user matlbula from 212.41.10.146 Dec 15 15:02:29 ispc saslauthd[1655098]: pam_mysql - SELECT returned no result. Dec 15 15:02:29 ispc saslauthd[1655098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:02:29 ispc saslauthd[1655098]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:02:35 ispc sshd[1655157]: Invalid user site02 from 185.226.118.110 Dec 15 15:02:45 ispc sshd[1655251]: Invalid user blceu from 180.76.190.171 Dec 15 15:02:59 ispc postfix/smtpd[1655369]: sql auxprop plugin using mysql engine Dec 15 15:02:59 ispc postfix/smtpd[1655372]: sql auxprop plugin using mysql engine Dec 15 15:03:01 ispc CRON[1655373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:03:01 ispc CRON[1655373]: pam_unix(cron:session): session closed for user root Dec 15 15:03:05 ispc sshd[1655384]: Invalid user max from 95.217.223.25 Dec 15 15:03:19 ispc CRON[1654499]: pam_unix(cron:session): session closed for user logcheck Dec 15 15:03:20 ispc postfix/smtpd[1655571]: sql auxprop plugin using mysql engine Dec 15 15:03:35 ispc sshd[1655574]: Invalid user sshadmin from 80.94.95.115 Dec 15 15:03:55 ispc sshd[1655580]: Invalid user matlbula from 159.69.45.212 Dec 15 15:03:59 ispc sshd[1655582]: Invalid user jairo from 154.12.227.220 Dec 15 15:04:01 ispc CRON[1655585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:04:03 ispc CRON[1655585]: pam_unix(cron:session): session closed for user root Dec 15 15:04:18 ispc sshd[1655598]: Did not receive identification string from 45.140.17.97 Dec 15 15:05:00 ispc sshd[1655603]: Invalid user rtorrent from 38.181.20.21 Dec 15 15:05:01 ispc CRON[1655606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:05:01 ispc CRON[1655607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:05:01 ispc CRON[1655608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:05:01 ispc CRON[1655609]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:05:01 ispc CRON[1655607]: pam_unix(cron:session): session closed for user root Dec 15 15:05:01 ispc CRON[1655609]: pam_unix(cron:session): session closed for user getmail Dec 15 15:05:03 ispc CRON[1655606]: pam_unix(cron:session): session closed for user root Dec 15 15:05:04 ispc sshd[1655715]: Invalid user ftp from 185.129.119.248 Dec 15 15:05:19 ispc sshd[1655719]: Invalid user git from 134.209.151.59 Dec 15 15:05:38 ispc CRON[1655608]: pam_unix(cron:session): session closed for user root Dec 15 15:06:01 ispc CRON[1655726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:06:28 ispc sshd[1655749]: Invalid user bot from 81.19.136.183 Dec 15 15:06:35 ispc postfix/smtpd[1655756]: sql auxprop plugin using mysql engine Dec 15 15:06:35 ispc saslauthd[1655758]: pam_mysql - SELECT returned no result. Dec 15 15:06:35 ispc saslauthd[1655758]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:06:35 ispc saslauthd[1655758]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:06:36 ispc saslauthd[1655759]: pam_mysql - SELECT returned no result. Dec 15 15:06:36 ispc saslauthd[1655759]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:06:36 ispc saslauthd[1655759]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:06:45 ispc sshd[1655764]: Invalid user admin from 167.99.44.253 Dec 15 15:06:56 ispc saslauthd[1655776]: pam_mysql - SELECT returned no result. Dec 15 15:06:56 ispc saslauthd[1655776]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:06:56 ispc saslauthd[1655776]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:07:01 ispc CRON[1655778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:07:02 ispc CRON[1655778]: pam_unix(cron:session): session closed for user root Dec 15 15:07:13 ispc saslauthd[1655794]: pam_mysql - SELECT returned no result. Dec 15 15:07:13 ispc saslauthd[1655794]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:07:13 ispc saslauthd[1655794]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:07:22 ispc sshd[1655801]: Invalid user deploy from 64.13.123.135 Dec 15 15:07:27 ispc sshd[1655809]: User mysql not allowed because account is locked Dec 15 15:07:28 ispc saslauthd[1655811]: pam_mysql - SELECT returned no result. Dec 15 15:07:28 ispc saslauthd[1655811]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:07:28 ispc saslauthd[1655811]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:07:28 ispc saslauthd[1655812]: pam_mysql - SELECT returned no result. Dec 15 15:07:28 ispc saslauthd[1655812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:07:28 ispc saslauthd[1655812]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:07:30 ispc sshd[1655813]: Invalid user admin from 167.99.44.253 Dec 15 15:07:56 ispc saslauthd[1655838]: pam_mysql - SELECT returned no result. Dec 15 15:07:56 ispc saslauthd[1655838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:07:56 ispc saslauthd[1655838]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:01 ispc CRON[1655839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:08:02 ispc CRON[1655839]: pam_unix(cron:session): session closed for user root Dec 15 15:08:04 ispc saslauthd[1655850]: pam_mysql - SELECT returned no result. Dec 15 15:08:04 ispc saslauthd[1655850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:04 ispc saslauthd[1655850]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:09 ispc sshd[1655855]: Invalid user postgres from 173.249.15.193 Dec 15 15:08:12 ispc sshd[1655857]: Invalid user admin from 167.99.44.253 Dec 15 15:08:13 ispc saslauthd[1655859]: pam_mysql - SELECT returned no result. Dec 15 15:08:13 ispc saslauthd[1655859]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:13 ispc saslauthd[1655859]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:19 ispc saslauthd[1655864]: pam_mysql - SELECT returned no result. Dec 15 15:08:19 ispc saslauthd[1655864]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:19 ispc saslauthd[1655864]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:20 ispc saslauthd[1655865]: pam_mysql - SELECT returned no result. Dec 15 15:08:20 ispc saslauthd[1655865]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:20 ispc saslauthd[1655865]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:21 ispc sshd[1655866]: Invalid user bitnami from 172.83.83.20 Dec 15 15:08:24 ispc saslauthd[1655870]: pam_mysql - SELECT returned no result. Dec 15 15:08:24 ispc saslauthd[1655870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:24 ispc saslauthd[1655870]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:44 ispc saslauthd[1655880]: pam_mysql - SELECT returned no result. Dec 15 15:08:44 ispc saslauthd[1655880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:44 ispc saslauthd[1655880]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:45 ispc saslauthd[1655881]: pam_mysql - SELECT returned no result. Dec 15 15:08:45 ispc saslauthd[1655881]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:08:45 ispc saslauthd[1655881]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:08:49 ispc sshd[1655886]: Invalid user it from 84.46.254.19 Dec 15 15:08:55 ispc sshd[1655888]: Invalid user admin from 167.99.44.253 Dec 15 15:09:01 ispc CRON[1655896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:09:01 ispc CRON[1655897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:09:02 ispc CRON[1655896]: pam_unix(cron:session): session closed for user root Dec 15 15:09:02 ispc CRON[1655897]: pam_unix(cron:session): session closed for user root Dec 15 15:09:38 ispc sshd[1655932]: Invalid user admin from 167.99.44.253 Dec 15 15:09:50 ispc sshd[1655943]: Invalid user andres from 142.132.152.202 Dec 15 15:09:57 ispc sshd[1655945]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:09:57 ispc sshd[1655945]: Invalid user blceu from 107.174.2.155 Dec 15 15:10:01 ispc CRON[1655951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:10:01 ispc CRON[1655952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:10:01 ispc CRON[1655953]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:10:01 ispc CRON[1655954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:10:01 ispc CRON[1655955]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:10:01 ispc CRON[1655952]: pam_unix(cron:session): session closed for user root Dec 15 15:10:01 ispc CRON[1655953]: pam_unix(cron:session): session closed for user www-data Dec 15 15:10:01 ispc CRON[1655955]: pam_unix(cron:session): session closed for user getmail Dec 15 15:10:02 ispc CRON[1655954]: pam_unix(cron:session): session closed for user root Dec 15 15:10:03 ispc CRON[1655951]: pam_unix(cron:session): session closed for user root Dec 15 15:10:05 ispc sshd[1656029]: Bad protocol version identification '\026\003\001' from 184.105.139.67 Dec 15 15:10:19 ispc sshd[1656038]: Invalid user admin from 167.99.44.253 Dec 15 15:10:30 ispc postfix/smtpd[1656050]: sql auxprop plugin using mysql engine Dec 15 15:11:01 ispc CRON[1656071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:11:01 ispc CRON[1656071]: pam_unix(cron:session): session closed for user root Dec 15 15:11:43 ispc sshd[1656098]: Invalid user admin from 51.79.36.60 Dec 15 15:11:55 ispc sshd[1656108]: Invalid user christian from 51.210.111.216 Dec 15 15:12:01 ispc CRON[1656111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:12:02 ispc CRON[1656111]: pam_unix(cron:session): session closed for user root Dec 15 15:12:37 ispc sshd[1656110]: Invalid user diamantdi from 36.134.126.74 Dec 15 15:13:01 ispc CRON[1656158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:13:02 ispc CRON[1656158]: pam_unix(cron:session): session closed for user root Dec 15 15:13:23 ispc sshd[1656177]: Invalid user diamantdi from 77.68.90.67 Dec 15 15:13:55 ispc sshd[1656192]: Invalid user matlbula from 34.14.135.37 Dec 15 15:14:01 ispc CRON[1656200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:14:02 ispc CRON[1656200]: pam_unix(cron:session): session closed for user root Dec 15 15:14:04 ispc sshd[1656211]: reverse mapping checking getaddrinfo for 249.46.114.37.in-addr.arpa [37.114.46.249] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:14:04 ispc sshd[1656211]: Invalid user amit from 37.114.46.249 Dec 15 15:14:10 ispc postfix/smtpd[1656217]: sql auxprop plugin using mysql engine Dec 15 15:14:11 ispc saslauthd[1656220]: pam_mysql - SELECT returned no result. Dec 15 15:14:11 ispc saslauthd[1656220]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:14:11 ispc saslauthd[1656220]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:14:25 ispc saslauthd[1656226]: pam_mysql - SELECT returned no result. Dec 15 15:14:25 ispc saslauthd[1656226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:14:25 ispc saslauthd[1656226]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:14:32 ispc sshd[1656232]: Invalid user matlbula from 46.62.138.83 Dec 15 15:15:01 ispc CRON[1656248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:15:01 ispc CRON[1656249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:15:01 ispc CRON[1656250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:15:01 ispc CRON[1656251]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:15:01 ispc CRON[1656249]: pam_unix(cron:session): session closed for user root Dec 15 15:15:01 ispc CRON[1656251]: pam_unix(cron:session): session closed for user getmail Dec 15 15:15:02 ispc CRON[1656248]: pam_unix(cron:session): session closed for user root Dec 15 15:15:02 ispc CRON[1656250]: pam_unix(cron:session): session closed for user root Dec 15 15:15:18 ispc sshd[1656332]: Invalid user rtorrent from 38.181.20.21 Dec 15 15:15:34 ispc sshd[1656340]: Invalid user diamantdi from 172.104.206.182 Dec 15 15:15:38 ispc saslauthd[1656346]: pam_mysql - SELECT returned no result. Dec 15 15:15:38 ispc saslauthd[1656346]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:15:38 ispc saslauthd[1656346]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:15:42 ispc sshd[1656347]: Invalid user matlbula from 167.99.241.111 Dec 15 15:16:01 ispc CRON[1656362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:16:02 ispc CRON[1656362]: pam_unix(cron:session): session closed for user root Dec 15 15:16:17 ispc sshd[1656377]: Invalid user blceu from 84.247.173.21 Dec 15 15:16:26 ispc sshd[1656383]: User mysql not allowed because account is locked Dec 15 15:16:51 ispc postfix/smtpd[1656401]: sql auxprop plugin using mysql engine Dec 15 15:16:55 ispc sshd[1656403]: Invalid user deploy from 144.126.142.191 Dec 15 15:17:01 ispc CRON[1656410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:17:01 ispc CRON[1656410]: pam_unix(cron:session): session closed for user root Dec 15 15:18:01 ispc CRON[1656460]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 15:18:01 ispc CRON[1656461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:18:02 ispc CRON[1656461]: pam_unix(cron:session): session closed for user root Dec 15 15:18:03 ispc sshd[1656476]: reverse mapping checking getaddrinfo for static.213.164.213.185.clients.irandns.com [185.213.164.213] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:18:04 ispc CRON[1656460]: pam_unix(cron:session): session closed for user amavis Dec 15 15:18:05 ispc postfix/smtpd[1656488]: sql auxprop plugin using mysql engine Dec 15 15:18:22 ispc sshd[1656503]: reverse mapping checking getaddrinfo for 119.170.70.95.static.turk.net [95.70.170.119] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:18:41 ispc sshd[1656516]: Invalid user agent from 94.130.106.125 Dec 15 15:19:01 ispc CRON[1656528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:19:02 ispc CRON[1656528]: pam_unix(cron:session): session closed for user root Dec 15 15:19:35 ispc sshd[1656551]: Invalid user matlbula from 37.59.116.9 Dec 15 15:19:52 ispc sshd[1656562]: Invalid user camera from 82.165.94.143 Dec 15 15:19:57 ispc postfix/smtpd[1656564]: sql auxprop plugin using mysql engine Dec 15 15:19:58 ispc saslauthd[1656566]: pam_mysql - SELECT returned no result. Dec 15 15:19:58 ispc saslauthd[1656566]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:19:58 ispc saslauthd[1656566]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:20:01 ispc CRON[1656567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:20:01 ispc CRON[1656568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:20:01 ispc CRON[1656569]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:20:01 ispc CRON[1656570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:20:01 ispc CRON[1656571]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:20:01 ispc CRON[1656568]: pam_unix(cron:session): session closed for user root Dec 15 15:20:01 ispc CRON[1656569]: pam_unix(cron:session): session closed for user www-data Dec 15 15:20:01 ispc CRON[1656571]: pam_unix(cron:session): session closed for user getmail Dec 15 15:20:02 ispc CRON[1656570]: pam_unix(cron:session): session closed for user root Dec 15 15:20:03 ispc CRON[1656567]: pam_unix(cron:session): session closed for user root Dec 15 15:20:22 ispc sshd[1656659]: reverse mapping checking getaddrinfo for static.145.164.213.185.clients.irandns.com [185.213.164.145] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:20:22 ispc sshd[1656659]: Invalid user luis from 185.213.164.145 Dec 15 15:20:28 ispc saslauthd[1656661]: pam_mysql - SELECT returned no result. Dec 15 15:20:28 ispc saslauthd[1656661]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:20:28 ispc saslauthd[1656661]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:20:30 ispc sshd[1656662]: reverse mapping checking getaddrinfo for static.120.253.208.85.clients.irandns.com [85.208.253.120] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:20:30 ispc sshd[1656662]: Invalid user kriszti from 85.208.253.120 Dec 15 15:20:37 ispc saslauthd[1656668]: pam_mysql - SELECT returned no result. Dec 15 15:20:37 ispc saslauthd[1656668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:20:37 ispc saslauthd[1656668]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:21:01 ispc CRON[1656680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:21:01 ispc CRON[1656679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:21:01 ispc CRON[1656679]: pam_unix(cron:session): session closed for user root Dec 15 15:21:02 ispc CRON[1656680]: pam_unix(cron:session): session closed for user root Dec 15 15:21:08 ispc sshd[1656693]: Invalid user www from 64.225.53.31 Dec 15 15:22:01 ispc CRON[1656727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:22:02 ispc CRON[1656727]: pam_unix(cron:session): session closed for user root Dec 15 15:22:24 ispc postfix/smtpd[1656747]: sql auxprop plugin using mysql engine Dec 15 15:22:24 ispc saslauthd[1656752]: pam_mysql - SELECT returned no result. Dec 15 15:22:24 ispc saslauthd[1656752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:22:24 ispc saslauthd[1656752]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:22:46 ispc saslauthd[1656768]: pam_mysql - SELECT returned no result. Dec 15 15:22:46 ispc saslauthd[1656768]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:22:46 ispc saslauthd[1656768]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:22:50 ispc sshd[1656769]: Invalid user blceu from 119.205.233.162 Dec 15 15:22:53 ispc saslauthd[1656771]: pam_mysql - SELECT returned no result. Dec 15 15:22:53 ispc saslauthd[1656771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:22:53 ispc saslauthd[1656771]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:22:54 ispc sshd[1656776]: Invalid user wayne from 161.35.29.93 Dec 15 15:22:56 ispc sshd[1656778]: Invalid user forum from 80.75.100.102 Dec 15 15:23:01 ispc CRON[1656781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:23:02 ispc CRON[1656781]: pam_unix(cron:session): session closed for user root Dec 15 15:23:02 ispc saslauthd[1656789]: pam_mysql - SELECT returned no result. Dec 15 15:23:02 ispc saslauthd[1656789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:23:02 ispc saslauthd[1656789]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:23:33 ispc sshd[1656815]: Invalid user matlbula from 72.61.237.84 Dec 15 15:24:01 ispc CRON[1656835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:24:01 ispc CRON[1656835]: pam_unix(cron:session): session closed for user root Dec 15 15:24:31 ispc sshd[1656862]: Invalid user admin from 80.94.95.115 Dec 15 15:24:33 ispc saslauthd[1656864]: pam_mysql - SELECT returned no result. Dec 15 15:24:33 ispc saslauthd[1656864]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:24:33 ispc saslauthd[1656864]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:24:44 ispc sshd[1656869]: Invalid user diamantdi from 42.96.46.164 Dec 15 15:25:01 ispc CRON[1656879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:25:01 ispc CRON[1656880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:25:01 ispc CRON[1656881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:25:01 ispc CRON[1656882]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:25:01 ispc CRON[1656880]: pam_unix(cron:session): session closed for user root Dec 15 15:25:01 ispc CRON[1656882]: pam_unix(cron:session): session closed for user getmail Dec 15 15:25:02 ispc CRON[1656881]: pam_unix(cron:session): session closed for user root Dec 15 15:25:02 ispc CRON[1656879]: pam_unix(cron:session): session closed for user root Dec 15 15:25:26 ispc sshd[1656969]: Invalid user account from 62.113.58.36 Dec 15 15:26:01 ispc CRON[1656985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:26:02 ispc CRON[1656985]: pam_unix(cron:session): session closed for user root Dec 15 15:26:24 ispc sshd[1657008]: Invalid user blceu from 161.35.218.223 Dec 15 15:26:26 ispc postfix/smtpd[1657014]: sql auxprop plugin using mysql engine Dec 15 15:26:26 ispc CRON[1655726]: pam_unix(cron:session): session closed for user root Dec 15 15:26:32 ispc saslauthd[1657016]: pam_mysql - SELECT returned no result. Dec 15 15:26:32 ispc saslauthd[1657016]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:26:32 ispc saslauthd[1657016]: do_auth : auth failure: [user=copier] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:26:43 ispc sshd[1657019]: Invalid user rtorrent from 38.181.20.21 Dec 15 15:26:55 ispc sshd[1657022]: Invalid user servidor from 213.199.57.249 Dec 15 15:27:01 ispc CRON[1657024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:27:02 ispc CRON[1657024]: pam_unix(cron:session): session closed for user root Dec 15 15:27:05 ispc sshd[1657036]: Invalid user diamantdi from 178.162.244.167 Dec 15 15:27:06 ispc sshd[1657040]: Invalid user blceu from 37.27.44.190 Dec 15 15:27:06 ispc sshd[1657037]: Invalid user matlbula from 200.201.230.160 Dec 15 15:27:10 ispc sshd[1657043]: Invalid user user from 207.154.193.49 Dec 15 15:28:01 ispc CRON[1657060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:28:03 ispc CRON[1657060]: pam_unix(cron:session): session closed for user root Dec 15 15:29:01 ispc CRON[1657077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:29:01 ispc CRON[1657077]: pam_unix(cron:session): session closed for user root Dec 15 15:30:01 ispc CRON[1657093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:30:01 ispc CRON[1657094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:30:01 ispc CRON[1657095]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:30:01 ispc CRON[1657096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:30:01 ispc CRON[1657097]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:30:01 ispc CRON[1657094]: pam_unix(cron:session): session closed for user root Dec 15 15:30:01 ispc CRON[1657095]: pam_unix(cron:session): session closed for user www-data Dec 15 15:30:01 ispc CRON[1657097]: pam_unix(cron:session): session closed for user getmail Dec 15 15:30:03 ispc CRON[1657093]: pam_unix(cron:session): session closed for user root Dec 15 15:30:17 ispc saslauthd[1657279]: pam_mysql - SELECT returned no result. Dec 15 15:30:17 ispc saslauthd[1657279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:30:17 ispc saslauthd[1657279]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:30:41 ispc CRON[1657096]: pam_unix(cron:session): session closed for user root Dec 15 15:30:52 ispc postfix/smtpd[1657282]: sql auxprop plugin using mysql engine Dec 15 15:30:54 ispc saslauthd[1657285]: pam_mysql - SELECT returned no result. Dec 15 15:30:54 ispc saslauthd[1657285]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:30:54 ispc saslauthd[1657285]: do_auth : auth failure: [user=xmi_demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:31:00 ispc sshd[1657286]: Invalid user blceu from 116.120.58.228 Dec 15 15:31:00 ispc saslauthd[1657288]: pam_mysql - SELECT returned no result. Dec 15 15:31:00 ispc saslauthd[1657288]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:31:00 ispc saslauthd[1657288]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:31:01 ispc CRON[1657289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:31:04 ispc saslauthd[1657300]: pam_mysql - SELECT returned no result. Dec 15 15:31:04 ispc saslauthd[1657300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:31:04 ispc saslauthd[1657300]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:32:01 ispc CRON[1657325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:32:02 ispc CRON[1657325]: pam_unix(cron:session): session closed for user root Dec 15 15:33:01 ispc CRON[1657376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:33:01 ispc CRON[1657376]: pam_unix(cron:session): session closed for user root Dec 15 15:34:01 ispc CRON[1657418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:34:02 ispc CRON[1657418]: pam_unix(cron:session): session closed for user root Dec 15 15:34:10 ispc postfix/smtpd[1657434]: sql auxprop plugin using mysql engine Dec 15 15:34:10 ispc postfix/smtpd[1657436]: sql auxprop plugin using mysql engine Dec 15 15:34:10 ispc postfix/smtpd[1657437]: sql auxprop plugin using mysql engine Dec 15 15:34:11 ispc postfix/smtpd[1657438]: sql auxprop plugin using mysql engine Dec 15 15:34:51 ispc saslauthd[1657457]: pam_mysql - SELECT returned no result. Dec 15 15:34:51 ispc saslauthd[1657457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:34:51 ispc saslauthd[1657457]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:35:01 ispc CRON[1657462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:35:01 ispc CRON[1657463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:35:01 ispc CRON[1657464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:35:01 ispc CRON[1657465]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:35:01 ispc CRON[1657463]: pam_unix(cron:session): session closed for user root Dec 15 15:35:01 ispc CRON[1657465]: pam_unix(cron:session): session closed for user getmail Dec 15 15:35:02 ispc CRON[1657464]: pam_unix(cron:session): session closed for user root Dec 15 15:35:04 ispc CRON[1657462]: pam_unix(cron:session): session closed for user root Dec 15 15:36:01 ispc CRON[1657565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:36:01 ispc CRON[1657565]: pam_unix(cron:session): session closed for user root Dec 15 15:36:25 ispc sshd[1657584]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:36:25 ispc sshd[1657584]: Invalid user martof from 157.245.115.125 Dec 15 15:37:01 ispc CRON[1657611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:37:02 ispc CRON[1657611]: pam_unix(cron:session): session closed for user root Dec 15 15:38:01 ispc CRON[1657665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:38:01 ispc CRON[1657665]: pam_unix(cron:session): session closed for user root Dec 15 15:39:01 ispc CRON[1657706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:39:01 ispc CRON[1657707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:39:01 ispc CRON[1657706]: pam_unix(cron:session): session closed for user root Dec 15 15:39:01 ispc CRON[1657707]: pam_unix(cron:session): session closed for user root Dec 15 15:39:57 ispc postfix/smtpd[1657754]: sql auxprop plugin using mysql engine Dec 15 15:39:58 ispc saslauthd[1657757]: pam_mysql - SELECT returned no result. Dec 15 15:39:58 ispc saslauthd[1657757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:39:58 ispc saslauthd[1657757]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:40:01 ispc CRON[1657763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:40:01 ispc CRON[1657764]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:40:01 ispc CRON[1657765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:40:01 ispc CRON[1657762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:40:01 ispc CRON[1657766]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:40:01 ispc CRON[1657763]: pam_unix(cron:session): session closed for user root Dec 15 15:40:02 ispc CRON[1657764]: pam_unix(cron:session): session closed for user www-data Dec 15 15:40:02 ispc CRON[1657766]: pam_unix(cron:session): session closed for user getmail Dec 15 15:40:02 ispc CRON[1657765]: pam_unix(cron:session): session closed for user root Dec 15 15:40:02 ispc CRON[1657762]: pam_unix(cron:session): session closed for user root Dec 15 15:41:01 ispc CRON[1657862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:41:02 ispc CRON[1657862]: pam_unix(cron:session): session closed for user root Dec 15 15:42:01 ispc CRON[1657902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:42:01 ispc CRON[1657902]: pam_unix(cron:session): session closed for user root Dec 15 15:42:07 ispc sshd[1657917]: Invalid user martof from 103.100.209.172 Dec 15 15:43:01 ispc CRON[1657951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:43:01 ispc CRON[1657951]: pam_unix(cron:session): session closed for user root Dec 15 15:44:01 ispc CRON[1657990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:44:02 ispc CRON[1657990]: pam_unix(cron:session): session closed for user root Dec 15 15:45:01 ispc CRON[1658029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:45:01 ispc CRON[1658030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:45:01 ispc CRON[1658031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:45:01 ispc CRON[1658032]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:45:01 ispc CRON[1658032]: pam_unix(cron:session): session closed for user getmail Dec 15 15:45:01 ispc CRON[1658030]: pam_unix(cron:session): session closed for user root Dec 15 15:45:02 ispc CRON[1658029]: pam_unix(cron:session): session closed for user root Dec 15 15:45:02 ispc CRON[1658031]: pam_unix(cron:session): session closed for user root Dec 15 15:45:28 ispc sshd[1658122]: Invalid user admin from 80.94.95.116 Dec 15 15:45:40 ispc sshd[1658124]: Invalid user martof from 175.125.92.77 Dec 15 15:45:52 ispc postfix/smtpd[1658138]: sql auxprop plugin using mysql engine Dec 15 15:45:53 ispc saslauthd[1658141]: pam_mysql - SELECT returned no result. Dec 15 15:45:53 ispc saslauthd[1658141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:45:53 ispc saslauthd[1658141]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:46:01 ispc CRON[1658146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:46:01 ispc CRON[1658146]: pam_unix(cron:session): session closed for user root Dec 15 15:46:12 ispc saslauthd[1658161]: pam_mysql - SELECT returned no result. Dec 15 15:46:12 ispc saslauthd[1658161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:46:12 ispc saslauthd[1658161]: do_auth : auth failure: [user=zyfwp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 15:47:01 ispc CRON[1658187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:47:02 ispc sshd[1658186]: Did not receive identification string from 192.227.134.84 Dec 15 15:47:02 ispc CRON[1658187]: pam_unix(cron:session): session closed for user root Dec 15 15:47:17 ispc sshd[1658202]: Invalid user ziplines from 119.205.233.162 Dec 15 15:48:01 ispc CRON[1658237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:48:01 ispc CRON[1658237]: pam_unix(cron:session): session closed for user root Dec 15 15:48:17 ispc postfix/smtpd[1658254]: sql auxprop plugin using mysql engine Dec 15 15:48:18 ispc postfix/smtpd[1658256]: sql auxprop plugin using mysql engine Dec 15 15:48:18 ispc postfix/smtpd[1658257]: sql auxprop plugin using mysql engine Dec 15 15:48:18 ispc postfix/smtpd[1658258]: sql auxprop plugin using mysql engine Dec 15 15:48:48 ispc sshd[1658272]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:49:01 ispc CRON[1658283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:49:01 ispc CRON[1658283]: pam_unix(cron:session): session closed for user root Dec 15 15:49:30 ispc sshd[1658304]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 15:50:01 ispc CRON[1658334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:50:01 ispc CRON[1658331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:50:01 ispc CRON[1658332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:50:01 ispc CRON[1658333]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 15:50:01 ispc CRON[1658335]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:50:01 ispc CRON[1658333]: pam_unix(cron:session): session closed for user www-data Dec 15 15:50:01 ispc CRON[1658332]: pam_unix(cron:session): session closed for user root Dec 15 15:50:01 ispc CRON[1658335]: pam_unix(cron:session): session closed for user getmail Dec 15 15:50:02 ispc CRON[1658334]: pam_unix(cron:session): session closed for user root Dec 15 15:50:02 ispc CRON[1658331]: pam_unix(cron:session): session closed for user root Dec 15 15:51:01 ispc CRON[1658432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:51:01 ispc CRON[1658432]: pam_unix(cron:session): session closed for user root Dec 15 15:51:23 ispc postfix/smtpd[1658455]: sql auxprop plugin using mysql engine Dec 15 15:51:23 ispc CRON[1657289]: pam_unix(cron:session): session closed for user root Dec 15 15:52:01 ispc CRON[1658459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:52:01 ispc CRON[1658460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:52:02 ispc CRON[1658460]: pam_unix(cron:session): session closed for user root Dec 15 15:53:01 ispc CRON[1658492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:53:03 ispc CRON[1658492]: pam_unix(cron:session): session closed for user root Dec 15 15:53:53 ispc sshd[1658511]: Did not receive identification string from 206.189.63.150 Dec 15 15:54:01 ispc CRON[1658512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:54:02 ispc CRON[1658512]: pam_unix(cron:session): session closed for user root Dec 15 15:54:32 ispc postfix/smtpd[1658530]: sql auxprop plugin using mysql engine Dec 15 15:54:32 ispc postfix/smtpd[1658533]: sql auxprop plugin using mysql engine Dec 15 15:54:32 ispc postfix/smtpd[1658535]: sql auxprop plugin using mysql engine Dec 15 15:54:57 ispc sshd[1658538]: Invalid user blceu from 222.236.46.74 Dec 15 15:55:01 ispc CRON[1658540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:55:01 ispc CRON[1658542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:55:01 ispc CRON[1658543]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 15:55:01 ispc CRON[1658541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:55:01 ispc CRON[1658541]: pam_unix(cron:session): session closed for user root Dec 15 15:55:01 ispc CRON[1658543]: pam_unix(cron:session): session closed for user getmail Dec 15 15:55:02 ispc CRON[1658540]: pam_unix(cron:session): session closed for user root Dec 15 15:55:18 ispc CRON[1658459]: pam_unix(cron:session): session closed for user root Dec 15 15:55:37 ispc CRON[1658542]: pam_unix(cron:session): session closed for user root Dec 15 15:56:01 ispc CRON[1658654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:56:26 ispc sshd[1658674]: Invalid user holebrother from 206.189.63.150 Dec 15 15:56:52 ispc postfix/smtpd[1658687]: sql auxprop plugin using mysql engine Dec 15 15:57:01 ispc CRON[1658693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:57:02 ispc CRON[1658693]: pam_unix(cron:session): session closed for user root Dec 15 15:58:01 ispc CRON[1658742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:58:01 ispc CRON[1658742]: pam_unix(cron:session): session closed for user root Dec 15 15:58:27 ispc sshd[1658765]: Invalid user holebrother from 206.189.63.150 Dec 15 15:59:01 ispc CRON[1658781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 15:59:02 ispc CRON[1658781]: pam_unix(cron:session): session closed for user root Dec 15 15:59:26 ispc postfix/smtpd[1658813]: sql auxprop plugin using mysql engine Dec 15 15:59:27 ispc saslauthd[1658815]: pam_mysql - SELECT returned no result. Dec 15 15:59:27 ispc saslauthd[1658815]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 15:59:27 ispc saslauthd[1658815]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:00:01 ispc CRON[1658829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:00:01 ispc CRON[1658830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:00:01 ispc CRON[1658833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:00:01 ispc CRON[1658832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:00:01 ispc CRON[1658831]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:00:01 ispc CRON[1658834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:00:01 ispc CRON[1658835]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:00:01 ispc CRON[1658830]: pam_unix(cron:session): session closed for user root Dec 15 16:00:01 ispc CRON[1658831]: pam_unix(cron:session): session closed for user www-data Dec 15 16:00:01 ispc CRON[1658833]: pam_unix(cron:session): session closed for user root Dec 15 16:00:01 ispc CRON[1658835]: pam_unix(cron:session): session closed for user getmail Dec 15 16:00:02 ispc CRON[1658834]: pam_unix(cron:session): session closed for user root Dec 15 16:00:02 ispc CRON[1658829]: pam_unix(cron:session): session closed for user root Dec 15 16:00:02 ispc CRON[1658832]: pam_unix(cron:session): session closed for user root Dec 15 16:00:36 ispc sshd[1659003]: Invalid user ubuntu from 206.189.63.150 Dec 15 16:01:01 ispc CRON[1659020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:01:02 ispc CRON[1659020]: pam_unix(cron:session): session closed for user root Dec 15 16:01:22 ispc postfix/smtpd[1659040]: sql auxprop plugin using mysql engine Dec 15 16:01:23 ispc saslauthd[1659042]: pam_mysql - SELECT returned no result. Dec 15 16:01:23 ispc saslauthd[1659042]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:01:23 ispc saslauthd[1659042]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:01:35 ispc saslauthd[1659047]: pam_mysql - SELECT returned no result. Dec 15 16:01:35 ispc saslauthd[1659047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:01:35 ispc saslauthd[1659047]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:01:37 ispc saslauthd[1659048]: pam_mysql - SELECT returned no result. Dec 15 16:01:37 ispc saslauthd[1659048]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:01:37 ispc saslauthd[1659048]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:01:47 ispc sshd[1659053]: Invalid user ziplines from 103.100.209.172 Dec 15 16:01:57 ispc saslauthd[1659059]: pam_mysql - SELECT returned no result. Dec 15 16:01:57 ispc saslauthd[1659059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:01:57 ispc saslauthd[1659059]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:02:01 ispc CRON[1659065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:02:01 ispc CRON[1659064]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 16:02:01 ispc CRON[1659065]: pam_unix(cron:session): session closed for user root Dec 15 16:02:13 ispc saslauthd[1659371]: pam_mysql - SELECT returned no result. Dec 15 16:02:13 ispc saslauthd[1659371]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:02:13 ispc saslauthd[1659371]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:02:26 ispc saslauthd[1659684]: pam_mysql - SELECT returned no result. Dec 15 16:02:26 ispc saslauthd[1659684]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:02:26 ispc saslauthd[1659684]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:02:29 ispc saslauthd[1659709]: pam_mysql - SELECT returned no result. Dec 15 16:02:29 ispc saslauthd[1659709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:02:29 ispc saslauthd[1659709]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:02:37 ispc sshd[1659777]: Invalid user ubuntu from 206.189.63.150 Dec 15 16:03:01 ispc CRON[1659950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:03:02 ispc CRON[1659950]: pam_unix(cron:session): session closed for user root Dec 15 16:03:02 ispc saslauthd[1659961]: pam_mysql - SELECT returned no result. Dec 15 16:03:02 ispc saslauthd[1659961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:02 ispc saslauthd[1659961]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:10 ispc saslauthd[1660029]: pam_mysql - SELECT returned no result. Dec 15 16:03:10 ispc saslauthd[1660029]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:10 ispc saslauthd[1660029]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:16 ispc saslauthd[1660096]: pam_mysql - SELECT returned no result. Dec 15 16:03:16 ispc saslauthd[1660096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:16 ispc saslauthd[1660096]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:17 ispc sshd[1660088]: Invalid user martof from 221.156.137.103 Dec 15 16:03:23 ispc CRON[1659064]: pam_unix(cron:session): session closed for user logcheck Dec 15 16:03:25 ispc saslauthd[1660161]: pam_mysql - SELECT returned no result. Dec 15 16:03:25 ispc saslauthd[1660161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:25 ispc saslauthd[1660161]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:27 ispc postfix/smtpd[1660162]: sql auxprop plugin using mysql engine Dec 15 16:03:27 ispc saslauthd[1660163]: pam_mysql - SELECT returned no result. Dec 15 16:03:27 ispc saslauthd[1660163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:27 ispc saslauthd[1660163]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:28 ispc saslauthd[1660164]: pam_mysql - SELECT returned no result. Dec 15 16:03:28 ispc saslauthd[1660164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:28 ispc saslauthd[1660164]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:42 ispc postfix/smtpd[1660176]: sql auxprop plugin using mysql engine Dec 15 16:03:43 ispc sshd[1660174]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:03:50 ispc saslauthd[1660183]: pam_mysql - SELECT returned no result. Dec 15 16:03:50 ispc saslauthd[1660183]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:50 ispc saslauthd[1660183]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:03:51 ispc saslauthd[1660184]: pam_mysql - SELECT returned no result. Dec 15 16:03:51 ispc saslauthd[1660184]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:03:51 ispc saslauthd[1660184]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:04:01 ispc CRON[1660190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:04:02 ispc CRON[1660190]: pam_unix(cron:session): session closed for user root Dec 15 16:04:31 ispc sshd[1660216]: Invalid user ubuntu from 206.189.63.150 Dec 15 16:05:01 ispc CRON[1660235]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:05:01 ispc CRON[1660232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:05:01 ispc CRON[1660233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:05:01 ispc CRON[1660234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:05:01 ispc CRON[1660233]: pam_unix(cron:session): session closed for user root Dec 15 16:05:01 ispc CRON[1660235]: pam_unix(cron:session): session closed for user getmail Dec 15 16:05:01 ispc CRON[1660234]: pam_unix(cron:session): session closed for user root Dec 15 16:05:02 ispc CRON[1660232]: pam_unix(cron:session): session closed for user root Dec 15 16:05:23 ispc sshd[1660316]: Invalid user martof from 116.120.58.228 Dec 15 16:05:43 ispc sshd[1660328]: Invalid user user from 80.94.95.116 Dec 15 16:06:01 ispc CRON[1660339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:06:01 ispc CRON[1660339]: pam_unix(cron:session): session closed for user root Dec 15 16:06:24 ispc postfix/smtpd[1660359]: sql auxprop plugin using mysql engine Dec 15 16:06:25 ispc postfix/smtpd[1660360]: sql auxprop plugin using mysql engine Dec 15 16:06:26 ispc postfix/smtpd[1660361]: sql auxprop plugin using mysql engine Dec 15 16:06:29 ispc sshd[1660366]: Invalid user ubuntu from 206.189.63.150 Dec 15 16:07:01 ispc CRON[1660388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:07:02 ispc CRON[1660388]: pam_unix(cron:session): session closed for user root Dec 15 16:07:11 ispc postfix/smtpd[1660403]: sql auxprop plugin using mysql engine Dec 15 16:07:12 ispc saslauthd[1660404]: pam_mysql - SELECT returned no result. Dec 15 16:07:12 ispc saslauthd[1660404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:07:12 ispc saslauthd[1660404]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:07:20 ispc sshd[1660411]: Invalid user klape from 51.77.222.24 Dec 15 16:07:21 ispc sshd[1660413]: Invalid user ubuntu from 51.77.222.24 Dec 15 16:08:01 ispc CRON[1660441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:08:01 ispc CRON[1660441]: pam_unix(cron:session): session closed for user root Dec 15 16:09:01 ispc CRON[1660485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:09:01 ispc CRON[1660486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:09:01 ispc CRON[1660485]: pam_unix(cron:session): session closed for user root Dec 15 16:09:02 ispc CRON[1660486]: pam_unix(cron:session): session closed for user root Dec 15 16:10:01 ispc CRON[1660531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:10:01 ispc CRON[1660533]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:10:01 ispc CRON[1660534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:10:01 ispc CRON[1660535]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:10:01 ispc CRON[1660532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:10:01 ispc CRON[1660533]: pam_unix(cron:session): session closed for user www-data Dec 15 16:10:01 ispc CRON[1660532]: pam_unix(cron:session): session closed for user root Dec 15 16:10:01 ispc CRON[1660535]: pam_unix(cron:session): session closed for user getmail Dec 15 16:10:01 ispc CRON[1660534]: pam_unix(cron:session): session closed for user root Dec 15 16:10:03 ispc CRON[1660531]: pam_unix(cron:session): session closed for user root Dec 15 16:11:01 ispc CRON[1660637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:11:01 ispc CRON[1660637]: pam_unix(cron:session): session closed for user root Dec 15 16:11:44 ispc postfix/smtpd[1660671]: sql auxprop plugin using mysql engine Dec 15 16:11:44 ispc saslauthd[1660674]: pam_mysql - SELECT returned no result. Dec 15 16:11:44 ispc saslauthd[1660674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:11:44 ispc saslauthd[1660674]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:12:01 ispc CRON[1660679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:12:02 ispc CRON[1660679]: pam_unix(cron:session): session closed for user root Dec 15 16:12:03 ispc saslauthd[1660694]: pam_mysql - SELECT returned no result. Dec 15 16:12:03 ispc saslauthd[1660694]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:12:03 ispc saslauthd[1660694]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:12:17 ispc postfix/smtpd[1660700]: sql auxprop plugin using mysql engine Dec 15 16:13:01 ispc CRON[1660728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:13:02 ispc CRON[1660728]: pam_unix(cron:session): session closed for user root Dec 15 16:14:01 ispc CRON[1660765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:14:02 ispc CRON[1660765]: pam_unix(cron:session): session closed for user root Dec 15 16:15:01 ispc CRON[1660805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:15:01 ispc CRON[1660806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:15:01 ispc CRON[1660807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:15:01 ispc CRON[1660808]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:15:01 ispc CRON[1660806]: pam_unix(cron:session): session closed for user root Dec 15 16:15:01 ispc CRON[1660808]: pam_unix(cron:session): session closed for user getmail Dec 15 16:15:01 ispc CRON[1660805]: pam_unix(cron:session): session closed for user root Dec 15 16:15:01 ispc CRON[1660807]: pam_unix(cron:session): session closed for user root Dec 15 16:15:41 ispc postfix/smtpd[1660908]: sql auxprop plugin using mysql engine Dec 15 16:15:55 ispc postfix/smtpd[1660915]: sql auxprop plugin using mysql engine Dec 15 16:16:01 ispc CRON[1660922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:16:02 ispc CRON[1660922]: pam_unix(cron:session): session closed for user root Dec 15 16:16:13 ispc postfix/smtpd[1660939]: sql auxprop plugin using mysql engine Dec 15 16:16:26 ispc CRON[1658654]: pam_unix(cron:session): session closed for user root Dec 15 16:16:38 ispc saslauthd[1660951]: pam_mysql - SELECT returned no result. Dec 15 16:16:38 ispc saslauthd[1660951]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:16:38 ispc saslauthd[1660951]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:16:39 ispc sshd[1660952]: Invalid user klape from 77.241.18.2 Dec 15 16:16:39 ispc sshd[1660954]: Invalid user ubuntu from 77.241.18.2 Dec 15 16:16:58 ispc saslauthd[1660957]: pam_mysql - SELECT returned no result. Dec 15 16:16:58 ispc saslauthd[1660957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:16:58 ispc saslauthd[1660957]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:17:01 ispc CRON[1660959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:17:02 ispc CRON[1660959]: pam_unix(cron:session): session closed for user root Dec 15 16:17:30 ispc sshd[1660972]: Invalid user blceu from 175.125.92.77 Dec 15 16:18:01 ispc CRON[1660985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:18:02 ispc CRON[1660985]: pam_unix(cron:session): session closed for user root Dec 15 16:18:32 ispc saslauthd[1661001]: pam_mysql - SELECT returned no result. Dec 15 16:18:32 ispc saslauthd[1661001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:18:32 ispc saslauthd[1661001]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:18:41 ispc saslauthd[1661004]: pam_mysql - SELECT returned no result. Dec 15 16:18:41 ispc saslauthd[1661004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:18:41 ispc saslauthd[1661004]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:18:45 ispc sshd[1661006]: Invalid user ziplines from 175.125.92.77 Dec 15 16:19:01 ispc CRON[1661008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:19:02 ispc CRON[1661008]: pam_unix(cron:session): session closed for user root Dec 15 16:19:27 ispc saslauthd[1661023]: pam_mysql - SELECT returned no result. Dec 15 16:19:27 ispc saslauthd[1661023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:19:27 ispc saslauthd[1661023]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:19:34 ispc sshd[1661024]: Invalid user blceu from 118.218.219.250 Dec 15 16:19:35 ispc postfix/smtpd[1661026]: sql auxprop plugin using mysql engine Dec 15 16:19:48 ispc saslauthd[1661030]: pam_mysql - SELECT returned no result. Dec 15 16:19:48 ispc saslauthd[1661030]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:19:48 ispc saslauthd[1661030]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:19:55 ispc saslauthd[1661031]: pam_mysql - SELECT returned no result. Dec 15 16:19:55 ispc saslauthd[1661031]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:19:55 ispc saslauthd[1661031]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:20:01 ispc CRON[1661033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:20:01 ispc CRON[1661032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:20:01 ispc CRON[1661034]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:20:01 ispc CRON[1661035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:20:01 ispc CRON[1661036]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:20:01 ispc CRON[1661034]: pam_unix(cron:session): session closed for user www-data Dec 15 16:20:01 ispc CRON[1661033]: pam_unix(cron:session): session closed for user root Dec 15 16:20:01 ispc CRON[1661036]: pam_unix(cron:session): session closed for user getmail Dec 15 16:20:02 ispc CRON[1661032]: pam_unix(cron:session): session closed for user root Dec 15 16:20:02 ispc saslauthd[1661129]: pam_mysql - SELECT returned no result. Dec 15 16:20:02 ispc saslauthd[1661129]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:20:02 ispc saslauthd[1661129]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:20:32 ispc sshd[1661147]: Invalid user matlbula from 206.225.1.116 Dec 15 16:20:39 ispc CRON[1661035]: pam_unix(cron:session): session closed for user root Dec 15 16:21:02 ispc CRON[1661149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:21:02 ispc CRON[1661150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:21:02 ispc CRON[1661149]: pam_unix(cron:session): session closed for user root Dec 15 16:21:36 ispc sshd[1661180]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:22:01 ispc CRON[1661190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:22:01 ispc CRON[1661190]: pam_unix(cron:session): session closed for user root Dec 15 16:22:30 ispc postfix/smtpd[1661213]: sql auxprop plugin using mysql engine Dec 15 16:22:31 ispc saslauthd[1661215]: pam_mysql - SELECT returned no result. Dec 15 16:22:31 ispc saslauthd[1661215]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:22:31 ispc saslauthd[1661215]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:23:01 ispc CRON[1661241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:23:02 ispc CRON[1661241]: pam_unix(cron:session): session closed for user root Dec 15 16:24:01 ispc CRON[1661276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:24:01 ispc CRON[1661276]: pam_unix(cron:session): session closed for user root Dec 15 16:25:01 ispc CRON[1661315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:25:01 ispc CRON[1661316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:25:01 ispc CRON[1661317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:25:01 ispc CRON[1661318]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:25:01 ispc CRON[1661316]: pam_unix(cron:session): session closed for user root Dec 15 16:25:01 ispc CRON[1661318]: pam_unix(cron:session): session closed for user getmail Dec 15 16:25:02 ispc CRON[1661317]: pam_unix(cron:session): session closed for user root Dec 15 16:25:02 ispc CRON[1661315]: pam_unix(cron:session): session closed for user root Dec 15 16:25:59 ispc sshd[1661416]: Invalid user prueba from 80.94.95.115 Dec 15 16:26:01 ispc CRON[1661424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:26:02 ispc CRON[1661424]: pam_unix(cron:session): session closed for user root Dec 15 16:27:01 ispc CRON[1661465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:27:01 ispc CRON[1661465]: pam_unix(cron:session): session closed for user root Dec 15 16:27:22 ispc postfix/smtpd[1661484]: sql auxprop plugin using mysql engine Dec 15 16:27:22 ispc postfix/smtpd[1661486]: sql auxprop plugin using mysql engine Dec 15 16:27:23 ispc postfix/smtpd[1661488]: sql auxprop plugin using mysql engine Dec 15 16:27:23 ispc postfix/smtpd[1661489]: sql auxprop plugin using mysql engine Dec 15 16:28:01 ispc CRON[1661516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:28:02 ispc CRON[1661516]: pam_unix(cron:session): session closed for user root Dec 15 16:28:24 ispc saslauthd[1661537]: pam_mysql - SELECT returned no result. Dec 15 16:28:24 ispc saslauthd[1661537]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:28:24 ispc saslauthd[1661537]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:28:33 ispc saslauthd[1661543]: pam_mysql - SELECT returned no result. Dec 15 16:28:33 ispc saslauthd[1661543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:28:33 ispc saslauthd[1661543]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:28:35 ispc saslauthd[1661544]: pam_mysql - SELECT returned no result. Dec 15 16:28:35 ispc saslauthd[1661544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:28:35 ispc saslauthd[1661544]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:29:01 ispc CRON[1661554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:29:02 ispc CRON[1661554]: pam_unix(cron:session): session closed for user root Dec 15 16:29:46 ispc sshd[1661588]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:30:01 ispc CRON[1661598]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:30:01 ispc CRON[1661594]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:30:01 ispc CRON[1661595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:30:01 ispc CRON[1661596]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:30:01 ispc CRON[1661597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:30:01 ispc CRON[1661595]: pam_unix(cron:session): session closed for user root Dec 15 16:30:01 ispc CRON[1661596]: pam_unix(cron:session): session closed for user www-data Dec 15 16:30:01 ispc CRON[1661598]: pam_unix(cron:session): session closed for user getmail Dec 15 16:30:02 ispc CRON[1661597]: pam_unix(cron:session): session closed for user root Dec 15 16:30:02 ispc CRON[1661594]: pam_unix(cron:session): session closed for user root Dec 15 16:30:11 ispc postfix/smtpd[1661676]: sql auxprop plugin using mysql engine Dec 15 16:30:11 ispc postfix/smtpd[1661678]: sql auxprop plugin using mysql engine Dec 15 16:31:01 ispc CRON[1661703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:31:02 ispc CRON[1661703]: pam_unix(cron:session): session closed for user root Dec 15 16:31:50 ispc postfix/smtpd[1661737]: sql auxprop plugin using mysql engine Dec 15 16:31:52 ispc saslauthd[1661739]: pam_mysql - SELECT returned no result. Dec 15 16:31:52 ispc saslauthd[1661739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:31:52 ispc saslauthd[1661739]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:32:01 ispc CRON[1661744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:32:02 ispc CRON[1661744]: pam_unix(cron:session): session closed for user root Dec 15 16:32:04 ispc sshd[1661755]: Did not receive identification string from 164.90.196.120 Dec 15 16:32:22 ispc sshd[1661765]: Did not receive identification string from 45.33.12.122 Dec 15 16:33:01 ispc CRON[1661792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:33:01 ispc CRON[1661792]: pam_unix(cron:session): session closed for user root Dec 15 16:33:38 ispc postfix/smtpd[1661817]: sql auxprop plugin using mysql engine Dec 15 16:33:39 ispc saslauthd[1661819]: pam_mysql - SELECT returned no result. Dec 15 16:33:39 ispc saslauthd[1661819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:33:39 ispc saslauthd[1661819]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 16:34:01 ispc CRON[1661832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:34:01 ispc CRON[1661832]: pam_unix(cron:session): session closed for user root Dec 15 16:34:22 ispc sshd[1661851]: Did not receive identification string from 209.38.98.9 Dec 15 16:34:52 ispc sshd[1661863]: Invalid user ziplines from 222.236.46.74 Dec 15 16:35:01 ispc CRON[1661872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:35:01 ispc CRON[1661873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:35:01 ispc CRON[1661871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:35:01 ispc CRON[1661874]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:35:01 ispc CRON[1661872]: pam_unix(cron:session): session closed for user root Dec 15 16:35:02 ispc CRON[1661874]: pam_unix(cron:session): session closed for user getmail Dec 15 16:35:02 ispc CRON[1661873]: pam_unix(cron:session): session closed for user root Dec 15 16:35:02 ispc CRON[1661871]: pam_unix(cron:session): session closed for user root Dec 15 16:35:17 ispc sshd[1661956]: Did not receive identification string from 209.38.39.192 Dec 15 16:35:32 ispc sshd[1661965]: Did not receive identification string from 134.209.86.138 Dec 15 16:35:40 ispc postfix/smtpd[1661970]: sql auxprop plugin using mysql engine Dec 15 16:35:41 ispc saslauthd[1661972]: pam_mysql - SELECT returned no result. Dec 15 16:35:41 ispc saslauthd[1661972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:35:41 ispc saslauthd[1661972]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:36:01 ispc CRON[1661982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:36:02 ispc CRON[1661982]: pam_unix(cron:session): session closed for user root Dec 15 16:37:01 ispc CRON[1662035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:37:01 ispc CRON[1662035]: pam_unix(cron:session): session closed for user root Dec 15 16:37:45 ispc sshd[1662079]: Invalid user ziplines from 116.120.58.228 Dec 15 16:38:01 ispc CRON[1662098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:38:02 ispc CRON[1662098]: pam_unix(cron:session): session closed for user root Dec 15 16:38:24 ispc postfix/smtpd[1662128]: sql auxprop plugin using mysql engine Dec 15 16:39:01 ispc CRON[1662153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:39:01 ispc CRON[1662154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:39:01 ispc CRON[1662153]: pam_unix(cron:session): session closed for user root Dec 15 16:39:02 ispc CRON[1662154]: pam_unix(cron:session): session closed for user root Dec 15 16:39:30 ispc postfix/smtpd[1662197]: sql auxprop plugin using mysql engine Dec 15 16:39:31 ispc saslauthd[1662199]: pam_mysql - SELECT returned no result. Dec 15 16:39:31 ispc saslauthd[1662199]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:39:31 ispc saslauthd[1662199]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:39:57 ispc sshd[1662214]: Invalid user klape from 2.57.217.229 Dec 15 16:39:58 ispc sshd[1662216]: Invalid user ubuntu from 2.57.217.229 Dec 15 16:40:01 ispc CRON[1662228]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:40:01 ispc CRON[1662224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:40:01 ispc CRON[1662226]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:40:01 ispc CRON[1662227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:40:01 ispc CRON[1662226]: pam_unix(cron:session): session closed for user www-data Dec 15 16:40:01 ispc CRON[1662225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:40:01 ispc CRON[1662225]: pam_unix(cron:session): session closed for user root Dec 15 16:40:01 ispc CRON[1662228]: pam_unix(cron:session): session closed for user getmail Dec 15 16:40:01 ispc CRON[1662227]: pam_unix(cron:session): session closed for user root Dec 15 16:40:01 ispc CRON[1662224]: pam_unix(cron:session): session closed for user root Dec 15 16:40:39 ispc sshd[1662326]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:40:39 ispc sshd[1662326]: Invalid user blceu from 157.245.115.125 Dec 15 16:41:01 ispc CRON[1662348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:41:02 ispc sshd[1662346]: Invalid user admin from 134.209.86.138 Dec 15 16:41:02 ispc CRON[1662348]: pam_unix(cron:session): session closed for user root Dec 15 16:41:31 ispc postfix/smtpd[1662375]: sql auxprop plugin using mysql engine Dec 15 16:41:31 ispc CRON[1661150]: pam_unix(cron:session): session closed for user root Dec 15 16:41:34 ispc sshd[1662378]: Invalid user admin from 134.209.86.138 Dec 15 16:42:01 ispc CRON[1662387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:42:03 ispc CRON[1662387]: pam_unix(cron:session): session closed for user root Dec 15 16:42:05 ispc sshd[1662399]: Invalid user admin from 134.209.86.138 Dec 15 16:42:35 ispc sshd[1662409]: Invalid user admin from 134.209.86.138 Dec 15 16:42:40 ispc sshd[1662411]: Invalid user blceu from 103.110.84.105 Dec 15 16:42:42 ispc saslauthd[1662422]: pam_mysql - SELECT returned no result. Dec 15 16:42:42 ispc saslauthd[1662422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:42:42 ispc saslauthd[1662422]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:42:49 ispc saslauthd[1662426]: pam_mysql - SELECT returned no result. Dec 15 16:42:49 ispc saslauthd[1662426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:42:49 ispc saslauthd[1662426]: do_auth : auth failure: [user=center] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:43:01 ispc CRON[1662429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:43:02 ispc CRON[1662429]: pam_unix(cron:session): session closed for user root Dec 15 16:43:04 ispc sshd[1662441]: Invalid user admin from 134.209.86.138 Dec 15 16:43:34 ispc sshd[1662448]: Invalid user admin from 134.209.86.138 Dec 15 16:44:01 ispc CRON[1662464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:44:02 ispc CRON[1662464]: pam_unix(cron:session): session closed for user root Dec 15 16:44:48 ispc sshd[1662483]: Invalid user admin from 164.90.196.120 Dec 15 16:44:49 ispc sshd[1662486]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:45:01 ispc CRON[1662493]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:45:01 ispc CRON[1662490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:45:01 ispc CRON[1662491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:45:01 ispc CRON[1662492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:45:01 ispc CRON[1662491]: pam_unix(cron:session): session closed for user root Dec 15 16:45:01 ispc CRON[1662493]: pam_unix(cron:session): session closed for user getmail Dec 15 16:45:02 ispc CRON[1662490]: pam_unix(cron:session): session closed for user root Dec 15 16:45:19 ispc sshd[1662678]: Invalid user admin from 164.90.196.120 Dec 15 16:45:44 ispc CRON[1662492]: pam_unix(cron:session): session closed for user root Dec 15 16:45:50 ispc sshd[1662692]: Invalid user admin from 164.90.196.120 Dec 15 16:46:01 ispc CRON[1662694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:46:12 ispc postfix/smtpd[1662715]: sql auxprop plugin using mysql engine Dec 15 16:46:22 ispc sshd[1662719]: Invalid user admin from 164.90.196.120 Dec 15 16:46:53 ispc sshd[1662739]: Invalid user admin from 164.90.196.120 Dec 15 16:47:01 ispc CRON[1662743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:47:01 ispc CRON[1662743]: pam_unix(cron:session): session closed for user root Dec 15 16:47:10 ispc postfix/smtpd[1662759]: sql auxprop plugin using mysql engine Dec 15 16:47:11 ispc saslauthd[1662761]: pam_mysql - SELECT returned no result. Dec 15 16:47:11 ispc saslauthd[1662761]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:47:11 ispc saslauthd[1662761]: do_auth : auth failure: [user=guest] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:47:24 ispc sshd[1662773]: Invalid user admin from 164.90.196.120 Dec 15 16:47:47 ispc sshd[1662800]: Invalid user klape from 200.32.52.150 Dec 15 16:47:49 ispc sshd[1662802]: Invalid user ubuntu from 200.32.52.150 Dec 15 16:48:01 ispc CRON[1662815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:48:02 ispc CRON[1662815]: pam_unix(cron:session): session closed for user root Dec 15 16:49:01 ispc CRON[1662866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:49:01 ispc CRON[1662866]: pam_unix(cron:session): session closed for user root Dec 15 16:49:11 ispc sshd[1662883]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:50:01 ispc CRON[1662913]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 16:50:01 ispc CRON[1662914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:50:01 ispc CRON[1662911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:50:01 ispc CRON[1662915]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:50:01 ispc CRON[1662912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:50:01 ispc CRON[1662912]: pam_unix(cron:session): session closed for user root Dec 15 16:50:01 ispc CRON[1662913]: pam_unix(cron:session): session closed for user www-data Dec 15 16:50:01 ispc CRON[1662915]: pam_unix(cron:session): session closed for user getmail Dec 15 16:50:02 ispc CRON[1662911]: pam_unix(cron:session): session closed for user root Dec 15 16:50:02 ispc CRON[1662914]: pam_unix(cron:session): session closed for user root Dec 15 16:51:01 ispc CRON[1663023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:51:01 ispc CRON[1663023]: pam_unix(cron:session): session closed for user root Dec 15 16:52:01 ispc CRON[1663067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:52:02 ispc CRON[1663067]: pam_unix(cron:session): session closed for user root Dec 15 16:52:03 ispc sshd[1663079]: Did not receive identification string from 45.140.17.97 Dec 15 16:52:03 ispc postfix/smtpd[1663080]: sql auxprop plugin using mysql engine Dec 15 16:52:10 ispc sshd[1663087]: Invalid user admin from 209.38.39.192 Dec 15 16:52:50 ispc sshd[1663119]: Invalid user martof from 185.181.182.252 Dec 15 16:53:01 ispc CRON[1663127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:53:01 ispc CRON[1663127]: pam_unix(cron:session): session closed for user root Dec 15 16:53:02 ispc sshd[1663138]: Invalid user admin from 209.38.39.192 Dec 15 16:53:49 ispc sshd[1663167]: Invalid user admin from 209.38.39.192 Dec 15 16:54:01 ispc CRON[1663173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:54:02 ispc CRON[1663173]: pam_unix(cron:session): session closed for user root Dec 15 16:54:33 ispc sshd[1663199]: Invalid user admin from 209.38.39.192 Dec 15 16:55:01 ispc CRON[1663217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:55:01 ispc CRON[1663218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:55:01 ispc CRON[1663219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:55:01 ispc CRON[1663220]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 16:55:01 ispc CRON[1663218]: pam_unix(cron:session): session closed for user root Dec 15 16:55:01 ispc CRON[1663220]: pam_unix(cron:session): session closed for user getmail Dec 15 16:55:02 ispc CRON[1663219]: pam_unix(cron:session): session closed for user root Dec 15 16:55:02 ispc CRON[1663217]: pam_unix(cron:session): session closed for user root Dec 15 16:55:14 ispc sshd[1663297]: Invalid user admin from 209.38.39.192 Dec 15 16:55:22 ispc sshd[1663303]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 16:55:22 ispc sshd[1663303]: Invalid user ziplines from 157.245.115.125 Dec 15 16:55:56 ispc sshd[1663321]: Invalid user admin from 209.38.39.192 Dec 15 16:56:01 ispc CRON[1663335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:56:02 ispc CRON[1663335]: pam_unix(cron:session): session closed for user root Dec 15 16:56:12 ispc sshd[1663351]: Invalid user ziplines from 103.77.207.53 Dec 15 16:56:48 ispc postfix/smtpd[1663375]: sql auxprop plugin using mysql engine Dec 15 16:56:49 ispc saslauthd[1663382]: pam_mysql - SELECT returned no result. Dec 15 16:56:49 ispc saslauthd[1663382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 16:56:49 ispc saslauthd[1663382]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 16:57:01 ispc CRON[1663387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:57:01 ispc CRON[1663387]: pam_unix(cron:session): session closed for user root Dec 15 16:57:06 ispc sshd[1663400]: Invalid user ftpadmin from 45.134.26.238 Dec 15 16:57:07 ispc sshd[1663402]: Invalid user backupuser from 45.134.26.238 Dec 15 16:57:09 ispc sshd[1663412]: Invalid user system from 45.134.26.238 Dec 15 16:57:10 ispc sshd[1663414]: Invalid user admin1 from 45.134.26.238 Dec 15 16:57:11 ispc sshd[1663416]: Invalid user test1 from 45.134.26.238 Dec 15 16:57:12 ispc sshd[1663418]: Invalid user myshake from 45.134.26.238 Dec 15 16:57:12 ispc sshd[1663420]: Invalid user ubuntu from 45.134.26.238 Dec 15 16:58:01 ispc CRON[1663465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:58:02 ispc CRON[1663465]: pam_unix(cron:session): session closed for user root Dec 15 16:59:01 ispc CRON[1663505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 16:59:01 ispc CRON[1663505]: pam_unix(cron:session): session closed for user root Dec 15 17:00:01 ispc CRON[1663553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:00:01 ispc CRON[1663550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:00:01 ispc CRON[1663551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:00:01 ispc CRON[1663552]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:00:01 ispc CRON[1663554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:00:01 ispc CRON[1663555]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:00:01 ispc CRON[1663552]: pam_unix(cron:session): session closed for user www-data Dec 15 17:00:01 ispc CRON[1663551]: pam_unix(cron:session): session closed for user root Dec 15 17:00:01 ispc CRON[1663555]: pam_unix(cron:session): session closed for user getmail Dec 15 17:00:02 ispc CRON[1663550]: pam_unix(cron:session): session closed for user root Dec 15 17:00:02 ispc CRON[1663554]: pam_unix(cron:session): session closed for user root Dec 15 17:00:02 ispc CRON[1663553]: pam_unix(cron:session): session closed for user root Dec 15 17:00:34 ispc postfix/smtpd[1663727]: sql auxprop plugin using mysql engine Dec 15 17:01:01 ispc CRON[1663744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:01:02 ispc CRON[1663744]: pam_unix(cron:session): session closed for user root Dec 15 17:02:01 ispc CRON[1663780]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 17:02:01 ispc CRON[1663781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:02:02 ispc CRON[1663781]: pam_unix(cron:session): session closed for user root Dec 15 17:02:04 ispc postfix/smtpd[1663876]: sql auxprop plugin using mysql engine Dec 15 17:02:04 ispc saslauthd[1663885]: pam_mysql - SELECT returned no result. Dec 15 17:02:04 ispc saslauthd[1663885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:02:04 ispc saslauthd[1663885]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:02:10 ispc saslauthd[1664095]: pam_mysql - SELECT returned no result. Dec 15 17:02:10 ispc saslauthd[1664095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:02:10 ispc saslauthd[1664095]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:02:20 ispc saslauthd[1664404]: pam_mysql - SELECT returned no result. Dec 15 17:02:20 ispc saslauthd[1664404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:02:20 ispc saslauthd[1664404]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:02:27 ispc sshd[1664496]: Did not receive identification string from 45.142.154.19 Dec 15 17:02:42 ispc saslauthd[1664664]: pam_mysql - SELECT returned no result. Dec 15 17:02:42 ispc saslauthd[1664664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:02:42 ispc saslauthd[1664664]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:03:01 ispc CRON[1664817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:03:02 ispc CRON[1664817]: pam_unix(cron:session): session closed for user root Dec 15 17:03:03 ispc saslauthd[1664838]: pam_mysql - SELECT returned no result. Dec 15 17:03:03 ispc saslauthd[1664838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:03:03 ispc saslauthd[1664838]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:03:04 ispc CRON[1663780]: pam_unix(cron:session): session closed for user logcheck Dec 15 17:03:16 ispc saslauthd[1664873]: pam_mysql - SELECT returned no result. Dec 15 17:03:16 ispc saslauthd[1664873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:03:16 ispc saslauthd[1664873]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:03:20 ispc postfix/smtpd[1664877]: sql auxprop plugin using mysql engine Dec 15 17:03:20 ispc saslauthd[1664880]: pam_mysql - SELECT returned no result. Dec 15 17:03:20 ispc saslauthd[1664880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:03:20 ispc saslauthd[1664880]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:03:57 ispc sshd[1664904]: Invalid user hyundaicz from 114.246.241.87 Dec 15 17:04:01 ispc CRON[1664906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:04:02 ispc CRON[1664906]: pam_unix(cron:session): session closed for user root Dec 15 17:04:11 ispc saslauthd[1664921]: pam_mysql - SELECT returned no result. Dec 15 17:04:11 ispc saslauthd[1664921]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:11 ispc saslauthd[1664921]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:04:18 ispc saslauthd[1664928]: pam_mysql - SELECT returned no result. Dec 15 17:04:18 ispc saslauthd[1664928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:18 ispc saslauthd[1664928]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:04:20 ispc saslauthd[1664929]: pam_mysql - SELECT returned no result. Dec 15 17:04:20 ispc saslauthd[1664929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:20 ispc saslauthd[1664929]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:04:40 ispc saslauthd[1664938]: pam_mysql - SELECT returned no result. Dec 15 17:04:40 ispc saslauthd[1664938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:40 ispc saslauthd[1664938]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:04:44 ispc saslauthd[1664945]: pam_mysql - SELECT returned no result. Dec 15 17:04:44 ispc saslauthd[1664945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:44 ispc saslauthd[1664945]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:04:47 ispc saslauthd[1664946]: pam_mysql - SELECT returned no result. Dec 15 17:04:47 ispc saslauthd[1664946]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:04:47 ispc saslauthd[1664946]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:05:01 ispc CRON[1664956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:05:01 ispc CRON[1664957]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:05:01 ispc CRON[1664955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:05:01 ispc CRON[1664954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:05:01 ispc CRON[1664955]: pam_unix(cron:session): session closed for user root Dec 15 17:05:01 ispc CRON[1664957]: pam_unix(cron:session): session closed for user getmail Dec 15 17:05:01 ispc CRON[1664956]: pam_unix(cron:session): session closed for user root Dec 15 17:05:02 ispc CRON[1664954]: pam_unix(cron:session): session closed for user root Dec 15 17:05:14 ispc saslauthd[1665038]: pam_mysql - SELECT returned no result. Dec 15 17:05:14 ispc saslauthd[1665038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:05:14 ispc saslauthd[1665038]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:05:27 ispc saslauthd[1665044]: pam_mysql - SELECT returned no result. Dec 15 17:05:27 ispc saslauthd[1665044]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:05:27 ispc saslauthd[1665044]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:06:01 ispc CRON[1665059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:06:02 ispc CRON[1665059]: pam_unix(cron:session): session closed for user root Dec 15 17:06:14 ispc CRON[1662694]: pam_unix(cron:session): session closed for user root Dec 15 17:07:01 ispc CRON[1665082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:07:02 ispc CRON[1665082]: pam_unix(cron:session): session closed for user root Dec 15 17:08:01 ispc CRON[1665104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:08:03 ispc CRON[1665104]: pam_unix(cron:session): session closed for user root Dec 15 17:09:01 ispc CRON[1665120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:09:01 ispc CRON[1665121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:09:01 ispc CRON[1665120]: pam_unix(cron:session): session closed for user root Dec 15 17:09:01 ispc CRON[1665121]: pam_unix(cron:session): session closed for user root Dec 15 17:09:22 ispc saslauthd[1665145]: pam_mysql - SELECT returned no result. Dec 15 17:09:22 ispc saslauthd[1665145]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:09:22 ispc saslauthd[1665145]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:09:43 ispc sshd[1665147]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:09:43 ispc sshd[1665147]: Invalid user projectoutdoor from 103.177.125.29 Dec 15 17:09:46 ispc sshd[1665149]: Invalid user admin from 80.94.95.116 Dec 15 17:10:01 ispc CRON[1665152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:10:01 ispc CRON[1665153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:10:01 ispc CRON[1665154]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:10:01 ispc CRON[1665155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:10:01 ispc CRON[1665156]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:10:01 ispc CRON[1665153]: pam_unix(cron:session): session closed for user root Dec 15 17:10:02 ispc CRON[1665154]: pam_unix(cron:session): session closed for user www-data Dec 15 17:10:02 ispc CRON[1665156]: pam_unix(cron:session): session closed for user getmail Dec 15 17:10:02 ispc CRON[1665152]: pam_unix(cron:session): session closed for user root Dec 15 17:10:41 ispc CRON[1665155]: pam_unix(cron:session): session closed for user root Dec 15 17:11:01 ispc CRON[1665267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:11:28 ispc sshd[1665289]: Invalid user from 66.240.192.82 Dec 15 17:11:46 ispc postfix/smtpd[1665299]: sql auxprop plugin using mysql engine Dec 15 17:11:46 ispc saslauthd[1665301]: pam_mysql - SELECT returned no result. Dec 15 17:11:46 ispc saslauthd[1665301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:11:46 ispc saslauthd[1665301]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:12:01 ispc CRON[1665308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:12:01 ispc CRON[1665308]: pam_unix(cron:session): session closed for user root Dec 15 17:12:06 ispc sshd[1665323]: Invalid user klape from 36.50.177.171 Dec 15 17:12:08 ispc sshd[1665325]: Invalid user ubuntu from 36.50.177.171 Dec 15 17:12:19 ispc sshd[1665333]: Invalid user tshombeknife from 114.246.241.87 Dec 15 17:12:28 ispc postfix/smtpd[1665339]: sql auxprop plugin using mysql engine Dec 15 17:12:29 ispc postfix/smtpd[1665342]: sql auxprop plugin using mysql engine Dec 15 17:12:29 ispc postfix/smtpd[1665343]: sql auxprop plugin using mysql engine Dec 15 17:13:01 ispc CRON[1665364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:13:03 ispc CRON[1665364]: pam_unix(cron:session): session closed for user root Dec 15 17:13:42 ispc saslauthd[1665393]: pam_mysql - SELECT returned no result. Dec 15 17:13:42 ispc saslauthd[1665393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:13:42 ispc saslauthd[1665393]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:14:01 ispc CRON[1665404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:14:02 ispc CRON[1665404]: pam_unix(cron:session): session closed for user root Dec 15 17:14:57 ispc sshd[1665438]: Invalid user blceu from 103.100.209.172 Dec 15 17:15:01 ispc CRON[1665445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:15:01 ispc CRON[1665446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:15:01 ispc CRON[1665447]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:15:01 ispc CRON[1665444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:15:01 ispc CRON[1665445]: pam_unix(cron:session): session closed for user root Dec 15 17:15:01 ispc CRON[1665447]: pam_unix(cron:session): session closed for user getmail Dec 15 17:15:02 ispc CRON[1665446]: pam_unix(cron:session): session closed for user root Dec 15 17:15:04 ispc CRON[1665444]: pam_unix(cron:session): session closed for user root Dec 15 17:16:02 ispc CRON[1665549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:16:02 ispc CRON[1665549]: pam_unix(cron:session): session closed for user root Dec 15 17:16:13 ispc postfix/smtpd[1665564]: sql auxprop plugin using mysql engine Dec 15 17:16:16 ispc saslauthd[1665571]: pam_mysql - SELECT returned no result. Dec 15 17:16:16 ispc saslauthd[1665571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:16:16 ispc saslauthd[1665571]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:16:19 ispc sshd[1665574]: Invalid user klape from 67.205.163.146 Dec 15 17:16:20 ispc sshd[1665576]: Invalid user ubuntu from 67.205.163.146 Dec 15 17:16:23 ispc sshd[1665580]: Invalid user klape from 187.190.35.163 Dec 15 17:16:24 ispc sshd[1665582]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:16:24 ispc sshd[1665583]: Invalid user ubuntu from 187.190.35.163 Dec 15 17:16:33 ispc saslauthd[1665593]: pam_mysql - SELECT returned no result. Dec 15 17:16:33 ispc saslauthd[1665593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:16:33 ispc saslauthd[1665593]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:16:39 ispc sshd[1665598]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:16:39 ispc sshd[1665598]: Invalid user projectoutdoor from 103.177.125.29 Dec 15 17:16:40 ispc saslauthd[1665600]: pam_mysql - SELECT returned no result. Dec 15 17:16:40 ispc saslauthd[1665600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:16:40 ispc saslauthd[1665600]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:16:46 ispc saslauthd[1665606]: pam_mysql - SELECT returned no result. Dec 15 17:16:46 ispc saslauthd[1665606]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:16:46 ispc saslauthd[1665606]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:17:01 ispc CRON[1665613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:17:02 ispc CRON[1665613]: pam_unix(cron:session): session closed for user root Dec 15 17:17:05 ispc saslauthd[1665624]: pam_mysql - SELECT returned no result. Dec 15 17:17:05 ispc saslauthd[1665624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:17:05 ispc saslauthd[1665624]: do_auth : auth failure: [user=adm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:17:40 ispc sshd[1665650]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:17:50 ispc sshd[1665661]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:17:50 ispc sshd[1665661]: Invalid user projectoutdoor from 103.177.125.29 Dec 15 17:18:01 ispc CRON[1665674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:18:02 ispc CRON[1665674]: pam_unix(cron:session): session closed for user root Dec 15 17:18:17 ispc sshd[1665692]: Invalid user klape from 103.164.20.29 Dec 15 17:18:18 ispc sshd[1665699]: Invalid user ubuntu from 103.164.20.29 Dec 15 17:18:56 ispc postfix/smtpd[1665718]: sql auxprop plugin using mysql engine Dec 15 17:18:56 ispc saslauthd[1665720]: pam_mysql - SELECT returned no result. Dec 15 17:18:56 ispc saslauthd[1665720]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:18:56 ispc saslauthd[1665720]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:19:02 ispc CRON[1665725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:19:03 ispc CRON[1665725]: pam_unix(cron:session): session closed for user root Dec 15 17:20:01 ispc CRON[1665770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:20:01 ispc CRON[1665771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:20:01 ispc CRON[1665772]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:20:01 ispc CRON[1665773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:20:01 ispc CRON[1665774]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:20:01 ispc CRON[1665772]: pam_unix(cron:session): session closed for user www-data Dec 15 17:20:01 ispc CRON[1665771]: pam_unix(cron:session): session closed for user root Dec 15 17:20:01 ispc CRON[1665774]: pam_unix(cron:session): session closed for user getmail Dec 15 17:20:01 ispc CRON[1665773]: pam_unix(cron:session): session closed for user root Dec 15 17:20:02 ispc CRON[1665770]: pam_unix(cron:session): session closed for user root Dec 15 17:20:09 ispc sshd[1665848]: Invalid user capstan from 103.172.236.164 Dec 15 17:20:16 ispc saslauthd[1665855]: pam_mysql - SELECT returned no result. Dec 15 17:20:16 ispc saslauthd[1665855]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:20:16 ispc saslauthd[1665855]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:21:01 ispc CRON[1665877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:21:01 ispc CRON[1665876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:21:01 ispc CRON[1665876]: pam_unix(cron:session): session closed for user root Dec 15 17:21:02 ispc CRON[1665877]: pam_unix(cron:session): session closed for user root Dec 15 17:21:36 ispc sshd[1665912]: Invalid user martof from 211.110.229.128 Dec 15 17:22:01 ispc CRON[1665928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:22:01 ispc CRON[1665928]: pam_unix(cron:session): session closed for user root Dec 15 17:22:02 ispc sshd[1665926]: Invalid user capstan from 103.172.236.164 Dec 15 17:23:01 ispc CRON[1665978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:23:02 ispc CRON[1665978]: pam_unix(cron:session): session closed for user root Dec 15 17:23:25 ispc postfix/smtpd[1666007]: sql auxprop plugin using mysql engine Dec 15 17:23:32 ispc saslauthd[1666009]: pam_mysql - SELECT returned no result. Dec 15 17:23:32 ispc saslauthd[1666009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:23:32 ispc saslauthd[1666009]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:24:01 ispc CRON[1666026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:24:02 ispc CRON[1666026]: pam_unix(cron:session): session closed for user root Dec 15 17:24:02 ispc sshd[1666034]: Invalid user martof from 82.223.202.166 Dec 15 17:25:01 ispc CRON[1666068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:25:01 ispc CRON[1666070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:25:01 ispc CRON[1666069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:25:01 ispc CRON[1666071]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:25:01 ispc CRON[1666069]: pam_unix(cron:session): session closed for user root Dec 15 17:25:01 ispc CRON[1666071]: pam_unix(cron:session): session closed for user getmail Dec 15 17:25:02 ispc CRON[1666070]: pam_unix(cron:session): session closed for user root Dec 15 17:25:03 ispc saslauthd[1666131]: pam_mysql - SELECT returned no result. Dec 15 17:25:03 ispc saslauthd[1666131]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:25:03 ispc saslauthd[1666131]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:25:03 ispc CRON[1666068]: pam_unix(cron:session): session closed for user root Dec 15 17:25:30 ispc sshd[1666160]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:25:32 ispc postfix/smtpd[1666162]: sql auxprop plugin using mysql engine Dec 15 17:25:33 ispc sshd[1666164]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:25:33 ispc sshd[1666164]: Invalid user klape from 189.89.20.45 Dec 15 17:25:34 ispc sshd[1666166]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:25:34 ispc sshd[1666166]: Invalid user ubuntu from 189.89.20.45 Dec 15 17:25:49 ispc saslauthd[1666179]: pam_mysql - SELECT returned no result. Dec 15 17:25:49 ispc saslauthd[1666179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:25:49 ispc saslauthd[1666179]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:25:52 ispc saslauthd[1666180]: pam_mysql - SELECT returned no result. Dec 15 17:25:52 ispc saslauthd[1666180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:25:52 ispc saslauthd[1666180]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:26:01 ispc CRON[1666185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:26:02 ispc CRON[1666185]: pam_unix(cron:session): session closed for user root Dec 15 17:27:01 ispc CRON[1666225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:27:02 ispc CRON[1666225]: pam_unix(cron:session): session closed for user root Dec 15 17:27:21 ispc sshd[1666249]: Invalid user capstan from 43.163.105.233 Dec 15 17:27:46 ispc sshd[1666267]: Invalid user martof from 160.250.132.138 Dec 15 17:28:01 ispc CRON[1666282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:28:03 ispc CRON[1666282]: pam_unix(cron:session): session closed for user root Dec 15 17:28:14 ispc postfix/smtpd[1666297]: sql auxprop plugin using mysql engine Dec 15 17:28:15 ispc saslauthd[1666299]: pam_mysql - SELECT returned no result. Dec 15 17:28:15 ispc saslauthd[1666299]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:28:15 ispc saslauthd[1666299]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:28:26 ispc saslauthd[1666306]: pam_mysql - SELECT returned no result. Dec 15 17:28:26 ispc saslauthd[1666306]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:28:26 ispc saslauthd[1666306]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:28:27 ispc sshd[1666308]: Invalid user blceu from 185.181.182.252 Dec 15 17:28:46 ispc saslauthd[1666319]: pam_mysql - SELECT returned no result. Dec 15 17:28:46 ispc saslauthd[1666319]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:28:46 ispc saslauthd[1666319]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:29:01 ispc CRON[1666334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:29:01 ispc CRON[1666334]: pam_unix(cron:session): session closed for user root Dec 15 17:29:13 ispc sshd[1666349]: Did not receive identification string from 192.227.134.84 Dec 15 17:29:32 ispc sshd[1666361]: Invalid user capstan from 175.126.123.213 Dec 15 17:30:01 ispc CRON[1666378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:30:01 ispc CRON[1666379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:30:01 ispc CRON[1666380]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:30:01 ispc CRON[1666381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:30:01 ispc CRON[1666382]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:30:01 ispc CRON[1666380]: pam_unix(cron:session): session closed for user www-data Dec 15 17:30:01 ispc CRON[1666379]: pam_unix(cron:session): session closed for user root Dec 15 17:30:01 ispc CRON[1666382]: pam_unix(cron:session): session closed for user getmail Dec 15 17:30:02 ispc CRON[1666381]: pam_unix(cron:session): session closed for user root Dec 15 17:30:03 ispc CRON[1666378]: pam_unix(cron:session): session closed for user root Dec 15 17:30:55 ispc postfix/smtpd[1666483]: sql auxprop plugin using mysql engine Dec 15 17:30:56 ispc saslauthd[1666485]: pam_mysql - SELECT returned no result. Dec 15 17:30:56 ispc saslauthd[1666485]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:30:56 ispc saslauthd[1666485]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:31:01 ispc CRON[1666488]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:31:01 ispc sshd[1666486]: Invalid user admin from 80.94.95.116 Dec 15 17:31:01 ispc CRON[1666488]: pam_unix(cron:session): session closed for user root Dec 15 17:31:23 ispc CRON[1665267]: pam_unix(cron:session): session closed for user root Dec 15 17:31:40 ispc postfix/smtpd[1666518]: sql auxprop plugin using mysql engine Dec 15 17:32:01 ispc CRON[1666522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:32:02 ispc CRON[1666522]: pam_unix(cron:session): session closed for user root Dec 15 17:32:18 ispc saslauthd[1666536]: pam_mysql - SELECT returned no result. Dec 15 17:32:18 ispc saslauthd[1666536]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:32:18 ispc saslauthd[1666536]: do_auth : auth failure: [user=mysql] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:33:01 ispc CRON[1666546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:33:02 ispc CRON[1666546]: pam_unix(cron:session): session closed for user root Dec 15 17:33:41 ispc saslauthd[1666562]: pam_mysql - SELECT returned no result. Dec 15 17:33:41 ispc saslauthd[1666562]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:33:41 ispc saslauthd[1666562]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:34:01 ispc CRON[1666565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:34:02 ispc CRON[1666565]: pam_unix(cron:session): session closed for user root Dec 15 17:34:25 ispc saslauthd[1666581]: pam_mysql - SELECT returned no result. Dec 15 17:34:25 ispc saslauthd[1666581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:34:25 ispc saslauthd[1666581]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:35:01 ispc CRON[1666584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:35:01 ispc CRON[1666585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:35:01 ispc CRON[1666586]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:35:01 ispc CRON[1666583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:35:01 ispc CRON[1666584]: pam_unix(cron:session): session closed for user root Dec 15 17:35:01 ispc CRON[1666586]: pam_unix(cron:session): session closed for user getmail Dec 15 17:35:03 ispc CRON[1666583]: pam_unix(cron:session): session closed for user root Dec 15 17:35:05 ispc postfix/smtpd[1666689]: sql auxprop plugin using mysql engine Dec 15 17:35:23 ispc sshd[1666694]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:35:39 ispc CRON[1666585]: pam_unix(cron:session): session closed for user root Dec 15 17:35:57 ispc sshd[1666698]: Invalid user blceu from 36.134.126.74 Dec 15 17:36:01 ispc CRON[1666702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:37:01 ispc CRON[1666738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:37:02 ispc CRON[1666738]: pam_unix(cron:session): session closed for user root Dec 15 17:37:34 ispc sshd[1666764]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:37:34 ispc sshd[1666764]: Invalid user user from 2.57.121.25 Dec 15 17:37:44 ispc postfix/smtpd[1666778]: sql auxprop plugin using mysql engine Dec 15 17:37:45 ispc saslauthd[1666779]: pam_mysql - SELECT returned no result. Dec 15 17:37:45 ispc saslauthd[1666779]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:37:45 ispc saslauthd[1666779]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:38:01 ispc CRON[1666790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:38:01 ispc CRON[1666790]: pam_unix(cron:session): session closed for user root Dec 15 17:39:01 ispc CRON[1666830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:39:01 ispc CRON[1666831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:39:02 ispc CRON[1666830]: pam_unix(cron:session): session closed for user root Dec 15 17:39:02 ispc CRON[1666831]: pam_unix(cron:session): session closed for user root Dec 15 17:39:13 ispc saslauthd[1666858]: pam_mysql - SELECT returned no result. Dec 15 17:39:13 ispc saslauthd[1666858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:39:13 ispc saslauthd[1666858]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:39:44 ispc sshd[1666874]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:39:52 ispc postfix/smtpd[1666881]: sql auxprop plugin using mysql engine Dec 15 17:39:52 ispc postfix/smtpd[1666883]: sql auxprop plugin using mysql engine Dec 15 17:39:53 ispc postfix/smtpd[1666884]: sql auxprop plugin using mysql engine Dec 15 17:39:58 ispc sshd[1666886]: Invalid user projectoutdoor from 160.250.132.138 Dec 15 17:40:01 ispc CRON[1666892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:40:01 ispc CRON[1666893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:40:01 ispc CRON[1666894]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:40:01 ispc CRON[1666895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:40:01 ispc CRON[1666896]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:40:01 ispc CRON[1666893]: pam_unix(cron:session): session closed for user root Dec 15 17:40:01 ispc CRON[1666894]: pam_unix(cron:session): session closed for user www-data Dec 15 17:40:01 ispc CRON[1666896]: pam_unix(cron:session): session closed for user getmail Dec 15 17:40:02 ispc CRON[1666895]: pam_unix(cron:session): session closed for user root Dec 15 17:40:02 ispc CRON[1666892]: pam_unix(cron:session): session closed for user root Dec 15 17:41:01 ispc CRON[1667002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:41:02 ispc CRON[1667002]: pam_unix(cron:session): session closed for user root Dec 15 17:41:02 ispc sshd[1667000]: Invalid user capstan from 175.126.123.213 Dec 15 17:41:36 ispc postfix/smtpd[1667027]: sql auxprop plugin using mysql engine Dec 15 17:41:43 ispc saslauthd[1667035]: pam_mysql - SELECT returned no result. Dec 15 17:41:43 ispc saslauthd[1667035]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:41:43 ispc saslauthd[1667035]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:42:01 ispc CRON[1667045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:42:02 ispc CRON[1667045]: pam_unix(cron:session): session closed for user root Dec 15 17:42:44 ispc saslauthd[1667080]: pam_mysql - SELECT returned no result. Dec 15 17:42:44 ispc saslauthd[1667080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:42:44 ispc saslauthd[1667080]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:43:01 ispc CRON[1667088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:43:02 ispc CRON[1667088]: pam_unix(cron:session): session closed for user root Dec 15 17:43:56 ispc saslauthd[1667125]: pam_mysql - SELECT returned no result. Dec 15 17:43:56 ispc saslauthd[1667125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:43:56 ispc saslauthd[1667125]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:44:01 ispc CRON[1667126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:44:02 ispc CRON[1667126]: pam_unix(cron:session): session closed for user root Dec 15 17:44:24 ispc sshd[1667146]: Invalid user blceu from 45.119.213.109 Dec 15 17:44:50 ispc sshd[1667160]: Invalid user ziplines from 43.135.130.196 Dec 15 17:44:58 ispc saslauthd[1667167]: pam_mysql - SELECT returned no result. Dec 15 17:44:58 ispc saslauthd[1667167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:44:58 ispc saslauthd[1667167]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:45:01 ispc CRON[1667168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:45:01 ispc CRON[1667169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:45:01 ispc CRON[1667170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:45:01 ispc CRON[1667171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:45:01 ispc CRON[1667169]: pam_unix(cron:session): session closed for user root Dec 15 17:45:01 ispc CRON[1667171]: pam_unix(cron:session): session closed for user getmail Dec 15 17:45:01 ispc CRON[1667168]: pam_unix(cron:session): session closed for user root Dec 15 17:45:02 ispc CRON[1667170]: pam_unix(cron:session): session closed for user root Dec 15 17:45:48 ispc sshd[1667268]: Invalid user capstan from 125.130.113.204 Dec 15 17:46:01 ispc CRON[1667274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:46:01 ispc CRON[1667274]: pam_unix(cron:session): session closed for user root Dec 15 17:46:38 ispc sshd[1667301]: Invalid user ziplines from 103.110.84.105 Dec 15 17:47:01 ispc CRON[1667311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:47:02 ispc CRON[1667311]: pam_unix(cron:session): session closed for user root Dec 15 17:47:21 ispc postfix/smtpd[1667331]: sql auxprop plugin using mysql engine Dec 15 17:47:23 ispc saslauthd[1667334]: pam_mysql - SELECT returned no result. Dec 15 17:47:23 ispc saslauthd[1667334]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:47:23 ispc saslauthd[1667334]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:48:01 ispc CRON[1667362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:48:02 ispc CRON[1667362]: pam_unix(cron:session): session closed for user root Dec 15 17:49:01 ispc CRON[1667399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:49:02 ispc CRON[1667399]: pam_unix(cron:session): session closed for user root Dec 15 17:49:16 ispc postfix/smtpd[1667420]: sql auxprop plugin using mysql engine Dec 15 17:49:18 ispc saslauthd[1667422]: pam_mysql - SELECT returned no result. Dec 15 17:49:19 ispc saslauthd[1667422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:49:19 ispc saslauthd[1667422]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:49:47 ispc sshd[1667449]: Invalid user projectoutdoor from 82.223.202.166 Dec 15 17:50:01 ispc CRON[1667460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:50:01 ispc CRON[1667461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:50:01 ispc CRON[1667462]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 17:50:01 ispc CRON[1667463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:50:01 ispc CRON[1667464]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:50:01 ispc CRON[1667461]: pam_unix(cron:session): session closed for user root Dec 15 17:50:01 ispc CRON[1667462]: pam_unix(cron:session): session closed for user www-data Dec 15 17:50:01 ispc CRON[1667464]: pam_unix(cron:session): session closed for user getmail Dec 15 17:50:02 ispc CRON[1667463]: pam_unix(cron:session): session closed for user root Dec 15 17:50:03 ispc CRON[1667460]: pam_unix(cron:session): session closed for user root Dec 15 17:50:17 ispc saslauthd[1667543]: pam_mysql - SELECT returned no result. Dec 15 17:50:17 ispc saslauthd[1667543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:50:17 ispc saslauthd[1667543]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:51:01 ispc CRON[1667563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:51:02 ispc CRON[1667563]: pam_unix(cron:session): session closed for user root Dec 15 17:51:44 ispc sshd[1667597]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:51:44 ispc sshd[1667597]: Invalid user martof from 103.177.125.29 Dec 15 17:51:57 ispc postfix/smtpd[1667603]: sql auxprop plugin using mysql engine Dec 15 17:51:57 ispc postfix/smtpd[1667605]: sql auxprop plugin using mysql engine Dec 15 17:51:58 ispc postfix/smtpd[1667606]: sql auxprop plugin using mysql engine Dec 15 17:52:01 ispc CRON[1667607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:52:01 ispc CRON[1667607]: pam_unix(cron:session): session closed for user root Dec 15 17:52:12 ispc saslauthd[1667624]: pam_mysql - SELECT returned no result. Dec 15 17:52:12 ispc saslauthd[1667624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:52:12 ispc saslauthd[1667624]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:52:57 ispc sshd[1667649]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:52:57 ispc sshd[1667649]: Invalid user blceu from 114.7.163.154 Dec 15 17:53:01 ispc CRON[1667656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:53:02 ispc CRON[1667656]: pam_unix(cron:session): session closed for user root Dec 15 17:53:52 ispc postfix/smtpd[1667691]: sql auxprop plugin using mysql engine Dec 15 17:53:52 ispc saslauthd[1667693]: pam_mysql - SELECT returned no result. Dec 15 17:53:52 ispc saslauthd[1667693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:53:52 ispc saslauthd[1667693]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:54:01 ispc CRON[1667698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:54:02 ispc CRON[1667698]: pam_unix(cron:session): session closed for user root Dec 15 17:54:16 ispc postfix/smtpd[1667715]: sql auxprop plugin using mysql engine Dec 15 17:55:01 ispc CRON[1667740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:55:01 ispc CRON[1667741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:55:01 ispc CRON[1667742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:55:01 ispc CRON[1667743]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 17:55:01 ispc CRON[1667741]: pam_unix(cron:session): session closed for user root Dec 15 17:55:01 ispc CRON[1667743]: pam_unix(cron:session): session closed for user getmail Dec 15 17:55:02 ispc CRON[1667742]: pam_unix(cron:session): session closed for user root Dec 15 17:55:02 ispc CRON[1667740]: pam_unix(cron:session): session closed for user root Dec 15 17:55:06 ispc sshd[1667816]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:55:06 ispc sshd[1667816]: Invalid user ziplines from 103.146.203.212 Dec 15 17:55:19 ispc postfix/smtpd[1667828]: sql auxprop plugin using mysql engine Dec 15 17:55:39 ispc postfix/smtpd[1667838]: sql auxprop plugin using mysql engine Dec 15 17:55:39 ispc saslauthd[1667839]: pam_mysql - SELECT returned no result. Dec 15 17:55:39 ispc saslauthd[1667839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:55:39 ispc saslauthd[1667839]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 17:55:48 ispc sshd[1667842]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:55:48 ispc sshd[1667842]: Invalid user martof from 103.177.125.29 Dec 15 17:56:01 ispc CRON[1667853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:56:03 ispc CRON[1667853]: pam_unix(cron:session): session closed for user root Dec 15 17:56:19 ispc sshd[1667868]: Invalid user capstan from 125.130.113.204 Dec 15 17:56:30 ispc CRON[1666702]: pam_unix(cron:session): session closed for user root Dec 15 17:56:59 ispc sshd[1667879]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 17:57:01 ispc CRON[1667884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:57:03 ispc CRON[1667884]: pam_unix(cron:session): session closed for user root Dec 15 17:57:30 ispc postfix/smtpd[1667897]: sql auxprop plugin using mysql engine Dec 15 17:57:31 ispc postfix/smtpd[1667900]: sql auxprop plugin using mysql engine Dec 15 17:57:50 ispc sshd[1667906]: Invalid user blceu from 103.77.207.53 Dec 15 17:57:53 ispc saslauthd[1667913]: pam_mysql - SELECT returned no result. Dec 15 17:57:53 ispc saslauthd[1667913]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:57:53 ispc saslauthd[1667913]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:58:00 ispc sshd[1667915]: Invalid user martof from 51.79.36.60 Dec 15 17:58:01 ispc CRON[1667917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:58:02 ispc CRON[1667917]: pam_unix(cron:session): session closed for user root Dec 15 17:58:27 ispc saslauthd[1667931]: pam_mysql - SELECT returned no result. Dec 15 17:58:27 ispc saslauthd[1667931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 17:58:27 ispc saslauthd[1667931]: do_auth : auth failure: [user=sky] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 17:59:01 ispc CRON[1667935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 17:59:02 ispc CRON[1667935]: pam_unix(cron:session): session closed for user root Dec 15 18:00:01 ispc CRON[1667952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:00:01 ispc CRON[1667953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:00:01 ispc CRON[1667954]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:00:01 ispc CRON[1667955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:00:01 ispc CRON[1667956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:00:01 ispc CRON[1667957]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:00:01 ispc CRON[1667954]: pam_unix(cron:session): session closed for user www-data Dec 15 18:00:01 ispc CRON[1667953]: pam_unix(cron:session): session closed for user root Dec 15 18:00:01 ispc CRON[1667957]: pam_unix(cron:session): session closed for user getmail Dec 15 18:00:03 ispc CRON[1667955]: pam_unix(cron:session): session closed for user root Dec 15 18:00:03 ispc CRON[1667952]: pam_unix(cron:session): session closed for user root Dec 15 18:00:21 ispc postfix/smtpd[1668218]: sql auxprop plugin using mysql engine Dec 15 18:00:21 ispc postfix/smtpd[1668220]: sql auxprop plugin using mysql engine Dec 15 18:00:21 ispc postfix/smtpd[1668221]: sql auxprop plugin using mysql engine Dec 15 18:00:29 ispc saslauthd[1668222]: pam_mysql - SELECT returned no result. Dec 15 18:00:29 ispc saslauthd[1668222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:00:29 ispc saslauthd[1668222]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:00:44 ispc CRON[1667956]: pam_unix(cron:session): session closed for user root Dec 15 18:01:01 ispc CRON[1668225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:02:01 ispc CRON[1668260]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 18:02:01 ispc CRON[1668261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:02:02 ispc CRON[1668261]: pam_unix(cron:session): session closed for user root Dec 15 18:02:25 ispc postfix/smtpd[1668697]: sql auxprop plugin using mysql engine Dec 15 18:02:26 ispc saslauthd[1668740]: pam_mysql - SELECT returned no result. Dec 15 18:02:26 ispc saslauthd[1668740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:02:26 ispc saslauthd[1668740]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:02:49 ispc sshd[1669117]: Did not receive identification string from 164.92.212.11 Dec 15 18:02:52 ispc postfix/smtpd[1669136]: sql auxprop plugin using mysql engine Dec 15 18:02:52 ispc postfix/smtpd[1669138]: sql auxprop plugin using mysql engine Dec 15 18:02:55 ispc sshd[1669139]: Invalid user ziplines from 118.218.219.250 Dec 15 18:03:01 ispc CRON[1669145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:03:01 ispc CRON[1669145]: pam_unix(cron:session): session closed for user root Dec 15 18:03:28 ispc CRON[1668260]: pam_unix(cron:session): session closed for user logcheck Dec 15 18:03:34 ispc postfix/smtpd[1669356]: sql auxprop plugin using mysql engine Dec 15 18:04:02 ispc CRON[1669370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:04:02 ispc CRON[1669370]: pam_unix(cron:session): session closed for user root Dec 15 18:04:03 ispc sshd[1669381]: Invalid user projectoutdoor from 192.169.153.116 Dec 15 18:04:22 ispc postfix/smtpd[1669394]: sql auxprop plugin using mysql engine Dec 15 18:04:48 ispc sshd[1669408]: Did not receive identification string from 167.71.11.66 Dec 15 18:04:51 ispc postfix/smtpd[1669410]: sql auxprop plugin using mysql engine Dec 15 18:04:52 ispc saslauthd[1669412]: pam_mysql - SELECT returned no result. Dec 15 18:04:52 ispc saslauthd[1669412]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:04:52 ispc saslauthd[1669412]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:05:01 ispc CRON[1669418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:05:01 ispc CRON[1669419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:05:01 ispc CRON[1669420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:05:01 ispc CRON[1669421]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:05:01 ispc CRON[1669419]: pam_unix(cron:session): session closed for user root Dec 15 18:05:01 ispc CRON[1669421]: pam_unix(cron:session): session closed for user getmail Dec 15 18:05:02 ispc CRON[1669420]: pam_unix(cron:session): session closed for user root Dec 15 18:05:02 ispc CRON[1669418]: pam_unix(cron:session): session closed for user root Dec 15 18:05:51 ispc sshd[1669517]: reverse mapping checking getaddrinfo for 103.177.125.29.dhakacolo.com [103.177.125.29] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:05:51 ispc sshd[1669517]: Invalid user projectoutdoor from 103.177.125.29 Dec 15 18:06:02 ispc CRON[1669530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:06:02 ispc CRON[1669530]: pam_unix(cron:session): session closed for user root Dec 15 18:06:03 ispc sshd[1669541]: Invalid user solv from 164.92.212.11 Dec 15 18:06:29 ispc saslauthd[1669557]: pam_mysql - SELECT returned no result. Dec 15 18:06:29 ispc saslauthd[1669557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:06:29 ispc saslauthd[1669557]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:07:01 ispc CRON[1669574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:07:02 ispc CRON[1669574]: pam_unix(cron:session): session closed for user root Dec 15 18:08:01 ispc CRON[1669620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:08:02 ispc CRON[1669620]: pam_unix(cron:session): session closed for user root Dec 15 18:08:10 ispc sshd[1669635]: Invalid user solv from 164.92.212.11 Dec 15 18:08:13 ispc sshd[1669637]: Invalid user martof from 118.218.219.250 Dec 15 18:08:33 ispc sshd[1669649]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 18:08:48 ispc postfix/smtpd[1669655]: sql auxprop plugin using mysql engine Dec 15 18:09:01 ispc CRON[1669665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:09:01 ispc CRON[1669666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:09:01 ispc CRON[1669665]: pam_unix(cron:session): session closed for user root Dec 15 18:09:02 ispc CRON[1669666]: pam_unix(cron:session): session closed for user root Dec 15 18:09:35 ispc postfix/smtpd[1669699]: sql auxprop plugin using mysql engine Dec 15 18:09:35 ispc postfix/smtpd[1669701]: sql auxprop plugin using mysql engine Dec 15 18:09:35 ispc postfix/smtpd[1669702]: sql auxprop plugin using mysql engine Dec 15 18:10:01 ispc CRON[1669717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:10:01 ispc CRON[1669718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:10:01 ispc CRON[1669719]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:10:01 ispc CRON[1669720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:10:01 ispc CRON[1669721]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:10:01 ispc CRON[1669718]: pam_unix(cron:session): session closed for user root Dec 15 18:10:01 ispc CRON[1669719]: pam_unix(cron:session): session closed for user www-data Dec 15 18:10:01 ispc CRON[1669721]: pam_unix(cron:session): session closed for user getmail Dec 15 18:10:02 ispc CRON[1669720]: pam_unix(cron:session): session closed for user root Dec 15 18:10:02 ispc CRON[1669717]: pam_unix(cron:session): session closed for user root Dec 15 18:10:09 ispc saslauthd[1669795]: pam_mysql - SELECT returned no result. Dec 15 18:10:09 ispc saslauthd[1669795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:10:09 ispc saslauthd[1669795]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:10:14 ispc saslauthd[1669800]: pam_mysql - SELECT returned no result. Dec 15 18:10:14 ispc saslauthd[1669800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:10:14 ispc saslauthd[1669800]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:10:16 ispc sshd[1669801]: Invalid user solv from 164.92.212.11 Dec 15 18:11:01 ispc CRON[1669822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:11:02 ispc CRON[1669822]: pam_unix(cron:session): session closed for user root Dec 15 18:12:01 ispc CRON[1669861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:12:02 ispc CRON[1669861]: pam_unix(cron:session): session closed for user root Dec 15 18:12:06 ispc postfix/smtpd[1669876]: sql auxprop plugin using mysql engine Dec 15 18:12:06 ispc postfix/smtpd[1669878]: sql auxprop plugin using mysql engine Dec 15 18:12:15 ispc sshd[1669883]: Invalid user solv from 164.92.212.11 Dec 15 18:12:49 ispc saslauthd[1669907]: pam_mysql - SELECT returned no result. Dec 15 18:12:49 ispc saslauthd[1669907]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:12:49 ispc saslauthd[1669907]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:00 ispc saslauthd[1669912]: pam_mysql - SELECT returned no result. Dec 15 18:13:00 ispc saslauthd[1669912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:13:00 ispc saslauthd[1669912]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:01 ispc CRON[1669913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:13:02 ispc CRON[1669913]: pam_unix(cron:session): session closed for user root Dec 15 18:13:06 ispc saslauthd[1669928]: pam_mysql - SELECT returned no result. Dec 15 18:13:06 ispc saslauthd[1669928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:13:06 ispc saslauthd[1669928]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:12 ispc saslauthd[1669930]: pam_mysql - SELECT returned no result. Dec 15 18:13:12 ispc saslauthd[1669930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:13:12 ispc saslauthd[1669930]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:17 ispc saslauthd[1669937]: pam_mysql - SELECT returned no result. Dec 15 18:13:17 ispc saslauthd[1669937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:13:17 ispc saslauthd[1669937]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:29 ispc saslauthd[1669945]: pam_mysql - SELECT returned no result. Dec 15 18:13:29 ispc saslauthd[1669945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:13:29 ispc saslauthd[1669945]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:13:31 ispc sshd[1669943]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:13:31 ispc sshd[1669943]: Invalid user martof from 103.146.203.212 Dec 15 18:14:01 ispc CRON[1669962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:14:02 ispc CRON[1669962]: pam_unix(cron:session): session closed for user root Dec 15 18:14:12 ispc sshd[1669979]: Invalid user solv from 164.92.212.11 Dec 15 18:14:19 ispc saslauthd[1669986]: pam_mysql - SELECT returned no result. Dec 15 18:14:19 ispc saslauthd[1669986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:19 ispc saslauthd[1669986]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:14:21 ispc saslauthd[1669987]: pam_mysql - SELECT returned no result. Dec 15 18:14:21 ispc saslauthd[1669987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:21 ispc saslauthd[1669987]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:27 ispc saslauthd[1669992]: pam_mysql - SELECT returned no result. Dec 15 18:14:27 ispc saslauthd[1669992]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:27 ispc saslauthd[1669992]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:29 ispc saslauthd[1669993]: pam_mysql - SELECT returned no result. Dec 15 18:14:29 ispc saslauthd[1669993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:29 ispc saslauthd[1669993]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:36 ispc saslauthd[1669998]: pam_mysql - SELECT returned no result. Dec 15 18:14:36 ispc saslauthd[1669998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:36 ispc saslauthd[1669998]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:37 ispc postfix/smtpd[1669999]: sql auxprop plugin using mysql engine Dec 15 18:14:37 ispc saslauthd[1670001]: pam_mysql - SELECT returned no result. Dec 15 18:14:37 ispc saslauthd[1670001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:37 ispc saslauthd[1670001]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:37 ispc saslauthd[1670002]: pam_mysql - SELECT returned no result. Dec 15 18:14:37 ispc saslauthd[1670002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:14:37 ispc saslauthd[1670002]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:14:42 ispc sshd[1670005]: Invalid user capstan from 103.172.236.164 Dec 15 18:15:01 ispc CRON[1670018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:15:01 ispc CRON[1670019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:15:01 ispc CRON[1670020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:15:01 ispc CRON[1670021]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:15:01 ispc CRON[1670019]: pam_unix(cron:session): session closed for user root Dec 15 18:15:01 ispc CRON[1670021]: pam_unix(cron:session): session closed for user getmail Dec 15 18:15:02 ispc CRON[1670020]: pam_unix(cron:session): session closed for user root Dec 15 18:15:03 ispc CRON[1670018]: pam_unix(cron:session): session closed for user root Dec 15 18:15:05 ispc saslauthd[1670098]: pam_mysql - SELECT returned no result. Dec 15 18:15:05 ispc saslauthd[1670098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:15:05 ispc saslauthd[1670098]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:15:22 ispc saslauthd[1670105]: pam_mysql - SELECT returned no result. Dec 15 18:15:22 ispc saslauthd[1670105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:15:22 ispc saslauthd[1670105]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:15:49 ispc sshd[1670115]: Invalid user pronajemplosin from 165.232.190.97 Dec 15 18:15:59 ispc saslauthd[1670128]: pam_mysql - SELECT returned no result. Dec 15 18:15:59 ispc saslauthd[1670128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:15:59 ispc saslauthd[1670128]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:16:01 ispc CRON[1670129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:16:02 ispc CRON[1670129]: pam_unix(cron:session): session closed for user root Dec 15 18:16:09 ispc sshd[1670144]: Invalid user solv from 164.92.212.11 Dec 15 18:16:49 ispc sshd[1670170]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 18:17:01 ispc CRON[1670177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:17:02 ispc CRON[1670177]: pam_unix(cron:session): session closed for user root Dec 15 18:17:12 ispc sshd[1670193]: Invalid user martof from 192.169.153.116 Dec 15 18:17:16 ispc sshd[1670196]: Invalid user martof from 103.110.84.105 Dec 15 18:17:22 ispc sshd[1670202]: Invalid user pronajemplosin from 91.108.104.140 Dec 15 18:17:24 ispc sshd[1670204]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 18:17:24 ispc sshd[1670206]: Invalid user capstan from 103.172.236.164 Dec 15 18:17:37 ispc saslauthd[1670219]: pam_mysql - SELECT returned no result. Dec 15 18:17:37 ispc saslauthd[1670219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:17:37 ispc saslauthd[1670219]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:17:52 ispc postfix/smtpd[1670228]: sql auxprop plugin using mysql engine Dec 15 18:17:52 ispc postfix/smtpd[1670231]: sql auxprop plugin using mysql engine Dec 15 18:17:53 ispc postfix/smtpd[1670236]: sql auxprop plugin using mysql engine Dec 15 18:18:01 ispc CRON[1670241]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 18:18:01 ispc CRON[1670242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:18:02 ispc CRON[1670242]: pam_unix(cron:session): session closed for user root Dec 15 18:18:04 ispc CRON[1670241]: pam_unix(cron:session): session closed for user amavis Dec 15 18:18:05 ispc postfix/smtpd[1670266]: sql auxprop plugin using mysql engine Dec 15 18:18:06 ispc sshd[1670257]: Invalid user martof from 103.77.207.53 Dec 15 18:19:01 ispc CRON[1670302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:19:03 ispc CRON[1670302]: pam_unix(cron:session): session closed for user root Dec 15 18:19:12 ispc saslauthd[1670320]: pam_mysql - SELECT returned no result. Dec 15 18:19:12 ispc saslauthd[1670320]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:19:12 ispc saslauthd[1670320]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:19:26 ispc sshd[1670329]: Invalid user klape from 70.37.89.177 Dec 15 18:19:27 ispc sshd[1670335]: Invalid user ubuntu from 70.37.89.177 Dec 15 18:20:01 ispc CRON[1670354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:20:01 ispc CRON[1670355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:20:01 ispc CRON[1670356]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:20:01 ispc CRON[1670357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:20:01 ispc CRON[1670358]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:20:01 ispc CRON[1670356]: pam_unix(cron:session): session closed for user www-data Dec 15 18:20:01 ispc CRON[1670355]: pam_unix(cron:session): session closed for user root Dec 15 18:20:01 ispc CRON[1670358]: pam_unix(cron:session): session closed for user getmail Dec 15 18:20:01 ispc CRON[1670357]: pam_unix(cron:session): session closed for user root Dec 15 18:20:02 ispc CRON[1670354]: pam_unix(cron:session): session closed for user root Dec 15 18:20:22 ispc sshd[1670444]: Invalid user postgres from 167.71.11.66 Dec 15 18:20:52 ispc postfix/smtpd[1670464]: sql auxprop plugin using mysql engine Dec 15 18:21:01 ispc CRON[1670471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:21:01 ispc CRON[1670472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:21:01 ispc CRON[1670471]: pam_unix(cron:session): session closed for user root Dec 15 18:21:02 ispc CRON[1670472]: pam_unix(cron:session): session closed for user root Dec 15 18:21:07 ispc sshd[1670486]: Invalid user oracle from 167.71.11.66 Dec 15 18:21:18 ispc postfix/smtpd[1670498]: sql auxprop plugin using mysql engine Dec 15 18:21:18 ispc CRON[1668225]: pam_unix(cron:session): session closed for user root Dec 15 18:21:51 ispc sshd[1670503]: Invalid user user from 167.71.11.66 Dec 15 18:22:01 ispc CRON[1670507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:22:02 ispc CRON[1670507]: pam_unix(cron:session): session closed for user root Dec 15 18:22:34 ispc sshd[1670520]: Invalid user vps from 167.71.11.66 Dec 15 18:22:53 ispc saslauthd[1670532]: pam_mysql - SELECT returned no result. Dec 15 18:22:53 ispc saslauthd[1670532]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:22:53 ispc saslauthd[1670532]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:23:00 ispc saslauthd[1670533]: pam_mysql - SELECT returned no result. Dec 15 18:23:00 ispc saslauthd[1670533]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:23:00 ispc saslauthd[1670533]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:23:01 ispc CRON[1670534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:23:02 ispc CRON[1670534]: pam_unix(cron:session): session closed for user root Dec 15 18:23:16 ispc sshd[1670546]: Invalid user testuser from 167.71.11.66 Dec 15 18:23:53 ispc saslauthd[1670551]: pam_mysql - SELECT returned no result. Dec 15 18:23:53 ispc saslauthd[1670551]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:23:53 ispc saslauthd[1670551]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:23:58 ispc sshd[1670552]: Invalid user server from 167.71.11.66 Dec 15 18:24:01 ispc CRON[1670562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:24:02 ispc CRON[1670562]: pam_unix(cron:session): session closed for user root Dec 15 18:24:13 ispc sshd[1670574]: Invalid user capstan from 175.126.123.213 Dec 15 18:24:24 ispc sshd[1670577]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 18:24:59 ispc postfix/smtpd[1670586]: sql auxprop plugin using mysql engine Dec 15 18:25:01 ispc CRON[1670588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:25:01 ispc CRON[1670589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:25:01 ispc CRON[1670590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:25:01 ispc CRON[1670591]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:25:01 ispc CRON[1670589]: pam_unix(cron:session): session closed for user root Dec 15 18:25:01 ispc CRON[1670591]: pam_unix(cron:session): session closed for user getmail Dec 15 18:25:03 ispc CRON[1670588]: pam_unix(cron:session): session closed for user root Dec 15 18:25:24 ispc sshd[1670695]: Invalid user pronajemplosin from 112.217.233.242 Dec 15 18:25:36 ispc CRON[1670590]: pam_unix(cron:session): session closed for user root Dec 15 18:25:51 ispc postfix/smtpd[1670699]: sql auxprop plugin using mysql engine Dec 15 18:25:52 ispc postfix/smtpd[1670702]: sql auxprop plugin using mysql engine Dec 15 18:26:01 ispc CRON[1670705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:26:28 ispc sshd[1670731]: Invalid user matlbula from 117.50.70.169 Dec 15 18:27:01 ispc CRON[1670745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:27:02 ispc CRON[1670745]: pam_unix(cron:session): session closed for user root Dec 15 18:27:05 ispc postfix/smtpd[1670760]: sql auxprop plugin using mysql engine Dec 15 18:27:08 ispc saslauthd[1670762]: pam_mysql - SELECT returned no result. Dec 15 18:27:08 ispc saslauthd[1670762]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:27:08 ispc saslauthd[1670762]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:27:33 ispc sshd[1670772]: Invalid user tshombeknife from 175.125.95.234 Dec 15 18:27:48 ispc sshd[1670786]: Invalid user capstan from 207.180.250.25 Dec 15 18:28:01 ispc CRON[1670799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:28:01 ispc CRON[1670799]: pam_unix(cron:session): session closed for user root Dec 15 18:28:16 ispc sshd[1670814]: Invalid user ziplines from 211.110.229.128 Dec 15 18:29:01 ispc CRON[1670841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:29:02 ispc CRON[1670841]: pam_unix(cron:session): session closed for user root Dec 15 18:29:55 ispc postfix/smtpd[1670874]: sql auxprop plugin using mysql engine Dec 15 18:29:55 ispc postfix/smtpd[1670880]: sql auxprop plugin using mysql engine Dec 15 18:29:58 ispc postfix/smtpd[1670881]: sql auxprop plugin using mysql engine Dec 15 18:30:01 ispc CRON[1670882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:30:01 ispc CRON[1670883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:30:01 ispc CRON[1670884]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:30:01 ispc CRON[1670885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:30:01 ispc CRON[1670886]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:30:01 ispc CRON[1670884]: pam_unix(cron:session): session closed for user www-data Dec 15 18:30:01 ispc CRON[1670883]: pam_unix(cron:session): session closed for user root Dec 15 18:30:01 ispc CRON[1670886]: pam_unix(cron:session): session closed for user getmail Dec 15 18:30:01 ispc CRON[1670885]: pam_unix(cron:session): session closed for user root Dec 15 18:30:02 ispc CRON[1670882]: pam_unix(cron:session): session closed for user root Dec 15 18:30:55 ispc sshd[1670988]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:30:55 ispc sshd[1670988]: Invalid user martof from 103.28.37.227 Dec 15 18:31:01 ispc CRON[1670994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:31:02 ispc CRON[1670994]: pam_unix(cron:session): session closed for user root Dec 15 18:31:09 ispc postfix/smtpd[1671009]: sql auxprop plugin using mysql engine Dec 15 18:31:16 ispc saslauthd[1671016]: pam_mysql - SELECT returned no result. Dec 15 18:31:16 ispc saslauthd[1671016]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:31:16 ispc saslauthd[1671016]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:31:50 ispc sshd[1671031]: Invalid user zednictvistastny from 161.97.92.14 Dec 15 18:32:01 ispc CRON[1671038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:32:02 ispc CRON[1671038]: pam_unix(cron:session): session closed for user root Dec 15 18:32:43 ispc saslauthd[1671077]: pam_mysql - SELECT returned no result. Dec 15 18:32:43 ispc saslauthd[1671077]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:32:43 ispc saslauthd[1671077]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:33:01 ispc CRON[1671087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:33:02 ispc CRON[1671087]: pam_unix(cron:session): session closed for user root Dec 15 18:33:51 ispc sshd[1671123]: Invalid user admin from 80.94.95.116 Dec 15 18:34:01 ispc CRON[1671132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:34:02 ispc CRON[1671132]: pam_unix(cron:session): session closed for user root Dec 15 18:34:21 ispc saslauthd[1671152]: pam_mysql - SELECT returned no result. Dec 15 18:34:21 ispc saslauthd[1671152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:34:21 ispc saslauthd[1671152]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:34:32 ispc sshd[1671160]: Invalid user capstan from 175.126.123.213 Dec 15 18:35:01 ispc CRON[1671174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:35:01 ispc CRON[1671175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:35:01 ispc CRON[1671176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:35:01 ispc CRON[1671177]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:35:01 ispc CRON[1671175]: pam_unix(cron:session): session closed for user root Dec 15 18:35:01 ispc CRON[1671177]: pam_unix(cron:session): session closed for user getmail Dec 15 18:35:02 ispc CRON[1671176]: pam_unix(cron:session): session closed for user root Dec 15 18:35:03 ispc CRON[1671174]: pam_unix(cron:session): session closed for user root Dec 15 18:35:18 ispc saslauthd[1671256]: pam_mysql - SELECT returned no result. Dec 15 18:35:18 ispc saslauthd[1671256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:35:18 ispc saslauthd[1671256]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:35:33 ispc saslauthd[1671269]: pam_mysql - SELECT returned no result. Dec 15 18:35:33 ispc saslauthd[1671269]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:35:33 ispc saslauthd[1671269]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:36:01 ispc CRON[1671285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:36:03 ispc CRON[1671285]: pam_unix(cron:session): session closed for user root Dec 15 18:37:01 ispc CRON[1671325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:37:02 ispc CRON[1671325]: pam_unix(cron:session): session closed for user root Dec 15 18:37:10 ispc sshd[1671336]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:37:10 ispc sshd[1671336]: Invalid user blceu from 103.146.203.212 Dec 15 18:37:16 ispc postfix/smtpd[1671342]: sql auxprop plugin using mysql engine Dec 15 18:37:16 ispc postfix/smtpd[1671344]: sql auxprop plugin using mysql engine Dec 15 18:37:17 ispc postfix/smtpd[1671345]: sql auxprop plugin using mysql engine Dec 15 18:38:01 ispc CRON[1671380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:38:02 ispc CRON[1671380]: pam_unix(cron:session): session closed for user root Dec 15 18:38:09 ispc sshd[1671392]: Invalid user martof from 43.135.148.156 Dec 15 18:39:01 ispc CRON[1671417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:39:01 ispc CRON[1671418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:39:01 ispc CRON[1671417]: pam_unix(cron:session): session closed for user root Dec 15 18:39:02 ispc CRON[1671418]: pam_unix(cron:session): session closed for user root Dec 15 18:39:46 ispc sshd[1671466]: Did not receive identification string from 45.140.17.97 Dec 15 18:39:47 ispc postfix/smtpd[1671467]: sql auxprop plugin using mysql engine Dec 15 18:39:52 ispc postfix/smtpd[1671472]: sql auxprop plugin using mysql engine Dec 15 18:39:52 ispc postfix/smtpd[1671473]: sql auxprop plugin using mysql engine Dec 15 18:39:57 ispc sshd[1671470]: Invalid user klape from 40.127.67.83 Dec 15 18:40:01 ispc CRON[1671480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:40:01 ispc CRON[1671481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:40:01 ispc CRON[1671482]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:40:01 ispc CRON[1671483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:40:01 ispc CRON[1671484]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:40:01 ispc CRON[1671482]: pam_unix(cron:session): session closed for user www-data Dec 15 18:40:01 ispc CRON[1671481]: pam_unix(cron:session): session closed for user root Dec 15 18:40:01 ispc CRON[1671484]: pam_unix(cron:session): session closed for user getmail Dec 15 18:40:01 ispc sshd[1671478]: Invalid user capstan from 125.130.113.204 Dec 15 18:40:01 ispc CRON[1671483]: pam_unix(cron:session): session closed for user root Dec 15 18:40:02 ispc CRON[1671480]: pam_unix(cron:session): session closed for user root Dec 15 18:40:05 ispc saslauthd[1671563]: pam_mysql - SELECT returned no result. Dec 15 18:40:05 ispc saslauthd[1671563]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:40:05 ispc saslauthd[1671563]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:41:01 ispc CRON[1671588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:41:02 ispc CRON[1671588]: pam_unix(cron:session): session closed for user root Dec 15 18:41:35 ispc saslauthd[1671612]: pam_mysql - SELECT returned no result. Dec 15 18:41:35 ispc saslauthd[1671612]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:41:35 ispc saslauthd[1671612]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:41:57 ispc postfix/smtpd[1671628]: sql auxprop plugin using mysql engine Dec 15 18:41:58 ispc postfix/smtpd[1671630]: sql auxprop plugin using mysql engine Dec 15 18:41:58 ispc postfix/smtpd[1671631]: sql auxprop plugin using mysql engine Dec 15 18:42:01 ispc CRON[1671632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:42:02 ispc CRON[1671632]: pam_unix(cron:session): session closed for user root Dec 15 18:42:16 ispc postfix/smtpd[1671650]: sql auxprop plugin using mysql engine Dec 15 18:42:21 ispc saslauthd[1671655]: pam_mysql - SELECT returned no result. Dec 15 18:42:21 ispc saslauthd[1671655]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:42:21 ispc saslauthd[1671655]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:42:45 ispc sshd[1671672]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:43:01 ispc CRON[1671682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:43:02 ispc CRON[1671682]: pam_unix(cron:session): session closed for user root Dec 15 18:43:06 ispc saslauthd[1671693]: pam_mysql - SELECT returned no result. Dec 15 18:43:06 ispc saslauthd[1671693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:43:06 ispc saslauthd[1671693]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:43:30 ispc sshd[1671708]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:44:01 ispc CRON[1671723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:44:02 ispc CRON[1671723]: pam_unix(cron:session): session closed for user root Dec 15 18:44:28 ispc postfix/smtpd[1671744]: sql auxprop plugin using mysql engine Dec 15 18:45:01 ispc CRON[1671765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:45:01 ispc CRON[1671766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:45:01 ispc CRON[1671767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:45:01 ispc CRON[1671768]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:45:01 ispc CRON[1671766]: pam_unix(cron:session): session closed for user root Dec 15 18:45:01 ispc CRON[1671768]: pam_unix(cron:session): session closed for user getmail Dec 15 18:45:02 ispc CRON[1671767]: pam_unix(cron:session): session closed for user root Dec 15 18:45:03 ispc CRON[1671765]: pam_unix(cron:session): session closed for user root Dec 15 18:45:05 ispc postfix/smtpd[1671841]: sql auxprop plugin using mysql engine Dec 15 18:45:06 ispc postfix/smtpd[1671843]: sql auxprop plugin using mysql engine Dec 15 18:45:07 ispc postfix/smtpd[1671845]: sql auxprop plugin using mysql engine Dec 15 18:45:08 ispc postfix/smtpd[1671846]: sql auxprop plugin using mysql engine Dec 15 18:46:01 ispc CRON[1671873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:46:02 ispc CRON[1671873]: pam_unix(cron:session): session closed for user root Dec 15 18:46:21 ispc CRON[1670705]: pam_unix(cron:session): session closed for user root Dec 15 18:46:57 ispc saslauthd[1671897]: pam_mysql - SELECT returned no result. Dec 15 18:46:57 ispc saslauthd[1671897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:46:57 ispc saslauthd[1671897]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:47:01 ispc CRON[1671900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:47:01 ispc sshd[1671898]: Invalid user projectoutdoor from 192.169.153.116 Dec 15 18:47:01 ispc sshd[1671908]: Invalid user martof from 82.223.202.166 Dec 15 18:47:02 ispc CRON[1671900]: pam_unix(cron:session): session closed for user root Dec 15 18:47:11 ispc postfix/smtpd[1671914]: sql auxprop plugin using mysql engine Dec 15 18:47:12 ispc postfix/smtpd[1671916]: sql auxprop plugin using mysql engine Dec 15 18:47:22 ispc saslauthd[1671918]: pam_mysql - SELECT returned no result. Dec 15 18:47:22 ispc saslauthd[1671918]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:47:22 ispc saslauthd[1671918]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:47:38 ispc saslauthd[1671920]: pam_mysql - SELECT returned no result. Dec 15 18:47:38 ispc saslauthd[1671920]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:47:38 ispc saslauthd[1671920]: do_auth : auth failure: [user=pi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:47:40 ispc sshd[1671923]: Invalid user klape from 35.240.174.82 Dec 15 18:47:42 ispc sshd[1671929]: Invalid user ubuntu from 35.240.174.82 Dec 15 18:47:47 ispc sshd[1671934]: Invalid user blceu from 116.120.58.228 Dec 15 18:47:55 ispc saslauthd[1671943]: pam_mysql - SELECT returned no result. Dec 15 18:47:55 ispc saslauthd[1671943]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:47:55 ispc saslauthd[1671943]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:48:01 ispc CRON[1671944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:48:01 ispc CRON[1671944]: pam_unix(cron:session): session closed for user root Dec 15 18:48:31 ispc sshd[1671957]: Invalid user capstan from 125.130.113.204 Dec 15 18:48:36 ispc sshd[1671959]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:48:36 ispc sshd[1671959]: Invalid user blceu from 103.28.37.227 Dec 15 18:49:01 ispc CRON[1671961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:49:05 ispc sshd[1671969]: Invalid user ziplines from 51.79.36.60 Dec 15 18:49:07 ispc CRON[1671961]: pam_unix(cron:session): session closed for user root Dec 15 18:50:01 ispc CRON[1671981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:50:01 ispc CRON[1671982]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 18:50:01 ispc CRON[1671983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:50:01 ispc CRON[1671984]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:50:01 ispc CRON[1671980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:50:01 ispc CRON[1671981]: pam_unix(cron:session): session closed for user root Dec 15 18:50:01 ispc CRON[1671982]: pam_unix(cron:session): session closed for user www-data Dec 15 18:50:01 ispc CRON[1671984]: pam_unix(cron:session): session closed for user getmail Dec 15 18:50:02 ispc CRON[1671980]: pam_unix(cron:session): session closed for user root Dec 15 18:50:06 ispc CRON[1671983]: pam_unix(cron:session): session closed for user root Dec 15 18:50:18 ispc sshd[1672059]: Invalid user martof from 175.125.92.77 Dec 15 18:50:44 ispc saslauthd[1672064]: pam_mysql - SELECT returned no result. Dec 15 18:50:44 ispc saslauthd[1672064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:50:44 ispc saslauthd[1672064]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:51:01 ispc CRON[1672066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:52:01 ispc CRON[1672101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:52:01 ispc CRON[1672102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:52:01 ispc CRON[1672102]: pam_unix(cron:session): session closed for user root Dec 15 18:52:26 ispc postfix/smtpd[1672131]: sql auxprop plugin using mysql engine Dec 15 18:52:30 ispc saslauthd[1672133]: pam_mysql - SELECT returned no result. Dec 15 18:52:30 ispc saslauthd[1672133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:52:30 ispc saslauthd[1672133]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:52:35 ispc postfix/smtpd[1672138]: sql auxprop plugin using mysql engine Dec 15 18:52:35 ispc postfix/smtpd[1672140]: sql auxprop plugin using mysql engine Dec 15 18:52:35 ispc postfix/smtpd[1672141]: sql auxprop plugin using mysql engine Dec 15 18:52:47 ispc saslauthd[1672152]: pam_mysql - SELECT returned no result. Dec 15 18:52:47 ispc saslauthd[1672152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:52:47 ispc saslauthd[1672152]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:53:01 ispc CRON[1672157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:53:02 ispc CRON[1672157]: pam_unix(cron:session): session closed for user root Dec 15 18:54:01 ispc CRON[1672199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:54:01 ispc CRON[1672199]: pam_unix(cron:session): session closed for user root Dec 15 18:55:00 ispc postfix/smtpd[1672244]: sql auxprop plugin using mysql engine Dec 15 18:55:00 ispc postfix/smtpd[1672246]: sql auxprop plugin using mysql engine Dec 15 18:55:00 ispc postfix/smtpd[1672247]: sql auxprop plugin using mysql engine Dec 15 18:55:01 ispc postfix/smtpd[1672248]: sql auxprop plugin using mysql engine Dec 15 18:55:01 ispc CRON[1672249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:55:01 ispc CRON[1672250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:55:01 ispc CRON[1672251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:55:01 ispc CRON[1672252]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 18:55:01 ispc CRON[1672250]: pam_unix(cron:session): session closed for user root Dec 15 18:55:01 ispc CRON[1672252]: pam_unix(cron:session): session closed for user getmail Dec 15 18:55:02 ispc CRON[1672251]: pam_unix(cron:session): session closed for user root Dec 15 18:55:02 ispc CRON[1672249]: pam_unix(cron:session): session closed for user root Dec 15 18:55:18 ispc CRON[1672101]: pam_unix(cron:session): session closed for user root Dec 15 18:56:00 ispc saslauthd[1672352]: pam_mysql - SELECT returned no result. Dec 15 18:56:00 ispc saslauthd[1672352]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:56:00 ispc saslauthd[1672352]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:56:01 ispc CRON[1672353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:56:01 ispc CRON[1672353]: pam_unix(cron:session): session closed for user root Dec 15 18:56:44 ispc saslauthd[1672380]: pam_mysql - SELECT returned no result. Dec 15 18:56:44 ispc saslauthd[1672380]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:56:44 ispc saslauthd[1672380]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 18:57:01 ispc CRON[1672389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:57:01 ispc CRON[1672389]: pam_unix(cron:session): session closed for user root Dec 15 18:57:05 ispc sshd[1672400]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 18:58:01 ispc CRON[1672440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:58:02 ispc CRON[1672440]: pam_unix(cron:session): session closed for user root Dec 15 18:59:01 ispc CRON[1672497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 18:59:01 ispc CRON[1672497]: pam_unix(cron:session): session closed for user root Dec 15 18:59:44 ispc sshd[1672542]: Invalid user racingkennel from 185.12.204.239 Dec 15 18:59:45 ispc postfix/smtpd[1672544]: sql auxprop plugin using mysql engine Dec 15 18:59:46 ispc saslauthd[1672546]: pam_mysql - SELECT returned no result. Dec 15 18:59:46 ispc saslauthd[1672546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 18:59:46 ispc saslauthd[1672546]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 18:59:55 ispc sshd[1672552]: Invalid user martof from 192.169.153.116 Dec 15 19:00:01 ispc CRON[1672556]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:00:01 ispc CRON[1672557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:00:01 ispc CRON[1672558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:00:01 ispc CRON[1672559]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:00:01 ispc CRON[1672554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:00:01 ispc CRON[1672555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:00:01 ispc CRON[1672555]: pam_unix(cron:session): session closed for user root Dec 15 19:00:01 ispc CRON[1672556]: pam_unix(cron:session): session closed for user www-data Dec 15 19:00:01 ispc CRON[1672559]: pam_unix(cron:session): session closed for user getmail Dec 15 19:00:02 ispc CRON[1672558]: pam_unix(cron:session): session closed for user root Dec 15 19:00:02 ispc CRON[1672557]: pam_unix(cron:session): session closed for user root Dec 15 19:00:02 ispc CRON[1672554]: pam_unix(cron:session): session closed for user root Dec 15 19:00:10 ispc postfix/smtpd[1672718]: sql auxprop plugin using mysql engine Dec 15 19:01:01 ispc CRON[1672755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:01:02 ispc CRON[1672755]: pam_unix(cron:session): session closed for user root Dec 15 19:02:01 ispc CRON[1672814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:02:01 ispc CRON[1672813]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 19:02:02 ispc CRON[1672814]: pam_unix(cron:session): session closed for user root Dec 15 19:02:39 ispc postfix/smtpd[1673484]: sql auxprop plugin using mysql engine Dec 15 19:02:40 ispc saslauthd[1673503]: pam_mysql - SELECT returned no result. Dec 15 19:02:40 ispc saslauthd[1673503]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:02:40 ispc saslauthd[1673503]: do_auth : auth failure: [user=puppet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:02:50 ispc saslauthd[1673615]: pam_mysql - SELECT returned no result. Dec 15 19:02:50 ispc saslauthd[1673615]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:02:50 ispc saslauthd[1673615]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:03:01 ispc CRON[1673715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:03:02 ispc CRON[1673715]: pam_unix(cron:session): session closed for user root Dec 15 19:03:23 ispc CRON[1672813]: pam_unix(cron:session): session closed for user logcheck Dec 15 19:03:30 ispc postfix/smtpd[1673928]: sql auxprop plugin using mysql engine Dec 15 19:03:33 ispc saslauthd[1673934]: pam_mysql - SELECT returned no result. Dec 15 19:03:33 ispc saslauthd[1673934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:03:33 ispc saslauthd[1673934]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:04:01 ispc CRON[1673954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:04:01 ispc CRON[1673954]: pam_unix(cron:session): session closed for user root Dec 15 19:04:08 ispc postfix/smtpd[1673968]: sql auxprop plugin using mysql engine Dec 15 19:04:08 ispc postfix/smtpd[1673974]: sql auxprop plugin using mysql engine Dec 15 19:04:08 ispc postfix/smtpd[1673975]: sql auxprop plugin using mysql engine Dec 15 19:05:01 ispc CRON[1674010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:05:01 ispc CRON[1674011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:05:01 ispc CRON[1674012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:05:01 ispc CRON[1674013]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:05:01 ispc CRON[1674011]: pam_unix(cron:session): session closed for user root Dec 15 19:05:01 ispc CRON[1674013]: pam_unix(cron:session): session closed for user getmail Dec 15 19:05:02 ispc CRON[1674012]: pam_unix(cron:session): session closed for user root Dec 15 19:05:02 ispc CRON[1674010]: pam_unix(cron:session): session closed for user root Dec 15 19:06:01 ispc CRON[1674116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:06:02 ispc CRON[1674116]: pam_unix(cron:session): session closed for user root Dec 15 19:06:02 ispc sshd[1674122]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:06:34 ispc postfix/smtpd[1674160]: sql auxprop plugin using mysql engine Dec 15 19:06:34 ispc postfix/smtpd[1674162]: sql auxprop plugin using mysql engine Dec 15 19:06:34 ispc postfix/smtpd[1674163]: sql auxprop plugin using mysql engine Dec 15 19:06:34 ispc postfix/smtpd[1674164]: sql auxprop plugin using mysql engine Dec 15 19:06:44 ispc saslauthd[1674173]: pam_mysql - SELECT returned no result. Dec 15 19:06:44 ispc saslauthd[1674173]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:06:44 ispc saslauthd[1674173]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:07:01 ispc CRON[1674185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:07:01 ispc CRON[1674185]: pam_unix(cron:session): session closed for user root Dec 15 19:07:45 ispc saslauthd[1674231]: pam_mysql - SELECT returned no result. Dec 15 19:07:45 ispc saslauthd[1674231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:07:45 ispc saslauthd[1674231]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:08:01 ispc CRON[1674241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:08:02 ispc CRON[1674241]: pam_unix(cron:session): session closed for user root Dec 15 19:08:15 ispc sshd[1674264]: Invalid user blceu from 211.110.229.128 Dec 15 19:08:31 ispc sshd[1674282]: Invalid user martof from 160.250.132.138 Dec 15 19:09:01 ispc CRON[1674299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:09:01 ispc CRON[1674298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:09:01 ispc CRON[1674298]: pam_unix(cron:session): session closed for user root Dec 15 19:09:01 ispc CRON[1674299]: pam_unix(cron:session): session closed for user root Dec 15 19:09:14 ispc saslauthd[1674325]: pam_mysql - SELECT returned no result. Dec 15 19:09:14 ispc saslauthd[1674325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:09:14 ispc saslauthd[1674325]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:09:33 ispc saslauthd[1674337]: pam_mysql - SELECT returned no result. Dec 15 19:09:33 ispc saslauthd[1674337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:09:33 ispc saslauthd[1674337]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:09:40 ispc saslauthd[1674343]: pam_mysql - SELECT returned no result. Dec 15 19:09:40 ispc saslauthd[1674343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:09:40 ispc saslauthd[1674343]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:09:45 ispc saslauthd[1674344]: pam_mysql - SELECT returned no result. Dec 15 19:09:45 ispc saslauthd[1674344]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:09:45 ispc saslauthd[1674344]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:09:48 ispc sshd[1674345]: Invalid user ziplines from 43.135.148.156 Dec 15 19:10:01 ispc CRON[1674356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:10:01 ispc CRON[1674355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:10:01 ispc CRON[1674357]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:10:01 ispc CRON[1674361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:10:01 ispc CRON[1674362]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:10:01 ispc CRON[1674357]: pam_unix(cron:session): session closed for user www-data Dec 15 19:10:02 ispc CRON[1674356]: pam_unix(cron:session): session closed for user root Dec 15 19:10:02 ispc CRON[1674362]: pam_unix(cron:session): session closed for user getmail Dec 15 19:10:02 ispc CRON[1674361]: pam_unix(cron:session): session closed for user root Dec 15 19:10:02 ispc CRON[1674355]: pam_unix(cron:session): session closed for user root Dec 15 19:10:52 ispc saslauthd[1674461]: pam_mysql - SELECT returned no result. Dec 15 19:10:52 ispc saslauthd[1674461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:10:52 ispc saslauthd[1674461]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:10:53 ispc saslauthd[1674462]: pam_mysql - SELECT returned no result. Dec 15 19:10:53 ispc saslauthd[1674462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:10:53 ispc saslauthd[1674462]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:10:54 ispc saslauthd[1674464]: pam_mysql - SELECT returned no result. Dec 15 19:10:54 ispc saslauthd[1674464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:10:54 ispc saslauthd[1674464]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:10:57 ispc saslauthd[1674466]: pam_mysql - SELECT returned no result. Dec 15 19:10:57 ispc saslauthd[1674466]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:10:57 ispc saslauthd[1674466]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:10:58 ispc saslauthd[1674467]: pam_mysql - SELECT returned no result. Dec 15 19:10:58 ispc saslauthd[1674467]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:10:58 ispc saslauthd[1674467]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:11:00 ispc postfix/smtpd[1674468]: sql auxprop plugin using mysql engine Dec 15 19:11:00 ispc saslauthd[1674470]: pam_mysql - SELECT returned no result. Dec 15 19:11:00 ispc saslauthd[1674470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:11:00 ispc saslauthd[1674470]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:11:00 ispc saslauthd[1674471]: pam_mysql - SELECT returned no result. Dec 15 19:11:00 ispc saslauthd[1674471]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:11:00 ispc saslauthd[1674471]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:11:01 ispc CRON[1674472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:11:01 ispc CRON[1674472]: pam_unix(cron:session): session closed for user root Dec 15 19:11:04 ispc saslauthd[1674489]: pam_mysql - SELECT returned no result. Dec 15 19:11:04 ispc saslauthd[1674489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:11:04 ispc saslauthd[1674489]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:11:13 ispc sshd[1674490]: Invalid user blceu from 118.218.219.250 Dec 15 19:11:32 ispc CRON[1672066]: pam_unix(cron:session): session closed for user root Dec 15 19:11:35 ispc saslauthd[1674508]: pam_mysql - SELECT returned no result. Dec 15 19:11:35 ispc saslauthd[1674508]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:11:35 ispc saslauthd[1674508]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:12:01 ispc CRON[1674510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:12:02 ispc CRON[1674510]: pam_unix(cron:session): session closed for user root Dec 15 19:12:11 ispc sshd[1674523]: Invalid user pronajemplosin from 115.71.237.176 Dec 15 19:12:16 ispc saslauthd[1674527]: pam_mysql - SELECT returned no result. Dec 15 19:12:16 ispc saslauthd[1674527]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:12:16 ispc saslauthd[1674527]: do_auth : auth failure: [user=video] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:12:43 ispc postfix/smtpd[1674541]: sql auxprop plugin using mysql engine Dec 15 19:12:43 ispc postfix/smtpd[1674542]: sql auxprop plugin using mysql engine Dec 15 19:12:44 ispc postfix/smtpd[1674543]: sql auxprop plugin using mysql engine Dec 15 19:12:47 ispc saslauthd[1674547]: pam_mysql - SELECT returned no result. Dec 15 19:12:47 ispc saslauthd[1674547]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:12:47 ispc saslauthd[1674547]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:13:01 ispc CRON[1674548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:13:02 ispc sshd[1674550]: Invalid user projectoutdoor from 82.223.202.166 Dec 15 19:13:02 ispc CRON[1674548]: pam_unix(cron:session): session closed for user root Dec 15 19:13:24 ispc sshd[1674570]: Invalid user blceu from 175.125.92.77 Dec 15 19:13:24 ispc postfix/smtpd[1674573]: sql auxprop plugin using mysql engine Dec 15 19:13:27 ispc sshd[1674581]: Invalid user pronajemplosin from 5.132.127.172 Dec 15 19:14:01 ispc CRON[1674591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:14:02 ispc CRON[1674591]: pam_unix(cron:session): session closed for user root Dec 15 19:14:24 ispc sshd[1674605]: Invalid user ziplines from 175.125.92.77 Dec 15 19:14:28 ispc sshd[1674607]: Invalid user pronajemplosin from 165.232.190.97 Dec 15 19:15:01 ispc CRON[1674629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:15:01 ispc CRON[1674631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:15:01 ispc CRON[1674630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:15:01 ispc CRON[1674632]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:15:01 ispc CRON[1674630]: pam_unix(cron:session): session closed for user root Dec 15 19:15:01 ispc CRON[1674632]: pam_unix(cron:session): session closed for user getmail Dec 15 19:15:03 ispc CRON[1674629]: pam_unix(cron:session): session closed for user root Dec 15 19:15:43 ispc CRON[1674631]: pam_unix(cron:session): session closed for user root Dec 15 19:16:01 ispc CRON[1674827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:16:04 ispc saslauthd[1674839]: pam_mysql - SELECT returned no result. Dec 15 19:16:04 ispc saslauthd[1674839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:16:04 ispc saslauthd[1674839]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:16:52 ispc postfix/smtpd[1674875]: sql auxprop plugin using mysql engine Dec 15 19:16:52 ispc postfix/smtpd[1674877]: sql auxprop plugin using mysql engine Dec 15 19:17:01 ispc CRON[1674888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:17:02 ispc CRON[1674888]: pam_unix(cron:session): session closed for user root Dec 15 19:17:35 ispc sshd[1674920]: Invalid user zednictvistastny from 161.97.92.14 Dec 15 19:17:41 ispc saslauthd[1674926]: pam_mysql - SELECT returned no result. Dec 15 19:17:41 ispc saslauthd[1674926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:17:41 ispc saslauthd[1674926]: do_auth : auth failure: [user=ansible] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:18:01 ispc CRON[1674952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:18:01 ispc CRON[1674952]: pam_unix(cron:session): session closed for user root Dec 15 19:19:01 ispc CRON[1675005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:19:02 ispc CRON[1675005]: pam_unix(cron:session): session closed for user root Dec 15 19:19:12 ispc postfix/smtpd[1675027]: sql auxprop plugin using mysql engine Dec 15 19:19:12 ispc postfix/smtpd[1675029]: sql auxprop plugin using mysql engine Dec 15 19:19:12 ispc postfix/smtpd[1675030]: sql auxprop plugin using mysql engine Dec 15 19:19:48 ispc postfix/smtpd[1675050]: sql auxprop plugin using mysql engine Dec 15 19:19:48 ispc saslauthd[1675051]: pam_mysql - SELECT returned no result. Dec 15 19:19:48 ispc saslauthd[1675051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:19:48 ispc saslauthd[1675051]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:19:53 ispc postfix/smtpd[1675058]: sql auxprop plugin using mysql engine Dec 15 19:19:54 ispc saslauthd[1675060]: pam_mysql - SELECT returned no result. Dec 15 19:19:54 ispc saslauthd[1675060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:19:54 ispc saslauthd[1675060]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:19:55 ispc saslauthd[1675061]: pam_mysql - SELECT returned no result. Dec 15 19:19:55 ispc saslauthd[1675061]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:19:55 ispc saslauthd[1675061]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:19:59 ispc saslauthd[1675066]: pam_mysql - SELECT returned no result. Dec 15 19:19:59 ispc saslauthd[1675066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:19:59 ispc saslauthd[1675066]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:20:01 ispc CRON[1675071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:20:01 ispc CRON[1675072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:20:01 ispc CRON[1675073]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:20:01 ispc CRON[1675074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:20:01 ispc CRON[1675075]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:20:01 ispc CRON[1675072]: pam_unix(cron:session): session closed for user root Dec 15 19:20:01 ispc CRON[1675073]: pam_unix(cron:session): session closed for user www-data Dec 15 19:20:01 ispc CRON[1675075]: pam_unix(cron:session): session closed for user getmail Dec 15 19:20:02 ispc CRON[1675074]: pam_unix(cron:session): session closed for user root Dec 15 19:20:02 ispc CRON[1675071]: pam_unix(cron:session): session closed for user root Dec 15 19:20:22 ispc sshd[1675162]: Invalid user projectoutdoor from 160.250.132.138 Dec 15 19:21:01 ispc CRON[1675199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:21:01 ispc CRON[1675200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:21:01 ispc CRON[1675199]: pam_unix(cron:session): session closed for user root Dec 15 19:21:02 ispc CRON[1675200]: pam_unix(cron:session): session closed for user root Dec 15 19:22:01 ispc CRON[1675247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:22:01 ispc CRON[1675247]: pam_unix(cron:session): session closed for user root Dec 15 19:22:16 ispc postfix/smtpd[1675267]: sql auxprop plugin using mysql engine Dec 15 19:22:16 ispc postfix/smtpd[1675269]: sql auxprop plugin using mysql engine Dec 15 19:22:17 ispc postfix/smtpd[1675270]: sql auxprop plugin using mysql engine Dec 15 19:22:17 ispc postfix/smtpd[1675271]: sql auxprop plugin using mysql engine Dec 15 19:23:01 ispc CRON[1675309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:23:02 ispc CRON[1675309]: pam_unix(cron:session): session closed for user root Dec 15 19:23:07 ispc saslauthd[1675325]: pam_mysql - SELECT returned no result. Dec 15 19:23:07 ispc saslauthd[1675325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:23:07 ispc saslauthd[1675325]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:23:24 ispc sshd[1675330]: Invalid user capstan from 175.126.123.213 Dec 15 19:24:01 ispc CRON[1675360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:24:02 ispc CRON[1675360]: pam_unix(cron:session): session closed for user root Dec 15 19:25:01 ispc CRON[1675397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:25:01 ispc CRON[1675398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:25:01 ispc CRON[1675399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:25:01 ispc CRON[1675400]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:25:01 ispc CRON[1675398]: pam_unix(cron:session): session closed for user root Dec 15 19:25:01 ispc CRON[1675400]: pam_unix(cron:session): session closed for user getmail Dec 15 19:25:01 ispc CRON[1675399]: pam_unix(cron:session): session closed for user root Dec 15 19:25:01 ispc CRON[1675397]: pam_unix(cron:session): session closed for user root Dec 15 19:25:36 ispc postfix/smtpd[1675492]: sql auxprop plugin using mysql engine Dec 15 19:26:01 ispc CRON[1675507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:26:02 ispc CRON[1675507]: pam_unix(cron:session): session closed for user root Dec 15 19:26:52 ispc postfix/smtpd[1675541]: sql auxprop plugin using mysql engine Dec 15 19:26:53 ispc saslauthd[1675543]: pam_mysql - SELECT returned no result. Dec 15 19:26:53 ispc saslauthd[1675543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:26:53 ispc saslauthd[1675543]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:27:01 ispc CRON[1675548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:27:02 ispc CRON[1675548]: pam_unix(cron:session): session closed for user root Dec 15 19:27:06 ispc postfix/smtpd[1675566]: sql auxprop plugin using mysql engine Dec 15 19:27:07 ispc postfix/smtpd[1675567]: sql auxprop plugin using mysql engine Dec 15 19:27:10 ispc postfix/smtpd[1675569]: sql auxprop plugin using mysql engine Dec 15 19:27:18 ispc sshd[1675581]: Did not receive identification string from 165.22.199.117 Dec 15 19:28:01 ispc CRON[1675612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:28:02 ispc CRON[1675612]: pam_unix(cron:session): session closed for user root Dec 15 19:28:05 ispc sshd[1675630]: Invalid user klape from 51.77.222.24 Dec 15 19:28:06 ispc sshd[1675632]: Invalid user ubuntu from 51.77.222.24 Dec 15 19:28:32 ispc sshd[1675643]: Invalid user projectoutdoor from 82.223.202.166 Dec 15 19:29:01 ispc CRON[1675657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:29:02 ispc CRON[1675657]: pam_unix(cron:session): session closed for user root Dec 15 19:29:38 ispc sshd[1675688]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 19:30:01 ispc CRON[1675699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:30:01 ispc CRON[1675700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:30:01 ispc CRON[1675701]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:30:01 ispc CRON[1675702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:30:01 ispc CRON[1675703]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:30:01 ispc CRON[1675701]: pam_unix(cron:session): session closed for user www-data Dec 15 19:30:01 ispc CRON[1675700]: pam_unix(cron:session): session closed for user root Dec 15 19:30:01 ispc CRON[1675703]: pam_unix(cron:session): session closed for user getmail Dec 15 19:30:02 ispc CRON[1675702]: pam_unix(cron:session): session closed for user root Dec 15 19:30:03 ispc CRON[1675699]: pam_unix(cron:session): session closed for user root Dec 15 19:30:15 ispc postfix/smtpd[1675783]: sql auxprop plugin using mysql engine Dec 15 19:30:15 ispc saslauthd[1675789]: pam_mysql - SELECT returned no result. Dec 15 19:30:15 ispc saslauthd[1675789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:30:15 ispc saslauthd[1675789]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:31:01 ispc CRON[1675809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:31:02 ispc CRON[1675809]: pam_unix(cron:session): session closed for user root Dec 15 19:31:49 ispc saslauthd[1675851]: pam_mysql - SELECT returned no result. Dec 15 19:31:49 ispc saslauthd[1675851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:31:49 ispc saslauthd[1675851]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:32:01 ispc CRON[1675862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:32:01 ispc CRON[1675862]: pam_unix(cron:session): session closed for user root Dec 15 19:32:38 ispc saslauthd[1675890]: pam_mysql - SELECT returned no result. Dec 15 19:32:38 ispc saslauthd[1675890]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:32:38 ispc saslauthd[1675890]: do_auth : auth failure: [user=ec2-user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:33:01 ispc CRON[1675906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:33:02 ispc CRON[1675906]: pam_unix(cron:session): session closed for user root Dec 15 19:33:17 ispc sshd[1675921]: Invalid user admin from 139.19.117.197 Dec 15 19:33:25 ispc saslauthd[1675927]: pam_mysql - SELECT returned no result. Dec 15 19:33:25 ispc saslauthd[1675927]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:33:25 ispc saslauthd[1675927]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:33:42 ispc sshd[1675940]: Invalid user matlbula from 206.225.1.116 Dec 15 19:34:01 ispc CRON[1675950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:34:02 ispc CRON[1675950]: pam_unix(cron:session): session closed for user root Dec 15 19:34:50 ispc postfix/smtpd[1675984]: sql auxprop plugin using mysql engine Dec 15 19:34:50 ispc postfix/smtpd[1675986]: sql auxprop plugin using mysql engine Dec 15 19:34:51 ispc postfix/smtpd[1675987]: sql auxprop plugin using mysql engine Dec 15 19:35:01 ispc CRON[1675992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:35:01 ispc CRON[1675993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:35:01 ispc CRON[1675994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:35:01 ispc CRON[1675995]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:35:01 ispc CRON[1675993]: pam_unix(cron:session): session closed for user root Dec 15 19:35:01 ispc CRON[1675995]: pam_unix(cron:session): session closed for user getmail Dec 15 19:35:01 ispc CRON[1675994]: pam_unix(cron:session): session closed for user root Dec 15 19:35:02 ispc CRON[1675992]: pam_unix(cron:session): session closed for user root Dec 15 19:36:01 ispc CRON[1676103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:36:02 ispc CRON[1676103]: pam_unix(cron:session): session closed for user root Dec 15 19:36:09 ispc sshd[1676114]: Invalid user anoraksro from 185.12.204.239 Dec 15 19:36:29 ispc postfix/smtpd[1676129]: sql auxprop plugin using mysql engine Dec 15 19:36:29 ispc CRON[1674827]: pam_unix(cron:session): session closed for user root Dec 15 19:36:32 ispc sshd[1676131]: Invalid user martof from 82.223.202.166 Dec 15 19:36:34 ispc saslauthd[1676139]: pam_mysql - SELECT returned no result. Dec 15 19:36:34 ispc saslauthd[1676139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:36:34 ispc saslauthd[1676139]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:37:01 ispc CRON[1676140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:37:02 ispc CRON[1676140]: pam_unix(cron:session): session closed for user root Dec 15 19:37:05 ispc sshd[1676148]: Invalid user teste from 80.94.95.116 Dec 15 19:37:35 ispc postfix/smtpd[1676164]: sql auxprop plugin using mysql engine Dec 15 19:37:35 ispc postfix/smtpd[1676167]: sql auxprop plugin using mysql engine Dec 15 19:37:35 ispc postfix/smtpd[1676168]: sql auxprop plugin using mysql engine Dec 15 19:37:52 ispc sshd[1676173]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:37:52 ispc sshd[1676173]: Invalid user martof from 114.7.163.154 Dec 15 19:38:01 ispc CRON[1676180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:38:02 ispc CRON[1676180]: pam_unix(cron:session): session closed for user root Dec 15 19:38:11 ispc sshd[1676192]: Invalid user martof from 192.169.153.116 Dec 15 19:38:29 ispc sshd[1676195]: Invalid user projectoutdoor from 192.169.153.116 Dec 15 19:39:01 ispc CRON[1676204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:39:01 ispc CRON[1676205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:39:01 ispc CRON[1676204]: pam_unix(cron:session): session closed for user root Dec 15 19:39:02 ispc CRON[1676205]: pam_unix(cron:session): session closed for user root Dec 15 19:40:01 ispc CRON[1676234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:40:01 ispc CRON[1676235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:40:01 ispc CRON[1676236]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:40:01 ispc CRON[1676237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:40:01 ispc CRON[1676238]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:40:01 ispc CRON[1676236]: pam_unix(cron:session): session closed for user www-data Dec 15 19:40:01 ispc CRON[1676235]: pam_unix(cron:session): session closed for user root Dec 15 19:40:01 ispc CRON[1676238]: pam_unix(cron:session): session closed for user getmail Dec 15 19:40:03 ispc CRON[1676234]: pam_unix(cron:session): session closed for user root Dec 15 19:40:28 ispc CRON[1676237]: pam_unix(cron:session): session closed for user root Dec 15 19:40:35 ispc postfix/smtpd[1676346]: sql auxprop plugin using mysql engine Dec 15 19:40:36 ispc postfix/smtpd[1676349]: sql auxprop plugin using mysql engine Dec 15 19:40:36 ispc postfix/smtpd[1676350]: sql auxprop plugin using mysql engine Dec 15 19:40:46 ispc saslauthd[1676352]: pam_mysql - SELECT returned no result. Dec 15 19:40:46 ispc saslauthd[1676352]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:40:46 ispc saslauthd[1676352]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:41:01 ispc CRON[1676354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:41:34 ispc sshd[1676381]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 19:41:53 ispc sshd[1676392]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:41:53 ispc sshd[1676392]: Invalid user martof from 157.245.115.125 Dec 15 19:42:01 ispc CRON[1676401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:42:02 ispc CRON[1676401]: pam_unix(cron:session): session closed for user root Dec 15 19:42:07 ispc sshd[1676416]: Invalid user blceu from 51.79.36.60 Dec 15 19:43:01 ispc CRON[1676449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:43:01 ispc CRON[1676449]: pam_unix(cron:session): session closed for user root Dec 15 19:44:01 ispc CRON[1676490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:44:03 ispc CRON[1676490]: pam_unix(cron:session): session closed for user root Dec 15 19:44:13 ispc postfix/smtpd[1676512]: sql auxprop plugin using mysql engine Dec 15 19:44:16 ispc saslauthd[1676514]: pam_mysql - SELECT returned no result. Dec 15 19:44:16 ispc saslauthd[1676514]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:44:16 ispc saslauthd[1676514]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:45:01 ispc CRON[1676537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:45:01 ispc CRON[1676538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:45:01 ispc CRON[1676539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:45:01 ispc CRON[1676540]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:45:01 ispc CRON[1676538]: pam_unix(cron:session): session closed for user root Dec 15 19:45:01 ispc CRON[1676540]: pam_unix(cron:session): session closed for user getmail Dec 15 19:45:02 ispc CRON[1676537]: pam_unix(cron:session): session closed for user root Dec 15 19:45:02 ispc CRON[1676539]: pam_unix(cron:session): session closed for user root Dec 15 19:46:00 ispc sshd[1676644]: Did not receive identification string from 64.225.67.49 Dec 15 19:46:01 ispc CRON[1676645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:46:02 ispc CRON[1676645]: pam_unix(cron:session): session closed for user root Dec 15 19:46:20 ispc postfix/smtpd[1676661]: sql auxprop plugin using mysql engine Dec 15 19:46:38 ispc sshd[1676672]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:46:58 ispc sshd[1676679]: Invalid user pronajemplosin from 115.71.237.176 Dec 15 19:47:01 ispc CRON[1676687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:47:02 ispc CRON[1676687]: pam_unix(cron:session): session closed for user root Dec 15 19:47:38 ispc postfix/smtpd[1676725]: sql auxprop plugin using mysql engine Dec 15 19:47:39 ispc saslauthd[1676727]: pam_mysql - SELECT returned no result. Dec 15 19:47:39 ispc saslauthd[1676727]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:47:39 ispc saslauthd[1676727]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:47:45 ispc saslauthd[1676737]: pam_mysql - SELECT returned no result. Dec 15 19:47:45 ispc saslauthd[1676737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:47:45 ispc saslauthd[1676737]: do_auth : auth failure: [user=vagrant] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:48:01 ispc CRON[1676748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:48:01 ispc CRON[1676748]: pam_unix(cron:session): session closed for user root Dec 15 19:48:37 ispc saslauthd[1676781]: pam_mysql - SELECT returned no result. Dec 15 19:48:37 ispc saslauthd[1676781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:48:37 ispc saslauthd[1676781]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:49:01 ispc CRON[1676796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:49:02 ispc CRON[1676796]: pam_unix(cron:session): session closed for user root Dec 15 19:50:01 ispc CRON[1676849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:50:01 ispc CRON[1676850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:50:01 ispc CRON[1676851]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 19:50:01 ispc CRON[1676852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:50:01 ispc CRON[1676853]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:50:01 ispc CRON[1676851]: pam_unix(cron:session): session closed for user www-data Dec 15 19:50:01 ispc CRON[1676850]: pam_unix(cron:session): session closed for user root Dec 15 19:50:01 ispc CRON[1676853]: pam_unix(cron:session): session closed for user getmail Dec 15 19:50:01 ispc sshd[1676847]: Invalid user klape from 103.164.20.29 Dec 15 19:50:02 ispc CRON[1676852]: pam_unix(cron:session): session closed for user root Dec 15 19:50:03 ispc CRON[1676849]: pam_unix(cron:session): session closed for user root Dec 15 19:50:03 ispc sshd[1676896]: Invalid user ubuntu from 103.164.20.29 Dec 15 19:50:11 ispc sshd[1676934]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:51:01 ispc CRON[1676964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:51:02 ispc CRON[1676964]: pam_unix(cron:session): session closed for user root Dec 15 19:51:39 ispc postfix/smtpd[1676995]: sql auxprop plugin using mysql engine Dec 15 19:51:39 ispc saslauthd[1676997]: pam_mysql - SELECT returned no result. Dec 15 19:51:39 ispc saslauthd[1676997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:51:39 ispc saslauthd[1676997]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:51:51 ispc postfix/smtpd[1677007]: sql auxprop plugin using mysql engine Dec 15 19:51:52 ispc postfix/smtpd[1677009]: sql auxprop plugin using mysql engine Dec 15 19:51:52 ispc postfix/smtpd[1677010]: sql auxprop plugin using mysql engine Dec 15 19:51:52 ispc postfix/smtpd[1677011]: sql auxprop plugin using mysql engine Dec 15 19:51:56 ispc saslauthd[1677014]: pam_mysql - SELECT returned no result. Dec 15 19:51:56 ispc saslauthd[1677014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:51:56 ispc saslauthd[1677014]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:52:01 ispc CRON[1677019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:52:02 ispc CRON[1677019]: pam_unix(cron:session): session closed for user root Dec 15 19:52:18 ispc saslauthd[1677036]: pam_mysql - SELECT returned no result. Dec 15 19:52:18 ispc saslauthd[1677036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:52:18 ispc saslauthd[1677036]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:52:37 ispc sshd[1677045]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 19:52:37 ispc sshd[1677045]: Invalid user ziplines from 103.28.37.227 Dec 15 19:53:01 ispc CRON[1677066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:53:01 ispc CRON[1677066]: pam_unix(cron:session): session closed for user root Dec 15 19:54:01 ispc CRON[1677108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:54:03 ispc CRON[1677108]: pam_unix(cron:session): session closed for user root Dec 15 19:54:05 ispc postfix/smtpd[1677123]: sql auxprop plugin using mysql engine Dec 15 19:54:06 ispc postfix/smtpd[1677125]: sql auxprop plugin using mysql engine Dec 15 19:54:06 ispc postfix/smtpd[1677126]: sql auxprop plugin using mysql engine Dec 15 19:54:28 ispc postfix/smtpd[1677136]: sql auxprop plugin using mysql engine Dec 15 19:54:29 ispc saslauthd[1677137]: pam_mysql - SELECT returned no result. Dec 15 19:54:29 ispc saslauthd[1677137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:54:29 ispc saslauthd[1677137]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 19:55:01 ispc CRON[1677151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:55:01 ispc CRON[1677152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:55:01 ispc CRON[1677153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:55:01 ispc CRON[1677154]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 19:55:01 ispc CRON[1677152]: pam_unix(cron:session): session closed for user root Dec 15 19:55:01 ispc CRON[1677154]: pam_unix(cron:session): session closed for user getmail Dec 15 19:55:02 ispc CRON[1677153]: pam_unix(cron:session): session closed for user root Dec 15 19:55:03 ispc CRON[1677151]: pam_unix(cron:session): session closed for user root Dec 15 19:55:03 ispc saslauthd[1677227]: pam_mysql - SELECT returned no result. Dec 15 19:55:03 ispc saslauthd[1677227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:55:03 ispc saslauthd[1677227]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:56:01 ispc CRON[1677257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:56:02 ispc CRON[1677257]: pam_unix(cron:session): session closed for user root Dec 15 19:57:01 ispc CRON[1677295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:57:02 ispc CRON[1677295]: pam_unix(cron:session): session closed for user root Dec 15 19:57:12 ispc sshd[1677310]: Invalid user ziplines from 45.119.213.109 Dec 15 19:57:40 ispc postfix/smtpd[1677326]: sql auxprop plugin using mysql engine Dec 15 19:58:01 ispc CRON[1677347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:58:03 ispc CRON[1677347]: pam_unix(cron:session): session closed for user root Dec 15 19:59:01 ispc CRON[1677386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 19:59:02 ispc CRON[1677386]: pam_unix(cron:session): session closed for user root Dec 15 19:59:06 ispc postfix/smtpd[1677399]: sql auxprop plugin using mysql engine Dec 15 19:59:11 ispc saslauthd[1677406]: pam_mysql - SELECT returned no result. Dec 15 19:59:11 ispc saslauthd[1677406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:59:11 ispc saslauthd[1677406]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 19:59:48 ispc saslauthd[1677429]: pam_mysql - SELECT returned no result. Dec 15 19:59:48 ispc saslauthd[1677429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 19:59:48 ispc saslauthd[1677429]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:00:01 ispc CRON[1677435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:00:01 ispc CRON[1677436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:00:01 ispc CRON[1677437]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:00:01 ispc CRON[1677438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:00:01 ispc CRON[1677439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:00:01 ispc CRON[1677440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:00:01 ispc CRON[1677441]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:00:01 ispc CRON[1677437]: pam_unix(cron:session): session closed for user www-data Dec 15 20:00:01 ispc CRON[1677436]: pam_unix(cron:session): session closed for user root Dec 15 20:00:01 ispc CRON[1677441]: pam_unix(cron:session): session closed for user getmail Dec 15 20:00:01 ispc CRON[1677439]: pam_unix(cron:session): session closed for user root Dec 15 20:00:02 ispc CRON[1677435]: pam_unix(cron:session): session closed for user root Dec 15 20:00:02 ispc CRON[1677440]: pam_unix(cron:session): session closed for user root Dec 15 20:00:02 ispc CRON[1677438]: pam_unix(cron:session): session closed for user root Dec 15 20:00:14 ispc sshd[1677601]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:00:14 ispc sshd[1677601]: Invalid user martof from 103.28.37.227 Dec 15 20:00:20 ispc sshd[1677607]: Invalid user martof from 45.119.213.109 Dec 15 20:00:31 ispc saslauthd[1677614]: pam_mysql - SELECT returned no result. Dec 15 20:00:31 ispc saslauthd[1677614]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:00:31 ispc saslauthd[1677614]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:00:56 ispc sshd[1677625]: Invalid user blceu from 8.133.194.64 Dec 15 20:00:59 ispc sshd[1677633]: Invalid user klape from 77.241.18.2 Dec 15 20:01:00 ispc sshd[1677635]: Invalid user ubuntu from 77.241.18.2 Dec 15 20:01:01 ispc CRON[1677637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:01:02 ispc CRON[1677637]: pam_unix(cron:session): session closed for user root Dec 15 20:01:29 ispc CRON[1676354]: pam_unix(cron:session): session closed for user root Dec 15 20:01:42 ispc postfix/smtpd[1677664]: sql auxprop plugin using mysql engine Dec 15 20:01:42 ispc postfix/smtpd[1677667]: sql auxprop plugin using mysql engine Dec 15 20:01:43 ispc postfix/smtpd[1677668]: sql auxprop plugin using mysql engine Dec 15 20:02:01 ispc CRON[1677672]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 20:02:01 ispc CRON[1677673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:02:02 ispc CRON[1677673]: pam_unix(cron:session): session closed for user root Dec 15 20:02:06 ispc saslauthd[1677755]: pam_mysql - SELECT returned no result. Dec 15 20:02:06 ispc saslauthd[1677755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:02:06 ispc saslauthd[1677755]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:02:12 ispc sshd[1677845]: Invalid user from 65.49.1.52 Dec 15 20:02:21 ispc sshd[1677890]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:02:31 ispc saslauthd[1678273]: pam_mysql - SELECT returned no result. Dec 15 20:02:31 ispc saslauthd[1678273]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:02:31 ispc saslauthd[1678273]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:02:46 ispc saslauthd[1678381]: pam_mysql - SELECT returned no result. Dec 15 20:02:46 ispc saslauthd[1678381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:02:46 ispc saslauthd[1678381]: do_auth : auth failure: [user=azureuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:03:01 ispc CRON[1678530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:03:02 ispc CRON[1678530]: pam_unix(cron:session): session closed for user root Dec 15 20:03:15 ispc saslauthd[1678597]: pam_mysql - SELECT returned no result. Dec 15 20:03:15 ispc saslauthd[1678597]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:03:15 ispc saslauthd[1678597]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:03:27 ispc CRON[1677672]: pam_unix(cron:session): session closed for user logcheck Dec 15 20:03:32 ispc sshd[1678743]: Invalid user capstan from 207.180.250.25 Dec 15 20:03:37 ispc postfix/smtpd[1678746]: sql auxprop plugin using mysql engine Dec 15 20:04:01 ispc CRON[1678757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:04:02 ispc CRON[1678757]: pam_unix(cron:session): session closed for user root Dec 15 20:04:23 ispc sshd[1678770]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:04:37 ispc sshd[1678772]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 20:05:01 ispc CRON[1678779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:05:01 ispc CRON[1678780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:05:01 ispc CRON[1678781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:05:01 ispc CRON[1678782]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:05:02 ispc CRON[1678780]: pam_unix(cron:session): session closed for user root Dec 15 20:05:02 ispc CRON[1678782]: pam_unix(cron:session): session closed for user getmail Dec 15 20:05:03 ispc CRON[1678779]: pam_unix(cron:session): session closed for user root Dec 15 20:05:39 ispc CRON[1678781]: pam_unix(cron:session): session closed for user root Dec 15 20:05:39 ispc saslauthd[1678888]: pam_mysql - SELECT returned no result. Dec 15 20:05:39 ispc saslauthd[1678888]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:05:39 ispc saslauthd[1678888]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:05:46 ispc saslauthd[1678889]: pam_mysql - SELECT returned no result. Dec 15 20:05:46 ispc saslauthd[1678889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:05:46 ispc saslauthd[1678889]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:06:01 ispc CRON[1678893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:06:05 ispc saslauthd[1678905]: pam_mysql - SELECT returned no result. Dec 15 20:06:05 ispc saslauthd[1678905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:06:05 ispc saslauthd[1678905]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:06:12 ispc saslauthd[1678910]: pam_mysql - SELECT returned no result. Dec 15 20:06:12 ispc saslauthd[1678910]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:06:12 ispc saslauthd[1678910]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:06:19 ispc saslauthd[1678917]: pam_mysql - SELECT returned no result. Dec 15 20:06:19 ispc saslauthd[1678917]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:06:19 ispc saslauthd[1678917]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:06:54 ispc saslauthd[1678938]: pam_mysql - SELECT returned no result. Dec 15 20:06:54 ispc saslauthd[1678938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:06:54 ispc saslauthd[1678938]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:07:01 ispc CRON[1678939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:07:02 ispc CRON[1678939]: pam_unix(cron:session): session closed for user root Dec 15 20:07:23 ispc sshd[1678962]: Invalid user klape from 67.205.163.146 Dec 15 20:07:23 ispc sshd[1678964]: Invalid user ubuntu from 67.205.163.146 Dec 15 20:08:01 ispc CRON[1678992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:08:01 ispc CRON[1678992]: pam_unix(cron:session): session closed for user root Dec 15 20:09:01 ispc CRON[1679038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:09:01 ispc CRON[1679039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:09:02 ispc CRON[1679038]: pam_unix(cron:session): session closed for user root Dec 15 20:09:02 ispc CRON[1679039]: pam_unix(cron:session): session closed for user root Dec 15 20:09:30 ispc postfix/smtpd[1679075]: sql auxprop plugin using mysql engine Dec 15 20:09:30 ispc saslauthd[1679077]: pam_mysql - SELECT returned no result. Dec 15 20:09:30 ispc saslauthd[1679077]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:30 ispc saslauthd[1679077]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:33 ispc postfix/smtpd[1679080]: sql auxprop plugin using mysql engine Dec 15 20:09:33 ispc saslauthd[1679081]: pam_mysql - SELECT returned no result. Dec 15 20:09:33 ispc saslauthd[1679081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:33 ispc saslauthd[1679081]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:34 ispc saslauthd[1679082]: pam_mysql - SELECT returned no result. Dec 15 20:09:34 ispc saslauthd[1679082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:34 ispc saslauthd[1679082]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:35 ispc saslauthd[1679084]: pam_mysql - SELECT returned no result. Dec 15 20:09:35 ispc saslauthd[1679084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:35 ispc saslauthd[1679084]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:36 ispc saslauthd[1679085]: pam_mysql - SELECT returned no result. Dec 15 20:09:36 ispc saslauthd[1679085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:36 ispc saslauthd[1679085]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:38 ispc saslauthd[1679091]: pam_mysql - SELECT returned no result. Dec 15 20:09:38 ispc saslauthd[1679091]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:38 ispc saslauthd[1679091]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:38 ispc saslauthd[1679092]: pam_mysql - SELECT returned no result. Dec 15 20:09:38 ispc saslauthd[1679092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:38 ispc saslauthd[1679092]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:42 ispc saslauthd[1679093]: pam_mysql - SELECT returned no result. Dec 15 20:09:42 ispc saslauthd[1679093]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:42 ispc saslauthd[1679093]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:09:55 ispc saslauthd[1679098]: pam_mysql - SELECT returned no result. Dec 15 20:09:55 ispc saslauthd[1679098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:09:55 ispc saslauthd[1679098]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:10:01 ispc CRON[1679104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:10:01 ispc CRON[1679105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:10:01 ispc CRON[1679106]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:10:01 ispc CRON[1679107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:10:01 ispc CRON[1679108]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:10:01 ispc CRON[1679105]: pam_unix(cron:session): session closed for user root Dec 15 20:10:01 ispc CRON[1679106]: pam_unix(cron:session): session closed for user www-data Dec 15 20:10:01 ispc CRON[1679108]: pam_unix(cron:session): session closed for user getmail Dec 15 20:10:02 ispc CRON[1679107]: pam_unix(cron:session): session closed for user root Dec 15 20:10:02 ispc CRON[1679104]: pam_unix(cron:session): session closed for user root Dec 15 20:10:17 ispc sshd[1679186]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:10:18 ispc saslauthd[1679188]: pam_mysql - SELECT returned no result. Dec 15 20:10:18 ispc saslauthd[1679188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:10:18 ispc saslauthd[1679188]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:11:01 ispc CRON[1679212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:11:02 ispc CRON[1679212]: pam_unix(cron:session): session closed for user root Dec 15 20:11:27 ispc sshd[1679240]: Invalid user martof from 211.23.78.98 Dec 15 20:11:35 ispc sshd[1679246]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 20:11:56 ispc postfix/smtpd[1679256]: sql auxprop plugin using mysql engine Dec 15 20:11:57 ispc postfix/smtpd[1679258]: sql auxprop plugin using mysql engine Dec 15 20:11:59 ispc postfix/smtpd[1679259]: sql auxprop plugin using mysql engine Dec 15 20:12:01 ispc CRON[1679264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:12:02 ispc CRON[1679264]: pam_unix(cron:session): session closed for user root Dec 15 20:13:01 ispc CRON[1679310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:13:02 ispc CRON[1679310]: pam_unix(cron:session): session closed for user root Dec 15 20:13:11 ispc saslauthd[1679327]: pam_mysql - SELECT returned no result. Dec 15 20:13:11 ispc saslauthd[1679327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:13:11 ispc saslauthd[1679327]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:13:13 ispc sshd[1679332]: Invalid user projectoutdoor from 160.250.132.138 Dec 15 20:13:14 ispc sshd[1679325]: Invalid user ubuntu from 36.50.177.171 Dec 15 20:13:14 ispc sshd[1679323]: Invalid user klape from 36.50.177.171 Dec 15 20:14:01 ispc CRON[1679358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:14:02 ispc CRON[1679358]: pam_unix(cron:session): session closed for user root Dec 15 20:14:24 ispc postfix/smtpd[1679392]: sql auxprop plugin using mysql engine Dec 15 20:14:54 ispc sshd[1679409]: Invalid user blceu from 211.23.78.98 Dec 15 20:15:01 ispc CRON[1679415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:15:01 ispc CRON[1679416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:15:01 ispc CRON[1679417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:15:01 ispc CRON[1679418]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:15:01 ispc CRON[1679416]: pam_unix(cron:session): session closed for user root Dec 15 20:15:01 ispc CRON[1679418]: pam_unix(cron:session): session closed for user getmail Dec 15 20:15:01 ispc CRON[1679417]: pam_unix(cron:session): session closed for user root Dec 15 20:15:02 ispc CRON[1679415]: pam_unix(cron:session): session closed for user root Dec 15 20:15:39 ispc postfix/smtpd[1679511]: sql auxprop plugin using mysql engine Dec 15 20:15:39 ispc postfix/smtpd[1679513]: sql auxprop plugin using mysql engine Dec 15 20:15:40 ispc postfix/smtpd[1679514]: sql auxprop plugin using mysql engine Dec 15 20:16:01 ispc CRON[1679526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:16:01 ispc CRON[1679526]: pam_unix(cron:session): session closed for user root Dec 15 20:17:00 ispc postfix/smtpd[1679570]: sql auxprop plugin using mysql engine Dec 15 20:17:01 ispc saslauthd[1679571]: pam_mysql - SELECT returned no result. Dec 15 20:17:01 ispc saslauthd[1679571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:17:01 ispc saslauthd[1679571]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:17:01 ispc CRON[1679572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:17:02 ispc CRON[1679572]: pam_unix(cron:session): session closed for user root Dec 15 20:17:04 ispc saslauthd[1679583]: pam_mysql - SELECT returned no result. Dec 15 20:17:04 ispc saslauthd[1679583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:17:04 ispc saslauthd[1679583]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:17:10 ispc saslauthd[1679588]: pam_mysql - SELECT returned no result. Dec 15 20:17:10 ispc saslauthd[1679588]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:17:10 ispc saslauthd[1679588]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:17:26 ispc saslauthd[1679593]: pam_mysql - SELECT returned no result. Dec 15 20:17:26 ispc saslauthd[1679593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:17:26 ispc saslauthd[1679593]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:17:28 ispc sshd[1679594]: Invalid user telecomadmin from 80.94.95.115 Dec 15 20:17:47 ispc saslauthd[1679610]: pam_mysql - SELECT returned no result. Dec 15 20:17:47 ispc saslauthd[1679610]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:17:47 ispc saslauthd[1679610]: do_auth : auth failure: [user=Admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:17:49 ispc sshd[1679611]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:17:49 ispc sshd[1679611]: Invalid user blceu from 103.28.37.227 Dec 15 20:18:01 ispc CRON[1679626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:18:02 ispc CRON[1679626]: pam_unix(cron:session): session closed for user root Dec 15 20:18:03 ispc postfix/smtpd[1679637]: sql auxprop plugin using mysql engine Dec 15 20:18:07 ispc sshd[1679640]: Invalid user tshombeknife from 185.12.204.239 Dec 15 20:18:33 ispc sshd[1679656]: Invalid user pronajemplosin from 91.108.104.140 Dec 15 20:19:01 ispc CRON[1679671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:19:01 ispc CRON[1679671]: pam_unix(cron:session): session closed for user root Dec 15 20:19:34 ispc sshd[1679698]: Invalid user klape from 2.57.217.229 Dec 15 20:19:35 ispc sshd[1679700]: Invalid user ubuntu from 2.57.217.229 Dec 15 20:19:54 ispc postfix/smtpd[1679712]: sql auxprop plugin using mysql engine Dec 15 20:19:54 ispc postfix/smtpd[1679714]: sql auxprop plugin using mysql engine Dec 15 20:19:55 ispc postfix/smtpd[1679715]: sql auxprop plugin using mysql engine Dec 15 20:20:01 ispc CRON[1679720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:20:01 ispc CRON[1679721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:20:01 ispc CRON[1679722]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:20:01 ispc CRON[1679723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:20:01 ispc CRON[1679724]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:20:01 ispc CRON[1679722]: pam_unix(cron:session): session closed for user www-data Dec 15 20:20:01 ispc CRON[1679721]: pam_unix(cron:session): session closed for user root Dec 15 20:20:01 ispc CRON[1679724]: pam_unix(cron:session): session closed for user getmail Dec 15 20:20:02 ispc CRON[1679723]: pam_unix(cron:session): session closed for user root Dec 15 20:20:03 ispc CRON[1679720]: pam_unix(cron:session): session closed for user root Dec 15 20:20:16 ispc sshd[1679802]: Invalid user martof from 211.110.229.128 Dec 15 20:20:49 ispc sshd[1679819]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:20:49 ispc sshd[1679819]: Invalid user ziplines from 114.7.163.154 Dec 15 20:21:01 ispc CRON[1679825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:21:01 ispc CRON[1679826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:21:01 ispc CRON[1679825]: pam_unix(cron:session): session closed for user root Dec 15 20:21:01 ispc CRON[1679826]: pam_unix(cron:session): session closed for user root Dec 15 20:21:09 ispc saslauthd[1679843]: pam_mysql - SELECT returned no result. Dec 15 20:21:09 ispc saslauthd[1679843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:21:09 ispc saslauthd[1679843]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:21:48 ispc sshd[1679863]: Invalid user martof from 52.232.19.79 Dec 15 20:22:01 ispc CRON[1679871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:22:02 ispc CRON[1679871]: pam_unix(cron:session): session closed for user root Dec 15 20:22:12 ispc postfix/smtpd[1679886]: sql auxprop plugin using mysql engine Dec 15 20:22:12 ispc postfix/smtpd[1679888]: sql auxprop plugin using mysql engine Dec 15 20:22:12 ispc postfix/smtpd[1679890]: sql auxprop plugin using mysql engine Dec 15 20:23:01 ispc CRON[1679928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:23:01 ispc CRON[1679928]: pam_unix(cron:session): session closed for user root Dec 15 20:23:31 ispc postfix/smtpd[1679955]: sql auxprop plugin using mysql engine Dec 15 20:23:31 ispc saslauthd[1679957]: pam_mysql - SELECT returned no result. Dec 15 20:23:31 ispc saslauthd[1679957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:23:31 ispc saslauthd[1679957]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:24:01 ispc CRON[1679972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:24:02 ispc CRON[1679972]: pam_unix(cron:session): session closed for user root Dec 15 20:25:01 ispc CRON[1680010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:25:01 ispc CRON[1680011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:25:01 ispc CRON[1680012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:25:01 ispc CRON[1680013]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:25:02 ispc CRON[1680011]: pam_unix(cron:session): session closed for user root Dec 15 20:25:02 ispc CRON[1680013]: pam_unix(cron:session): session closed for user getmail Dec 15 20:25:02 ispc CRON[1680012]: pam_unix(cron:session): session closed for user root Dec 15 20:25:02 ispc CRON[1680010]: pam_unix(cron:session): session closed for user root Dec 15 20:25:15 ispc postfix/smtpd[1680093]: sql auxprop plugin using mysql engine Dec 15 20:25:15 ispc postfix/smtpd[1680095]: sql auxprop plugin using mysql engine Dec 15 20:25:15 ispc postfix/smtpd[1680096]: sql auxprop plugin using mysql engine Dec 15 20:25:15 ispc postfix/smtpd[1680097]: sql auxprop plugin using mysql engine Dec 15 20:25:24 ispc saslauthd[1680102]: pam_mysql - SELECT returned no result. Dec 15 20:25:24 ispc saslauthd[1680102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:25:24 ispc saslauthd[1680102]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:26:01 ispc CRON[1680121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:26:03 ispc CRON[1680121]: pam_unix(cron:session): session closed for user root Dec 15 20:26:28 ispc CRON[1678893]: pam_unix(cron:session): session closed for user root Dec 15 20:26:54 ispc sshd[1680148]: Did not receive identification string from 45.140.17.97 Dec 15 20:27:01 ispc CRON[1680149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:27:02 ispc CRON[1680149]: pam_unix(cron:session): session closed for user root Dec 15 20:27:26 ispc saslauthd[1680164]: pam_mysql - SELECT returned no result. Dec 15 20:27:26 ispc saslauthd[1680164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:27:26 ispc saslauthd[1680164]: do_auth : auth failure: [user=debbie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:27:40 ispc sshd[1680165]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:28:01 ispc CRON[1680179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:28:02 ispc CRON[1680179]: pam_unix(cron:session): session closed for user root Dec 15 20:28:03 ispc saslauthd[1680191]: pam_mysql - SELECT returned no result. Dec 15 20:28:03 ispc saslauthd[1680191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:28:03 ispc saslauthd[1680191]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:29:01 ispc CRON[1680195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:29:02 ispc CRON[1680195]: pam_unix(cron:session): session closed for user root Dec 15 20:29:58 ispc sshd[1680211]: Invalid user ziplines from 52.232.19.79 Dec 15 20:30:01 ispc CRON[1680213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:30:01 ispc CRON[1680214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:30:01 ispc CRON[1680215]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:30:01 ispc CRON[1680216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:30:01 ispc CRON[1680217]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:30:01 ispc CRON[1680215]: pam_unix(cron:session): session closed for user www-data Dec 15 20:30:01 ispc CRON[1680217]: pam_unix(cron:session): session closed for user getmail Dec 15 20:30:01 ispc CRON[1680214]: pam_unix(cron:session): session closed for user root Dec 15 20:30:03 ispc CRON[1680213]: pam_unix(cron:session): session closed for user root Dec 15 20:30:08 ispc postfix/smtpd[1680391]: sql auxprop plugin using mysql engine Dec 15 20:30:09 ispc saslauthd[1680402]: pam_mysql - SELECT returned no result. Dec 15 20:30:09 ispc saslauthd[1680402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:30:09 ispc saslauthd[1680402]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:30:42 ispc CRON[1680216]: pam_unix(cron:session): session closed for user root Dec 15 20:31:01 ispc CRON[1680409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:31:25 ispc sshd[1680428]: Invalid user capstan from 103.172.236.164 Dec 15 20:32:01 ispc CRON[1680446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:32:02 ispc CRON[1680446]: pam_unix(cron:session): session closed for user root Dec 15 20:32:53 ispc postfix/smtpd[1680490]: sql auxprop plugin using mysql engine Dec 15 20:32:54 ispc saslauthd[1680492]: pam_mysql - SELECT returned no result. Dec 15 20:32:54 ispc saslauthd[1680492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:32:54 ispc saslauthd[1680492]: do_auth : auth failure: [user=Admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:33:01 ispc CRON[1680497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:33:02 ispc CRON[1680497]: pam_unix(cron:session): session closed for user root Dec 15 20:33:06 ispc sshd[1680508]: Invalid user admin from 139.19.117.197 Dec 15 20:33:39 ispc postfix/smtpd[1680528]: sql auxprop plugin using mysql engine Dec 15 20:33:55 ispc saslauthd[1680534]: pam_mysql - SELECT returned no result. Dec 15 20:33:55 ispc saslauthd[1680534]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:33:55 ispc saslauthd[1680534]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:34:01 ispc CRON[1680539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:34:02 ispc CRON[1680539]: pam_unix(cron:session): session closed for user root Dec 15 20:34:32 ispc sshd[1680563]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:34:34 ispc sshd[1680565]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:34:34 ispc sshd[1680565]: Invalid user klape from 189.89.20.45 Dec 15 20:34:37 ispc sshd[1680568]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:34:37 ispc sshd[1680568]: Invalid user ubuntu from 189.89.20.45 Dec 15 20:35:01 ispc CRON[1680584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:35:01 ispc CRON[1680585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:35:01 ispc CRON[1680586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:35:01 ispc CRON[1680587]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:35:01 ispc CRON[1680585]: pam_unix(cron:session): session closed for user root Dec 15 20:35:01 ispc CRON[1680587]: pam_unix(cron:session): session closed for user getmail Dec 15 20:35:02 ispc CRON[1680586]: pam_unix(cron:session): session closed for user root Dec 15 20:35:02 ispc CRON[1680584]: pam_unix(cron:session): session closed for user root Dec 15 20:35:40 ispc sshd[1680677]: Invalid user ziplines from 103.77.207.53 Dec 15 20:35:47 ispc postfix/smtpd[1680680]: sql auxprop plugin using mysql engine Dec 15 20:36:01 ispc CRON[1680689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:36:02 ispc CRON[1680689]: pam_unix(cron:session): session closed for user root Dec 15 20:37:01 ispc CRON[1680733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:37:02 ispc CRON[1680733]: pam_unix(cron:session): session closed for user root Dec 15 20:37:28 ispc sshd[1680754]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:37:35 ispc postfix/smtpd[1680762]: sql auxprop plugin using mysql engine Dec 15 20:37:37 ispc saslauthd[1680764]: pam_mysql - SELECT returned no result. Dec 15 20:37:37 ispc saslauthd[1680764]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:37:37 ispc saslauthd[1680764]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:37:44 ispc postfix/smtpd[1680773]: sql auxprop plugin using mysql engine Dec 15 20:37:44 ispc postfix/smtpd[1680774]: sql auxprop plugin using mysql engine Dec 15 20:37:45 ispc postfix/smtpd[1680775]: sql auxprop plugin using mysql engine Dec 15 20:38:01 ispc CRON[1680790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:38:03 ispc CRON[1680790]: pam_unix(cron:session): session closed for user root Dec 15 20:39:01 ispc CRON[1680834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:39:01 ispc CRON[1680835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:39:01 ispc CRON[1680834]: pam_unix(cron:session): session closed for user root Dec 15 20:39:02 ispc CRON[1680835]: pam_unix(cron:session): session closed for user root Dec 15 20:40:01 ispc CRON[1680882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:40:01 ispc CRON[1680883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:40:01 ispc CRON[1680884]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:40:01 ispc CRON[1680885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:40:01 ispc CRON[1680886]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:40:01 ispc CRON[1680884]: pam_unix(cron:session): session closed for user www-data Dec 15 20:40:01 ispc CRON[1680883]: pam_unix(cron:session): session closed for user root Dec 15 20:40:01 ispc CRON[1680886]: pam_unix(cron:session): session closed for user getmail Dec 15 20:40:02 ispc CRON[1680885]: pam_unix(cron:session): session closed for user root Dec 15 20:40:03 ispc CRON[1680882]: pam_unix(cron:session): session closed for user root Dec 15 20:40:34 ispc postfix/smtpd[1680977]: sql auxprop plugin using mysql engine Dec 15 20:40:34 ispc postfix/smtpd[1680979]: sql auxprop plugin using mysql engine Dec 15 20:40:39 ispc postfix/smtpd[1680980]: sql auxprop plugin using mysql engine Dec 15 20:41:01 ispc CRON[1680997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:41:02 ispc CRON[1680997]: pam_unix(cron:session): session closed for user root Dec 15 20:41:21 ispc postfix/smtpd[1681013]: sql auxprop plugin using mysql engine Dec 15 20:41:22 ispc saslauthd[1681018]: pam_mysql - SELECT returned no result. Dec 15 20:41:22 ispc saslauthd[1681018]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:41:22 ispc saslauthd[1681018]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:41:54 ispc sshd[1681028]: Invalid user ziplines from 118.218.219.250 Dec 15 20:42:01 ispc CRON[1681034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:42:02 ispc CRON[1681034]: pam_unix(cron:session): session closed for user root Dec 15 20:43:01 ispc CRON[1681079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:43:03 ispc CRON[1681079]: pam_unix(cron:session): session closed for user root Dec 15 20:43:27 ispc postfix/smtpd[1681102]: sql auxprop plugin using mysql engine Dec 15 20:43:27 ispc postfix/smtpd[1681104]: sql auxprop plugin using mysql engine Dec 15 20:43:28 ispc postfix/smtpd[1681105]: sql auxprop plugin using mysql engine Dec 15 20:44:01 ispc CRON[1681119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:44:02 ispc CRON[1681119]: pam_unix(cron:session): session closed for user root Dec 15 20:44:33 ispc postfix/smtpd[1681143]: sql auxprop plugin using mysql engine Dec 15 20:44:34 ispc saslauthd[1681148]: pam_mysql - SELECT returned no result. Dec 15 20:44:34 ispc saslauthd[1681148]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:44:34 ispc saslauthd[1681148]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:45:01 ispc CRON[1681161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:45:01 ispc CRON[1681162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:45:01 ispc CRON[1681163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:45:01 ispc CRON[1681164]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:45:01 ispc CRON[1681162]: pam_unix(cron:session): session closed for user root Dec 15 20:45:01 ispc CRON[1681164]: pam_unix(cron:session): session closed for user getmail Dec 15 20:45:02 ispc CRON[1681163]: pam_unix(cron:session): session closed for user root Dec 15 20:45:02 ispc CRON[1681161]: pam_unix(cron:session): session closed for user root Dec 15 20:45:11 ispc saslauthd[1681241]: pam_mysql - SELECT returned no result. Dec 15 20:45:11 ispc saslauthd[1681241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:45:11 ispc saslauthd[1681241]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:45:33 ispc sshd[1681251]: Invalid user blceu from 139.59.66.222 Dec 15 20:46:01 ispc CRON[1681265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:46:02 ispc CRON[1681265]: pam_unix(cron:session): session closed for user root Dec 15 20:46:04 ispc sshd[1681276]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 20:46:04 ispc sshd[1681276]: Invalid user blceu from 157.245.115.125 Dec 15 20:46:58 ispc sshd[1681300]: Invalid user martof from 118.218.219.250 Dec 15 20:47:01 ispc CRON[1681314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:47:03 ispc CRON[1681314]: pam_unix(cron:session): session closed for user root Dec 15 20:47:56 ispc postfix/smtpd[1681357]: sql auxprop plugin using mysql engine Dec 15 20:47:58 ispc saslauthd[1681359]: pam_mysql - SELECT returned no result. Dec 15 20:47:58 ispc saslauthd[1681359]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:47:58 ispc saslauthd[1681359]: do_auth : auth failure: [user=Admin5] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:48:01 ispc CRON[1681364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:48:01 ispc CRON[1681364]: pam_unix(cron:session): session closed for user root Dec 15 20:48:27 ispc sshd[1681383]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 20:48:56 ispc sshd[1681400]: Invalid user capstan from 207.180.250.25 Dec 15 20:48:59 ispc postfix/smtpd[1681403]: sql auxprop plugin using mysql engine Dec 15 20:49:01 ispc CRON[1681410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:49:03 ispc CRON[1681410]: pam_unix(cron:session): session closed for user root Dec 15 20:49:14 ispc sshd[1681427]: Invalid user klape from 200.32.52.150 Dec 15 20:49:16 ispc sshd[1681429]: Invalid user ubuntu from 200.32.52.150 Dec 15 20:49:33 ispc saslauthd[1681443]: pam_mysql - SELECT returned no result. Dec 15 20:49:33 ispc saslauthd[1681443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:49:33 ispc saslauthd[1681443]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:49:34 ispc sshd[1681440]: Invalid user pronajemplosin from 165.232.190.97 Dec 15 20:50:01 ispc CRON[1681454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:50:01 ispc CRON[1681455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:50:01 ispc CRON[1681456]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 20:50:01 ispc CRON[1681457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:50:01 ispc CRON[1681458]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:50:01 ispc CRON[1681456]: pam_unix(cron:session): session closed for user www-data Dec 15 20:50:01 ispc CRON[1681455]: pam_unix(cron:session): session closed for user root Dec 15 20:50:01 ispc CRON[1681458]: pam_unix(cron:session): session closed for user getmail Dec 15 20:50:01 ispc CRON[1681457]: pam_unix(cron:session): session closed for user root Dec 15 20:50:02 ispc CRON[1681454]: pam_unix(cron:session): session closed for user root Dec 15 20:50:21 ispc sshd[1681540]: Invalid user matlbula from 185.12.204.239 Dec 15 20:51:01 ispc CRON[1681559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:51:02 ispc CRON[1681559]: pam_unix(cron:session): session closed for user root Dec 15 20:51:18 ispc postfix/smtpd[1681579]: sql auxprop plugin using mysql engine Dec 15 20:51:23 ispc CRON[1680409]: pam_unix(cron:session): session closed for user root Dec 15 20:51:50 ispc sshd[1681590]: Invalid user martof from 160.250.132.138 Dec 15 20:52:01 ispc CRON[1681599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:52:02 ispc CRON[1681599]: pam_unix(cron:session): session closed for user root Dec 15 20:53:01 ispc CRON[1681627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:53:02 ispc CRON[1681627]: pam_unix(cron:session): session closed for user root Dec 15 20:53:12 ispc saslauthd[1681640]: pam_mysql - SELECT returned no result. Dec 15 20:53:12 ispc saslauthd[1681640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:53:12 ispc saslauthd[1681640]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:54:01 ispc CRON[1681648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:54:02 ispc CRON[1681648]: pam_unix(cron:session): session closed for user root Dec 15 20:54:08 ispc saslauthd[1681661]: pam_mysql - SELECT returned no result. Dec 15 20:54:08 ispc saslauthd[1681661]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:54:08 ispc saslauthd[1681661]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:54:11 ispc saslauthd[1681662]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 15 20:54:11 ispc saslauthd[1681662]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 15 20:54:42 ispc postfix/smtpd[1681667]: sql auxprop plugin using mysql engine Dec 15 20:54:42 ispc postfix/smtpd[1681670]: sql auxprop plugin using mysql engine Dec 15 20:54:42 ispc postfix/smtpd[1681671]: sql auxprop plugin using mysql engine Dec 15 20:55:01 ispc CRON[1681672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:55:01 ispc CRON[1681673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:55:01 ispc CRON[1681674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:55:01 ispc CRON[1681675]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 20:55:01 ispc CRON[1681673]: pam_unix(cron:session): session closed for user root Dec 15 20:55:01 ispc CRON[1681675]: pam_unix(cron:session): session closed for user getmail Dec 15 20:55:02 ispc CRON[1681672]: pam_unix(cron:session): session closed for user root Dec 15 20:55:17 ispc saslauthd[1681783]: pam_mysql - SELECT returned no result. Dec 15 20:55:17 ispc saslauthd[1681783]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:55:17 ispc saslauthd[1681783]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:55:25 ispc CRON[1681674]: pam_unix(cron:session): session closed for user root Dec 15 20:56:01 ispc CRON[1681785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:56:42 ispc sshd[1681812]: Invalid user ziplines from 139.59.66.222 Dec 15 20:56:49 ispc postfix/smtpd[1681818]: sql auxprop plugin using mysql engine Dec 15 20:56:50 ispc postfix/smtpd[1681820]: sql auxprop plugin using mysql engine Dec 15 20:56:50 ispc postfix/smtpd[1681821]: sql auxprop plugin using mysql engine Dec 15 20:57:01 ispc CRON[1681831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:57:02 ispc CRON[1681831]: pam_unix(cron:session): session closed for user root Dec 15 20:57:27 ispc saslauthd[1681857]: pam_mysql - SELECT returned no result. Dec 15 20:57:27 ispc saslauthd[1681857]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:57:27 ispc saslauthd[1681857]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:57:57 ispc saslauthd[1681881]: pam_mysql - SELECT returned no result. Dec 15 20:57:57 ispc saslauthd[1681881]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:57:57 ispc saslauthd[1681881]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 20:58:01 ispc CRON[1681882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:58:02 ispc CRON[1681882]: pam_unix(cron:session): session closed for user root Dec 15 20:58:04 ispc postfix/smtpd[1681897]: sql auxprop plugin using mysql engine Dec 15 20:58:05 ispc saslauthd[1681899]: pam_mysql - SELECT returned no result. Dec 15 20:58:05 ispc saslauthd[1681899]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:58:05 ispc saslauthd[1681899]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 20:58:11 ispc sshd[1681902]: Invalid user klape from 187.190.35.163 Dec 15 20:58:12 ispc sshd[1681904]: Invalid user ubuntu from 187.190.35.163 Dec 15 20:58:58 ispc sshd[1681931]: Did not receive identification string from 192.227.134.84 Dec 15 20:59:01 ispc CRON[1681933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 20:59:02 ispc CRON[1681933]: pam_unix(cron:session): session closed for user root Dec 15 20:59:40 ispc saslauthd[1681963]: pam_mysql - SELECT returned no result. Dec 15 20:59:40 ispc saslauthd[1681963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 20:59:40 ispc saslauthd[1681963]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:00:01 ispc CRON[1681973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:00:01 ispc CRON[1681974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:00:01 ispc CRON[1681975]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:00:01 ispc CRON[1681976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:00:01 ispc CRON[1681977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:00:01 ispc CRON[1681978]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:00:01 ispc CRON[1681975]: pam_unix(cron:session): session closed for user www-data Dec 15 21:00:01 ispc CRON[1681978]: pam_unix(cron:session): session closed for user getmail Dec 15 21:00:01 ispc CRON[1681974]: pam_unix(cron:session): session closed for user root Dec 15 21:00:02 ispc CRON[1681973]: pam_unix(cron:session): session closed for user root Dec 15 21:00:02 ispc CRON[1681977]: pam_unix(cron:session): session closed for user root Dec 15 21:00:02 ispc CRON[1681976]: pam_unix(cron:session): session closed for user root Dec 15 21:00:07 ispc sshd[1682136]: Invalid user pronajemplosin from 5.132.127.172 Dec 15 21:00:50 ispc sshd[1682151]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:00:50 ispc sshd[1682151]: Invalid user ziplines from 157.245.115.125 Dec 15 21:01:01 ispc CRON[1682164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:01:02 ispc CRON[1682164]: pam_unix(cron:session): session closed for user root Dec 15 21:01:03 ispc sshd[1682175]: Invalid user racingkennel from 185.12.204.239 Dec 15 21:02:01 ispc CRON[1682204]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 21:02:01 ispc CRON[1682205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:02:01 ispc CRON[1682205]: pam_unix(cron:session): session closed for user root Dec 15 21:02:08 ispc postfix/smtpd[1682391]: sql auxprop plugin using mysql engine Dec 15 21:02:09 ispc saslauthd[1682398]: pam_mysql - SELECT returned no result. Dec 15 21:02:09 ispc saslauthd[1682398]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:02:09 ispc saslauthd[1682398]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:02:27 ispc saslauthd[1682836]: pam_mysql - SELECT returned no result. Dec 15 21:02:27 ispc saslauthd[1682836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:02:27 ispc saslauthd[1682836]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:02:37 ispc saslauthd[1682932]: pam_mysql - SELECT returned no result. Dec 15 21:02:37 ispc saslauthd[1682932]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:02:37 ispc saslauthd[1682932]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:02:43 ispc saslauthd[1683000]: pam_mysql - SELECT returned no result. Dec 15 21:02:43 ispc saslauthd[1683000]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:02:43 ispc saslauthd[1683000]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:02:57 ispc saslauthd[1683085]: pam_mysql - SELECT returned no result. Dec 15 21:02:57 ispc saslauthd[1683085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:02:57 ispc saslauthd[1683085]: do_auth : auth failure: [user=Administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:03:01 ispc CRON[1683089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:03:02 ispc CRON[1683089]: pam_unix(cron:session): session closed for user root Dec 15 21:03:10 ispc saslauthd[1683104]: pam_mysql - SELECT returned no result. Dec 15 21:03:10 ispc saslauthd[1683104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:03:10 ispc saslauthd[1683104]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:03:28 ispc CRON[1682204]: pam_unix(cron:session): session closed for user logcheck Dec 15 21:03:37 ispc postfix/smtpd[1683298]: sql auxprop plugin using mysql engine Dec 15 21:04:01 ispc CRON[1683314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:04:01 ispc CRON[1683314]: pam_unix(cron:session): session closed for user root Dec 15 21:04:08 ispc saslauthd[1683331]: pam_mysql - SELECT returned no result. Dec 15 21:04:08 ispc saslauthd[1683331]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:04:08 ispc saslauthd[1683331]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:04:14 ispc saslauthd[1683332]: pam_mysql - SELECT returned no result. Dec 15 21:04:14 ispc saslauthd[1683332]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:04:14 ispc saslauthd[1683332]: do_auth : auth failure: [user=sales@diamant-di.com] [service=smtp] [realm=diamant-di.com] [mech=pam] [reason=PAM auth error] Dec 15 21:04:26 ispc postfix/smtpd[1683338]: sql auxprop plugin using mysql engine Dec 15 21:04:26 ispc postfix/smtpd[1683340]: sql auxprop plugin using mysql engine Dec 15 21:04:26 ispc postfix/smtpd[1683341]: sql auxprop plugin using mysql engine Dec 15 21:05:01 ispc CRON[1683363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:05:01 ispc CRON[1683364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:05:01 ispc CRON[1683365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:05:01 ispc CRON[1683366]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:05:01 ispc CRON[1683364]: pam_unix(cron:session): session closed for user root Dec 15 21:05:01 ispc CRON[1683366]: pam_unix(cron:session): session closed for user getmail Dec 15 21:05:02 ispc CRON[1683365]: pam_unix(cron:session): session closed for user root Dec 15 21:05:02 ispc CRON[1683363]: pam_unix(cron:session): session closed for user root Dec 15 21:06:01 ispc CRON[1683468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:06:02 ispc CRON[1683468]: pam_unix(cron:session): session closed for user root Dec 15 21:06:26 ispc postfix/smtpd[1683487]: sql auxprop plugin using mysql engine Dec 15 21:06:27 ispc saslauthd[1683489]: pam_mysql - SELECT returned no result. Dec 15 21:06:27 ispc saslauthd[1683489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:06:27 ispc saslauthd[1683489]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:07:01 ispc CRON[1683503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:07:01 ispc CRON[1683503]: pam_unix(cron:session): session closed for user root Dec 15 21:07:08 ispc saslauthd[1683521]: pam_mysql - SELECT returned no result. Dec 15 21:07:08 ispc saslauthd[1683521]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:08 ispc saslauthd[1683521]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:11 ispc saslauthd[1683523]: pam_mysql - SELECT returned no result. Dec 15 21:07:11 ispc saslauthd[1683523]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:11 ispc saslauthd[1683523]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:11 ispc postfix/smtpd[1683522]: sql auxprop plugin using mysql engine Dec 15 21:07:11 ispc saslauthd[1683525]: pam_mysql - SELECT returned no result. Dec 15 21:07:11 ispc saslauthd[1683525]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:11 ispc saslauthd[1683525]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:11 ispc saslauthd[1683526]: pam_mysql - SELECT returned no result. Dec 15 21:07:11 ispc saslauthd[1683526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:11 ispc saslauthd[1683526]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:13 ispc saslauthd[1683531]: pam_mysql - SELECT returned no result. Dec 15 21:07:13 ispc saslauthd[1683531]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:13 ispc saslauthd[1683531]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:14 ispc saslauthd[1683532]: pam_mysql - SELECT returned no result. Dec 15 21:07:14 ispc saslauthd[1683532]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:14 ispc saslauthd[1683532]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:15 ispc saslauthd[1683533]: pam_mysql - SELECT returned no result. Dec 15 21:07:15 ispc saslauthd[1683533]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:15 ispc saslauthd[1683533]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:19 ispc saslauthd[1683534]: pam_mysql - SELECT returned no result. Dec 15 21:07:19 ispc saslauthd[1683534]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:19 ispc saslauthd[1683534]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:07:55 ispc saslauthd[1683562]: pam_mysql - SELECT returned no result. Dec 15 21:07:55 ispc saslauthd[1683562]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:07:55 ispc saslauthd[1683562]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:08:02 ispc CRON[1683563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:08:02 ispc CRON[1683563]: pam_unix(cron:session): session closed for user root Dec 15 21:08:37 ispc sshd[1683592]: Invalid user capstan from 175.126.123.213 Dec 15 21:09:01 ispc CRON[1683609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:09:01 ispc CRON[1683610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:09:01 ispc CRON[1683609]: pam_unix(cron:session): session closed for user root Dec 15 21:09:02 ispc CRON[1683610]: pam_unix(cron:session): session closed for user root Dec 15 21:09:21 ispc saslauthd[1683640]: pam_mysql - SELECT returned no result. Dec 15 21:09:21 ispc saslauthd[1683640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:09:21 ispc saslauthd[1683640]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:10:01 ispc CRON[1683663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:10:01 ispc CRON[1683664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:10:01 ispc CRON[1683665]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:10:01 ispc CRON[1683666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:10:01 ispc CRON[1683667]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:10:01 ispc CRON[1683664]: pam_unix(cron:session): session closed for user root Dec 15 21:10:01 ispc CRON[1683665]: pam_unix(cron:session): session closed for user www-data Dec 15 21:10:01 ispc CRON[1683667]: pam_unix(cron:session): session closed for user getmail Dec 15 21:10:02 ispc CRON[1683666]: pam_unix(cron:session): session closed for user root Dec 15 21:10:02 ispc CRON[1683663]: pam_unix(cron:session): session closed for user root Dec 15 21:11:01 ispc saslauthd[1683769]: pam_mysql - SELECT returned no result. Dec 15 21:11:01 ispc saslauthd[1683769]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:11:01 ispc saslauthd[1683769]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:11:01 ispc CRON[1683770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:11:02 ispc CRON[1683770]: pam_unix(cron:session): session closed for user root Dec 15 21:11:25 ispc sshd[1683795]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:11:25 ispc sshd[1683795]: Invalid user zednictvistastny from 103.112.245.93 Dec 15 21:11:53 ispc postfix/smtpd[1683811]: sql auxprop plugin using mysql engine Dec 15 21:11:53 ispc postfix/smtpd[1683813]: sql auxprop plugin using mysql engine Dec 15 21:11:53 ispc postfix/smtpd[1683814]: sql auxprop plugin using mysql engine Dec 15 21:12:01 ispc CRON[1683819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:12:02 ispc CRON[1683819]: pam_unix(cron:session): session closed for user root Dec 15 21:13:01 ispc CRON[1683867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:13:02 ispc CRON[1683867]: pam_unix(cron:session): session closed for user root Dec 15 21:13:57 ispc postfix/smtpd[1683902]: sql auxprop plugin using mysql engine Dec 15 21:13:57 ispc saslauthd[1683904]: pam_mysql - SELECT returned no result. Dec 15 21:13:57 ispc saslauthd[1683904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:13:57 ispc saslauthd[1683904]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:14:01 ispc CRON[1683909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:14:01 ispc CRON[1683909]: pam_unix(cron:session): session closed for user root Dec 15 21:14:02 ispc saslauthd[1683920]: pam_mysql - SELECT returned no result. Dec 15 21:14:02 ispc saslauthd[1683920]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:14:02 ispc saslauthd[1683920]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:14:16 ispc saslauthd[1683929]: pam_mysql - SELECT returned no result. Dec 15 21:14:16 ispc saslauthd[1683929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:14:16 ispc saslauthd[1683929]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:14:16 ispc sshd[1683927]: Invalid user pronajemplosin from 103.61.123.221 Dec 15 21:14:18 ispc sshd[1683936]: Invalid user blceu from 52.232.19.79 Dec 15 21:15:01 ispc CRON[1683961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:15:01 ispc CRON[1683962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:15:01 ispc CRON[1683963]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:15:02 ispc CRON[1683960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:15:02 ispc CRON[1683961]: pam_unix(cron:session): session closed for user root Dec 15 21:15:02 ispc CRON[1683963]: pam_unix(cron:session): session closed for user getmail Dec 15 21:15:02 ispc CRON[1683962]: pam_unix(cron:session): session closed for user root Dec 15 21:15:02 ispc CRON[1683960]: pam_unix(cron:session): session closed for user root Dec 15 21:15:09 ispc saslauthd[1684037]: pam_mysql - SELECT returned no result. Dec 15 21:15:09 ispc saslauthd[1684037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:15:09 ispc saslauthd[1684037]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:15:20 ispc postfix/smtpd[1684044]: sql auxprop plugin using mysql engine Dec 15 21:15:20 ispc postfix/smtpd[1684046]: sql auxprop plugin using mysql engine Dec 15 21:15:20 ispc postfix/smtpd[1684047]: sql auxprop plugin using mysql engine Dec 15 21:16:01 ispc CRON[1684071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:16:02 ispc CRON[1684071]: pam_unix(cron:session): session closed for user root Dec 15 21:16:15 ispc saslauthd[1684086]: pam_mysql - SELECT returned no result. Dec 15 21:16:15 ispc saslauthd[1684086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:16:15 ispc saslauthd[1684086]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:16:21 ispc CRON[1681785]: pam_unix(cron:session): session closed for user root Dec 15 21:17:01 ispc CRON[1684094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:17:02 ispc CRON[1684094]: pam_unix(cron:session): session closed for user root Dec 15 21:17:03 ispc postfix/smtpd[1684106]: sql auxprop plugin using mysql engine Dec 15 21:17:03 ispc postfix/smtpd[1684108]: sql auxprop plugin using mysql engine Dec 15 21:17:03 ispc postfix/smtpd[1684109]: sql auxprop plugin using mysql engine Dec 15 21:17:49 ispc saslauthd[1684116]: pam_mysql - SELECT returned no result. Dec 15 21:17:49 ispc saslauthd[1684116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:17:49 ispc saslauthd[1684116]: do_auth : auth failure: [user=AdvWebadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:18:01 ispc CRON[1684124]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 15 21:18:01 ispc CRON[1684125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:18:02 ispc CRON[1684125]: pam_unix(cron:session): session closed for user root Dec 15 21:18:05 ispc CRON[1684124]: pam_unix(cron:session): session closed for user amavis Dec 15 21:18:06 ispc postfix/smtpd[1684150]: sql auxprop plugin using mysql engine Dec 15 21:18:30 ispc saslauthd[1684153]: pam_mysql - SELECT returned no result. Dec 15 21:18:30 ispc saslauthd[1684153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:18:30 ispc saslauthd[1684153]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:18:39 ispc saslauthd[1684155]: pam_mysql - SELECT returned no result. Dec 15 21:18:39 ispc saslauthd[1684155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:18:39 ispc saslauthd[1684155]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:19:01 ispc CRON[1684156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:19:03 ispc CRON[1684156]: pam_unix(cron:session): session closed for user root Dec 15 21:19:20 ispc sshd[1684171]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 21:19:55 ispc postfix/smtpd[1684181]: sql auxprop plugin using mysql engine Dec 15 21:19:55 ispc postfix/smtpd[1684183]: sql auxprop plugin using mysql engine Dec 15 21:19:59 ispc sshd[1684180]: Invalid user admin from 80.94.95.115 Dec 15 21:20:01 ispc CRON[1684185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:20:01 ispc CRON[1684186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:20:01 ispc CRON[1684187]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:20:01 ispc CRON[1684188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:20:01 ispc CRON[1684189]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:20:01 ispc CRON[1684187]: pam_unix(cron:session): session closed for user www-data Dec 15 21:20:01 ispc CRON[1684186]: pam_unix(cron:session): session closed for user root Dec 15 21:20:01 ispc CRON[1684189]: pam_unix(cron:session): session closed for user getmail Dec 15 21:20:02 ispc CRON[1684185]: pam_unix(cron:session): session closed for user root Dec 15 21:20:39 ispc CRON[1684188]: pam_unix(cron:session): session closed for user root Dec 15 21:20:57 ispc sshd[1684296]: Invalid user ziplines from 211.45.175.153 Dec 15 21:21:01 ispc CRON[1684298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:21:01 ispc CRON[1684299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:21:01 ispc CRON[1684298]: pam_unix(cron:session): session closed for user root Dec 15 21:21:38 ispc sshd[1684331]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:21:38 ispc sshd[1684331]: Invalid user ziplines from 103.28.37.227 Dec 15 21:22:00 ispc postfix/smtpd[1684348]: sql auxprop plugin using mysql engine Dec 15 21:22:01 ispc CRON[1684351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:22:01 ispc saslauthd[1684350]: pam_mysql - SELECT returned no result. Dec 15 21:22:01 ispc saslauthd[1684350]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:22:01 ispc saslauthd[1684350]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:22:02 ispc CRON[1684351]: pam_unix(cron:session): session closed for user root Dec 15 21:22:21 ispc sshd[1684370]: Invalid user ziplines from 211.23.78.98 Dec 15 21:22:45 ispc sshd[1684387]: Invalid user capstan from 125.130.113.204 Dec 15 21:23:01 ispc CRON[1684397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:23:02 ispc CRON[1684397]: pam_unix(cron:session): session closed for user root Dec 15 21:23:28 ispc sshd[1684422]: Invalid user martof from 51.91.247.10 Dec 15 21:23:45 ispc postfix/smtpd[1684429]: sql auxprop plugin using mysql engine Dec 15 21:23:46 ispc saslauthd[1684435]: pam_mysql - SELECT returned no result. Dec 15 21:23:46 ispc saslauthd[1684435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:23:46 ispc saslauthd[1684435]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:24:01 ispc CRON[1684440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:24:02 ispc postfix/smtpd[1684447]: sql auxprop plugin using mysql engine Dec 15 21:24:02 ispc postfix/smtpd[1684449]: sql auxprop plugin using mysql engine Dec 15 21:24:02 ispc postfix/smtpd[1684454]: sql auxprop plugin using mysql engine Dec 15 21:24:03 ispc CRON[1684440]: pam_unix(cron:session): session closed for user root Dec 15 21:24:10 ispc sshd[1684461]: Invalid user capstan from 103.172.236.164 Dec 15 21:24:16 ispc saslauthd[1684468]: pam_mysql - SELECT returned no result. Dec 15 21:24:16 ispc saslauthd[1684468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:24:16 ispc saslauthd[1684468]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:24:33 ispc sshd[1684474]: Invalid user martof from 175.125.92.77 Dec 15 21:24:50 ispc sshd[1684484]: Invalid user martof from 139.59.66.222 Dec 15 21:25:00 ispc sshd[1684490]: Invalid user blceu from 175.125.95.234 Dec 15 21:25:01 ispc CRON[1684492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:25:01 ispc CRON[1684493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:25:01 ispc CRON[1684494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:25:01 ispc CRON[1684495]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:25:01 ispc CRON[1684493]: pam_unix(cron:session): session closed for user root Dec 15 21:25:01 ispc CRON[1684495]: pam_unix(cron:session): session closed for user getmail Dec 15 21:25:02 ispc CRON[1684494]: pam_unix(cron:session): session closed for user root Dec 15 21:25:02 ispc CRON[1684492]: pam_unix(cron:session): session closed for user root Dec 15 21:25:08 ispc sshd[1684568]: Invalid user ziplines from 211.110.229.128 Dec 15 21:26:01 ispc CRON[1684597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:26:02 ispc CRON[1684597]: pam_unix(cron:session): session closed for user root Dec 15 21:26:55 ispc sshd[1684629]: Invalid user blceu from 43.135.148.156 Dec 15 21:27:01 ispc CRON[1684635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:27:02 ispc CRON[1684635]: pam_unix(cron:session): session closed for user root Dec 15 21:27:04 ispc postfix/smtpd[1684647]: sql auxprop plugin using mysql engine Dec 15 21:27:05 ispc saslauthd[1684649]: pam_mysql - SELECT returned no result. Dec 15 21:27:05 ispc saslauthd[1684649]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:27:05 ispc saslauthd[1684649]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:27:55 ispc saslauthd[1684687]: pam_mysql - SELECT returned no result. Dec 15 21:27:55 ispc saslauthd[1684687]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:27:55 ispc saslauthd[1684687]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:28:01 ispc CRON[1684689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:28:02 ispc CRON[1684689]: pam_unix(cron:session): session closed for user root Dec 15 21:28:46 ispc sshd[1684720]: Invalid user pronajemplosin from 115.71.237.176 Dec 15 21:29:01 ispc CRON[1684732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:29:02 ispc CRON[1684732]: pam_unix(cron:session): session closed for user root Dec 15 21:29:51 ispc postfix/smtpd[1684766]: sql auxprop plugin using mysql engine Dec 15 21:29:51 ispc postfix/smtpd[1684768]: sql auxprop plugin using mysql engine Dec 15 21:29:52 ispc postfix/smtpd[1684769]: sql auxprop plugin using mysql engine Dec 15 21:29:52 ispc postfix/smtpd[1684770]: sql auxprop plugin using mysql engine Dec 15 21:30:01 ispc CRON[1684777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:30:01 ispc CRON[1684778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:30:01 ispc CRON[1684779]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:30:01 ispc CRON[1684780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:30:01 ispc CRON[1684781]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:30:01 ispc CRON[1684778]: pam_unix(cron:session): session closed for user root Dec 15 21:30:01 ispc CRON[1684779]: pam_unix(cron:session): session closed for user www-data Dec 15 21:30:01 ispc CRON[1684781]: pam_unix(cron:session): session closed for user getmail Dec 15 21:30:02 ispc CRON[1684780]: pam_unix(cron:session): session closed for user root Dec 15 21:30:03 ispc CRON[1684777]: pam_unix(cron:session): session closed for user root Dec 15 21:30:04 ispc sshd[1684776]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:30:04 ispc sshd[1684776]: Invalid user user from 2.57.121.25 Dec 15 21:30:34 ispc sshd[1684871]: Invalid user zednictvistastny from 118.219.255.169 Dec 15 21:31:01 ispc CRON[1684892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:31:02 ispc CRON[1684892]: pam_unix(cron:session): session closed for user root Dec 15 21:31:47 ispc postfix/smtpd[1684920]: sql auxprop plugin using mysql engine Dec 15 21:31:52 ispc saslauthd[1684926]: pam_mysql - SELECT returned no result. Dec 15 21:31:52 ispc saslauthd[1684926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:31:52 ispc saslauthd[1684926]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:32:01 ispc CRON[1684931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:32:02 ispc CRON[1684931]: pam_unix(cron:session): session closed for user root Dec 15 21:32:09 ispc sshd[1684946]: Invalid user zednictvistastny from 161.97.92.14 Dec 15 21:32:26 ispc saslauthd[1684953]: pam_mysql - SELECT returned no result. Dec 15 21:32:26 ispc saslauthd[1684953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:32:26 ispc saslauthd[1684953]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:32:46 ispc saslauthd[1684971]: pam_mysql - SELECT returned no result. Dec 15 21:32:46 ispc saslauthd[1684971]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:32:46 ispc saslauthd[1684971]: do_auth : auth failure: [user=Airaya] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:32:48 ispc saslauthd[1684972]: pam_mysql - SELECT returned no result. Dec 15 21:32:48 ispc saslauthd[1684972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:32:48 ispc saslauthd[1684972]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:33:01 ispc CRON[1684982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:33:02 ispc CRON[1684982]: pam_unix(cron:session): session closed for user root Dec 15 21:33:11 ispc sshd[1684997]: Invalid user admin from 139.19.117.197 Dec 15 21:34:01 ispc CRON[1685021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:34:02 ispc CRON[1685021]: pam_unix(cron:session): session closed for user root Dec 15 21:34:07 ispc postfix/smtpd[1685032]: sql auxprop plugin using mysql engine Dec 15 21:34:23 ispc postfix/smtpd[1685043]: sql auxprop plugin using mysql engine Dec 15 21:34:45 ispc sshd[1685050]: Invalid user blceu from 103.77.207.53 Dec 15 21:35:01 ispc CRON[1685064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:35:01 ispc CRON[1685065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:35:01 ispc CRON[1685066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:35:01 ispc CRON[1685067]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:35:02 ispc CRON[1685065]: pam_unix(cron:session): session closed for user root Dec 15 21:35:02 ispc CRON[1685067]: pam_unix(cron:session): session closed for user getmail Dec 15 21:35:02 ispc CRON[1685066]: pam_unix(cron:session): session closed for user root Dec 15 21:35:03 ispc CRON[1685064]: pam_unix(cron:session): session closed for user root Dec 15 21:35:08 ispc saslauthd[1685141]: pam_mysql - SELECT returned no result. Dec 15 21:35:08 ispc saslauthd[1685141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:35:08 ispc saslauthd[1685141]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:36:01 ispc CRON[1685168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:36:02 ispc CRON[1685168]: pam_unix(cron:session): session closed for user root Dec 15 21:37:01 ispc CRON[1685207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:37:02 ispc CRON[1685207]: pam_unix(cron:session): session closed for user root Dec 15 21:37:16 ispc sshd[1685223]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:37:16 ispc sshd[1685223]: Invalid user ziplines from 103.146.203.212 Dec 15 21:37:38 ispc sshd[1685235]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:38:01 ispc CRON[1685273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:38:02 ispc CRON[1685273]: pam_unix(cron:session): session closed for user root Dec 15 21:38:40 ispc postfix/smtpd[1685300]: sql auxprop plugin using mysql engine Dec 15 21:38:40 ispc postfix/smtpd[1685302]: sql auxprop plugin using mysql engine Dec 15 21:38:40 ispc postfix/smtpd[1685304]: sql auxprop plugin using mysql engine Dec 15 21:38:40 ispc postfix/smtpd[1685305]: sql auxprop plugin using mysql engine Dec 15 21:38:44 ispc sshd[1685298]: Invalid user anoraksro from 185.12.204.239 Dec 15 21:39:01 ispc CRON[1685320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:39:01 ispc CRON[1685321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:39:01 ispc CRON[1685320]: pam_unix(cron:session): session closed for user root Dec 15 21:39:02 ispc CRON[1685321]: pam_unix(cron:session): session closed for user root Dec 15 21:39:21 ispc saslauthd[1685352]: pam_mysql - SELECT returned no result. Dec 15 21:39:21 ispc saslauthd[1685352]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:39:21 ispc saslauthd[1685352]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:40:01 ispc CRON[1685372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:40:01 ispc CRON[1685373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:40:01 ispc CRON[1685374]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:40:01 ispc CRON[1685375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:40:01 ispc CRON[1685376]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:40:01 ispc CRON[1685373]: pam_unix(cron:session): session closed for user root Dec 15 21:40:01 ispc CRON[1685374]: pam_unix(cron:session): session closed for user www-data Dec 15 21:40:01 ispc CRON[1685376]: pam_unix(cron:session): session closed for user getmail Dec 15 21:40:01 ispc CRON[1685375]: pam_unix(cron:session): session closed for user root Dec 15 21:40:02 ispc CRON[1685372]: pam_unix(cron:session): session closed for user root Dec 15 21:41:01 ispc CRON[1685478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:41:02 ispc CRON[1685478]: pam_unix(cron:session): session closed for user root Dec 15 21:41:13 ispc postfix/smtpd[1685497]: sql auxprop plugin using mysql engine Dec 15 21:41:14 ispc saslauthd[1685499]: pam_mysql - SELECT returned no result. Dec 15 21:41:14 ispc saslauthd[1685499]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:41:14 ispc saslauthd[1685499]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:41:23 ispc CRON[1684299]: pam_unix(cron:session): session closed for user root Dec 15 21:41:37 ispc postfix/smtpd[1685506]: sql auxprop plugin using mysql engine Dec 15 21:41:38 ispc postfix/smtpd[1685509]: sql auxprop plugin using mysql engine Dec 15 21:41:47 ispc saslauthd[1685510]: pam_mysql - SELECT returned no result. Dec 15 21:41:47 ispc saslauthd[1685510]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:41:47 ispc saslauthd[1685510]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:42:01 ispc CRON[1685512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:42:02 ispc CRON[1685512]: pam_unix(cron:session): session closed for user root Dec 15 21:42:09 ispc sshd[1685524]: Invalid user admin from 80.94.95.115 Dec 15 21:42:12 ispc saslauthd[1685526]: pam_mysql - SELECT returned no result. Dec 15 21:42:12 ispc saslauthd[1685526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:42:12 ispc saslauthd[1685526]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:42:59 ispc postfix/smtpd[1685541]: sql auxprop plugin using mysql engine Dec 15 21:43:01 ispc CRON[1685544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:43:02 ispc CRON[1685544]: pam_unix(cron:session): session closed for user root Dec 15 21:44:01 ispc CRON[1685557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:44:02 ispc CRON[1685557]: pam_unix(cron:session): session closed for user root Dec 15 21:44:23 ispc sshd[1685571]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:45:01 ispc CRON[1685577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:45:01 ispc CRON[1685579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:45:01 ispc CRON[1685580]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:45:01 ispc CRON[1685578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:45:01 ispc CRON[1685578]: pam_unix(cron:session): session closed for user root Dec 15 21:45:01 ispc CRON[1685580]: pam_unix(cron:session): session closed for user getmail Dec 15 21:45:02 ispc CRON[1685577]: pam_unix(cron:session): session closed for user root Dec 15 21:45:45 ispc CRON[1685579]: pam_unix(cron:session): session closed for user root Dec 15 21:46:01 ispc CRON[1685768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:46:05 ispc sshd[1685780]: Invalid user pronajemplosin from 165.232.190.97 Dec 15 21:46:07 ispc saslauthd[1685782]: pam_mysql - SELECT returned no result. Dec 15 21:46:07 ispc saslauthd[1685782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:46:07 ispc saslauthd[1685782]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:47:01 ispc CRON[1685807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:47:02 ispc CRON[1685807]: pam_unix(cron:session): session closed for user root Dec 15 21:47:39 ispc saslauthd[1685838]: pam_mysql - SELECT returned no result. Dec 15 21:47:39 ispc saslauthd[1685838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:47:39 ispc saslauthd[1685838]: do_auth : auth failure: [user=Any] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:48:01 ispc CRON[1685857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:48:02 ispc CRON[1685857]: pam_unix(cron:session): session closed for user root Dec 15 21:48:03 ispc sshd[1685868]: Invalid user martof from 211.45.175.153 Dec 15 21:49:01 ispc CRON[1685901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:49:02 ispc CRON[1685901]: pam_unix(cron:session): session closed for user root Dec 15 21:49:31 ispc postfix/smtpd[1685924]: sql auxprop plugin using mysql engine Dec 15 21:49:31 ispc postfix/smtpd[1685926]: sql auxprop plugin using mysql engine Dec 15 21:49:31 ispc postfix/smtpd[1685928]: sql auxprop plugin using mysql engine Dec 15 21:49:52 ispc postfix/smtpd[1685943]: sql auxprop plugin using mysql engine Dec 15 21:49:54 ispc saslauthd[1685944]: pam_mysql - SELECT returned no result. Dec 15 21:49:54 ispc saslauthd[1685944]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:49:54 ispc saslauthd[1685944]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:49:59 ispc sshd[1685949]: Invalid user blceu from 175.125.92.77 Dec 15 21:50:01 ispc CRON[1685951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:50:01 ispc CRON[1685952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:50:01 ispc CRON[1685953]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 21:50:01 ispc CRON[1685954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:50:01 ispc CRON[1685955]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:50:01 ispc CRON[1685952]: pam_unix(cron:session): session closed for user root Dec 15 21:50:01 ispc CRON[1685953]: pam_unix(cron:session): session closed for user www-data Dec 15 21:50:01 ispc CRON[1685955]: pam_unix(cron:session): session closed for user getmail Dec 15 21:50:02 ispc CRON[1685954]: pam_unix(cron:session): session closed for user root Dec 15 21:50:03 ispc CRON[1685951]: pam_unix(cron:session): session closed for user root Dec 15 21:50:58 ispc sshd[1686051]: Invalid user ziplines from 175.125.92.77 Dec 15 21:51:01 ispc CRON[1686058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:51:02 ispc CRON[1686058]: pam_unix(cron:session): session closed for user root Dec 15 21:52:01 ispc CRON[1686097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:52:01 ispc CRON[1686098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:52:02 ispc CRON[1686098]: pam_unix(cron:session): session closed for user root Dec 15 21:52:04 ispc postfix/smtpd[1686113]: sql auxprop plugin using mysql engine Dec 15 21:52:05 ispc saslauthd[1686115]: pam_mysql - SELECT returned no result. Dec 15 21:52:05 ispc saslauthd[1686115]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:52:05 ispc saslauthd[1686115]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:52:09 ispc saslauthd[1686117]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 15 21:52:09 ispc saslauthd[1686117]: do_auth : auth failure: [user=info@pracavzdravotnictve.sk] [service=smtp] [realm=pracavzdravotnictve.sk] [mech=pam] [reason=PAM auth error] Dec 15 21:52:52 ispc saslauthd[1686146]: pam_mysql - SELECT returned no result. Dec 15 21:52:52 ispc saslauthd[1686146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:52:52 ispc saslauthd[1686146]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:53:01 ispc CRON[1686148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:53:02 ispc CRON[1686148]: pam_unix(cron:session): session closed for user root Dec 15 21:53:05 ispc sshd[1686159]: Invalid user blceu from 117.50.70.169 Dec 15 21:53:33 ispc postfix/smtpd[1686187]: sql auxprop plugin using mysql engine Dec 15 21:53:33 ispc postfix/smtpd[1686189]: sql auxprop plugin using mysql engine Dec 15 21:53:34 ispc postfix/smtpd[1686190]: sql auxprop plugin using mysql engine Dec 15 21:54:01 ispc CRON[1686204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:54:01 ispc CRON[1686204]: pam_unix(cron:session): session closed for user root Dec 15 21:54:13 ispc saslauthd[1686220]: pam_mysql - SELECT returned no result. Dec 15 21:54:13 ispc saslauthd[1686220]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:54:13 ispc saslauthd[1686220]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:54:43 ispc sshd[1686235]: Invalid user martof from 103.77.207.53 Dec 15 21:55:01 ispc CRON[1686247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:55:01 ispc CRON[1686248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:55:01 ispc CRON[1686249]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 21:55:01 ispc CRON[1686246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:55:02 ispc CRON[1686247]: pam_unix(cron:session): session closed for user root Dec 15 21:55:02 ispc CRON[1686249]: pam_unix(cron:session): session closed for user getmail Dec 15 21:55:02 ispc CRON[1686248]: pam_unix(cron:session): session closed for user root Dec 15 21:55:04 ispc CRON[1686246]: pam_unix(cron:session): session closed for user root Dec 15 21:55:08 ispc sshd[1686326]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:55:08 ispc sshd[1686326]: Invalid user martof from 103.146.203.212 Dec 15 21:55:19 ispc CRON[1686097]: pam_unix(cron:session): session closed for user root Dec 15 21:55:53 ispc postfix/smtpd[1686347]: sql auxprop plugin using mysql engine Dec 15 21:55:53 ispc saslauthd[1686349]: pam_mysql - SELECT returned no result. Dec 15 21:55:53 ispc saslauthd[1686349]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:55:53 ispc saslauthd[1686349]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:56:01 ispc CRON[1686354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:56:02 ispc CRON[1686354]: pam_unix(cron:session): session closed for user root Dec 15 21:56:18 ispc saslauthd[1686381]: pam_mysql - SELECT returned no result. Dec 15 21:56:18 ispc saslauthd[1686381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:56:18 ispc saslauthd[1686381]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 21:57:01 ispc CRON[1686400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:57:02 ispc CRON[1686400]: pam_unix(cron:session): session closed for user root Dec 15 21:58:01 ispc CRON[1686449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:58:02 ispc CRON[1686449]: pam_unix(cron:session): session closed for user root Dec 15 21:58:24 ispc postfix/smtpd[1686469]: sql auxprop plugin using mysql engine Dec 15 21:58:24 ispc saslauthd[1686471]: pam_mysql - SELECT returned no result. Dec 15 21:58:24 ispc saslauthd[1686471]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:58:24 ispc saslauthd[1686471]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:58:41 ispc saslauthd[1686481]: pam_mysql - SELECT returned no result. Dec 15 21:58:41 ispc saslauthd[1686481]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:58:41 ispc saslauthd[1686481]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:58:48 ispc postfix/smtpd[1686482]: sql auxprop plugin using mysql engine Dec 15 21:58:48 ispc postfix/smtpd[1686484]: sql auxprop plugin using mysql engine Dec 15 21:58:49 ispc postfix/smtpd[1686485]: sql auxprop plugin using mysql engine Dec 15 21:58:49 ispc saslauthd[1686490]: pam_mysql - SELECT returned no result. Dec 15 21:58:49 ispc saslauthd[1686490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:58:49 ispc saslauthd[1686490]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:58:51 ispc saslauthd[1686492]: pam_mysql - SELECT returned no result. Dec 15 21:58:51 ispc saslauthd[1686492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:58:51 ispc saslauthd[1686492]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:58:56 ispc saslauthd[1686494]: pam_mysql - SELECT returned no result. Dec 15 21:58:56 ispc saslauthd[1686494]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 21:58:56 ispc saslauthd[1686494]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 21:59:01 ispc CRON[1686499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 21:59:02 ispc CRON[1686499]: pam_unix(cron:session): session closed for user root Dec 15 21:59:27 ispc sshd[1686520]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 21:59:27 ispc sshd[1686520]: Invalid user martof from 193.110.157.47 Dec 15 22:00:01 ispc CRON[1686540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:00:01 ispc CRON[1686541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:00:01 ispc CRON[1686542]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:00:01 ispc CRON[1686543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:00:01 ispc CRON[1686544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:00:01 ispc CRON[1686545]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:00:01 ispc CRON[1686542]: pam_unix(cron:session): session closed for user www-data Dec 15 22:00:01 ispc CRON[1686541]: pam_unix(cron:session): session closed for user root Dec 15 22:00:01 ispc CRON[1686545]: pam_unix(cron:session): session closed for user getmail Dec 15 22:00:01 ispc CRON[1686544]: pam_unix(cron:session): session closed for user root Dec 15 22:00:02 ispc CRON[1686540]: pam_unix(cron:session): session closed for user root Dec 15 22:00:02 ispc CRON[1686543]: pam_unix(cron:session): session closed for user root Dec 15 22:00:12 ispc saslauthd[1686701]: pam_mysql - SELECT returned no result. Dec 15 22:00:12 ispc saslauthd[1686701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:00:12 ispc saslauthd[1686701]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:00:56 ispc saslauthd[1686722]: pam_mysql - SELECT returned no result. Dec 15 22:00:56 ispc saslauthd[1686722]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:00:56 ispc saslauthd[1686722]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:01:01 ispc CRON[1686728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:01:02 ispc CRON[1686728]: pam_unix(cron:session): session closed for user root Dec 15 22:01:16 ispc postfix/smtpd[1686744]: sql auxprop plugin using mysql engine Dec 15 22:01:16 ispc postfix/smtpd[1686746]: sql auxprop plugin using mysql engine Dec 15 22:01:16 ispc postfix/smtpd[1686747]: sql auxprop plugin using mysql engine Dec 15 22:01:29 ispc saslauthd[1686752]: pam_mysql - SELECT returned no result. Dec 15 22:01:29 ispc saslauthd[1686752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:01:29 ispc saslauthd[1686752]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:02:01 ispc CRON[1686772]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 22:02:01 ispc CRON[1686773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:02:03 ispc CRON[1686773]: pam_unix(cron:session): session closed for user root Dec 15 22:02:37 ispc saslauthd[1687535]: pam_mysql - SELECT returned no result. Dec 15 22:02:37 ispc saslauthd[1687535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:02:37 ispc saslauthd[1687535]: do_auth : auth failure: [user=Audrey] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:02:43 ispc sshd[1687570]: Invalid user blceu from 103.110.84.105 Dec 15 22:03:01 ispc CRON[1687727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:03:01 ispc CRON[1687727]: pam_unix(cron:session): session closed for user root Dec 15 22:03:10 ispc CRON[1686772]: pam_unix(cron:session): session closed for user logcheck Dec 15 22:03:14 ispc sshd[1687848]: Did not receive identification string from 112.111.134.17 Dec 15 22:03:23 ispc sshd[1687856]: Invalid user blceu from 51.91.247.10 Dec 15 22:03:25 ispc saslauthd[1687858]: pam_mysql - SELECT returned no result. Dec 15 22:03:25 ispc saslauthd[1687858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:03:25 ispc saslauthd[1687858]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:03:27 ispc postfix/smtpd[1687860]: sql auxprop plugin using mysql engine Dec 15 22:03:51 ispc postfix/smtpd[1687874]: sql auxprop plugin using mysql engine Dec 15 22:03:51 ispc postfix/smtpd[1687876]: sql auxprop plugin using mysql engine Dec 15 22:03:52 ispc postfix/smtpd[1687877]: sql auxprop plugin using mysql engine Dec 15 22:03:57 ispc saslauthd[1687882]: pam_mysql - SELECT returned no result. Dec 15 22:03:57 ispc saslauthd[1687882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:03:57 ispc saslauthd[1687882]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:03:59 ispc saslauthd[1687883]: pam_mysql - SELECT returned no result. Dec 15 22:03:59 ispc saslauthd[1687883]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:03:59 ispc saslauthd[1687883]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:00 ispc saslauthd[1687885]: pam_mysql - SELECT returned no result. Dec 15 22:04:00 ispc saslauthd[1687885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:00 ispc saslauthd[1687885]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:00 ispc saslauthd[1687886]: pam_mysql - SELECT returned no result. Dec 15 22:04:00 ispc saslauthd[1687886]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:00 ispc saslauthd[1687886]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:01 ispc CRON[1687887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:04:02 ispc saslauthd[1687898]: pam_mysql - SELECT returned no result. Dec 15 22:04:02 ispc saslauthd[1687898]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:02 ispc saslauthd[1687898]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:02 ispc CRON[1687887]: pam_unix(cron:session): session closed for user root Dec 15 22:04:03 ispc saslauthd[1687903]: pam_mysql - SELECT returned no result. Dec 15 22:04:03 ispc saslauthd[1687903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:03 ispc saslauthd[1687903]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:03 ispc saslauthd[1687904]: pam_mysql - SELECT returned no result. Dec 15 22:04:03 ispc saslauthd[1687904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:03 ispc saslauthd[1687904]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:06 ispc saslauthd[1687905]: pam_mysql - SELECT returned no result. Dec 15 22:04:06 ispc saslauthd[1687905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:06 ispc saslauthd[1687905]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:04:42 ispc saslauthd[1687920]: pam_mysql - SELECT returned no result. Dec 15 22:04:42 ispc saslauthd[1687920]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:04:42 ispc saslauthd[1687920]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:05:01 ispc CRON[1687930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:05:01 ispc CRON[1687931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:05:01 ispc CRON[1687932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:05:01 ispc CRON[1687933]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:05:01 ispc CRON[1687931]: pam_unix(cron:session): session closed for user root Dec 15 22:05:01 ispc CRON[1687933]: pam_unix(cron:session): session closed for user getmail Dec 15 22:05:02 ispc CRON[1687932]: pam_unix(cron:session): session closed for user root Dec 15 22:05:03 ispc CRON[1687930]: pam_unix(cron:session): session closed for user root Dec 15 22:05:43 ispc sshd[1688026]: Invalid user blceu from 211.110.229.128 Dec 15 22:05:59 ispc postfix/smtpd[1688042]: sql auxprop plugin using mysql engine Dec 15 22:05:59 ispc postfix/smtpd[1688044]: sql auxprop plugin using mysql engine Dec 15 22:05:59 ispc postfix/smtpd[1688045]: sql auxprop plugin using mysql engine Dec 15 22:06:01 ispc CRON[1688046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:06:01 ispc CRON[1688046]: pam_unix(cron:session): session closed for user root Dec 15 22:06:24 ispc postfix/smtpd[1688070]: sql auxprop plugin using mysql engine Dec 15 22:06:24 ispc CRON[1685768]: pam_unix(cron:session): session closed for user root Dec 15 22:06:59 ispc saslauthd[1688073]: pam_mysql - SELECT returned no result. Dec 15 22:06:59 ispc saslauthd[1688073]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:06:59 ispc saslauthd[1688073]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:07:01 ispc CRON[1688074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:07:02 ispc CRON[1688074]: pam_unix(cron:session): session closed for user root Dec 15 22:07:05 ispc saslauthd[1688086]: pam_mysql - SELECT returned no result. Dec 15 22:07:05 ispc saslauthd[1688086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:07:05 ispc saslauthd[1688086]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:08:01 ispc CRON[1688101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:08:02 ispc CRON[1688101]: pam_unix(cron:session): session closed for user root Dec 15 22:08:27 ispc sshd[1688116]: Invalid user klape from 70.37.89.177 Dec 15 22:08:29 ispc sshd[1688118]: Invalid user ubuntu from 70.37.89.177 Dec 15 22:08:44 ispc postfix/smtpd[1688120]: sql auxprop plugin using mysql engine Dec 15 22:08:44 ispc postfix/smtpd[1688123]: sql auxprop plugin using mysql engine Dec 15 22:09:01 ispc CRON[1688124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:09:01 ispc CRON[1688125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:09:01 ispc CRON[1688124]: pam_unix(cron:session): session closed for user root Dec 15 22:09:02 ispc CRON[1688125]: pam_unix(cron:session): session closed for user root Dec 15 22:10:01 ispc CRON[1688151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:10:01 ispc CRON[1688152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:10:01 ispc CRON[1688153]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:10:01 ispc CRON[1688154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:10:01 ispc CRON[1688155]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:10:01 ispc CRON[1688153]: pam_unix(cron:session): session closed for user www-data Dec 15 22:10:01 ispc CRON[1688152]: pam_unix(cron:session): session closed for user root Dec 15 22:10:01 ispc CRON[1688155]: pam_unix(cron:session): session closed for user getmail Dec 15 22:10:02 ispc CRON[1688151]: pam_unix(cron:session): session closed for user root Dec 15 22:10:34 ispc CRON[1688154]: pam_unix(cron:session): session closed for user root Dec 15 22:10:35 ispc saslauthd[1688265]: pam_mysql - SELECT returned no result. Dec 15 22:10:35 ispc saslauthd[1688265]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:10:35 ispc saslauthd[1688265]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:10:41 ispc postfix/smtpd[1688266]: sql auxprop plugin using mysql engine Dec 15 22:10:44 ispc saslauthd[1688269]: pam_mysql - SELECT returned no result. Dec 15 22:10:44 ispc saslauthd[1688269]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:10:44 ispc saslauthd[1688269]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:10:47 ispc saslauthd[1688270]: pam_mysql - SELECT returned no result. Dec 15 22:10:47 ispc saslauthd[1688270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:10:47 ispc saslauthd[1688270]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:11:01 ispc CRON[1688271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:11:54 ispc saslauthd[1688307]: pam_mysql - SELECT returned no result. Dec 15 22:11:54 ispc saslauthd[1688307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:11:54 ispc saslauthd[1688307]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:12:01 ispc CRON[1688308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:12:02 ispc CRON[1688308]: pam_unix(cron:session): session closed for user root Dec 15 22:12:56 ispc sshd[1688349]: Invalid user martof from 116.120.58.228 Dec 15 22:13:01 ispc CRON[1688355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:13:01 ispc CRON[1688355]: pam_unix(cron:session): session closed for user root Dec 15 22:13:10 ispc sshd[1688371]: Did not receive identification string from 45.140.17.97 Dec 15 22:13:21 ispc sshd[1688377]: Invalid user admin from 103.100.209.172 Dec 15 22:13:30 ispc saslauthd[1688384]: pam_mysql - SELECT returned no result. Dec 15 22:13:30 ispc saslauthd[1688384]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:13:30 ispc saslauthd[1688384]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:14:01 ispc CRON[1688399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:14:02 ispc CRON[1688399]: pam_unix(cron:session): session closed for user root Dec 15 22:15:01 ispc CRON[1688437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:15:01 ispc CRON[1688438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:15:01 ispc CRON[1688439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:15:01 ispc CRON[1688440]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:15:01 ispc CRON[1688438]: pam_unix(cron:session): session closed for user root Dec 15 22:15:01 ispc CRON[1688440]: pam_unix(cron:session): session closed for user getmail Dec 15 22:15:02 ispc CRON[1688439]: pam_unix(cron:session): session closed for user root Dec 15 22:15:03 ispc CRON[1688437]: pam_unix(cron:session): session closed for user root Dec 15 22:16:01 ispc CRON[1688542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:16:01 ispc CRON[1688542]: pam_unix(cron:session): session closed for user root Dec 15 22:16:18 ispc postfix/smtpd[1688558]: sql auxprop plugin using mysql engine Dec 15 22:16:19 ispc saslauthd[1688560]: pam_mysql - SELECT returned no result. Dec 15 22:16:19 ispc saslauthd[1688560]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:16:19 ispc saslauthd[1688560]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:16:23 ispc saslauthd[1688565]: pam_mysql - SELECT returned no result. Dec 15 22:16:23 ispc saslauthd[1688565]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:16:23 ispc saslauthd[1688565]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:17:01 ispc CRON[1688582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:17:02 ispc CRON[1688582]: pam_unix(cron:session): session closed for user root Dec 15 22:17:16 ispc sshd[1688597]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:17:25 ispc sshd[1688607]: Invalid user zednictvistastny from 161.97.92.14 Dec 15 22:17:30 ispc saslauthd[1688609]: pam_mysql - SELECT returned no result. Dec 15 22:17:30 ispc saslauthd[1688609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:17:30 ispc saslauthd[1688609]: do_auth : auth failure: [user=Yak] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:18:01 ispc CRON[1688634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:18:02 ispc CRON[1688634]: pam_unix(cron:session): session closed for user root Dec 15 22:18:42 ispc sshd[1688663]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:18:42 ispc sshd[1688663]: Invalid user blceu from 103.146.203.212 Dec 15 22:19:01 ispc CRON[1688674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:19:01 ispc CRON[1688674]: pam_unix(cron:session): session closed for user root Dec 15 22:19:09 ispc sshd[1688691]: Invalid user matlbula from 51.159.18.215 Dec 15 22:19:34 ispc postfix/smtpd[1688701]: sql auxprop plugin using mysql engine Dec 15 22:19:36 ispc saslauthd[1688707]: pam_mysql - SELECT returned no result. Dec 15 22:19:36 ispc saslauthd[1688707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:19:36 ispc saslauthd[1688707]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:20:01 ispc CRON[1688720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:20:01 ispc CRON[1688721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:20:01 ispc CRON[1688722]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:20:01 ispc CRON[1688723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:20:01 ispc CRON[1688724]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:20:02 ispc CRON[1688722]: pam_unix(cron:session): session closed for user www-data Dec 15 22:20:02 ispc CRON[1688721]: pam_unix(cron:session): session closed for user root Dec 15 22:20:02 ispc CRON[1688724]: pam_unix(cron:session): session closed for user getmail Dec 15 22:20:02 ispc CRON[1688723]: pam_unix(cron:session): session closed for user root Dec 15 22:20:03 ispc CRON[1688720]: pam_unix(cron:session): session closed for user root Dec 15 22:20:23 ispc saslauthd[1688807]: pam_mysql - SELECT returned no result. Dec 15 22:20:23 ispc saslauthd[1688807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:20:23 ispc saslauthd[1688807]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:21:01 ispc CRON[1688825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:21:01 ispc CRON[1688826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:21:01 ispc CRON[1688825]: pam_unix(cron:session): session closed for user root Dec 15 22:21:02 ispc CRON[1688826]: pam_unix(cron:session): session closed for user root Dec 15 22:21:10 ispc saslauthd[1688843]: pam_mysql - SELECT returned no result. Dec 15 22:21:10 ispc saslauthd[1688843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:21:10 ispc saslauthd[1688843]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:21:19 ispc sshd[1688848]: Invalid user lanovacentra from 51.159.18.215 Dec 15 22:21:36 ispc sshd[1688859]: Invalid user capstan from 207.180.250.25 Dec 15 22:21:36 ispc sshd[1688857]: Invalid user klape from 103.164.20.29 Dec 15 22:21:39 ispc sshd[1688867]: Invalid user klape from 35.240.174.82 Dec 15 22:21:39 ispc sshd[1688869]: Invalid user ubuntu from 103.164.20.29 Dec 15 22:21:40 ispc sshd[1688872]: Invalid user ubuntu from 35.240.174.82 Dec 15 22:21:42 ispc saslauthd[1688874]: pam_mysql - SELECT returned no result. Dec 15 22:21:42 ispc saslauthd[1688874]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:21:42 ispc saslauthd[1688874]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:21:47 ispc postfix/smtpd[1688875]: sql auxprop plugin using mysql engine Dec 15 22:21:47 ispc postfix/smtpd[1688877]: sql auxprop plugin using mysql engine Dec 15 22:21:48 ispc postfix/smtpd[1688879]: sql auxprop plugin using mysql engine Dec 15 22:22:01 ispc CRON[1688888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:22:02 ispc CRON[1688888]: pam_unix(cron:session): session closed for user root Dec 15 22:22:19 ispc saslauthd[1688908]: pam_mysql - SELECT returned no result. Dec 15 22:22:19 ispc saslauthd[1688908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:22:19 ispc saslauthd[1688908]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:23:01 ispc CRON[1688938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:23:02 ispc CRON[1688938]: pam_unix(cron:session): session closed for user root Dec 15 22:23:08 ispc sshd[1688949]: Invalid user ziplines from 103.77.207.53 Dec 15 22:24:01 ispc CRON[1688983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:24:01 ispc CRON[1688983]: pam_unix(cron:session): session closed for user root Dec 15 22:24:45 ispc sshd[1689011]: Invalid user blceu from 211.45.175.153 Dec 15 22:24:55 ispc postfix/smtpd[1689018]: sql auxprop plugin using mysql engine Dec 15 22:24:58 ispc saslauthd[1689020]: pam_mysql - SELECT returned no result. Dec 15 22:24:58 ispc saslauthd[1689020]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:24:58 ispc saslauthd[1689020]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:25:01 ispc CRON[1689025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:25:01 ispc CRON[1689026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:25:01 ispc CRON[1689027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:25:01 ispc CRON[1689028]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:25:01 ispc CRON[1689026]: pam_unix(cron:session): session closed for user root Dec 15 22:25:02 ispc CRON[1689028]: pam_unix(cron:session): session closed for user getmail Dec 15 22:25:02 ispc CRON[1689027]: pam_unix(cron:session): session closed for user root Dec 15 22:25:03 ispc sshd[1689094]: Did not receive identification string from 152.42.136.53 Dec 15 22:25:03 ispc CRON[1689025]: pam_unix(cron:session): session closed for user root Dec 15 22:25:24 ispc sshd[1689114]: Invalid user klape from 35.240.174.82 Dec 15 22:25:25 ispc sshd[1689116]: Invalid user ubuntu from 35.240.174.82 Dec 15 22:26:01 ispc CRON[1689139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:26:02 ispc CRON[1689139]: pam_unix(cron:session): session closed for user root Dec 15 22:26:07 ispc saslauthd[1689150]: pam_mysql - SELECT returned no result. Dec 15 22:26:07 ispc saslauthd[1689150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:26:07 ispc saslauthd[1689150]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:26:08 ispc sshd[1689151]: Invalid user test1 from 152.42.136.53 Dec 15 22:26:11 ispc postfix/smtpd[1689157]: sql auxprop plugin using mysql engine Dec 15 22:26:11 ispc postfix/smtpd[1689159]: sql auxprop plugin using mysql engine Dec 15 22:26:12 ispc postfix/smtpd[1689160]: sql auxprop plugin using mysql engine Dec 15 22:26:24 ispc postfix/smtpd[1689165]: sql auxprop plugin using mysql engine Dec 15 22:26:32 ispc saslauthd[1689170]: pam_mysql - SELECT returned no result. Dec 15 22:26:32 ispc saslauthd[1689170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:26:32 ispc saslauthd[1689170]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:26:44 ispc sshd[1689176]: Invalid user test2 from 152.42.136.53 Dec 15 22:26:59 ispc sshd[1689182]: Invalid user capstan from 43.163.105.233 Dec 15 22:27:01 ispc CRON[1689188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:27:02 ispc CRON[1689188]: pam_unix(cron:session): session closed for user root Dec 15 22:27:18 ispc sshd[1689203]: Invalid user test3 from 152.42.136.53 Dec 15 22:28:01 ispc CRON[1689234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:28:02 ispc CRON[1689234]: pam_unix(cron:session): session closed for user root Dec 15 22:28:02 ispc sshd[1689241]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:28:02 ispc sshd[1689241]: Invalid user user from 2.57.121.25 Dec 15 22:28:12 ispc postfix/smtpd[1689251]: sql auxprop plugin using mysql engine Dec 15 22:28:13 ispc saslauthd[1689257]: pam_mysql - SELECT returned no result. Dec 15 22:28:13 ispc saslauthd[1689257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:28:13 ispc saslauthd[1689257]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:29:01 ispc CRON[1689278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:29:01 ispc CRON[1689278]: pam_unix(cron:session): session closed for user root Dec 15 22:30:01 ispc CRON[1689321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:30:01 ispc CRON[1689322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:30:01 ispc CRON[1689323]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:30:01 ispc CRON[1689324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:30:01 ispc CRON[1689325]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:30:01 ispc CRON[1689323]: pam_unix(cron:session): session closed for user www-data Dec 15 22:30:01 ispc CRON[1689322]: pam_unix(cron:session): session closed for user root Dec 15 22:30:01 ispc CRON[1689325]: pam_unix(cron:session): session closed for user getmail Dec 15 22:30:02 ispc CRON[1689324]: pam_unix(cron:session): session closed for user root Dec 15 22:30:02 ispc CRON[1689321]: pam_unix(cron:session): session closed for user root Dec 15 22:30:37 ispc postfix/smtpd[1689417]: sql auxprop plugin using mysql engine Dec 15 22:30:38 ispc saslauthd[1689419]: pam_mysql - SELECT returned no result. Dec 15 22:30:38 ispc saslauthd[1689419]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:30:38 ispc saslauthd[1689419]: do_auth : auth failure: [user=sybase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:30:46 ispc saslauthd[1689424]: pam_mysql - SELECT returned no result. Dec 15 22:30:46 ispc saslauthd[1689424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:30:46 ispc saslauthd[1689424]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:30:56 ispc saslauthd[1689431]: pam_mysql - SELECT returned no result. Dec 15 22:30:56 ispc saslauthd[1689431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:30:56 ispc saslauthd[1689431]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:31:01 ispc CRON[1689432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:31:02 ispc CRON[1689432]: pam_unix(cron:session): session closed for user root Dec 15 22:31:25 ispc CRON[1688271]: pam_unix(cron:session): session closed for user root Dec 15 22:31:46 ispc saslauthd[1689457]: pam_mysql - SELECT returned no result. Dec 15 22:31:46 ispc saslauthd[1689457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:31:46 ispc saslauthd[1689457]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:32:01 ispc CRON[1689458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:32:02 ispc CRON[1689458]: pam_unix(cron:session): session closed for user root Dec 15 22:32:12 ispc sshd[1689471]: Invalid user admin from 103.100.209.172 Dec 15 22:32:24 ispc saslauthd[1689474]: pam_mysql - SELECT returned no result. Dec 15 22:32:24 ispc saslauthd[1689474]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:32:24 ispc saslauthd[1689474]: do_auth : auth failure: [user=accounting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:33:01 ispc CRON[1689484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:33:02 ispc CRON[1689484]: pam_unix(cron:session): session closed for user root Dec 15 22:33:05 ispc sshd[1689500]: Invalid user admin from 139.19.117.197 Dec 15 22:33:41 ispc saslauthd[1689503]: pam_mysql - SELECT returned no result. Dec 15 22:33:41 ispc saslauthd[1689503]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:33:41 ispc saslauthd[1689503]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:33:54 ispc sshd[1689504]: Invalid user pronajemplosin from 36.50.176.13 Dec 15 22:34:00 ispc saslauthd[1689509]: pam_mysql - SELECT returned no result. Dec 15 22:34:00 ispc saslauthd[1689509]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:34:00 ispc saslauthd[1689509]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:34:01 ispc CRON[1689510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:34:02 ispc postfix/smtpd[1689520]: sql auxprop plugin using mysql engine Dec 15 22:34:02 ispc CRON[1689510]: pam_unix(cron:session): session closed for user root Dec 15 22:35:01 ispc CRON[1689536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:35:01 ispc CRON[1689537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:35:01 ispc CRON[1689538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:35:01 ispc CRON[1689539]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:35:01 ispc CRON[1689537]: pam_unix(cron:session): session closed for user root Dec 15 22:35:01 ispc CRON[1689539]: pam_unix(cron:session): session closed for user getmail Dec 15 22:35:02 ispc CRON[1689536]: pam_unix(cron:session): session closed for user root Dec 15 22:35:35 ispc CRON[1689538]: pam_unix(cron:session): session closed for user root Dec 15 22:36:01 ispc CRON[1689647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:36:53 ispc postfix/smtpd[1689678]: sql auxprop plugin using mysql engine Dec 15 22:36:54 ispc saslauthd[1689681]: pam_mysql - SELECT returned no result. Dec 15 22:36:54 ispc saslauthd[1689681]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:36:54 ispc saslauthd[1689681]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:37:01 ispc CRON[1689687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:37:03 ispc CRON[1689687]: pam_unix(cron:session): session closed for user root Dec 15 22:37:09 ispc saslauthd[1689704]: pam_mysql - SELECT returned no result. Dec 15 22:37:09 ispc saslauthd[1689704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:37:09 ispc saslauthd[1689704]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:37:42 ispc saslauthd[1689721]: pam_mysql - SELECT returned no result. Dec 15 22:37:42 ispc saslauthd[1689721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:37:42 ispc saslauthd[1689721]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:38:01 ispc CRON[1689737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:38:02 ispc CRON[1689737]: pam_unix(cron:session): session closed for user root Dec 15 22:38:29 ispc postfix/smtpd[1689763]: sql auxprop plugin using mysql engine Dec 15 22:38:29 ispc postfix/smtpd[1689765]: sql auxprop plugin using mysql engine Dec 15 22:39:01 ispc CRON[1689780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:39:01 ispc CRON[1689781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:39:01 ispc CRON[1689780]: pam_unix(cron:session): session closed for user root Dec 15 22:39:02 ispc CRON[1689781]: pam_unix(cron:session): session closed for user root Dec 15 22:39:30 ispc saslauthd[1689815]: pam_mysql - SELECT returned no result. Dec 15 22:39:30 ispc saslauthd[1689815]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:39:30 ispc saslauthd[1689815]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:40:00 ispc sshd[1689828]: Invalid user martof from 185.181.182.252 Dec 15 22:40:01 ispc CRON[1689830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:40:01 ispc CRON[1689831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:40:01 ispc CRON[1689832]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:40:01 ispc CRON[1689833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:40:01 ispc CRON[1689834]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:40:01 ispc CRON[1689831]: pam_unix(cron:session): session closed for user root Dec 15 22:40:01 ispc CRON[1689832]: pam_unix(cron:session): session closed for user www-data Dec 15 22:40:01 ispc CRON[1689834]: pam_unix(cron:session): session closed for user getmail Dec 15 22:40:02 ispc CRON[1689833]: pam_unix(cron:session): session closed for user root Dec 15 22:40:02 ispc CRON[1689830]: pam_unix(cron:session): session closed for user root Dec 15 22:40:19 ispc sshd[1689916]: Invalid user ziplines from 116.120.58.228 Dec 15 22:40:22 ispc postfix/smtpd[1689918]: sql auxprop plugin using mysql engine Dec 15 22:40:22 ispc postfix/smtpd[1689920]: sql auxprop plugin using mysql engine Dec 15 22:40:22 ispc postfix/smtpd[1689921]: sql auxprop plugin using mysql engine Dec 15 22:41:01 ispc CRON[1689941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:41:02 ispc CRON[1689941]: pam_unix(cron:session): session closed for user root Dec 15 22:41:19 ispc postfix/smtpd[1689962]: sql auxprop plugin using mysql engine Dec 15 22:41:20 ispc saslauthd[1689963]: pam_mysql - SELECT returned no result. Dec 15 22:41:20 ispc saslauthd[1689963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:41:20 ispc saslauthd[1689963]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:42:01 ispc CRON[1689982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:42:01 ispc CRON[1689982]: pam_unix(cron:session): session closed for user root Dec 15 22:42:29 ispc postfix/smtpd[1690007]: sql auxprop plugin using mysql engine Dec 15 22:42:47 ispc saslauthd[1690020]: pam_mysql - SELECT returned no result. Dec 15 22:42:47 ispc saslauthd[1690020]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:42:47 ispc saslauthd[1690020]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:42:52 ispc saslauthd[1690025]: pam_mysql - SELECT returned no result. Dec 15 22:42:52 ispc saslauthd[1690025]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:42:52 ispc saslauthd[1690025]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:43:01 ispc CRON[1690031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:43:03 ispc CRON[1690031]: pam_unix(cron:session): session closed for user root Dec 15 22:43:22 ispc postfix/smtpd[1690051]: sql auxprop plugin using mysql engine Dec 15 22:43:23 ispc postfix/smtpd[1690053]: sql auxprop plugin using mysql engine Dec 15 22:44:01 ispc CRON[1690075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:44:02 ispc CRON[1690075]: pam_unix(cron:session): session closed for user root Dec 15 22:44:39 ispc postfix/smtpd[1690100]: sql auxprop plugin using mysql engine Dec 15 22:44:40 ispc saslauthd[1690105]: pam_mysql - SELECT returned no result. Dec 15 22:44:40 ispc saslauthd[1690105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:44:40 ispc saslauthd[1690105]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:45:01 ispc CRON[1690114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:45:01 ispc CRON[1690115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:45:01 ispc CRON[1690116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:45:01 ispc CRON[1690117]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:45:01 ispc CRON[1690115]: pam_unix(cron:session): session closed for user root Dec 15 22:45:01 ispc CRON[1690117]: pam_unix(cron:session): session closed for user getmail Dec 15 22:45:02 ispc CRON[1690116]: pam_unix(cron:session): session closed for user root Dec 15 22:45:02 ispc CRON[1690114]: pam_unix(cron:session): session closed for user root Dec 15 22:45:08 ispc saslauthd[1690191]: pam_mysql - SELECT returned no result. Dec 15 22:45:08 ispc saslauthd[1690191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:45:08 ispc saslauthd[1690191]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:46:01 ispc CRON[1690227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:46:01 ispc CRON[1690227]: pam_unix(cron:session): session closed for user root Dec 15 22:46:42 ispc saslauthd[1690251]: pam_mysql - SELECT returned no result. Dec 15 22:46:42 ispc saslauthd[1690251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:46:42 ispc saslauthd[1690251]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:47:01 ispc CRON[1690261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:47:01 ispc CRON[1690261]: pam_unix(cron:session): session closed for user root Dec 15 22:47:20 ispc saslauthd[1690280]: pam_mysql - SELECT returned no result. Dec 15 22:47:20 ispc saslauthd[1690280]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:47:20 ispc saslauthd[1690280]: do_auth : auth failure: [user=adfexc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:47:34 ispc sshd[1690286]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:47:34 ispc sshd[1690286]: Invalid user ziplines from 193.110.157.47 Dec 15 22:47:40 ispc sshd[1690292]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:48:01 ispc CRON[1690314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:48:01 ispc CRON[1690314]: pam_unix(cron:session): session closed for user root Dec 15 22:48:02 ispc saslauthd[1690325]: pam_mysql - SELECT returned no result. Dec 15 22:48:02 ispc saslauthd[1690325]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:48:02 ispc saslauthd[1690325]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:48:26 ispc saslauthd[1690337]: pam_mysql - SELECT returned no result. Dec 15 22:48:26 ispc saslauthd[1690337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:48:26 ispc saslauthd[1690337]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:49:01 ispc CRON[1690355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:49:02 ispc sshd[1690362]: Invalid user klape from 51.77.222.24 Dec 15 22:49:02 ispc CRON[1690355]: pam_unix(cron:session): session closed for user root Dec 15 22:49:02 ispc sshd[1690365]: Invalid user ubuntu from 51.77.222.24 Dec 15 22:49:43 ispc saslauthd[1690387]: pam_mysql - SELECT returned no result. Dec 15 22:49:43 ispc saslauthd[1690387]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:49:43 ispc saslauthd[1690387]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:49:49 ispc postfix/smtpd[1690392]: sql auxprop plugin using mysql engine Dec 15 22:49:49 ispc postfix/smtpd[1690394]: sql auxprop plugin using mysql engine Dec 15 22:50:01 ispc CRON[1690401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:50:01 ispc CRON[1690402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:50:01 ispc CRON[1690403]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 22:50:01 ispc CRON[1690404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:50:01 ispc CRON[1690405]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:50:02 ispc CRON[1690403]: pam_unix(cron:session): session closed for user www-data Dec 15 22:50:02 ispc CRON[1690402]: pam_unix(cron:session): session closed for user root Dec 15 22:50:02 ispc CRON[1690405]: pam_unix(cron:session): session closed for user getmail Dec 15 22:50:02 ispc CRON[1690404]: pam_unix(cron:session): session closed for user root Dec 15 22:50:02 ispc CRON[1690401]: pam_unix(cron:session): session closed for user root Dec 15 22:50:14 ispc saslauthd[1690484]: pam_mysql - SELECT returned no result. Dec 15 22:50:14 ispc saslauthd[1690484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:50:14 ispc saslauthd[1690484]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:50:33 ispc postfix/smtpd[1690494]: sql auxprop plugin using mysql engine Dec 15 22:50:44 ispc saslauthd[1690501]: pam_mysql - SELECT returned no result. Dec 15 22:50:44 ispc saslauthd[1690501]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:50:44 ispc saslauthd[1690501]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:50:54 ispc saslauthd[1690506]: pam_mysql - SELECT returned no result. Dec 15 22:50:54 ispc saslauthd[1690506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:50:54 ispc saslauthd[1690506]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:51:01 ispc CRON[1690511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:51:02 ispc CRON[1690511]: pam_unix(cron:session): session closed for user root Dec 15 22:51:11 ispc saslauthd[1690526]: pam_mysql - SELECT returned no result. Dec 15 22:51:11 ispc saslauthd[1690526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:51:11 ispc saslauthd[1690526]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:51:32 ispc saslauthd[1690535]: pam_mysql - SELECT returned no result. Dec 15 22:51:32 ispc saslauthd[1690535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:51:32 ispc saslauthd[1690535]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:51:52 ispc sshd[1690545]: Did not receive identification string from 192.227.134.84 Dec 15 22:51:52 ispc saslauthd[1690552]: pam_mysql - SELECT returned no result. Dec 15 22:51:52 ispc saslauthd[1690552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:51:52 ispc saslauthd[1690552]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:52:01 ispc CRON[1690557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:52:01 ispc CRON[1690557]: pam_unix(cron:session): session closed for user root Dec 15 22:52:06 ispc saslauthd[1690568]: pam_mysql - SELECT returned no result. Dec 15 22:52:06 ispc saslauthd[1690568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:52:06 ispc saslauthd[1690568]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:52:12 ispc saslauthd[1690573]: pam_mysql - SELECT returned no result. Dec 15 22:52:12 ispc saslauthd[1690573]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:52:12 ispc saslauthd[1690573]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:52:28 ispc postfix/smtpd[1690580]: sql auxprop plugin using mysql engine Dec 15 22:52:32 ispc saslauthd[1690586]: pam_mysql - SELECT returned no result. Dec 15 22:52:32 ispc saslauthd[1690586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:52:32 ispc saslauthd[1690586]: do_auth : auth failure: [user=info@tank24.cz] [service=smtp] [realm=tank24.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:53:01 ispc CRON[1690605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:53:02 ispc CRON[1690605]: pam_unix(cron:session): session closed for user root Dec 15 22:53:37 ispc saslauthd[1690634]: pam_mysql - SELECT returned no result. Dec 15 22:53:37 ispc saslauthd[1690634]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:53:37 ispc saslauthd[1690634]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:54:01 ispc CRON[1690643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:54:01 ispc CRON[1690643]: pam_unix(cron:session): session closed for user root Dec 15 22:54:11 ispc sshd[1690658]: Did not receive identification string from 115.190.177.64 Dec 15 22:54:41 ispc saslauthd[1690674]: pam_mysql - SELECT returned no result. Dec 15 22:54:41 ispc saslauthd[1690674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:54:41 ispc saslauthd[1690674]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:54:51 ispc saslauthd[1690679]: pam_mysql - SELECT returned no result. Dec 15 22:54:51 ispc saslauthd[1690679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:54:51 ispc saslauthd[1690679]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:55:01 ispc CRON[1690688]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 22:55:01 ispc CRON[1690685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:55:01 ispc CRON[1690686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:55:01 ispc CRON[1690687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:55:01 ispc CRON[1690686]: pam_unix(cron:session): session closed for user root Dec 15 22:55:01 ispc CRON[1690688]: pam_unix(cron:session): session closed for user getmail Dec 15 22:55:01 ispc CRON[1690687]: pam_unix(cron:session): session closed for user root Dec 15 22:55:01 ispc CRON[1690685]: pam_unix(cron:session): session closed for user root Dec 15 22:55:03 ispc postfix/smtpd[1690766]: sql auxprop plugin using mysql engine Dec 15 22:55:04 ispc postfix/smtpd[1690768]: sql auxprop plugin using mysql engine Dec 15 22:55:04 ispc postfix/smtpd[1690769]: sql auxprop plugin using mysql engine Dec 15 22:55:05 ispc saslauthd[1690771]: pam_mysql - SELECT returned no result. Dec 15 22:55:05 ispc saslauthd[1690771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:55:05 ispc saslauthd[1690771]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:55:08 ispc saslauthd[1690772]: pam_mysql - SELECT returned no result. Dec 15 22:55:08 ispc saslauthd[1690772]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:55:08 ispc saslauthd[1690772]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:56:01 ispc CRON[1690796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:56:02 ispc CRON[1690796]: pam_unix(cron:session): session closed for user root Dec 15 22:56:03 ispc saslauthd[1690807]: pam_mysql - SELECT returned no result. Dec 15 22:56:03 ispc saslauthd[1690807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:56:03 ispc saslauthd[1690807]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 22:56:15 ispc sshd[1690814]: Invalid user klape from 35.240.174.82 Dec 15 22:56:17 ispc sshd[1690820]: Invalid user ubuntu from 35.240.174.82 Dec 15 22:56:26 ispc CRON[1689647]: pam_unix(cron:session): session closed for user root Dec 15 22:57:01 ispc CRON[1690834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:57:01 ispc CRON[1690834]: pam_unix(cron:session): session closed for user root Dec 15 22:57:37 ispc sshd[1690849]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 22:58:01 ispc CRON[1690863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:58:02 ispc CRON[1690863]: pam_unix(cron:session): session closed for user root Dec 15 22:58:40 ispc sshd[1690877]: Invalid user klape from 67.205.163.146 Dec 15 22:58:41 ispc sshd[1690879]: Invalid user ubuntu from 67.205.163.146 Dec 15 22:59:01 ispc CRON[1690881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 22:59:02 ispc CRON[1690881]: pam_unix(cron:session): session closed for user root Dec 15 22:59:08 ispc saslauthd[1690893]: pam_mysql - SELECT returned no result. Dec 15 22:59:08 ispc saslauthd[1690893]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 22:59:08 ispc saslauthd[1690893]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 22:59:16 ispc postfix/smtpd[1690895]: sql auxprop plugin using mysql engine Dec 15 22:59:16 ispc postfix/smtpd[1690898]: sql auxprop plugin using mysql engine Dec 15 23:00:01 ispc CRON[1690906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:00:01 ispc CRON[1690907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:00:01 ispc CRON[1690908]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:00:01 ispc CRON[1690903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:00:01 ispc CRON[1690904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:00:01 ispc CRON[1690905]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:00:01 ispc CRON[1690904]: pam_unix(cron:session): session closed for user root Dec 15 23:00:01 ispc CRON[1690905]: pam_unix(cron:session): session closed for user www-data Dec 15 23:00:01 ispc CRON[1690908]: pam_unix(cron:session): session closed for user getmail Dec 15 23:00:01 ispc CRON[1690906]: pam_unix(cron:session): session closed for user root Dec 15 23:00:01 ispc CRON[1690903]: pam_unix(cron:session): session closed for user root Dec 15 23:00:35 ispc postfix/smtpd[1691172]: sql auxprop plugin using mysql engine Dec 15 23:00:43 ispc CRON[1690907]: pam_unix(cron:session): session closed for user root Dec 15 23:01:01 ispc CRON[1691174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:01:43 ispc saslauthd[1691203]: pam_mysql - SELECT returned no result. Dec 15 23:01:43 ispc saslauthd[1691203]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:43 ispc saslauthd[1691203]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:43 ispc saslauthd[1691204]: pam_mysql - SELECT returned no result. Dec 15 23:01:43 ispc saslauthd[1691204]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:43 ispc saslauthd[1691204]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:46 ispc saslauthd[1691206]: pam_mysql - SELECT returned no result. Dec 15 23:01:46 ispc saslauthd[1691206]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:46 ispc saslauthd[1691206]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:46 ispc saslauthd[1691208]: pam_mysql - SELECT returned no result. Dec 15 23:01:46 ispc saslauthd[1691208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:46 ispc saslauthd[1691208]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:47 ispc saslauthd[1691209]: pam_mysql - SELECT returned no result. Dec 15 23:01:47 ispc saslauthd[1691209]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:47 ispc saslauthd[1691209]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:48 ispc sshd[1691205]: Invalid user pronajemplosin from 112.217.233.242 Dec 15 23:01:48 ispc saslauthd[1691210]: pam_mysql - SELECT returned no result. Dec 15 23:01:48 ispc saslauthd[1691210]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:48 ispc saslauthd[1691210]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:48 ispc saslauthd[1691211]: pam_mysql - SELECT returned no result. Dec 15 23:01:48 ispc saslauthd[1691211]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:48 ispc saslauthd[1691211]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:01:49 ispc sshd[1691212]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:01:50 ispc sshd[1691215]: Invalid user martof from 43.135.148.156 Dec 15 23:01:51 ispc saslauthd[1691217]: pam_mysql - SELECT returned no result. Dec 15 23:01:51 ispc saslauthd[1691217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:01:51 ispc saslauthd[1691217]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:02:01 ispc CRON[1691222]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 15 23:02:01 ispc CRON[1691223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:02:01 ispc CRON[1691223]: pam_unix(cron:session): session closed for user root Dec 15 23:02:07 ispc saslauthd[1691329]: pam_mysql - SELECT returned no result. Dec 15 23:02:07 ispc saslauthd[1691329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:02:07 ispc saslauthd[1691329]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:02:15 ispc saslauthd[1691463]: pam_mysql - SELECT returned no result. Dec 15 23:02:15 ispc saslauthd[1691463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:02:15 ispc saslauthd[1691463]: do_auth : auth failure: [user=adm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:02:24 ispc saslauthd[1691600]: pam_mysql - SELECT returned no result. Dec 15 23:02:24 ispc saslauthd[1691600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:02:24 ispc saslauthd[1691600]: do_auth : auth failure: [user=informix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:02:27 ispc saslauthd[1691631]: pam_mysql - SELECT returned no result. Dec 15 23:02:27 ispc saslauthd[1691631]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:02:27 ispc saslauthd[1691631]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:03:01 ispc CRON[1692087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:03:01 ispc CRON[1692087]: pam_unix(cron:session): session closed for user root Dec 15 23:03:26 ispc CRON[1691222]: pam_unix(cron:session): session closed for user logcheck Dec 15 23:03:33 ispc postfix/smtpd[1692314]: sql auxprop plugin using mysql engine Dec 15 23:03:35 ispc sshd[1692315]: Invalid user admin from 80.94.95.115 Dec 15 23:04:01 ispc CRON[1692334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:04:02 ispc CRON[1692334]: pam_unix(cron:session): session closed for user root Dec 15 23:04:38 ispc sshd[1692364]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:04:39 ispc postfix/smtpd[1692366]: sql auxprop plugin using mysql engine Dec 15 23:04:40 ispc saslauthd[1692368]: pam_mysql - SELECT returned no result. Dec 15 23:04:40 ispc saslauthd[1692368]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:04:40 ispc saslauthd[1692368]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:05:01 ispc CRON[1692377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:05:01 ispc CRON[1692378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:05:01 ispc CRON[1692379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:05:01 ispc CRON[1692380]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:05:01 ispc CRON[1692378]: pam_unix(cron:session): session closed for user root Dec 15 23:05:01 ispc CRON[1692380]: pam_unix(cron:session): session closed for user getmail Dec 15 23:05:01 ispc CRON[1692377]: pam_unix(cron:session): session closed for user root Dec 15 23:05:01 ispc CRON[1692379]: pam_unix(cron:session): session closed for user root Dec 15 23:05:06 ispc sshd[1692457]: Invalid user capstan from 125.130.113.204 Dec 15 23:05:38 ispc postfix/smtpd[1692473]: sql auxprop plugin using mysql engine Dec 15 23:05:39 ispc postfix/smtpd[1692475]: sql auxprop plugin using mysql engine Dec 15 23:06:01 ispc CRON[1692486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:06:01 ispc CRON[1692486]: pam_unix(cron:session): session closed for user root Dec 15 23:07:01 ispc CRON[1692527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:07:02 ispc CRON[1692527]: pam_unix(cron:session): session closed for user root Dec 15 23:07:05 ispc sshd[1692539]: Invalid user ziplines from 103.110.84.105 Dec 15 23:07:27 ispc postfix/smtpd[1692550]: sql auxprop plugin using mysql engine Dec 15 23:07:27 ispc saslauthd[1692552]: pam_mysql - SELECT returned no result. Dec 15 23:07:27 ispc saslauthd[1692552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:07:27 ispc saslauthd[1692552]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:07:31 ispc saslauthd[1692557]: pam_mysql - SELECT returned no result. Dec 15 23:07:31 ispc saslauthd[1692557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:07:31 ispc saslauthd[1692557]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:07:48 ispc sshd[1692566]: Invalid user ziplines from 51.91.247.10 Dec 15 23:08:01 ispc CRON[1692583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:08:02 ispc CRON[1692583]: pam_unix(cron:session): session closed for user root Dec 15 23:08:26 ispc sshd[1692602]: Invalid user capstan from 207.180.250.25 Dec 15 23:08:31 ispc sshd[1692604]: Invalid user anoraksro from 117.50.70.169 Dec 15 23:09:01 ispc CRON[1692625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:09:01 ispc CRON[1692626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:09:01 ispc CRON[1692625]: pam_unix(cron:session): session closed for user root Dec 15 23:09:01 ispc sshd[1692643]: Invalid user ziplines from 51.159.91.86 Dec 15 23:09:02 ispc CRON[1692626]: pam_unix(cron:session): session closed for user root Dec 15 23:09:07 ispc sshd[1692649]: Invalid user blceu from 45.119.213.109 Dec 15 23:09:08 ispc postfix/smtpd[1692652]: sql auxprop plugin using mysql engine Dec 15 23:09:08 ispc postfix/smtpd[1692654]: sql auxprop plugin using mysql engine Dec 15 23:10:00 ispc saslauthd[1692679]: pam_mysql - SELECT returned no result. Dec 15 23:10:00 ispc saslauthd[1692679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:10:00 ispc saslauthd[1692679]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:10:01 ispc CRON[1692680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:10:01 ispc CRON[1692681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:10:01 ispc CRON[1692682]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:10:01 ispc CRON[1692683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:10:01 ispc CRON[1692684]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:10:01 ispc CRON[1692681]: pam_unix(cron:session): session closed for user root Dec 15 23:10:01 ispc CRON[1692682]: pam_unix(cron:session): session closed for user www-data Dec 15 23:10:01 ispc CRON[1692684]: pam_unix(cron:session): session closed for user getmail Dec 15 23:10:01 ispc CRON[1692683]: pam_unix(cron:session): session closed for user root Dec 15 23:10:02 ispc CRON[1692680]: pam_unix(cron:session): session closed for user root Dec 15 23:10:36 ispc postfix/smtpd[1692779]: sql auxprop plugin using mysql engine Dec 15 23:10:47 ispc sshd[1692788]: Invalid user klape from 36.50.177.171 Dec 15 23:10:49 ispc sshd[1692790]: Invalid user ubuntu from 36.50.177.171 Dec 15 23:11:01 ispc CRON[1692799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:11:02 ispc CRON[1692799]: pam_unix(cron:session): session closed for user root Dec 15 23:12:01 ispc CRON[1692836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:12:01 ispc CRON[1692836]: pam_unix(cron:session): session closed for user root Dec 15 23:13:01 ispc CRON[1692879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:13:02 ispc CRON[1692879]: pam_unix(cron:session): session closed for user root Dec 15 23:13:10 ispc postfix/smtpd[1692895]: sql auxprop plugin using mysql engine Dec 15 23:13:10 ispc postfix/smtpd[1692898]: sql auxprop plugin using mysql engine Dec 15 23:13:11 ispc postfix/smtpd[1692899]: sql auxprop plugin using mysql engine Dec 15 23:13:11 ispc postfix/smtpd[1692900]: sql auxprop plugin using mysql engine Dec 15 23:13:11 ispc sshd[1692901]: Bad protocol version identification '\003' from 194.165.16.161 Dec 15 23:13:38 ispc sshd[1692918]: Invalid user capstan from 43.163.105.233 Dec 15 23:13:38 ispc sshd[1692916]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:13:47 ispc sshd[1692924]: Invalid user blceu from 51.159.91.86 Dec 15 23:14:01 ispc CRON[1692931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:14:01 ispc CRON[1692931]: pam_unix(cron:session): session closed for user root Dec 15 23:14:39 ispc saslauthd[1692964]: pam_mysql - SELECT returned no result. Dec 15 23:14:39 ispc saslauthd[1692964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:14:39 ispc saslauthd[1692964]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:15:01 ispc CRON[1692976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:15:01 ispc CRON[1692977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:15:01 ispc CRON[1692978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:15:01 ispc CRON[1692979]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:15:01 ispc CRON[1692977]: pam_unix(cron:session): session closed for user root Dec 15 23:15:01 ispc CRON[1692979]: pam_unix(cron:session): session closed for user getmail Dec 15 23:15:02 ispc CRON[1692978]: pam_unix(cron:session): session closed for user root Dec 15 23:15:02 ispc CRON[1692976]: pam_unix(cron:session): session closed for user root Dec 15 23:16:01 ispc CRON[1693080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:16:02 ispc CRON[1693080]: pam_unix(cron:session): session closed for user root Dec 15 23:16:33 ispc postfix/smtpd[1693103]: sql auxprop plugin using mysql engine Dec 15 23:16:34 ispc saslauthd[1693105]: pam_mysql - SELECT returned no result. Dec 15 23:16:34 ispc saslauthd[1693105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:16:34 ispc saslauthd[1693105]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:17:01 ispc CRON[1693119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:17:01 ispc CRON[1693119]: pam_unix(cron:session): session closed for user root Dec 15 23:17:07 ispc saslauthd[1693136]: pam_mysql - SELECT returned no result. Dec 15 23:17:07 ispc saslauthd[1693136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:17:07 ispc saslauthd[1693136]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:18:01 ispc CRON[1693175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:18:02 ispc CRON[1693175]: pam_unix(cron:session): session closed for user root Dec 15 23:19:01 ispc CRON[1693210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:19:02 ispc CRON[1693210]: pam_unix(cron:session): session closed for user root Dec 15 23:19:54 ispc postfix/smtpd[1693246]: sql auxprop plugin using mysql engine Dec 15 23:19:56 ispc saslauthd[1693248]: pam_mysql - SELECT returned no result. Dec 15 23:19:56 ispc saslauthd[1693248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:19:56 ispc saslauthd[1693248]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:20:01 ispc CRON[1693253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:20:01 ispc CRON[1693254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:20:01 ispc CRON[1693255]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:20:01 ispc CRON[1693256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:20:01 ispc CRON[1693257]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:20:01 ispc CRON[1693254]: pam_unix(cron:session): session closed for user root Dec 15 23:20:01 ispc CRON[1693255]: pam_unix(cron:session): session closed for user www-data Dec 15 23:20:02 ispc CRON[1693257]: pam_unix(cron:session): session closed for user getmail Dec 15 23:20:02 ispc CRON[1693256]: pam_unix(cron:session): session closed for user root Dec 15 23:20:03 ispc CRON[1693253]: pam_unix(cron:session): session closed for user root Dec 15 23:21:01 ispc CRON[1693357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:21:01 ispc CRON[1693356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:21:01 ispc CRON[1693356]: pam_unix(cron:session): session closed for user root Dec 15 23:21:02 ispc CRON[1693357]: pam_unix(cron:session): session closed for user root Dec 15 23:21:17 ispc CRON[1691174]: pam_unix(cron:session): session closed for user root Dec 15 23:21:48 ispc sshd[1693382]: Invalid user blceu from 103.77.207.53 Dec 15 23:22:01 ispc CRON[1693386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:22:02 ispc CRON[1693386]: pam_unix(cron:session): session closed for user root Dec 15 23:23:01 ispc CRON[1693408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:23:02 ispc CRON[1693408]: pam_unix(cron:session): session closed for user root Dec 15 23:23:30 ispc sshd[1693421]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:23:30 ispc sshd[1693421]: Invalid user zednictvistastny from 103.112.245.93 Dec 15 23:23:34 ispc postfix/smtpd[1693423]: sql auxprop plugin using mysql engine Dec 15 23:23:34 ispc postfix/smtpd[1693426]: sql auxprop plugin using mysql engine Dec 15 23:23:34 ispc postfix/smtpd[1693427]: sql auxprop plugin using mysql engine Dec 15 23:24:01 ispc CRON[1693432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:24:02 ispc CRON[1693432]: pam_unix(cron:session): session closed for user root Dec 15 23:25:01 ispc CRON[1693446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:25:01 ispc CRON[1693447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:25:01 ispc CRON[1693448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:25:01 ispc CRON[1693449]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:25:01 ispc CRON[1693447]: pam_unix(cron:session): session closed for user root Dec 15 23:25:01 ispc CRON[1693449]: pam_unix(cron:session): session closed for user getmail Dec 15 23:25:02 ispc CRON[1693446]: pam_unix(cron:session): session closed for user root Dec 15 23:25:02 ispc saslauthd[1693552]: pam_mysql - SELECT returned no result. Dec 15 23:25:02 ispc saslauthd[1693552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:25:02 ispc saslauthd[1693552]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:25:38 ispc CRON[1693448]: pam_unix(cron:session): session closed for user root Dec 15 23:26:01 ispc CRON[1693562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:26:25 ispc sshd[1693583]: Did not receive identification string from 1.94.34.255 Dec 15 23:27:01 ispc CRON[1693598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:27:01 ispc CRON[1693598]: pam_unix(cron:session): session closed for user root Dec 15 23:27:51 ispc sshd[1693637]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:27:55 ispc postfix/smtpd[1693648]: sql auxprop plugin using mysql engine Dec 15 23:27:55 ispc postfix/smtpd[1693650]: sql auxprop plugin using mysql engine Dec 15 23:27:56 ispc postfix/smtpd[1693651]: sql auxprop plugin using mysql engine Dec 15 23:27:56 ispc postfix/smtpd[1693652]: sql auxprop plugin using mysql engine Dec 15 23:28:01 ispc CRON[1693655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:28:02 ispc CRON[1693655]: pam_unix(cron:session): session closed for user root Dec 15 23:29:01 ispc CRON[1693691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:29:01 ispc CRON[1693691]: pam_unix(cron:session): session closed for user root Dec 15 23:30:01 ispc CRON[1693728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:30:01 ispc CRON[1693729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:30:01 ispc CRON[1693730]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:30:01 ispc CRON[1693731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:30:01 ispc CRON[1693732]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:30:01 ispc CRON[1693729]: pam_unix(cron:session): session closed for user root Dec 15 23:30:01 ispc CRON[1693730]: pam_unix(cron:session): session closed for user www-data Dec 15 23:30:01 ispc CRON[1693732]: pam_unix(cron:session): session closed for user getmail Dec 15 23:30:02 ispc CRON[1693731]: pam_unix(cron:session): session closed for user root Dec 15 23:30:02 ispc CRON[1693728]: pam_unix(cron:session): session closed for user root Dec 15 23:30:30 ispc postfix/smtpd[1693818]: sql auxprop plugin using mysql engine Dec 15 23:30:32 ispc saslauthd[1693820]: pam_mysql - SELECT returned no result. Dec 15 23:30:32 ispc saslauthd[1693820]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:30:32 ispc saslauthd[1693820]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:31:01 ispc CRON[1693837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:31:02 ispc CRON[1693837]: pam_unix(cron:session): session closed for user root Dec 15 23:31:03 ispc sshd[1693845]: Invalid user ziplines from 43.135.148.156 Dec 15 23:31:14 ispc sshd[1693855]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:31:14 ispc sshd[1693855]: Invalid user zednictvistastny from 103.112.245.93 Dec 15 23:32:01 ispc CRON[1693878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:32:02 ispc CRON[1693878]: pam_unix(cron:session): session closed for user root Dec 15 23:32:03 ispc saslauthd[1693890]: pam_mysql - SELECT returned no result. Dec 15 23:32:03 ispc saslauthd[1693890]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:32:03 ispc saslauthd[1693890]: do_auth : auth failure: [user=admin2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:33:01 ispc CRON[1693924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:33:02 ispc CRON[1693924]: pam_unix(cron:session): session closed for user root Dec 15 23:33:03 ispc saslauthd[1693935]: pam_mysql - SELECT returned no result. Dec 15 23:33:03 ispc saslauthd[1693935]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:33:03 ispc saslauthd[1693935]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:33:06 ispc sshd[1693937]: Invalid user admin from 139.19.117.197 Dec 15 23:33:53 ispc saslauthd[1693970]: pam_mysql - SELECT returned no result. Dec 15 23:33:53 ispc saslauthd[1693970]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:33:53 ispc saslauthd[1693970]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:34:01 ispc CRON[1693975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:34:02 ispc CRON[1693975]: pam_unix(cron:session): session closed for user root Dec 15 23:34:10 ispc saslauthd[1693991]: pam_mysql - SELECT returned no result. Dec 15 23:34:10 ispc saslauthd[1693991]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:34:10 ispc saslauthd[1693991]: do_auth : auth failure: [user=oracle8] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:34:26 ispc postfix/smtpd[1693996]: sql auxprop plugin using mysql engine Dec 15 23:34:26 ispc postfix/smtpd[1693998]: sql auxprop plugin using mysql engine Dec 15 23:34:27 ispc postfix/smtpd[1693999]: sql auxprop plugin using mysql engine Dec 15 23:35:01 ispc CRON[1694022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:35:01 ispc CRON[1694023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:35:01 ispc CRON[1694024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:35:01 ispc CRON[1694025]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:35:02 ispc CRON[1694023]: pam_unix(cron:session): session closed for user root Dec 15 23:35:02 ispc CRON[1694025]: pam_unix(cron:session): session closed for user getmail Dec 15 23:35:03 ispc CRON[1694024]: pam_unix(cron:session): session closed for user root Dec 15 23:35:04 ispc CRON[1694022]: pam_unix(cron:session): session closed for user root Dec 15 23:35:26 ispc saslauthd[1694109]: pam_mysql - SELECT returned no result. Dec 15 23:35:26 ispc saslauthd[1694109]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:35:26 ispc saslauthd[1694109]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:36:01 ispc CRON[1694127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:36:01 ispc CRON[1694127]: pam_unix(cron:session): session closed for user root Dec 15 23:37:01 ispc CRON[1694169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:37:01 ispc CRON[1694169]: pam_unix(cron:session): session closed for user root Dec 15 23:37:12 ispc postfix/smtpd[1694184]: sql auxprop plugin using mysql engine Dec 15 23:37:12 ispc saslauthd[1694190]: pam_mysql - SELECT returned no result. Dec 15 23:37:12 ispc saslauthd[1694190]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:37:12 ispc saslauthd[1694190]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:37:55 ispc sshd[1694216]: Invalid user martof from 103.110.84.105 Dec 15 23:38:01 ispc CRON[1694223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:38:02 ispc CRON[1694223]: pam_unix(cron:session): session closed for user root Dec 15 23:39:01 ispc CRON[1694260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:39:01 ispc CRON[1694259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:39:01 ispc CRON[1694259]: pam_unix(cron:session): session closed for user root Dec 15 23:39:02 ispc CRON[1694260]: pam_unix(cron:session): session closed for user root Dec 15 23:39:14 ispc postfix/smtpd[1694285]: sql auxprop plugin using mysql engine Dec 15 23:40:01 ispc CRON[1694311]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:40:01 ispc CRON[1694312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:40:01 ispc CRON[1694310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:40:01 ispc CRON[1694313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:40:01 ispc CRON[1694309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:40:01 ispc CRON[1694311]: pam_unix(cron:session): session closed for user www-data Dec 15 23:40:01 ispc CRON[1694310]: pam_unix(cron:session): session closed for user root Dec 15 23:40:01 ispc CRON[1694313]: pam_unix(cron:session): session closed for user getmail Dec 15 23:40:01 ispc CRON[1694312]: pam_unix(cron:session): session closed for user root Dec 15 23:40:02 ispc CRON[1694309]: pam_unix(cron:session): session closed for user root Dec 15 23:40:40 ispc postfix/smtpd[1694400]: sql auxprop plugin using mysql engine Dec 15 23:40:43 ispc saslauthd[1694406]: pam_mysql - SELECT returned no result. Dec 15 23:40:43 ispc saslauthd[1694406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:40:43 ispc saslauthd[1694406]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:41:00 ispc sshd[1694411]: Invalid user admin from 103.100.209.172 Dec 15 23:41:01 ispc CRON[1694417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:41:01 ispc CRON[1694417]: pam_unix(cron:session): session closed for user root Dec 15 23:41:33 ispc sshd[1694440]: Invalid user martof from 103.77.207.53 Dec 15 23:41:57 ispc sshd[1694458]: Invalid user klape from 77.241.18.2 Dec 15 23:41:58 ispc sshd[1694460]: Invalid user ubuntu from 77.241.18.2 Dec 15 23:42:01 ispc CRON[1694462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:42:02 ispc CRON[1694462]: pam_unix(cron:session): session closed for user root Dec 15 23:43:01 ispc CRON[1694505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:43:02 ispc CRON[1694505]: pam_unix(cron:session): session closed for user root Dec 15 23:43:23 ispc postfix/smtpd[1694528]: sql auxprop plugin using mysql engine Dec 15 23:43:25 ispc saslauthd[1694530]: pam_mysql - SELECT returned no result. Dec 15 23:43:25 ispc saslauthd[1694530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:43:25 ispc saslauthd[1694530]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:44:01 ispc CRON[1694544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:44:01 ispc CRON[1694544]: pam_unix(cron:session): session closed for user root Dec 15 23:45:01 ispc CRON[1694584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:45:01 ispc CRON[1694585]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:45:01 ispc CRON[1694583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:45:01 ispc CRON[1694582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:45:01 ispc CRON[1694583]: pam_unix(cron:session): session closed for user root Dec 15 23:45:01 ispc CRON[1694585]: pam_unix(cron:session): session closed for user getmail Dec 15 23:45:02 ispc CRON[1694584]: pam_unix(cron:session): session closed for user root Dec 15 23:45:02 ispc CRON[1694582]: pam_unix(cron:session): session closed for user root Dec 15 23:45:27 ispc sshd[1694670]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:45:30 ispc sshd[1694674]: Invalid user blceu from 202.46.29.79 Dec 15 23:45:31 ispc sshd[1694672]: Invalid user klape from 13.70.185.98 Dec 15 23:45:43 ispc postfix/smtpd[1694682]: sql auxprop plugin using mysql engine Dec 15 23:45:45 ispc saslauthd[1694688]: pam_mysql - SELECT returned no result. Dec 15 23:45:45 ispc saslauthd[1694688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:45:45 ispc saslauthd[1694688]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:45:48 ispc postfix/smtpd[1694689]: sql auxprop plugin using mysql engine Dec 15 23:45:48 ispc postfix/smtpd[1694690]: sql auxprop plugin using mysql engine Dec 15 23:45:48 ispc postfix/smtpd[1694691]: sql auxprop plugin using mysql engine Dec 15 23:45:54 ispc sshd[1694692]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:45:54 ispc sshd[1694692]: Invalid user martof from 157.245.115.125 Dec 15 23:45:55 ispc saslauthd[1694698]: pam_mysql - SELECT returned no result. Dec 15 23:45:55 ispc saslauthd[1694698]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:45:55 ispc saslauthd[1694698]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:46:01 ispc CRON[1694699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:46:01 ispc CRON[1694699]: pam_unix(cron:session): session closed for user root Dec 15 23:46:27 ispc CRON[1693562]: pam_unix(cron:session): session closed for user root Dec 15 23:46:50 ispc postfix/smtpd[1694722]: sql auxprop plugin using mysql engine Dec 15 23:47:01 ispc CRON[1694724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:47:02 ispc postfix/smtpd[1694731]: sql auxprop plugin using mysql engine Dec 15 23:47:02 ispc saslauthd[1694733]: pam_mysql - SELECT returned no result. Dec 15 23:47:02 ispc saslauthd[1694733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:47:02 ispc saslauthd[1694733]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:47:05 ispc saslauthd[1694734]: pam_mysql - SELECT returned no result. Dec 15 23:47:05 ispc saslauthd[1694734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:47:05 ispc saslauthd[1694734]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:47:08 ispc CRON[1694724]: pam_unix(cron:session): session closed for user root Dec 15 23:47:08 ispc saslauthd[1694739]: pam_mysql - SELECT returned no result. Dec 15 23:47:08 ispc saslauthd[1694739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:47:08 ispc saslauthd[1694739]: do_auth : auth failure: [user=info@matl-bula.com] [service=smtp] [realm=matl-bula.com] [mech=pam] [reason=PAM auth error] Dec 15 23:47:19 ispc saslauthd[1694740]: pam_mysql - SELECT returned no result. Dec 15 23:47:19 ispc saslauthd[1694740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:47:19 ispc saslauthd[1694740]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:47:46 ispc sshd[1694746]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:47:48 ispc sshd[1694748]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:47:48 ispc sshd[1694748]: Invalid user klape from 189.89.20.45 Dec 15 23:47:50 ispc sshd[1694750]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:47:50 ispc sshd[1694750]: Invalid user ubuntu from 189.89.20.45 Dec 15 23:47:52 ispc saslauthd[1694759]: pam_mysql - SELECT returned no result. Dec 15 23:47:52 ispc saslauthd[1694759]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:47:52 ispc saslauthd[1694759]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:48:01 ispc CRON[1694762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:48:01 ispc sshd[1694760]: Invalid user zednictvistastny from 161.97.92.14 Dec 15 23:49:00 ispc postfix/smtpd[1694797]: sql auxprop plugin using mysql engine Dec 15 23:49:01 ispc postfix/smtpd[1694799]: sql auxprop plugin using mysql engine Dec 15 23:49:01 ispc CRON[1694800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:49:01 ispc postfix/smtpd[1694807]: sql auxprop plugin using mysql engine Dec 15 23:49:01 ispc CRON[1694800]: pam_unix(cron:session): session closed for user root Dec 15 23:49:39 ispc sshd[1694829]: Invalid user diamantdi from 51.159.18.215 Dec 15 23:50:01 ispc CRON[1694841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:50:01 ispc CRON[1694842]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 15 23:50:01 ispc CRON[1694843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:50:01 ispc CRON[1694844]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:50:01 ispc CRON[1694840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:50:01 ispc CRON[1694841]: pam_unix(cron:session): session closed for user root Dec 15 23:50:01 ispc CRON[1694842]: pam_unix(cron:session): session closed for user www-data Dec 15 23:50:01 ispc CRON[1694844]: pam_unix(cron:session): session closed for user getmail Dec 15 23:50:02 ispc CRON[1694840]: pam_unix(cron:session): session closed for user root Dec 15 23:50:02 ispc CRON[1694843]: pam_unix(cron:session): session closed for user root Dec 15 23:50:26 ispc postfix/smtpd[1694930]: sql auxprop plugin using mysql engine Dec 15 23:50:27 ispc saslauthd[1694931]: pam_mysql - SELECT returned no result. Dec 15 23:50:27 ispc saslauthd[1694931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:50:27 ispc saslauthd[1694931]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:50:40 ispc saslauthd[1694937]: pam_mysql - SELECT returned no result. Dec 15 23:50:40 ispc saslauthd[1694937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:50:40 ispc saslauthd[1694937]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:50:52 ispc saslauthd[1694942]: pam_mysql - SELECT returned no result. Dec 15 23:50:52 ispc saslauthd[1694942]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:50:52 ispc saslauthd[1694942]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:50:57 ispc saslauthd[1694947]: pam_mysql - SELECT returned no result. Dec 15 23:50:57 ispc saslauthd[1694947]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:50:57 ispc saslauthd[1694947]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:50:58 ispc saslauthd[1694948]: pam_mysql - SELECT returned no result. Dec 15 23:50:58 ispc saslauthd[1694948]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:50:58 ispc saslauthd[1694948]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:51:01 ispc CRON[1694949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:51:01 ispc CRON[1694949]: pam_unix(cron:session): session closed for user root Dec 15 23:52:01 ispc CRON[1694984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:52:02 ispc CRON[1694984]: pam_unix(cron:session): session closed for user root Dec 15 23:52:20 ispc postfix/smtpd[1695003]: sql auxprop plugin using mysql engine Dec 15 23:53:01 ispc CRON[1695028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:53:01 ispc CRON[1695028]: pam_unix(cron:session): session closed for user root Dec 15 23:53:11 ispc postfix/smtpd[1695043]: sql auxprop plugin using mysql engine Dec 15 23:53:11 ispc postfix/smtpd[1695045]: sql auxprop plugin using mysql engine Dec 15 23:54:01 ispc CRON[1695066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:54:02 ispc CRON[1695066]: pam_unix(cron:session): session closed for user root Dec 15 23:54:22 ispc sshd[1695085]: Invalid user blceu from 211.57.200.145 Dec 15 23:54:53 ispc postfix/smtpd[1695099]: sql auxprop plugin using mysql engine Dec 15 23:54:53 ispc postfix/smtpd[1695101]: sql auxprop plugin using mysql engine Dec 15 23:55:01 ispc CRON[1695108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:55:01 ispc CRON[1695109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:55:01 ispc CRON[1695110]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 15 23:55:01 ispc CRON[1695107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:55:01 ispc CRON[1695108]: pam_unix(cron:session): session closed for user root Dec 15 23:55:01 ispc CRON[1695110]: pam_unix(cron:session): session closed for user getmail Dec 15 23:55:01 ispc CRON[1695109]: pam_unix(cron:session): session closed for user root Dec 15 23:55:02 ispc CRON[1695107]: pam_unix(cron:session): session closed for user root Dec 15 23:55:19 ispc saslauthd[1695192]: pam_mysql - SELECT returned no result. Dec 15 23:55:19 ispc saslauthd[1695192]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:55:19 ispc saslauthd[1695192]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 15 23:55:28 ispc sshd[1695199]: Invalid user capstan from 207.180.250.25 Dec 15 23:56:01 ispc CRON[1695220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:56:01 ispc CRON[1695220]: pam_unix(cron:session): session closed for user root Dec 15 23:57:01 ispc CRON[1695255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:57:01 ispc CRON[1695255]: pam_unix(cron:session): session closed for user root Dec 15 23:57:17 ispc sshd[1695271]: Invalid user capstan from 125.130.113.204 Dec 15 23:57:26 ispc sshd[1695277]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:26 ispc sshd[1695279]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:27 ispc sshd[1695281]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:28 ispc sshd[1695283]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:29 ispc sshd[1695285]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:29 ispc sshd[1695287]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:30 ispc sshd[1695289]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:31 ispc sshd[1695295]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:31 ispc sshd[1695297]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:32 ispc sshd[1695299]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:32 ispc sshd[1695301]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:33 ispc sshd[1695304]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:34 ispc sshd[1695307]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:35 ispc sshd[1695309]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:35 ispc sshd[1695311]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:36 ispc sshd[1695313]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:37 ispc sshd[1695315]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:37 ispc postfix/smtpd[1695317]: sql auxprop plugin using mysql engine Dec 15 23:57:38 ispc sshd[1695319]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:38 ispc sshd[1695321]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:38 ispc sshd[1695321]: Invalid user Antminer from 179.43.184.242 Dec 15 23:57:38 ispc saslauthd[1695324]: pam_mysql - SELECT returned no result. Dec 15 23:57:38 ispc saslauthd[1695324]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:57:38 ispc saslauthd[1695324]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:57:39 ispc sshd[1695326]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:39 ispc sshd[1695326]: Invalid user Antminer from 179.43.184.242 Dec 15 23:57:40 ispc sshd[1695328]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:40 ispc sshd[1695323]: Invalid user pronajemplosin from 112.217.233.242 Dec 15 23:57:40 ispc sshd[1695331]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:41 ispc sshd[1695336]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:42 ispc sshd[1695339]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:42 ispc sshd[1695343]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:43 ispc sshd[1695345]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:43 ispc sshd[1695345]: Invalid user admin from 179.43.184.242 Dec 15 23:57:44 ispc sshd[1695347]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 15 23:57:44 ispc sshd[1695347]: Invalid user baikal from 179.43.184.242 Dec 15 23:58:01 ispc CRON[1695361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:58:02 ispc CRON[1695361]: pam_unix(cron:session): session closed for user root Dec 15 23:58:27 ispc saslauthd[1695380]: pam_mysql - SELECT returned no result. Dec 15 23:58:27 ispc saslauthd[1695380]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:27 ispc saslauthd[1695380]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:28 ispc saslauthd[1695381]: pam_mysql - SELECT returned no result. Dec 15 23:58:28 ispc saslauthd[1695381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:28 ispc saslauthd[1695381]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:28 ispc saslauthd[1695382]: pam_mysql - SELECT returned no result. Dec 15 23:58:28 ispc saslauthd[1695382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:28 ispc saslauthd[1695382]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:29 ispc saslauthd[1695383]: pam_mysql - SELECT returned no result. Dec 15 23:58:29 ispc saslauthd[1695383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:29 ispc saslauthd[1695383]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:31 ispc saslauthd[1695387]: pam_mysql - SELECT returned no result. Dec 15 23:58:31 ispc saslauthd[1695387]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:31 ispc saslauthd[1695387]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:31 ispc postfix/smtpd[1695386]: sql auxprop plugin using mysql engine Dec 15 23:58:31 ispc saslauthd[1695393]: pam_mysql - SELECT returned no result. Dec 15 23:58:31 ispc saslauthd[1695393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:31 ispc saslauthd[1695393]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:33 ispc saslauthd[1695394]: pam_mysql - SELECT returned no result. Dec 15 23:58:33 ispc saslauthd[1695394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:33 ispc saslauthd[1695394]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:35 ispc saslauthd[1695395]: pam_mysql - SELECT returned no result. Dec 15 23:58:35 ispc saslauthd[1695395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:35 ispc saslauthd[1695395]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:58:49 ispc saslauthd[1695400]: pam_mysql - SELECT returned no result. Dec 15 23:58:49 ispc saslauthd[1695400]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:58:49 ispc saslauthd[1695400]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 15 23:59:01 ispc CRON[1695409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 15 23:59:02 ispc CRON[1695409]: pam_unix(cron:session): session closed for user root Dec 15 23:59:02 ispc sshd[1695416]: Invalid user klape from 2.57.217.229 Dec 15 23:59:02 ispc sshd[1695426]: Invalid user ubuntu from 2.57.217.229 Dec 15 23:59:07 ispc sshd[1695429]: Did not receive identification string from 45.140.17.97 Dec 15 23:59:10 ispc saslauthd[1695430]: pam_mysql - SELECT returned no result. Dec 15 23:59:10 ispc saslauthd[1695430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 15 23:59:10 ispc saslauthd[1695430]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:00:01 ispc CRON[1695451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:00:01 ispc CRON[1695455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:00:01 ispc CRON[1695452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:00:01 ispc CRON[1695453]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:00:01 ispc CRON[1695454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:00:01 ispc CRON[1695456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:00:01 ispc CRON[1695453]: pam_unix(cron:session): session closed for user www-data Dec 16 00:00:01 ispc CRON[1695457]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:00:01 ispc CRON[1695452]: pam_unix(cron:session): session closed for user root Dec 16 00:00:01 ispc CRON[1695455]: pam_unix(cron:session): session closed for user root Dec 16 00:00:01 ispc CRON[1695457]: pam_unix(cron:session): session closed for user getmail Dec 16 00:00:01 ispc CRON[1695454]: pam_unix(cron:session): session closed for user root Dec 16 00:00:01 ispc CRON[1695456]: pam_unix(cron:session): session closed for user root Dec 16 00:00:01 ispc CRON[1695451]: pam_unix(cron:session): session closed for user root Dec 16 00:00:37 ispc saslauthd[1695629]: pam_mysql - SELECT returned no result. Dec 16 00:00:37 ispc saslauthd[1695629]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:00:37 ispc saslauthd[1695629]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:00:52 ispc sshd[1695634]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 00:00:52 ispc sshd[1695634]: Invalid user user from 2.57.121.25 Dec 16 00:01:01 ispc CRON[1695640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:01:02 ispc CRON[1695640]: pam_unix(cron:session): session closed for user root Dec 16 00:02:01 ispc CRON[1695677]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 00:02:01 ispc CRON[1695678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:02:02 ispc saslauthd[1695693]: pam_mysql - SELECT returned no result. Dec 16 00:02:02 ispc saslauthd[1695693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:02:02 ispc saslauthd[1695693]: do_auth : auth failure: [user=adminstrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:02:02 ispc CRON[1695678]: pam_unix(cron:session): session closed for user root Dec 16 00:02:55 ispc CRON[1695677]: pam_unix(cron:session): session closed for user logcheck Dec 16 00:02:56 ispc sshd[1696706]: Invalid user capstan from 103.172.236.164 Dec 16 00:03:00 ispc postfix/smtpd[1696737]: sql auxprop plugin using mysql engine Dec 16 00:03:01 ispc CRON[1696740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:03:01 ispc CRON[1696740]: pam_unix(cron:session): session closed for user root Dec 16 00:03:11 ispc sshd[1696756]: Invalid user blceu from 51.159.18.215 Dec 16 00:03:55 ispc postfix/smtpd[1696779]: sql auxprop plugin using mysql engine Dec 16 00:03:56 ispc saslauthd[1696781]: pam_mysql - SELECT returned no result. Dec 16 00:03:56 ispc saslauthd[1696781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:03:56 ispc saslauthd[1696781]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:03:58 ispc saslauthd[1696782]: pam_mysql - SELECT returned no result. Dec 16 00:03:58 ispc saslauthd[1696782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:03:58 ispc saslauthd[1696782]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:04:01 ispc CRON[1696783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:04:02 ispc CRON[1696783]: pam_unix(cron:session): session closed for user root Dec 16 00:05:01 ispc CRON[1696818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:05:01 ispc CRON[1696819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:05:01 ispc CRON[1696820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:05:01 ispc CRON[1696821]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:05:01 ispc CRON[1696819]: pam_unix(cron:session): session closed for user root Dec 16 00:05:01 ispc CRON[1696821]: pam_unix(cron:session): session closed for user getmail Dec 16 00:05:01 ispc CRON[1696820]: pam_unix(cron:session): session closed for user root Dec 16 00:05:01 ispc CRON[1696818]: pam_unix(cron:session): session closed for user root Dec 16 00:05:14 ispc postfix/smtpd[1696898]: sql auxprop plugin using mysql engine Dec 16 00:05:14 ispc postfix/smtpd[1696900]: sql auxprop plugin using mysql engine Dec 16 00:05:14 ispc postfix/smtpd[1696901]: sql auxprop plugin using mysql engine Dec 16 00:06:01 ispc CRON[1696922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:06:02 ispc CRON[1696922]: pam_unix(cron:session): session closed for user root Dec 16 00:06:02 ispc postfix/smtpd[1696933]: sql auxprop plugin using mysql engine Dec 16 00:06:03 ispc saslauthd[1696934]: pam_mysql - SELECT returned no result. Dec 16 00:06:03 ispc saslauthd[1696934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:06:03 ispc saslauthd[1696934]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:06:09 ispc saslauthd[1696939]: pam_mysql - SELECT returned no result. Dec 16 00:06:09 ispc saslauthd[1696939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:06:10 ispc saslauthd[1696939]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:07:01 ispc CRON[1696960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:07:01 ispc CRON[1696960]: pam_unix(cron:session): session closed for user root Dec 16 00:08:01 ispc CRON[1697004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:08:02 ispc CRON[1697004]: pam_unix(cron:session): session closed for user root Dec 16 00:08:13 ispc sshd[1697019]: Invalid user martof from 175.125.92.77 Dec 16 00:08:21 ispc CRON[1694762]: pam_unix(cron:session): session closed for user root Dec 16 00:08:21 ispc postfix/smtpd[1697023]: sql auxprop plugin using mysql engine Dec 16 00:08:27 ispc sshd[1697028]: Invalid user martof from 202.46.29.79 Dec 16 00:08:39 ispc sshd[1697030]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 00:09:01 ispc CRON[1697032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:09:01 ispc CRON[1697033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:09:01 ispc CRON[1697032]: pam_unix(cron:session): session closed for user root Dec 16 00:09:06 ispc CRON[1697033]: pam_unix(cron:session): session closed for user root Dec 16 00:10:01 ispc CRON[1697057]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:10:01 ispc CRON[1697058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:10:01 ispc CRON[1697059]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:10:01 ispc CRON[1697060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:10:01 ispc CRON[1697061]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:10:02 ispc CRON[1697059]: pam_unix(cron:session): session closed for user www-data Dec 16 00:10:02 ispc CRON[1697058]: pam_unix(cron:session): session closed for user root Dec 16 00:10:02 ispc CRON[1697061]: pam_unix(cron:session): session closed for user getmail Dec 16 00:10:02 ispc CRON[1697057]: pam_unix(cron:session): session closed for user root Dec 16 00:10:18 ispc saslauthd[1697143]: pam_mysql - SELECT returned no result. Dec 16 00:10:18 ispc saslauthd[1697143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:10:18 ispc saslauthd[1697143]: do_auth : auth failure: [user=finance] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:10:22 ispc postfix/smtpd[1697150]: sql auxprop plugin using mysql engine Dec 16 00:10:22 ispc postfix/smtpd[1697152]: sql auxprop plugin using mysql engine Dec 16 00:10:22 ispc postfix/smtpd[1697153]: sql auxprop plugin using mysql engine Dec 16 00:10:58 ispc saslauthd[1697170]: pam_mysql - SELECT returned no result. Dec 16 00:10:58 ispc saslauthd[1697170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:10:58 ispc saslauthd[1697170]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:11:01 ispc CRON[1697171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:11:02 ispc CRON[1697171]: pam_unix(cron:session): session closed for user root Dec 16 00:12:01 ispc CRON[1697214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:12:02 ispc CRON[1697214]: pam_unix(cron:session): session closed for user root Dec 16 00:12:34 ispc saslauthd[1697238]: pam_mysql - SELECT returned no result. Dec 16 00:12:34 ispc saslauthd[1697238]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:12:34 ispc saslauthd[1697238]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:13:01 ispc CRON[1697258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:13:02 ispc CRON[1697258]: pam_unix(cron:session): session closed for user root Dec 16 00:14:01 ispc CRON[1697303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:14:02 ispc CRON[1697303]: pam_unix(cron:session): session closed for user root Dec 16 00:14:11 ispc postfix/smtpd[1697319]: sql auxprop plugin using mysql engine Dec 16 00:14:11 ispc postfix/smtpd[1697321]: sql auxprop plugin using mysql engine Dec 16 00:15:01 ispc CRON[1697350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:15:01 ispc CRON[1697351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:15:01 ispc CRON[1697352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:15:01 ispc CRON[1697353]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:15:01 ispc CRON[1697351]: pam_unix(cron:session): session closed for user root Dec 16 00:15:01 ispc CRON[1697353]: pam_unix(cron:session): session closed for user getmail Dec 16 00:15:03 ispc CRON[1697352]: pam_unix(cron:session): session closed for user root Dec 16 00:15:04 ispc CRON[1697350]: pam_unix(cron:session): session closed for user root Dec 16 00:15:30 ispc saslauthd[1697439]: pam_mysql - SELECT returned no result. Dec 16 00:15:30 ispc saslauthd[1697439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:15:30 ispc saslauthd[1697439]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:16:01 ispc CRON[1697454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:16:02 ispc CRON[1697454]: pam_unix(cron:session): session closed for user root Dec 16 00:17:01 ispc CRON[1697497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:17:02 ispc CRON[1697497]: pam_unix(cron:session): session closed for user root Dec 16 00:17:04 ispc saslauthd[1697508]: pam_mysql - SELECT returned no result. Dec 16 00:17:04 ispc saslauthd[1697508]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:17:04 ispc saslauthd[1697508]: do_auth : auth failure: [user=admn] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:18:01 ispc CRON[1697548]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 00:18:01 ispc CRON[1697549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:18:01 ispc CRON[1697549]: pam_unix(cron:session): session closed for user root Dec 16 00:18:06 ispc CRON[1697548]: pam_unix(cron:session): session closed for user amavis Dec 16 00:18:07 ispc postfix/smtpd[1697572]: sql auxprop plugin using mysql engine Dec 16 00:19:01 ispc CRON[1697607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:19:01 ispc CRON[1697607]: pam_unix(cron:session): session closed for user root Dec 16 00:19:52 ispc postfix/smtpd[1697639]: sql auxprop plugin using mysql engine Dec 16 00:19:57 ispc saslauthd[1697641]: pam_mysql - SELECT returned no result. Dec 16 00:19:57 ispc saslauthd[1697641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:19:57 ispc saslauthd[1697641]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:20:02 ispc CRON[1697646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:20:02 ispc CRON[1697647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:20:02 ispc CRON[1697648]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:20:02 ispc CRON[1697649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:20:02 ispc CRON[1697650]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:20:02 ispc CRON[1697647]: pam_unix(cron:session): session closed for user root Dec 16 00:20:02 ispc CRON[1697648]: pam_unix(cron:session): session closed for user www-data Dec 16 00:20:02 ispc CRON[1697650]: pam_unix(cron:session): session closed for user getmail Dec 16 00:20:03 ispc CRON[1697649]: pam_unix(cron:session): session closed for user root Dec 16 00:20:04 ispc CRON[1697646]: pam_unix(cron:session): session closed for user root Dec 16 00:21:01 ispc CRON[1697747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:21:01 ispc CRON[1697748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:21:01 ispc CRON[1697747]: pam_unix(cron:session): session closed for user root Dec 16 00:21:01 ispc CRON[1697748]: pam_unix(cron:session): session closed for user root Dec 16 00:21:39 ispc postfix/smtpd[1697783]: sql auxprop plugin using mysql engine Dec 16 00:21:39 ispc postfix/smtpd[1697785]: sql auxprop plugin using mysql engine Dec 16 00:21:39 ispc postfix/smtpd[1697786]: sql auxprop plugin using mysql engine Dec 16 00:21:40 ispc postfix/smtpd[1697787]: sql auxprop plugin using mysql engine Dec 16 00:22:01 ispc CRON[1697797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:22:02 ispc CRON[1697797]: pam_unix(cron:session): session closed for user root Dec 16 00:22:10 ispc saslauthd[1697812]: pam_mysql - SELECT returned no result. Dec 16 00:22:10 ispc saslauthd[1697812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:22:10 ispc saslauthd[1697812]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:23:01 ispc CRON[1697841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:23:02 ispc CRON[1697841]: pam_unix(cron:session): session closed for user root Dec 16 00:23:24 ispc postfix/smtpd[1697861]: sql auxprop plugin using mysql engine Dec 16 00:23:24 ispc postfix/smtpd[1697863]: sql auxprop plugin using mysql engine Dec 16 00:23:24 ispc postfix/smtpd[1697864]: sql auxprop plugin using mysql engine Dec 16 00:24:01 ispc CRON[1697884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:24:02 ispc CRON[1697884]: pam_unix(cron:session): session closed for user root Dec 16 00:24:45 ispc postfix/smtpd[1697911]: sql auxprop plugin using mysql engine Dec 16 00:24:46 ispc saslauthd[1697912]: pam_mysql - SELECT returned no result. Dec 16 00:24:46 ispc saslauthd[1697912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:24:46 ispc saslauthd[1697912]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:25:01 ispc CRON[1697921]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:25:01 ispc CRON[1697922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:25:01 ispc CRON[1697923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:25:01 ispc CRON[1697924]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:25:01 ispc CRON[1697922]: pam_unix(cron:session): session closed for user root Dec 16 00:25:01 ispc CRON[1697924]: pam_unix(cron:session): session closed for user getmail Dec 16 00:25:01 ispc CRON[1697923]: pam_unix(cron:session): session closed for user root Dec 16 00:25:03 ispc CRON[1697921]: pam_unix(cron:session): session closed for user root Dec 16 00:25:27 ispc postfix/smtpd[1698005]: sql auxprop plugin using mysql engine Dec 16 00:25:58 ispc sshd[1698025]: Invalid user ziplines from 202.46.29.79 Dec 16 00:26:01 ispc CRON[1698031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:26:02 ispc CRON[1698031]: pam_unix(cron:session): session closed for user root Dec 16 00:27:01 ispc CRON[1698064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:27:01 ispc CRON[1698064]: pam_unix(cron:session): session closed for user root Dec 16 00:27:52 ispc postfix/smtpd[1698107]: sql auxprop plugin using mysql engine Dec 16 00:27:52 ispc postfix/smtpd[1698112]: sql auxprop plugin using mysql engine Dec 16 00:27:52 ispc postfix/smtpd[1698113]: sql auxprop plugin using mysql engine Dec 16 00:28:01 ispc CRON[1698118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:28:02 ispc CRON[1698118]: pam_unix(cron:session): session closed for user root Dec 16 00:29:01 ispc CRON[1698155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:29:02 ispc CRON[1698155]: pam_unix(cron:session): session closed for user root Dec 16 00:29:27 ispc postfix/smtpd[1698179]: sql auxprop plugin using mysql engine Dec 16 00:29:29 ispc saslauthd[1698180]: pam_mysql - SELECT returned no result. Dec 16 00:29:29 ispc saslauthd[1698180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:29:29 ispc saslauthd[1698180]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:30:01 ispc CRON[1698194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:30:01 ispc CRON[1698198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:30:01 ispc CRON[1698197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:30:01 ispc CRON[1698196]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:30:01 ispc CRON[1698199]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:30:01 ispc CRON[1698195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:30:01 ispc CRON[1698196]: pam_unix(cron:session): session closed for user www-data Dec 16 00:30:01 ispc CRON[1698195]: pam_unix(cron:session): session closed for user root Dec 16 00:30:01 ispc CRON[1698199]: pam_unix(cron:session): session closed for user getmail Dec 16 00:30:02 ispc CRON[1698198]: pam_unix(cron:session): session closed for user root Dec 16 00:30:03 ispc CRON[1698194]: pam_unix(cron:session): session closed for user root Dec 16 00:30:03 ispc saslauthd[1698285]: pam_mysql - SELECT returned no result. Dec 16 00:30:03 ispc saslauthd[1698285]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:30:03 ispc saslauthd[1698285]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:31:01 ispc CRON[1698532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:31:02 ispc CRON[1698532]: pam_unix(cron:session): session closed for user root Dec 16 00:31:04 ispc sshd[1698544]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 00:31:10 ispc CRON[1697060]: pam_unix(cron:session): session closed for user root Dec 16 00:31:18 ispc saslauthd[1698548]: pam_mysql - SELECT returned no result. Dec 16 00:31:18 ispc saslauthd[1698548]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:31:18 ispc saslauthd[1698548]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:32:01 ispc saslauthd[1698567]: pam_mysql - SELECT returned no result. Dec 16 00:32:01 ispc saslauthd[1698567]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:32:01 ispc saslauthd[1698567]: do_auth : auth failure: [user=alien] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:32:01 ispc CRON[1698568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:33:01 ispc CRON[1698609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:33:02 ispc CRON[1698609]: pam_unix(cron:session): session closed for user root Dec 16 00:33:06 ispc sshd[1698624]: Invalid user admin from 139.19.117.197 Dec 16 00:33:20 ispc sshd[1698638]: Invalid user blceu from 175.125.92.77 Dec 16 00:33:41 ispc postfix/smtpd[1698649]: sql auxprop plugin using mysql engine Dec 16 00:33:46 ispc saslauthd[1698655]: pam_mysql - SELECT returned no result. Dec 16 00:33:46 ispc saslauthd[1698655]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:33:46 ispc saslauthd[1698655]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:33:53 ispc saslauthd[1698656]: pam_mysql - SELECT returned no result. Dec 16 00:33:53 ispc saslauthd[1698656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:33:53 ispc saslauthd[1698656]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:34:01 ispc CRON[1698661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:34:02 ispc CRON[1698661]: pam_unix(cron:session): session closed for user root Dec 16 00:34:19 ispc sshd[1698681]: Invalid user ziplines from 175.125.92.77 Dec 16 00:34:25 ispc postfix/smtpd[1698683]: sql auxprop plugin using mysql engine Dec 16 00:34:25 ispc postfix/smtpd[1698685]: sql auxprop plugin using mysql engine Dec 16 00:34:40 ispc sshd[1698694]: Invalid user zednictvistastny from 161.97.92.14 Dec 16 00:35:01 ispc CRON[1698705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:35:01 ispc CRON[1698706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:35:01 ispc CRON[1698707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:35:01 ispc CRON[1698708]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:35:02 ispc CRON[1698706]: pam_unix(cron:session): session closed for user root Dec 16 00:35:02 ispc CRON[1698708]: pam_unix(cron:session): session closed for user getmail Dec 16 00:35:02 ispc CRON[1698707]: pam_unix(cron:session): session closed for user root Dec 16 00:35:03 ispc CRON[1698705]: pam_unix(cron:session): session closed for user root Dec 16 00:36:01 ispc CRON[1698809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:36:02 ispc CRON[1698809]: pam_unix(cron:session): session closed for user root Dec 16 00:37:01 ispc CRON[1698844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:37:02 ispc CRON[1698844]: pam_unix(cron:session): session closed for user root Dec 16 00:37:45 ispc postfix/smtpd[1698878]: sql auxprop plugin using mysql engine Dec 16 00:37:45 ispc postfix/smtpd[1698879]: sql auxprop plugin using mysql engine Dec 16 00:37:46 ispc postfix/smtpd[1698880]: sql auxprop plugin using mysql engine Dec 16 00:37:50 ispc sshd[1698881]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 00:37:50 ispc sshd[1698881]: Invalid user blceu from 193.110.157.47 Dec 16 00:38:01 ispc CRON[1698898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:38:02 ispc CRON[1698898]: pam_unix(cron:session): session closed for user root Dec 16 00:38:13 ispc sshd[1698913]: Did not receive identification string from 192.227.134.84 Dec 16 00:38:33 ispc postfix/smtpd[1698940]: sql auxprop plugin using mysql engine Dec 16 00:38:35 ispc saslauthd[1698941]: pam_mysql - SELECT returned no result. Dec 16 00:38:35 ispc saslauthd[1698941]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:38:35 ispc saslauthd[1698941]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:39:01 ispc CRON[1698950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:39:01 ispc CRON[1698951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:39:01 ispc CRON[1698950]: pam_unix(cron:session): session closed for user root Dec 16 00:39:01 ispc CRON[1698951]: pam_unix(cron:session): session closed for user root Dec 16 00:39:03 ispc saslauthd[1698977]: pam_mysql - SELECT returned no result. Dec 16 00:39:03 ispc saslauthd[1698977]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:39:03 ispc saslauthd[1698977]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:39:17 ispc postfix/smtpd[1698984]: sql auxprop plugin using mysql engine Dec 16 00:39:24 ispc sshd[1698990]: Invalid user martof from 51.79.36.60 Dec 16 00:39:31 ispc sshd[1698992]: Invalid user martof from 211.23.78.98 Dec 16 00:40:01 ispc CRON[1699006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:40:01 ispc CRON[1699007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:40:01 ispc CRON[1699008]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:40:01 ispc CRON[1699009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:40:01 ispc CRON[1699010]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:40:01 ispc CRON[1699008]: pam_unix(cron:session): session closed for user www-data Dec 16 00:40:01 ispc CRON[1699007]: pam_unix(cron:session): session closed for user root Dec 16 00:40:01 ispc CRON[1699010]: pam_unix(cron:session): session closed for user getmail Dec 16 00:40:02 ispc CRON[1699009]: pam_unix(cron:session): session closed for user root Dec 16 00:40:02 ispc CRON[1699006]: pam_unix(cron:session): session closed for user root Dec 16 00:40:33 ispc sshd[1699104]: Invalid user klape from 187.190.35.163 Dec 16 00:40:34 ispc sshd[1699110]: Invalid user ubuntu from 187.190.35.163 Dec 16 00:40:54 ispc sshd[1699118]: Invalid user martof from 211.57.200.145 Dec 16 00:41:01 ispc CRON[1699124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:41:01 ispc CRON[1699124]: pam_unix(cron:session): session closed for user root Dec 16 00:41:25 ispc sshd[1699145]: Invalid user blceu from 116.120.58.228 Dec 16 00:41:38 ispc postfix/smtpd[1699155]: sql auxprop plugin using mysql engine Dec 16 00:41:38 ispc postfix/smtpd[1699157]: sql auxprop plugin using mysql engine Dec 16 00:41:39 ispc postfix/smtpd[1699158]: sql auxprop plugin using mysql engine Dec 16 00:42:01 ispc CRON[1699167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:42:02 ispc CRON[1699167]: pam_unix(cron:session): session closed for user root Dec 16 00:42:23 ispc postfix/smtpd[1699482]: sql auxprop plugin using mysql engine Dec 16 00:42:26 ispc postfix/smtpd[1699487]: sql auxprop plugin using mysql engine Dec 16 00:42:26 ispc saslauthd[1699488]: pam_mysql - SELECT returned no result. Dec 16 00:42:26 ispc saslauthd[1699488]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:42:26 ispc saslauthd[1699488]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:43:01 ispc CRON[1699509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:43:02 ispc CRON[1699509]: pam_unix(cron:session): session closed for user root Dec 16 00:43:15 ispc sshd[1699526]: Invalid user blceu from 211.23.78.98 Dec 16 00:43:21 ispc sshd[1699532]: Invalid user pronajemplosin from 183.215.179.154 Dec 16 00:43:25 ispc saslauthd[1699534]: pam_mysql - SELECT returned no result. Dec 16 00:43:25 ispc saslauthd[1699534]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:43:25 ispc saslauthd[1699534]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:43:32 ispc saslauthd[1699539]: pam_mysql - SELECT returned no result. Dec 16 00:43:32 ispc saslauthd[1699539]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:43:32 ispc saslauthd[1699539]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:44:01 ispc CRON[1699553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:44:02 ispc CRON[1699553]: pam_unix(cron:session): session closed for user root Dec 16 00:44:16 ispc saslauthd[1699575]: pam_mysql - SELECT returned no result. Dec 16 00:44:16 ispc saslauthd[1699575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:44:16 ispc saslauthd[1699575]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:45:01 ispc CRON[1699596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:45:01 ispc CRON[1699597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:45:01 ispc CRON[1699598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:45:01 ispc CRON[1699599]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:45:01 ispc CRON[1699599]: pam_unix(cron:session): session closed for user getmail Dec 16 00:45:01 ispc CRON[1699597]: pam_unix(cron:session): session closed for user root Dec 16 00:45:01 ispc CRON[1699598]: pam_unix(cron:session): session closed for user root Dec 16 00:45:01 ispc CRON[1699596]: pam_unix(cron:session): session closed for user root Dec 16 00:45:33 ispc sshd[1699685]: Did not receive identification string from 40.127.67.83 Dec 16 00:46:01 ispc CRON[1699698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:46:02 ispc CRON[1699698]: pam_unix(cron:session): session closed for user root Dec 16 00:46:06 ispc postfix/smtpd[1699709]: sql auxprop plugin using mysql engine Dec 16 00:46:06 ispc saslauthd[1699711]: pam_mysql - SELECT returned no result. Dec 16 00:46:06 ispc saslauthd[1699711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:46:06 ispc saslauthd[1699711]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:46:21 ispc saslauthd[1699721]: pam_mysql - SELECT returned no result. Dec 16 00:46:21 ispc saslauthd[1699721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:46:21 ispc saslauthd[1699721]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:46:33 ispc saslauthd[1699726]: pam_mysql - SELECT returned no result. Dec 16 00:46:33 ispc saslauthd[1699726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:46:33 ispc saslauthd[1699726]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:46:39 ispc saslauthd[1699728]: pam_mysql - SELECT returned no result. Dec 16 00:46:39 ispc saslauthd[1699728]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:46:39 ispc saslauthd[1699728]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:46:42 ispc saslauthd[1699733]: pam_mysql - SELECT returned no result. Dec 16 00:46:42 ispc saslauthd[1699733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:46:42 ispc saslauthd[1699733]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:47:01 ispc saslauthd[1699738]: pam_mysql - SELECT returned no result. Dec 16 00:47:01 ispc saslauthd[1699738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:47:01 ispc saslauthd[1699738]: do_auth : auth failure: [user=anon] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:47:01 ispc CRON[1699739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:47:02 ispc CRON[1699739]: pam_unix(cron:session): session closed for user root Dec 16 00:47:10 ispc saslauthd[1699755]: pam_mysql - SELECT returned no result. Dec 16 00:47:10 ispc saslauthd[1699755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:47:10 ispc saslauthd[1699755]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:47:50 ispc saslauthd[1699778]: pam_mysql - SELECT returned no result. Dec 16 00:47:50 ispc saslauthd[1699778]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:47:50 ispc saslauthd[1699778]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:48:01 ispc CRON[1699788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:48:02 ispc CRON[1699788]: pam_unix(cron:session): session closed for user root Dec 16 00:48:23 ispc sshd[1699807]: Invalid user 12345 from 80.94.95.115 Dec 16 00:48:32 ispc sshd[1699815]: Invalid user capstan from 43.163.105.233 Dec 16 00:49:01 ispc CRON[1699831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:49:02 ispc CRON[1699831]: pam_unix(cron:session): session closed for user root Dec 16 00:50:01 ispc CRON[1699877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:50:01 ispc CRON[1699876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:50:01 ispc CRON[1699878]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 00:50:01 ispc CRON[1699879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:50:01 ispc CRON[1699880]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:50:01 ispc CRON[1699877]: pam_unix(cron:session): session closed for user root Dec 16 00:50:01 ispc CRON[1699878]: pam_unix(cron:session): session closed for user www-data Dec 16 00:50:01 ispc CRON[1699880]: pam_unix(cron:session): session closed for user getmail Dec 16 00:50:02 ispc CRON[1699879]: pam_unix(cron:session): session closed for user root Dec 16 00:50:03 ispc CRON[1699876]: pam_unix(cron:session): session closed for user root Dec 16 00:50:18 ispc postfix/smtpd[1699962]: sql auxprop plugin using mysql engine Dec 16 00:50:18 ispc postfix/smtpd[1699964]: sql auxprop plugin using mysql engine Dec 16 00:50:19 ispc postfix/smtpd[1699965]: sql auxprop plugin using mysql engine Dec 16 00:50:19 ispc postfix/smtpd[1699966]: sql auxprop plugin using mysql engine Dec 16 00:51:01 ispc CRON[1699990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:51:02 ispc CRON[1699990]: pam_unix(cron:session): session closed for user root Dec 16 00:51:20 ispc saslauthd[1700009]: pam_mysql - SELECT returned no result. Dec 16 00:51:20 ispc saslauthd[1700009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:51:20 ispc saslauthd[1700009]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:51:52 ispc sshd[1700027]: Invalid user klape from 200.32.52.150 Dec 16 00:51:54 ispc sshd[1700029]: Invalid user ubuntu from 200.32.52.150 Dec 16 00:52:01 ispc CRON[1700035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:52:01 ispc CRON[1700036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:52:02 ispc CRON[1700036]: pam_unix(cron:session): session closed for user root Dec 16 00:52:32 ispc CRON[1698568]: pam_unix(cron:session): session closed for user root Dec 16 00:52:38 ispc sshd[1700071]: Invalid user pronajemplosin from 112.217.233.242 Dec 16 00:52:43 ispc sshd[1700069]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 00:52:55 ispc postfix/smtpd[1700082]: sql auxprop plugin using mysql engine Dec 16 00:53:01 ispc CRON[1700085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:53:03 ispc CRON[1700085]: pam_unix(cron:session): session closed for user root Dec 16 00:53:14 ispc sshd[1700097]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 00:53:26 ispc sshd[1700103]: Invalid user klape from 103.164.20.29 Dec 16 00:53:27 ispc sshd[1700105]: Invalid user ubuntu from 103.164.20.29 Dec 16 00:53:37 ispc postfix/smtpd[1700108]: sql auxprop plugin using mysql engine Dec 16 00:53:37 ispc postfix/smtpd[1700111]: sql auxprop plugin using mysql engine Dec 16 00:54:01 ispc CRON[1700113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:54:01 ispc CRON[1700113]: pam_unix(cron:session): session closed for user root Dec 16 00:54:27 ispc saslauthd[1700128]: pam_mysql - SELECT returned no result. Dec 16 00:54:27 ispc saslauthd[1700128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:27 ispc saslauthd[1700128]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:34 ispc saslauthd[1700129]: pam_mysql - SELECT returned no result. Dec 16 00:54:34 ispc saslauthd[1700129]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:34 ispc saslauthd[1700129]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:34 ispc saslauthd[1700130]: pam_mysql - SELECT returned no result. Dec 16 00:54:34 ispc saslauthd[1700130]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:34 ispc saslauthd[1700130]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:35 ispc saslauthd[1700131]: pam_mysql - SELECT returned no result. Dec 16 00:54:35 ispc saslauthd[1700131]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:35 ispc saslauthd[1700131]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:36 ispc saslauthd[1700132]: pam_mysql - SELECT returned no result. Dec 16 00:54:36 ispc saslauthd[1700132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:36 ispc saslauthd[1700132]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:36 ispc saslauthd[1700133]: pam_mysql - SELECT returned no result. Dec 16 00:54:36 ispc saslauthd[1700133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:36 ispc saslauthd[1700133]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:37 ispc saslauthd[1700134]: pam_mysql - SELECT returned no result. Dec 16 00:54:37 ispc saslauthd[1700134]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:37 ispc saslauthd[1700134]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:38 ispc saslauthd[1700135]: pam_mysql - SELECT returned no result. Dec 16 00:54:38 ispc saslauthd[1700135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:38 ispc saslauthd[1700135]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:54:40 ispc saslauthd[1700136]: pam_mysql - SELECT returned no result. Dec 16 00:54:40 ispc saslauthd[1700136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:54:40 ispc saslauthd[1700136]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:55:00 ispc saslauthd[1700137]: pam_mysql - SELECT returned no result. Dec 16 00:55:00 ispc saslauthd[1700137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:55:00 ispc saslauthd[1700137]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:55:01 ispc CRON[1700138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:55:01 ispc CRON[1700139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:55:01 ispc CRON[1700140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:55:01 ispc CRON[1700141]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 00:55:02 ispc CRON[1700139]: pam_unix(cron:session): session closed for user root Dec 16 00:55:02 ispc CRON[1700141]: pam_unix(cron:session): session closed for user getmail Dec 16 00:55:04 ispc CRON[1700138]: pam_unix(cron:session): session closed for user root Dec 16 00:55:10 ispc CRON[1700140]: pam_unix(cron:session): session closed for user root Dec 16 00:55:13 ispc saslauthd[1700259]: pam_mysql - SELECT returned no result. Dec 16 00:55:13 ispc saslauthd[1700259]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:55:13 ispc saslauthd[1700259]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:55:15 ispc saslauthd[1700260]: pam_mysql - SELECT returned no result. Dec 16 00:55:15 ispc saslauthd[1700260]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:55:15 ispc saslauthd[1700260]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:55:19 ispc CRON[1700035]: pam_unix(cron:session): session closed for user root Dec 16 00:55:26 ispc saslauthd[1700261]: pam_mysql - SELECT returned no result. Dec 16 00:55:26 ispc saslauthd[1700261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:55:26 ispc saslauthd[1700261]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 00:55:56 ispc postfix/smtpd[1700264]: sql auxprop plugin using mysql engine Dec 16 00:55:57 ispc postfix/smtpd[1700267]: sql auxprop plugin using mysql engine Dec 16 00:56:01 ispc CRON[1700269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:56:02 ispc CRON[1700269]: pam_unix(cron:session): session closed for user root Dec 16 00:57:01 ispc CRON[1700282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:57:03 ispc CRON[1700282]: pam_unix(cron:session): session closed for user root Dec 16 00:57:08 ispc saslauthd[1700295]: pam_mysql - SELECT returned no result. Dec 16 00:57:08 ispc saslauthd[1700295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 00:57:08 ispc saslauthd[1700295]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 00:57:24 ispc sshd[1700298]: Invalid user martof from 51.159.91.86 Dec 16 00:58:01 ispc CRON[1700310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:58:02 ispc CRON[1700310]: pam_unix(cron:session): session closed for user root Dec 16 00:59:01 ispc CRON[1700324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 00:59:02 ispc CRON[1700324]: pam_unix(cron:session): session closed for user root Dec 16 01:00:01 ispc CRON[1700343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:00:01 ispc CRON[1700344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:00:01 ispc CRON[1700345]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:00:01 ispc CRON[1700346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:00:01 ispc CRON[1700347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:00:01 ispc CRON[1700348]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:00:01 ispc CRON[1700345]: pam_unix(cron:session): session closed for user www-data Dec 16 01:00:01 ispc CRON[1700344]: pam_unix(cron:session): session closed for user root Dec 16 01:00:01 ispc CRON[1700348]: pam_unix(cron:session): session closed for user getmail Dec 16 01:00:02 ispc CRON[1700346]: pam_unix(cron:session): session closed for user root Dec 16 01:00:02 ispc CRON[1700343]: pam_unix(cron:session): session closed for user root Dec 16 01:00:08 ispc saslauthd[1700558]: pam_mysql - SELECT returned no result. Dec 16 01:00:08 ispc saslauthd[1700558]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:00:08 ispc saslauthd[1700558]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:00:12 ispc saslauthd[1700598]: pam_mysql - SELECT returned no result. Dec 16 01:00:12 ispc saslauthd[1700598]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:00:12 ispc saslauthd[1700598]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:00:12 ispc postfix/smtpd[1700599]: sql auxprop plugin using mysql engine Dec 16 01:00:14 ispc saslauthd[1700620]: pam_mysql - SELECT returned no result. Dec 16 01:00:14 ispc saslauthd[1700620]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:00:14 ispc saslauthd[1700620]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:00:22 ispc CRON[1700347]: pam_unix(cron:session): session closed for user root Dec 16 01:01:01 ispc CRON[1700654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:01:04 ispc CRON[1700654]: pam_unix(cron:session): session closed for user root Dec 16 01:01:41 ispc saslauthd[1700669]: pam_mysql - SELECT returned no result. Dec 16 01:01:41 ispc saslauthd[1700669]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:01:41 ispc saslauthd[1700669]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:01:41 ispc sshd[1700670]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:01:42 ispc sshd[1700670]: Invalid user blceu from 157.245.115.125 Dec 16 01:02:01 ispc CRON[1700672]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 01:02:01 ispc CRON[1700673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:02:02 ispc saslauthd[1700677]: pam_mysql - SELECT returned no result. Dec 16 01:02:02 ispc saslauthd[1700677]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:02:02 ispc saslauthd[1700677]: do_auth : auth failure: [user=anonymous] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:02:02 ispc CRON[1700673]: pam_unix(cron:session): session closed for user root Dec 16 01:03:01 ispc CRON[1701529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:03:03 ispc CRON[1701529]: pam_unix(cron:session): session closed for user root Dec 16 01:03:20 ispc CRON[1700672]: pam_unix(cron:session): session closed for user logcheck Dec 16 01:03:27 ispc postfix/smtpd[1701723]: sql auxprop plugin using mysql engine Dec 16 01:04:01 ispc CRON[1701728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:04:03 ispc CRON[1701728]: pam_unix(cron:session): session closed for user root Dec 16 01:04:05 ispc sshd[1701740]: Invalid user blceu from 139.59.66.222 Dec 16 01:04:36 ispc sshd[1701742]: Invalid user hyundaicz from 114.246.241.87 Dec 16 01:04:38 ispc saslauthd[1701744]: pam_mysql - SELECT returned no result. Dec 16 01:04:38 ispc saslauthd[1701744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:04:38 ispc saslauthd[1701744]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:05:01 ispc CRON[1701747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:05:01 ispc CRON[1701748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:05:01 ispc CRON[1701746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:05:01 ispc CRON[1701749]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:05:01 ispc CRON[1701747]: pam_unix(cron:session): session closed for user root Dec 16 01:05:01 ispc CRON[1701749]: pam_unix(cron:session): session closed for user getmail Dec 16 01:05:02 ispc CRON[1701746]: pam_unix(cron:session): session closed for user root Dec 16 01:05:06 ispc CRON[1701748]: pam_unix(cron:session): session closed for user root Dec 16 01:06:01 ispc CRON[1701869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:06:01 ispc CRON[1701869]: pam_unix(cron:session): session closed for user root Dec 16 01:07:01 ispc CRON[1701884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:07:02 ispc CRON[1701884]: pam_unix(cron:session): session closed for user root Dec 16 01:07:41 ispc postfix/smtpd[1701897]: sql auxprop plugin using mysql engine Dec 16 01:07:42 ispc postfix/smtpd[1701901]: sql auxprop plugin using mysql engine Dec 16 01:07:42 ispc postfix/smtpd[1701904]: sql auxprop plugin using mysql engine Dec 16 01:08:01 ispc CRON[1701911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:08:02 ispc CRON[1701911]: pam_unix(cron:session): session closed for user root Dec 16 01:08:13 ispc saslauthd[1701924]: pam_mysql - SELECT returned no result. Dec 16 01:08:13 ispc saslauthd[1701924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:08:13 ispc saslauthd[1701924]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:08:57 ispc saslauthd[1701931]: pam_mysql - SELECT returned no result. Dec 16 01:08:57 ispc saslauthd[1701931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:08:57 ispc saslauthd[1701931]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:09:01 ispc CRON[1701933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:09:01 ispc CRON[1701934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:09:01 ispc CRON[1701933]: pam_unix(cron:session): session closed for user root Dec 16 01:09:02 ispc CRON[1701934]: pam_unix(cron:session): session closed for user root Dec 16 01:09:13 ispc sshd[1701958]: Invalid user admin from 80.94.95.115 Dec 16 01:09:46 ispc saslauthd[1701968]: pam_mysql - SELECT returned no result. Dec 16 01:09:46 ispc saslauthd[1701968]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:09:46 ispc saslauthd[1701968]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:09:50 ispc saslauthd[1701969]: pam_mysql - SELECT returned no result. Dec 16 01:09:50 ispc saslauthd[1701969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:09:50 ispc saslauthd[1701969]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:10:01 ispc CRON[1701971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:10:01 ispc CRON[1701972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:10:01 ispc CRON[1701974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:10:01 ispc CRON[1701975]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:10:01 ispc CRON[1701973]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:10:01 ispc CRON[1701972]: pam_unix(cron:session): session closed for user root Dec 16 01:10:01 ispc CRON[1701973]: pam_unix(cron:session): session closed for user www-data Dec 16 01:10:01 ispc CRON[1701975]: pam_unix(cron:session): session closed for user getmail Dec 16 01:10:01 ispc postfix/smtpd[1702018]: sql auxprop plugin using mysql engine Dec 16 01:10:02 ispc CRON[1701971]: pam_unix(cron:session): session closed for user root Dec 16 01:10:03 ispc saslauthd[1702071]: pam_mysql - SELECT returned no result. Dec 16 01:10:03 ispc saslauthd[1702071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:10:03 ispc saslauthd[1702071]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:10:06 ispc CRON[1701974]: pam_unix(cron:session): session closed for user root Dec 16 01:11:01 ispc CRON[1702110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:11:02 ispc CRON[1702110]: pam_unix(cron:session): session closed for user root Dec 16 01:11:42 ispc postfix/smtpd[1702124]: sql auxprop plugin using mysql engine Dec 16 01:12:01 ispc CRON[1702128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:12:02 ispc CRON[1702128]: pam_unix(cron:session): session closed for user root Dec 16 01:12:28 ispc postfix/smtpd[1702141]: sql auxprop plugin using mysql engine Dec 16 01:12:41 ispc sshd[1702146]: Invalid user tshombeknife from 114.246.241.87 Dec 16 01:13:01 ispc CRON[1702156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:13:01 ispc CRON[1702156]: pam_unix(cron:session): session closed for user root Dec 16 01:13:01 ispc CRON[1698197]: pam_unix(cron:session): session closed for user root Dec 16 01:13:26 ispc saslauthd[1702170]: pam_mysql - SELECT returned no result. Dec 16 01:13:26 ispc saslauthd[1702170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:13:26 ispc saslauthd[1702170]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:13:45 ispc sshd[1702171]: Invalid user ziplines from 139.59.66.222 Dec 16 01:14:01 ispc CRON[1702174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:14:02 ispc CRON[1702174]: pam_unix(cron:session): session closed for user root Dec 16 01:15:01 ispc CRON[1702196]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:15:01 ispc CRON[1702193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:15:01 ispc CRON[1702194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:15:01 ispc CRON[1702195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:15:01 ispc CRON[1702194]: pam_unix(cron:session): session closed for user root Dec 16 01:15:01 ispc CRON[1702196]: pam_unix(cron:session): session closed for user getmail Dec 16 01:15:02 ispc CRON[1702193]: pam_unix(cron:session): session closed for user root Dec 16 01:15:54 ispc CRON[1702195]: pam_unix(cron:session): session closed for user root Dec 16 01:16:01 ispc CRON[1702384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:16:24 ispc saslauthd[1702405]: pam_mysql - SELECT returned no result. Dec 16 01:16:24 ispc saslauthd[1702405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:16:24 ispc saslauthd[1702405]: do_auth : auth failure: [user=aparker] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:16:24 ispc postfix/smtpd[1702406]: sql auxprop plugin using mysql engine Dec 16 01:16:25 ispc saslauthd[1702408]: pam_mysql - SELECT returned no result. Dec 16 01:16:25 ispc saslauthd[1702408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:16:25 ispc saslauthd[1702408]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:17:01 ispc CRON[1702421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:17:02 ispc CRON[1702421]: pam_unix(cron:session): session closed for user root Dec 16 01:17:25 ispc sshd[1702444]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:17:25 ispc sshd[1702444]: Invalid user ziplines from 157.245.115.125 Dec 16 01:18:01 ispc CRON[1702472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:18:01 ispc CRON[1702472]: pam_unix(cron:session): session closed for user root Dec 16 01:18:09 ispc postfix/smtpd[1702488]: sql auxprop plugin using mysql engine Dec 16 01:18:09 ispc saslauthd[1702490]: pam_mysql - SELECT returned no result. Dec 16 01:18:09 ispc saslauthd[1702490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:18:09 ispc saslauthd[1702490]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:18:15 ispc sshd[1702491]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:18:50 ispc postfix/smtpd[1702511]: sql auxprop plugin using mysql engine Dec 16 01:18:50 ispc postfix/smtpd[1702513]: sql auxprop plugin using mysql engine Dec 16 01:18:51 ispc postfix/smtpd[1702514]: sql auxprop plugin using mysql engine Dec 16 01:19:01 ispc CRON[1702522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:19:02 ispc CRON[1702522]: pam_unix(cron:session): session closed for user root Dec 16 01:20:01 ispc CRON[1702562]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:20:01 ispc CRON[1702558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:20:01 ispc CRON[1702560]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:20:01 ispc CRON[1702561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:20:01 ispc CRON[1702559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:20:01 ispc CRON[1702562]: pam_unix(cron:session): session closed for user getmail Dec 16 01:20:01 ispc CRON[1702559]: pam_unix(cron:session): session closed for user root Dec 16 01:20:01 ispc CRON[1702560]: pam_unix(cron:session): session closed for user www-data Dec 16 01:20:01 ispc CRON[1702561]: pam_unix(cron:session): session closed for user root Dec 16 01:20:02 ispc CRON[1702558]: pam_unix(cron:session): session closed for user root Dec 16 01:20:08 ispc sshd[1702640]: Invalid user zednictvistastny from 161.97.92.14 Dec 16 01:20:36 ispc sshd[1702654]: Did not receive identification string from 41.203.222.206 Dec 16 01:20:51 ispc sshd[1702659]: Invalid user admin from 221.151.181.65 Dec 16 01:21:01 ispc CRON[1702666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:21:01 ispc CRON[1702667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:21:01 ispc CRON[1702666]: pam_unix(cron:session): session closed for user root Dec 16 01:21:02 ispc CRON[1702667]: pam_unix(cron:session): session closed for user root Dec 16 01:21:07 ispc sshd[1702684]: Invalid user blceu from 202.46.29.79 Dec 16 01:21:51 ispc sshd[1702704]: Invalid user ziplines from 45.119.213.109 Dec 16 01:22:01 ispc CRON[1702710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:22:02 ispc CRON[1702710]: pam_unix(cron:session): session closed for user root Dec 16 01:22:39 ispc postfix/smtpd[1702739]: sql auxprop plugin using mysql engine Dec 16 01:22:43 ispc saslauthd[1702751]: pam_mysql - SELECT returned no result. Dec 16 01:22:43 ispc saslauthd[1702751]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:22:43 ispc saslauthd[1702751]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:23:01 ispc CRON[1702760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:23:02 ispc CRON[1702760]: pam_unix(cron:session): session closed for user root Dec 16 01:24:01 ispc CRON[1702797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:24:01 ispc CRON[1702797]: pam_unix(cron:session): session closed for user root Dec 16 01:24:13 ispc saslauthd[1702812]: pam_mysql - SELECT returned no result. Dec 16 01:24:13 ispc saslauthd[1702812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:24:13 ispc saslauthd[1702812]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:24:43 ispc saslauthd[1702828]: pam_mysql - SELECT returned no result. Dec 16 01:24:43 ispc saslauthd[1702828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:24:43 ispc saslauthd[1702828]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:25:01 ispc CRON[1702842]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:25:01 ispc CRON[1702839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:25:01 ispc CRON[1702840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:25:01 ispc CRON[1702841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:25:01 ispc CRON[1702840]: pam_unix(cron:session): session closed for user root Dec 16 01:25:01 ispc CRON[1702842]: pam_unix(cron:session): session closed for user getmail Dec 16 01:25:01 ispc CRON[1702841]: pam_unix(cron:session): session closed for user root Dec 16 01:25:02 ispc sshd[1702837]: Invalid user martof from 45.119.213.109 Dec 16 01:25:02 ispc CRON[1702839]: pam_unix(cron:session): session closed for user root Dec 16 01:26:01 ispc CRON[1702943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:26:02 ispc CRON[1702943]: pam_unix(cron:session): session closed for user root Dec 16 01:26:22 ispc saslauthd[1702962]: pam_mysql - SELECT returned no result. Dec 16 01:26:22 ispc saslauthd[1702962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:26:22 ispc saslauthd[1702962]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:27:01 ispc CRON[1702986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:27:02 ispc CRON[1702986]: pam_unix(cron:session): session closed for user root Dec 16 01:27:08 ispc saslauthd[1702997]: pam_mysql - SELECT returned no result. Dec 16 01:27:08 ispc saslauthd[1702997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:27:08 ispc saslauthd[1702997]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:28:01 ispc CRON[1703034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:28:02 ispc CRON[1703034]: pam_unix(cron:session): session closed for user root Dec 16 01:29:01 ispc CRON[1703069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:29:02 ispc CRON[1703069]: pam_unix(cron:session): session closed for user root Dec 16 01:29:53 ispc postfix/smtpd[1703101]: sql auxprop plugin using mysql engine Dec 16 01:29:54 ispc postfix/smtpd[1703104]: sql auxprop plugin using mysql engine Dec 16 01:29:54 ispc postfix/smtpd[1703105]: sql auxprop plugin using mysql engine Dec 16 01:29:54 ispc postfix/smtpd[1703106]: sql auxprop plugin using mysql engine Dec 16 01:30:01 ispc CRON[1703107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:30:01 ispc CRON[1703108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:30:01 ispc CRON[1703109]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:30:01 ispc CRON[1703110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:30:01 ispc CRON[1703111]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:30:01 ispc CRON[1703108]: pam_unix(cron:session): session closed for user root Dec 16 01:30:01 ispc CRON[1703109]: pam_unix(cron:session): session closed for user www-data Dec 16 01:30:01 ispc CRON[1703111]: pam_unix(cron:session): session closed for user getmail Dec 16 01:30:01 ispc CRON[1703110]: pam_unix(cron:session): session closed for user root Dec 16 01:30:01 ispc CRON[1703107]: pam_unix(cron:session): session closed for user root Dec 16 01:30:06 ispc postfix/smtpd[1703189]: sql auxprop plugin using mysql engine Dec 16 01:31:01 ispc CRON[1703214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:31:02 ispc CRON[1703214]: pam_unix(cron:session): session closed for user root Dec 16 01:31:12 ispc sshd[1703230]: Invalid user ziplines from 51.79.36.60 Dec 16 01:31:19 ispc saslauthd[1703236]: pam_mysql - SELECT returned no result. Dec 16 01:31:19 ispc saslauthd[1703236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:31:19 ispc saslauthd[1703236]: do_auth : auth failure: [user=apc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:31:39 ispc saslauthd[1703245]: pam_mysql - SELECT returned no result. Dec 16 01:31:39 ispc saslauthd[1703245]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:31:39 ispc saslauthd[1703245]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:31:52 ispc sshd[1703250]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:31:52 ispc sshd[1703250]: Invalid user user from 2.57.121.25 Dec 16 01:32:01 ispc CRON[1703256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:32:02 ispc CRON[1703256]: pam_unix(cron:session): session closed for user root Dec 16 01:32:36 ispc saslauthd[1703279]: pam_mysql - SELECT returned no result. Dec 16 01:32:36 ispc saslauthd[1703279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:32:36 ispc saslauthd[1703279]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:32:43 ispc sshd[1703291]: Invalid user admin from 221.151.181.65 Dec 16 01:33:01 ispc CRON[1703302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:33:02 ispc CRON[1703302]: pam_unix(cron:session): session closed for user root Dec 16 01:34:00 ispc sshd[1703342]: Invalid user admin from 221.151.181.65 Dec 16 01:34:01 ispc CRON[1703348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:34:01 ispc CRON[1703348]: pam_unix(cron:session): session closed for user root Dec 16 01:35:01 ispc CRON[1703390]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:35:01 ispc CRON[1703387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:35:01 ispc CRON[1703388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:35:01 ispc CRON[1703389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:35:01 ispc CRON[1703388]: pam_unix(cron:session): session closed for user root Dec 16 01:35:01 ispc CRON[1703390]: pam_unix(cron:session): session closed for user getmail Dec 16 01:35:02 ispc CRON[1703389]: pam_unix(cron:session): session closed for user root Dec 16 01:35:02 ispc CRON[1703387]: pam_unix(cron:session): session closed for user root Dec 16 01:35:13 ispc sshd[1703464]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:35:47 ispc sshd[1703483]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:36:00 ispc sshd[1703489]: Invalid user admin from 221.151.181.65 Dec 16 01:36:01 ispc CRON[1703492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:36:02 ispc CRON[1703492]: pam_unix(cron:session): session closed for user root Dec 16 01:36:15 ispc postfix/smtpd[1703511]: sql auxprop plugin using mysql engine Dec 16 01:36:16 ispc saslauthd[1703514]: pam_mysql - SELECT returned no result. Dec 16 01:36:16 ispc saslauthd[1703514]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:36:16 ispc saslauthd[1703514]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:36:25 ispc CRON[1702384]: pam_unix(cron:session): session closed for user root Dec 16 01:37:01 ispc CRON[1703529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:37:02 ispc CRON[1703529]: pam_unix(cron:session): session closed for user root Dec 16 01:37:03 ispc sshd[1703527]: Invalid user ziplines from 211.57.200.145 Dec 16 01:37:20 ispc postfix/smtpd[1703541]: sql auxprop plugin using mysql engine Dec 16 01:37:21 ispc postfix/smtpd[1703544]: sql auxprop plugin using mysql engine Dec 16 01:37:21 ispc postfix/smtpd[1703545]: sql auxprop plugin using mysql engine Dec 16 01:38:01 ispc CRON[1703558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:38:02 ispc CRON[1703558]: pam_unix(cron:session): session closed for user root Dec 16 01:39:01 ispc CRON[1703575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:39:01 ispc CRON[1703574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:39:01 ispc CRON[1703574]: pam_unix(cron:session): session closed for user root Dec 16 01:39:02 ispc CRON[1703575]: pam_unix(cron:session): session closed for user root Dec 16 01:39:09 ispc sshd[1703597]: Invalid user martof from 139.59.66.222 Dec 16 01:39:22 ispc saslauthd[1703599]: pam_mysql - SELECT returned no result. Dec 16 01:39:22 ispc saslauthd[1703599]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:39:22 ispc saslauthd[1703599]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:39:46 ispc saslauthd[1703600]: pam_mysql - SELECT returned no result. Dec 16 01:39:46 ispc saslauthd[1703600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:39:46 ispc saslauthd[1703600]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:40:01 ispc CRON[1703603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:40:01 ispc CRON[1703604]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:40:01 ispc CRON[1703602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:40:01 ispc CRON[1703605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:40:01 ispc CRON[1703606]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:40:01 ispc CRON[1703604]: pam_unix(cron:session): session closed for user www-data Dec 16 01:40:01 ispc CRON[1703603]: pam_unix(cron:session): session closed for user root Dec 16 01:40:01 ispc CRON[1703606]: pam_unix(cron:session): session closed for user getmail Dec 16 01:40:01 ispc CRON[1703602]: pam_unix(cron:session): session closed for user root Dec 16 01:40:37 ispc CRON[1703605]: pam_unix(cron:session): session closed for user root Dec 16 01:41:01 ispc CRON[1703718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:41:06 ispc saslauthd[1703730]: pam_mysql - SELECT returned no result. Dec 16 01:41:06 ispc saslauthd[1703730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:41:06 ispc saslauthd[1703730]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:41:24 ispc saslauthd[1703739]: pam_mysql - SELECT returned no result. Dec 16 01:41:24 ispc saslauthd[1703739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:41:24 ispc saslauthd[1703739]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:41:40 ispc saslauthd[1703744]: pam_mysql - SELECT returned no result. Dec 16 01:41:40 ispc saslauthd[1703744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:41:40 ispc saslauthd[1703744]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:41:58 ispc saslauthd[1703753]: pam_mysql - SELECT returned no result. Dec 16 01:41:58 ispc saslauthd[1703753]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:41:58 ispc saslauthd[1703753]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:42:01 ispc CRON[1703754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:42:01 ispc CRON[1703754]: pam_unix(cron:session): session closed for user root Dec 16 01:42:14 ispc saslauthd[1703774]: pam_mysql - SELECT returned no result. Dec 16 01:42:14 ispc saslauthd[1703774]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:42:14 ispc saslauthd[1703774]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:42:23 ispc saslauthd[1703781]: pam_mysql - SELECT returned no result. Dec 16 01:42:23 ispc saslauthd[1703781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:42:23 ispc saslauthd[1703781]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:42:31 ispc saslauthd[1703782]: pam_mysql - SELECT returned no result. Dec 16 01:42:31 ispc saslauthd[1703782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:42:31 ispc saslauthd[1703782]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:43:01 ispc CRON[1703803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:43:02 ispc CRON[1703803]: pam_unix(cron:session): session closed for user root Dec 16 01:43:11 ispc sshd[1703818]: Invalid user ubuntu from 13.70.185.98 Dec 16 01:43:15 ispc sshd[1703820]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:43:15 ispc sshd[1703820]: Invalid user zednictvistastny from 103.112.245.93 Dec 16 01:43:16 ispc sshd[1703826]: Invalid user blceu from 220.196.191.58 Dec 16 01:44:01 ispc CRON[1703849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:44:02 ispc CRON[1703849]: pam_unix(cron:session): session closed for user root Dec 16 01:44:35 ispc sshd[1703872]: Invalid user martof from 202.46.29.79 Dec 16 01:45:01 ispc CRON[1703887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:45:01 ispc CRON[1703886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:45:01 ispc CRON[1703888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:45:01 ispc CRON[1703889]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:45:01 ispc CRON[1703887]: pam_unix(cron:session): session closed for user root Dec 16 01:45:01 ispc CRON[1703889]: pam_unix(cron:session): session closed for user getmail Dec 16 01:45:02 ispc CRON[1703888]: pam_unix(cron:session): session closed for user root Dec 16 01:45:03 ispc CRON[1703886]: pam_unix(cron:session): session closed for user root Dec 16 01:45:27 ispc postfix/smtpd[1703974]: sql auxprop plugin using mysql engine Dec 16 01:45:29 ispc saslauthd[1703976]: pam_mysql - SELECT returned no result. Dec 16 01:45:29 ispc saslauthd[1703976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:45:29 ispc saslauthd[1703976]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:46:01 ispc CRON[1703991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:46:02 ispc CRON[1703991]: pam_unix(cron:session): session closed for user root Dec 16 01:46:15 ispc saslauthd[1704006]: pam_mysql - SELECT returned no result. Dec 16 01:46:15 ispc saslauthd[1704006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:46:15 ispc saslauthd[1704006]: do_auth : auth failure: [user=at4400] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:47:01 ispc CRON[1704029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:47:02 ispc CRON[1704029]: pam_unix(cron:session): session closed for user root Dec 16 01:48:01 ispc CRON[1704070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:48:02 ispc CRON[1704070]: pam_unix(cron:session): session closed for user root Dec 16 01:48:21 ispc postfix/smtpd[1704089]: sql auxprop plugin using mysql engine Dec 16 01:48:21 ispc postfix/smtpd[1704091]: sql auxprop plugin using mysql engine Dec 16 01:48:22 ispc postfix/smtpd[1704092]: sql auxprop plugin using mysql engine Dec 16 01:49:01 ispc CRON[1704109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:49:01 ispc CRON[1704109]: pam_unix(cron:session): session closed for user root Dec 16 01:49:33 ispc postfix/smtpd[1704132]: sql auxprop plugin using mysql engine Dec 16 01:49:34 ispc saslauthd[1704134]: pam_mysql - SELECT returned no result. Dec 16 01:49:34 ispc saslauthd[1704134]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:49:34 ispc saslauthd[1704134]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:01 ispc CRON[1704148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:50:01 ispc CRON[1704149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:50:01 ispc CRON[1704150]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 01:50:01 ispc CRON[1704151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:50:01 ispc CRON[1704152]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:50:01 ispc CRON[1704150]: pam_unix(cron:session): session closed for user www-data Dec 16 01:50:01 ispc CRON[1704149]: pam_unix(cron:session): session closed for user root Dec 16 01:50:01 ispc CRON[1704152]: pam_unix(cron:session): session closed for user getmail Dec 16 01:50:02 ispc CRON[1704151]: pam_unix(cron:session): session closed for user root Dec 16 01:50:02 ispc CRON[1704148]: pam_unix(cron:session): session closed for user root Dec 16 01:50:12 ispc sshd[1704232]: Invalid user klape from 67.205.163.146 Dec 16 01:50:13 ispc saslauthd[1704236]: pam_mysql - SELECT returned no result. Dec 16 01:50:13 ispc saslauthd[1704236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:13 ispc saslauthd[1704236]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:50:13 ispc sshd[1704234]: Invalid user ubuntu from 67.205.163.146 Dec 16 01:50:29 ispc postfix/smtpd[1704246]: sql auxprop plugin using mysql engine Dec 16 01:50:29 ispc saslauthd[1704248]: pam_mysql - SELECT returned no result. Dec 16 01:50:29 ispc saslauthd[1704248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:29 ispc saslauthd[1704248]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:29 ispc postfix/smtpd[1704249]: sql auxprop plugin using mysql engine Dec 16 01:50:30 ispc saslauthd[1704250]: pam_mysql - SELECT returned no result. Dec 16 01:50:30 ispc saslauthd[1704250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:30 ispc saslauthd[1704250]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:30 ispc saslauthd[1704251]: pam_mysql - SELECT returned no result. Dec 16 01:50:30 ispc saslauthd[1704251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:30 ispc saslauthd[1704251]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:30 ispc saslauthd[1704252]: pam_mysql - SELECT returned no result. Dec 16 01:50:30 ispc saslauthd[1704252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:30 ispc saslauthd[1704252]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:31 ispc saslauthd[1704253]: pam_mysql - SELECT returned no result. Dec 16 01:50:31 ispc saslauthd[1704253]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:31 ispc saslauthd[1704253]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:32 ispc saslauthd[1704254]: pam_mysql - SELECT returned no result. Dec 16 01:50:32 ispc saslauthd[1704254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:32 ispc saslauthd[1704254]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:34 ispc saslauthd[1704255]: pam_mysql - SELECT returned no result. Dec 16 01:50:34 ispc saslauthd[1704255]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:34 ispc saslauthd[1704255]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:35 ispc saslauthd[1704256]: pam_mysql - SELECT returned no result. Dec 16 01:50:35 ispc saslauthd[1704256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:35 ispc saslauthd[1704256]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:50:47 ispc sshd[1704261]: Invalid user ziplines from 211.45.175.153 Dec 16 01:50:48 ispc saslauthd[1704267]: pam_mysql - SELECT returned no result. Dec 16 01:50:48 ispc saslauthd[1704267]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:50:48 ispc saslauthd[1704267]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:51:01 ispc CRON[1704273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:51:01 ispc CRON[1704273]: pam_unix(cron:session): session closed for user root Dec 16 01:51:11 ispc saslauthd[1704288]: pam_mysql - SELECT returned no result. Dec 16 01:51:11 ispc saslauthd[1704288]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:51:11 ispc saslauthd[1704288]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:51:41 ispc sshd[1704303]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:52:01 ispc CRON[1704314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:52:02 ispc CRON[1704314]: pam_unix(cron:session): session closed for user root Dec 16 01:53:01 ispc CRON[1704356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:53:02 ispc CRON[1704356]: pam_unix(cron:session): session closed for user root Dec 16 01:53:08 ispc postfix/smtpd[1704371]: sql auxprop plugin using mysql engine Dec 16 01:53:08 ispc postfix/smtpd[1704373]: sql auxprop plugin using mysql engine Dec 16 01:53:09 ispc postfix/smtpd[1704374]: sql auxprop plugin using mysql engine Dec 16 01:53:52 ispc sshd[1704393]: Invalid user ziplines from 211.23.78.98 Dec 16 01:53:58 ispc sshd[1704399]: Invalid user blceu from 49.247.24.89 Dec 16 01:54:01 ispc CRON[1704401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:54:01 ispc CRON[1704401]: pam_unix(cron:session): session closed for user root Dec 16 01:54:31 ispc sshd[1704424]: Invalid user martof from 49.247.24.89 Dec 16 01:54:40 ispc postfix/smtpd[1704430]: sql auxprop plugin using mysql engine Dec 16 01:54:40 ispc saslauthd[1704431]: pam_mysql - SELECT returned no result. Dec 16 01:54:40 ispc saslauthd[1704431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:54:40 ispc saslauthd[1704431]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:55:01 ispc CRON[1704440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:55:01 ispc CRON[1704441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:55:01 ispc CRON[1704442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:55:01 ispc CRON[1704443]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 01:55:01 ispc CRON[1704441]: pam_unix(cron:session): session closed for user root Dec 16 01:55:01 ispc CRON[1704443]: pam_unix(cron:session): session closed for user getmail Dec 16 01:55:02 ispc CRON[1704442]: pam_unix(cron:session): session closed for user root Dec 16 01:55:03 ispc CRON[1704440]: pam_unix(cron:session): session closed for user root Dec 16 01:55:14 ispc sshd[1704520]: Invalid user diamantdi from 8.133.194.64 Dec 16 01:55:43 ispc postfix/smtpd[1704534]: sql auxprop plugin using mysql engine Dec 16 01:55:43 ispc postfix/smtpd[1704536]: sql auxprop plugin using mysql engine Dec 16 01:55:43 ispc postfix/smtpd[1704537]: sql auxprop plugin using mysql engine Dec 16 01:55:57 ispc saslauthd[1704546]: pam_mysql - SELECT returned no result. Dec 16 01:55:57 ispc saslauthd[1704546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:55:57 ispc saslauthd[1704546]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:56:01 ispc CRON[1704547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:56:02 ispc CRON[1704547]: pam_unix(cron:session): session closed for user root Dec 16 01:56:17 ispc sshd[1704570]: Did not receive identification string from 3.16.213.130 Dec 16 01:56:38 ispc saslauthd[1704582]: pam_mysql - SELECT returned no result. Dec 16 01:56:38 ispc saslauthd[1704582]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:56:38 ispc saslauthd[1704582]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:56:41 ispc saslauthd[1704583]: pam_mysql - SELECT returned no result. Dec 16 01:56:41 ispc saslauthd[1704583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:56:41 ispc saslauthd[1704583]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:57:01 ispc CRON[1704593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:57:01 ispc CRON[1704593]: pam_unix(cron:session): session closed for user root Dec 16 01:57:55 ispc saslauthd[1704633]: pam_mysql - SELECT returned no result. Dec 16 01:57:55 ispc saslauthd[1704633]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:57:55 ispc saslauthd[1704633]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:58:01 ispc postfix/smtpd[1704638]: sql auxprop plugin using mysql engine Dec 16 01:58:02 ispc CRON[1704642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:58:02 ispc CRON[1704642]: pam_unix(cron:session): session closed for user root Dec 16 01:58:02 ispc sshd[1704640]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:58:14 ispc sshd[1704659]: Invalid user klape from 70.37.89.177 Dec 16 01:58:15 ispc sshd[1704661]: Invalid user ubuntu from 70.37.89.177 Dec 16 01:58:28 ispc saslauthd[1704672]: pam_mysql - SELECT returned no result. Dec 16 01:58:28 ispc saslauthd[1704672]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:58:28 ispc saslauthd[1704672]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 01:58:54 ispc sshd[1704683]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 01:59:01 ispc CRON[1704689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 01:59:02 ispc CRON[1704689]: pam_unix(cron:session): session closed for user root Dec 16 01:59:15 ispc saslauthd[1704704]: pam_mysql - SELECT returned no result. Dec 16 01:59:15 ispc saslauthd[1704704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 01:59:15 ispc saslauthd[1704704]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 01:59:33 ispc sshd[1704713]: Invalid user ziplines from 210.114.18.123 Dec 16 02:00:01 ispc CRON[1704728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:00:01 ispc CRON[1704729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:00:01 ispc CRON[1704730]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:00:01 ispc CRON[1704731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:00:01 ispc CRON[1704732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:00:01 ispc CRON[1704733]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:00:01 ispc CRON[1704729]: pam_unix(cron:session): session closed for user root Dec 16 02:00:01 ispc CRON[1704730]: pam_unix(cron:session): session closed for user www-data Dec 16 02:00:01 ispc CRON[1704733]: pam_unix(cron:session): session closed for user getmail Dec 16 02:00:02 ispc CRON[1704728]: pam_unix(cron:session): session closed for user root Dec 16 02:00:02 ispc su[1704901]: Successful su for root by root Dec 16 02:00:02 ispc su[1704901]: + ??? root:root Dec 16 02:00:02 ispc su[1704901]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:02 ispc CRON[1704732]: pam_unix(cron:session): session closed for user root Dec 16 02:00:02 ispc su[1704901]: pam_unix(su:session): session closed for user root Dec 16 02:00:02 ispc su[1704906]: Successful su for root by root Dec 16 02:00:02 ispc su[1704906]: + ??? root:root Dec 16 02:00:02 ispc su[1704906]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:02 ispc su[1704906]: pam_unix(su:session): session closed for user root Dec 16 02:00:02 ispc su[1704909]: Successful su for root by root Dec 16 02:00:02 ispc su[1704909]: + ??? root:root Dec 16 02:00:02 ispc su[1704909]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:02 ispc su[1704909]: pam_unix(su:session): session closed for user root Dec 16 02:00:02 ispc su[1704915]: Successful su for root by root Dec 16 02:00:02 ispc su[1704915]: + ??? root:root Dec 16 02:00:02 ispc su[1704915]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:02 ispc su[1704915]: pam_unix(su:session): session closed for user root Dec 16 02:00:02 ispc su[1704918]: Successful su for root by root Dec 16 02:00:02 ispc su[1704918]: + ??? root:root Dec 16 02:00:02 ispc su[1704918]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:04 ispc su[1704918]: pam_unix(su:session): session closed for user root Dec 16 02:00:04 ispc su[1704924]: Successful su for root by root Dec 16 02:00:04 ispc su[1704924]: + ??? root:root Dec 16 02:00:04 ispc su[1704924]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:04 ispc su[1704924]: pam_unix(su:session): session closed for user root Dec 16 02:00:04 ispc su[1704927]: Successful su for root by root Dec 16 02:00:04 ispc su[1704927]: + ??? root:root Dec 16 02:00:04 ispc su[1704927]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:09 ispc su[1704927]: pam_unix(su:session): session closed for user root Dec 16 02:00:09 ispc su[1704937]: Successful su for root by root Dec 16 02:00:09 ispc su[1704937]: + ??? root:root Dec 16 02:00:09 ispc su[1704937]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:09 ispc su[1704937]: pam_unix(su:session): session closed for user root Dec 16 02:00:10 ispc su[1704940]: Successful su for root by root Dec 16 02:00:10 ispc su[1704940]: + ??? root:root Dec 16 02:00:10 ispc su[1704940]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:10 ispc su[1704940]: pam_unix(su:session): session closed for user root Dec 16 02:00:10 ispc su[1704946]: Successful su for root by root Dec 16 02:00:10 ispc su[1704946]: + ??? root:root Dec 16 02:00:10 ispc su[1704946]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:11 ispc su[1704946]: pam_unix(su:session): session closed for user root Dec 16 02:00:11 ispc su[1704949]: Successful su for root by root Dec 16 02:00:11 ispc su[1704949]: + ??? root:root Dec 16 02:00:11 ispc su[1704949]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:14 ispc su[1704949]: pam_unix(su:session): session closed for user root Dec 16 02:00:14 ispc su[1704955]: Successful su for root by root Dec 16 02:00:14 ispc su[1704955]: + ??? root:root Dec 16 02:00:14 ispc su[1704955]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:14 ispc su[1704955]: pam_unix(su:session): session closed for user root Dec 16 02:00:14 ispc su[1704958]: Successful su for root by root Dec 16 02:00:14 ispc su[1704958]: + ??? root:root Dec 16 02:00:14 ispc su[1704958]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:15 ispc su[1704958]: pam_unix(su:session): session closed for user root Dec 16 02:00:15 ispc su[1704964]: Successful su for root by root Dec 16 02:00:15 ispc su[1704964]: + ??? root:root Dec 16 02:00:15 ispc su[1704964]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:15 ispc su[1704964]: pam_unix(su:session): session closed for user root Dec 16 02:00:15 ispc su[1704967]: Successful su for root by root Dec 16 02:00:15 ispc su[1704967]: + ??? root:root Dec 16 02:00:15 ispc su[1704967]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:18 ispc su[1704967]: pam_unix(su:session): session closed for user root Dec 16 02:00:18 ispc su[1704973]: Successful su for root by root Dec 16 02:00:18 ispc su[1704973]: + ??? root:root Dec 16 02:00:18 ispc su[1704973]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:18 ispc su[1704973]: pam_unix(su:session): session closed for user root Dec 16 02:00:18 ispc su[1704976]: Successful su for root by root Dec 16 02:00:18 ispc su[1704976]: + ??? root:root Dec 16 02:00:18 ispc su[1704976]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:20 ispc su[1704976]: pam_unix(su:session): session closed for user root Dec 16 02:00:20 ispc su[1704986]: Successful su for root by root Dec 16 02:00:20 ispc su[1704986]: + ??? root:root Dec 16 02:00:20 ispc su[1704986]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:20 ispc su[1704986]: pam_unix(su:session): session closed for user root Dec 16 02:00:20 ispc su[1704989]: Successful su for root by root Dec 16 02:00:20 ispc su[1704989]: + ??? root:root Dec 16 02:00:20 ispc su[1704989]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:35 ispc su[1704989]: pam_unix(su:session): session closed for user root Dec 16 02:00:35 ispc su[1705003]: Successful su for root by root Dec 16 02:00:35 ispc su[1705003]: + ??? root:root Dec 16 02:00:35 ispc su[1705003]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:35 ispc su[1705003]: pam_unix(su:session): session closed for user root Dec 16 02:00:35 ispc su[1705006]: Successful su for root by root Dec 16 02:00:35 ispc su[1705006]: + ??? root:root Dec 16 02:00:35 ispc su[1705006]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:35 ispc su[1705006]: pam_unix(su:session): session closed for user root Dec 16 02:00:35 ispc su[1705012]: Successful su for root by root Dec 16 02:00:35 ispc su[1705012]: + ??? root:root Dec 16 02:00:35 ispc su[1705012]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:36 ispc su[1705012]: pam_unix(su:session): session closed for user root Dec 16 02:00:36 ispc su[1705015]: Successful su for root by root Dec 16 02:00:36 ispc su[1705015]: + ??? root:root Dec 16 02:00:36 ispc su[1705015]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:36 ispc su[1705015]: pam_unix(su:session): session closed for user root Dec 16 02:00:36 ispc su[1705021]: Successful su for root by root Dec 16 02:00:36 ispc su[1705021]: + ??? root:root Dec 16 02:00:36 ispc su[1705021]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:00:36 ispc su[1705021]: pam_unix(su:session): session closed for user root Dec 16 02:00:36 ispc su[1705024]: Successful su for root by root Dec 16 02:00:36 ispc su[1705024]: + ??? root:root Dec 16 02:00:36 ispc su[1705024]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:01:01 ispc CRON[1705054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:01:02 ispc CRON[1705054]: pam_unix(cron:session): session closed for user root Dec 16 02:01:11 ispc postfix/smtpd[1705070]: sql auxprop plugin using mysql engine Dec 16 02:01:13 ispc saslauthd[1705072]: pam_mysql - SELECT returned no result. Dec 16 02:01:13 ispc saslauthd[1705072]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:01:13 ispc saslauthd[1705072]: do_auth : auth failure: [user=author] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:01:30 ispc CRON[1703718]: pam_unix(cron:session): session closed for user root Dec 16 02:02:02 ispc CRON[1705088]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 02:02:02 ispc CRON[1705089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:02:02 ispc CRON[1705089]: pam_unix(cron:session): session closed for user root Dec 16 02:02:23 ispc sshd[1705477]: Invalid user ziplines from 202.46.29.79 Dec 16 02:03:01 ispc CRON[1705870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:03:02 ispc CRON[1705870]: pam_unix(cron:session): session closed for user root Dec 16 02:03:30 ispc saslauthd[1705988]: pam_mysql - SELECT returned no result. Dec 16 02:03:30 ispc saslauthd[1705988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:03:30 ispc saslauthd[1705988]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:03:36 ispc postfix/smtpd[1706049]: sql auxprop plugin using mysql engine Dec 16 02:03:40 ispc postfix/smtpd[1706115]: sql auxprop plugin using mysql engine Dec 16 02:03:43 ispc CRON[1705088]: pam_unix(cron:session): session closed for user logcheck Dec 16 02:03:47 ispc saslauthd[1706160]: pam_mysql - SELECT returned no result. Dec 16 02:03:47 ispc saslauthd[1706160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:03:47 ispc saslauthd[1706160]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:03:52 ispc postfix/smtpd[1706162]: sql auxprop plugin using mysql engine Dec 16 02:04:01 ispc CRON[1706165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:04:03 ispc CRON[1706165]: pam_unix(cron:session): session closed for user root Dec 16 02:04:14 ispc sshd[1706177]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:04:14 ispc sshd[1706177]: Invalid user martof from 157.245.115.125 Dec 16 02:04:33 ispc postfix/smtpd[1706180]: sql auxprop plugin using mysql engine Dec 16 02:04:33 ispc postfix/smtpd[1706182]: sql auxprop plugin using mysql engine Dec 16 02:05:01 ispc CRON[1706187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:05:01 ispc CRON[1706188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:05:01 ispc CRON[1706186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:05:01 ispc CRON[1706189]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:05:01 ispc CRON[1706187]: pam_unix(cron:session): session closed for user root Dec 16 02:05:01 ispc CRON[1706189]: pam_unix(cron:session): session closed for user getmail Dec 16 02:05:01 ispc CRON[1706186]: pam_unix(cron:session): session closed for user root Dec 16 02:05:17 ispc sshd[1706293]: Invalid user martof from 52.232.19.79 Dec 16 02:05:35 ispc su[1705024]: pam_unix(su:session): session closed for user root Dec 16 02:05:36 ispc su[1706297]: Successful su for root by root Dec 16 02:05:36 ispc su[1706297]: + ??? root:root Dec 16 02:05:36 ispc su[1706297]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:36 ispc su[1706297]: pam_unix(su:session): session closed for user root Dec 16 02:05:36 ispc su[1706301]: Successful su for root by root Dec 16 02:05:36 ispc su[1706301]: + ??? root:root Dec 16 02:05:36 ispc su[1706301]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:38 ispc su[1706301]: pam_unix(su:session): session closed for user root Dec 16 02:05:38 ispc su[1706307]: Successful su for root by root Dec 16 02:05:38 ispc su[1706307]: + ??? root:root Dec 16 02:05:38 ispc su[1706307]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:38 ispc su[1706307]: pam_unix(su:session): session closed for user root Dec 16 02:05:38 ispc su[1706310]: Successful su for root by root Dec 16 02:05:38 ispc su[1706310]: + ??? root:root Dec 16 02:05:38 ispc su[1706310]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:39 ispc su[1706310]: pam_unix(su:session): session closed for user root Dec 16 02:05:39 ispc su[1706316]: Successful su for root by root Dec 16 02:05:39 ispc su[1706316]: + ??? root:root Dec 16 02:05:39 ispc su[1706316]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:39 ispc su[1706316]: pam_unix(su:session): session closed for user root Dec 16 02:05:39 ispc su[1706319]: Successful su for root by root Dec 16 02:05:39 ispc su[1706319]: + ??? root:root Dec 16 02:05:39 ispc su[1706319]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:40 ispc su[1706319]: pam_unix(su:session): session closed for user root Dec 16 02:05:40 ispc su[1706325]: Successful su for root by root Dec 16 02:05:40 ispc su[1706325]: + ??? root:root Dec 16 02:05:40 ispc su[1706325]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:40 ispc su[1706325]: pam_unix(su:session): session closed for user root Dec 16 02:05:40 ispc su[1706328]: Successful su for root by root Dec 16 02:05:40 ispc su[1706328]: + ??? root:root Dec 16 02:05:40 ispc su[1706328]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:40 ispc su[1706328]: pam_unix(su:session): session closed for user root Dec 16 02:05:40 ispc su[1706334]: Successful su for root by root Dec 16 02:05:40 ispc su[1706334]: + ??? root:root Dec 16 02:05:40 ispc su[1706334]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:41 ispc su[1706334]: pam_unix(su:session): session closed for user root Dec 16 02:05:41 ispc su[1706337]: Successful su for root by root Dec 16 02:05:41 ispc su[1706337]: + ??? root:root Dec 16 02:05:41 ispc su[1706337]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:44 ispc CRON[1706188]: pam_unix(cron:session): session closed for user root Dec 16 02:05:52 ispc su[1706337]: pam_unix(su:session): session closed for user root Dec 16 02:05:52 ispc su[1706343]: Successful su for root by root Dec 16 02:05:52 ispc su[1706343]: + ??? root:root Dec 16 02:05:52 ispc su[1706343]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:05:52 ispc su[1706343]: pam_unix(su:session): session closed for user root Dec 16 02:05:52 ispc su[1706346]: Successful su for root by root Dec 16 02:05:52 ispc su[1706346]: + ??? root:root Dec 16 02:05:52 ispc su[1706346]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:06:01 ispc CRON[1706352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:06:03 ispc sshd[1706350]: Invalid user zamestnanievzdravotnictve from 175.125.95.234 Dec 16 02:06:16 ispc saslauthd[1706367]: pam_mysql - SELECT returned no result. Dec 16 02:06:16 ispc saslauthd[1706367]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:06:16 ispc saslauthd[1706367]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:06:22 ispc su[1706346]: pam_unix(su:session): session closed for user root Dec 16 02:06:22 ispc su[1706374]: Successful su for root by root Dec 16 02:06:22 ispc su[1706374]: + ??? root:root Dec 16 02:06:22 ispc su[1706374]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:06:22 ispc su[1706374]: pam_unix(su:session): session closed for user root Dec 16 02:06:22 ispc su[1706377]: Successful su for root by root Dec 16 02:06:22 ispc su[1706377]: + ??? root:root Dec 16 02:06:22 ispc su[1706377]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:06:23 ispc su[1706377]: pam_unix(su:session): session closed for user root Dec 16 02:06:23 ispc su[1706383]: Successful su for root by root Dec 16 02:06:23 ispc su[1706383]: + ??? root:root Dec 16 02:06:23 ispc su[1706383]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:06:23 ispc su[1706383]: pam_unix(su:session): session closed for user root Dec 16 02:06:23 ispc su[1706386]: Successful su for root by root Dec 16 02:06:23 ispc su[1706386]: + ??? root:root Dec 16 02:06:23 ispc su[1706386]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:06:53 ispc saslauthd[1706406]: pam_mysql - SELECT returned no result. Dec 16 02:06:53 ispc saslauthd[1706406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:06:53 ispc saslauthd[1706406]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:07:01 ispc CRON[1706407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:07:02 ispc CRON[1706407]: pam_unix(cron:session): session closed for user root Dec 16 02:07:24 ispc postfix/smtpd[1706431]: sql auxprop plugin using mysql engine Dec 16 02:07:56 ispc sshd[1706458]: Invalid user zednictvistastny from 161.97.92.14 Dec 16 02:08:01 ispc CRON[1706466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:08:02 ispc CRON[1706466]: pam_unix(cron:session): session closed for user root Dec 16 02:08:23 ispc saslauthd[1706486]: pam_mysql - SELECT returned no result. Dec 16 02:08:23 ispc saslauthd[1706486]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:08:23 ispc saslauthd[1706486]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:08:29 ispc saslauthd[1706492]: pam_mysql - SELECT returned no result. Dec 16 02:08:29 ispc saslauthd[1706492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:08:29 ispc saslauthd[1706492]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:09:01 ispc CRON[1706507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:09:01 ispc CRON[1706508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:09:02 ispc CRON[1706507]: pam_unix(cron:session): session closed for user root Dec 16 02:09:03 ispc CRON[1706508]: pam_unix(cron:session): session closed for user root Dec 16 02:10:01 ispc CRON[1706557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:10:01 ispc CRON[1706558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:10:01 ispc CRON[1706560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:10:01 ispc CRON[1706561]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:10:01 ispc CRON[1706559]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:10:01 ispc CRON[1706559]: pam_unix(cron:session): session closed for user www-data Dec 16 02:10:01 ispc CRON[1706558]: pam_unix(cron:session): session closed for user root Dec 16 02:10:01 ispc CRON[1706561]: pam_unix(cron:session): session closed for user getmail Dec 16 02:10:02 ispc CRON[1706560]: pam_unix(cron:session): session closed for user root Dec 16 02:10:03 ispc CRON[1706557]: pam_unix(cron:session): session closed for user root Dec 16 02:10:12 ispc sshd[1706641]: Invalid user klape from 51.77.222.24 Dec 16 02:10:13 ispc sshd[1706643]: Invalid user ubuntu from 51.77.222.24 Dec 16 02:10:16 ispc su[1706386]: pam_unix(su:session): session closed for user root Dec 16 02:10:16 ispc su[1706651]: Successful su for root by root Dec 16 02:10:16 ispc su[1706651]: + ??? root:root Dec 16 02:10:16 ispc su[1706651]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:10:16 ispc su[1706651]: pam_unix(su:session): session closed for user root Dec 16 02:10:16 ispc su[1706654]: Successful su for root by root Dec 16 02:10:16 ispc su[1706654]: + ??? root:root Dec 16 02:10:16 ispc su[1706654]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:11:01 ispc CRON[1706674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:11:02 ispc CRON[1706674]: pam_unix(cron:session): session closed for user root Dec 16 02:11:35 ispc sshd[1706700]: Invalid user klape from 36.50.177.171 Dec 16 02:11:36 ispc sshd[1706702]: Invalid user ubuntu from 36.50.177.171 Dec 16 02:11:46 ispc su[1706654]: pam_unix(su:session): session closed for user root Dec 16 02:11:46 ispc su[1706715]: Successful su for root by root Dec 16 02:11:46 ispc su[1706715]: + ??? root:root Dec 16 02:11:46 ispc su[1706715]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:11:46 ispc su[1706715]: pam_unix(su:session): session closed for user root Dec 16 02:11:46 ispc su[1706718]: Successful su for root by root Dec 16 02:11:46 ispc su[1706718]: + ??? root:root Dec 16 02:11:46 ispc su[1706718]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:11:47 ispc su[1706718]: pam_unix(su:session): session closed for user root Dec 16 02:11:47 ispc su[1706724]: Successful su for root by root Dec 16 02:11:47 ispc su[1706724]: + ??? root:root Dec 16 02:11:47 ispc su[1706724]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:11:47 ispc su[1706724]: pam_unix(su:session): session closed for user root Dec 16 02:11:47 ispc su[1706727]: Successful su for root by root Dec 16 02:11:47 ispc su[1706727]: + ??? root:root Dec 16 02:11:47 ispc su[1706727]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:01 ispc CRON[1706735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:12:01 ispc CRON[1706735]: pam_unix(cron:session): session closed for user root Dec 16 02:12:01 ispc su[1706727]: pam_unix(su:session): session closed for user root Dec 16 02:12:01 ispc su[1706749]: Successful su for root by root Dec 16 02:12:01 ispc su[1706749]: + ??? root:root Dec 16 02:12:01 ispc su[1706749]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:02 ispc su[1706749]: pam_unix(su:session): session closed for user root Dec 16 02:12:02 ispc su[1706752]: Successful su for root by root Dec 16 02:12:02 ispc su[1706752]: + ??? root:root Dec 16 02:12:02 ispc su[1706752]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:02 ispc postfix/smtpd[1706756]: sql auxprop plugin using mysql engine Dec 16 02:12:02 ispc postfix/smtpd[1706758]: sql auxprop plugin using mysql engine Dec 16 02:12:03 ispc postfix/smtpd[1706760]: sql auxprop plugin using mysql engine Dec 16 02:12:05 ispc su[1706752]: pam_unix(su:session): session closed for user root Dec 16 02:12:05 ispc su[1706763]: Successful su for root by root Dec 16 02:12:05 ispc su[1706763]: + ??? root:root Dec 16 02:12:05 ispc su[1706763]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:06 ispc su[1706763]: pam_unix(su:session): session closed for user root Dec 16 02:12:06 ispc su[1706766]: Successful su for root by root Dec 16 02:12:06 ispc su[1706766]: + ??? root:root Dec 16 02:12:06 ispc su[1706766]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:09 ispc su[1706766]: pam_unix(su:session): session closed for user root Dec 16 02:12:09 ispc su[1706776]: Successful su for root by root Dec 16 02:12:09 ispc su[1706776]: + ??? root:root Dec 16 02:12:09 ispc su[1706776]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:09 ispc su[1706776]: pam_unix(su:session): session closed for user root Dec 16 02:12:09 ispc su[1706779]: Successful su for root by root Dec 16 02:12:09 ispc su[1706779]: + ??? root:root Dec 16 02:12:09 ispc su[1706779]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:14 ispc su[1706779]: pam_unix(su:session): session closed for user root Dec 16 02:12:14 ispc su[1706785]: Successful su for root by root Dec 16 02:12:14 ispc su[1706785]: + ??? root:root Dec 16 02:12:14 ispc su[1706785]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:14 ispc su[1706785]: pam_unix(su:session): session closed for user root Dec 16 02:12:14 ispc su[1706788]: Successful su for root by root Dec 16 02:12:14 ispc su[1706788]: + ??? root:root Dec 16 02:12:14 ispc su[1706788]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:15 ispc su[1706788]: pam_unix(su:session): session closed for user root Dec 16 02:12:16 ispc su[1706794]: Successful su for root by root Dec 16 02:12:16 ispc su[1706794]: + ??? root:root Dec 16 02:12:16 ispc su[1706794]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:16 ispc su[1706794]: pam_unix(su:session): session closed for user root Dec 16 02:12:16 ispc su[1706797]: Successful su for root by root Dec 16 02:12:16 ispc su[1706797]: + ??? root:root Dec 16 02:12:16 ispc su[1706797]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:17 ispc su[1706797]: pam_unix(su:session): session closed for user root Dec 16 02:12:17 ispc su[1706807]: Successful su for root by root Dec 16 02:12:17 ispc su[1706807]: + ??? root:root Dec 16 02:12:17 ispc su[1706807]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:17 ispc su[1706807]: pam_unix(su:session): session closed for user root Dec 16 02:12:17 ispc su[1706810]: Successful su for root by root Dec 16 02:12:17 ispc su[1706810]: + ??? root:root Dec 16 02:12:17 ispc su[1706810]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:18 ispc su[1706810]: pam_unix(su:session): session closed for user root Dec 16 02:12:18 ispc su[1706816]: Successful su for root by root Dec 16 02:12:18 ispc su[1706816]: + ??? root:root Dec 16 02:12:18 ispc su[1706816]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:18 ispc su[1706816]: pam_unix(su:session): session closed for user root Dec 16 02:12:18 ispc su[1706819]: Successful su for root by root Dec 16 02:12:18 ispc su[1706819]: + ??? root:root Dec 16 02:12:18 ispc su[1706819]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:20 ispc su[1706819]: pam_unix(su:session): session closed for user root Dec 16 02:12:20 ispc su[1706825]: Successful su for root by root Dec 16 02:12:20 ispc su[1706825]: + ??? root:root Dec 16 02:12:21 ispc su[1706825]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:21 ispc su[1706825]: pam_unix(su:session): session closed for user root Dec 16 02:12:21 ispc su[1706828]: Successful su for root by root Dec 16 02:12:21 ispc su[1706828]: + ??? root:root Dec 16 02:12:21 ispc su[1706828]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:22 ispc su[1706828]: pam_unix(su:session): session closed for user root Dec 16 02:12:22 ispc su[1706834]: Successful su for root by root Dec 16 02:12:22 ispc su[1706834]: + ??? root:root Dec 16 02:12:22 ispc su[1706834]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:22 ispc su[1706834]: pam_unix(su:session): session closed for user root Dec 16 02:12:22 ispc su[1706837]: Successful su for root by root Dec 16 02:12:22 ispc su[1706837]: + ??? root:root Dec 16 02:12:22 ispc su[1706837]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:27 ispc su[1706837]: pam_unix(su:session): session closed for user root Dec 16 02:12:27 ispc su[1706847]: Successful su for root by root Dec 16 02:12:27 ispc su[1706847]: + ??? root:root Dec 16 02:12:27 ispc su[1706847]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:27 ispc su[1706847]: pam_unix(su:session): session closed for user root Dec 16 02:12:27 ispc su[1706850]: Successful su for root by root Dec 16 02:12:27 ispc su[1706850]: + ??? root:root Dec 16 02:12:27 ispc su[1706850]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:27 ispc su[1706850]: pam_unix(su:session): session closed for user root Dec 16 02:12:27 ispc su[1706856]: Successful su for root by root Dec 16 02:12:27 ispc su[1706856]: + ??? root:root Dec 16 02:12:27 ispc su[1706856]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:27 ispc su[1706856]: pam_unix(su:session): session closed for user root Dec 16 02:12:27 ispc su[1706859]: Successful su for root by root Dec 16 02:12:27 ispc su[1706859]: + ??? root:root Dec 16 02:12:27 ispc su[1706859]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:28 ispc su[1706859]: pam_unix(su:session): session closed for user root Dec 16 02:12:28 ispc su[1706865]: Successful su for root by root Dec 16 02:12:28 ispc su[1706865]: + ??? root:root Dec 16 02:12:28 ispc su[1706865]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:28 ispc su[1706865]: pam_unix(su:session): session closed for user root Dec 16 02:12:28 ispc su[1706868]: Successful su for root by root Dec 16 02:12:28 ispc su[1706868]: + ??? root:root Dec 16 02:12:28 ispc su[1706868]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:28 ispc su[1706868]: pam_unix(su:session): session closed for user root Dec 16 02:12:28 ispc su[1706874]: Successful su for root by root Dec 16 02:12:28 ispc su[1706874]: + ??? root:root Dec 16 02:12:28 ispc su[1706874]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:28 ispc su[1706874]: pam_unix(su:session): session closed for user root Dec 16 02:12:28 ispc su[1706877]: Successful su for root by root Dec 16 02:12:28 ispc su[1706877]: + ??? root:root Dec 16 02:12:28 ispc su[1706877]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:48 ispc su[1706877]: pam_unix(su:session): session closed for user root Dec 16 02:12:48 ispc su[1706897]: Successful su for root by root Dec 16 02:12:48 ispc su[1706897]: + ??? root:root Dec 16 02:12:48 ispc su[1706897]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:49 ispc su[1706897]: pam_unix(su:session): session closed for user root Dec 16 02:12:49 ispc su[1706900]: Successful su for root by root Dec 16 02:12:49 ispc su[1706900]: + ??? root:root Dec 16 02:12:49 ispc su[1706900]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:12:49 ispc postfix/smtpd[1706904]: sql auxprop plugin using mysql engine Dec 16 02:12:53 ispc saslauthd[1706906]: pam_mysql - SELECT returned no result. Dec 16 02:12:53 ispc saslauthd[1706906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:12:53 ispc saslauthd[1706906]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:13:01 ispc CRON[1706911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:13:02 ispc CRON[1706911]: pam_unix(cron:session): session closed for user root Dec 16 02:13:34 ispc saslauthd[1706934]: pam_mysql - SELECT returned no result. Dec 16 02:13:34 ispc saslauthd[1706934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:13:34 ispc saslauthd[1706934]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:13:41 ispc sshd[1706939]: Invalid user ziplines from 52.232.19.79 Dec 16 02:14:01 ispc CRON[1706949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:14:02 ispc CRON[1706949]: pam_unix(cron:session): session closed for user root Dec 16 02:14:39 ispc saslauthd[1706977]: pam_mysql - SELECT returned no result. Dec 16 02:14:39 ispc saslauthd[1706977]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:14:39 ispc saslauthd[1706977]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:14:40 ispc su[1706900]: pam_unix(su:session): session closed for user root Dec 16 02:14:40 ispc su[1706980]: Successful su for root by root Dec 16 02:14:40 ispc su[1706980]: + ??? root:root Dec 16 02:14:40 ispc su[1706980]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:40 ispc su[1706980]: pam_unix(su:session): session closed for user root Dec 16 02:14:40 ispc su[1706983]: Successful su for root by root Dec 16 02:14:40 ispc su[1706983]: + ??? root:root Dec 16 02:14:40 ispc su[1706983]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:41 ispc su[1706983]: pam_unix(su:session): session closed for user root Dec 16 02:14:41 ispc su[1706989]: Successful su for root by root Dec 16 02:14:41 ispc su[1706989]: + ??? root:root Dec 16 02:14:41 ispc su[1706989]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:41 ispc su[1706989]: pam_unix(su:session): session closed for user root Dec 16 02:14:41 ispc su[1706992]: Successful su for root by root Dec 16 02:14:41 ispc su[1706992]: + ??? root:root Dec 16 02:14:41 ispc su[1706992]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:56 ispc su[1706992]: pam_unix(su:session): session closed for user root Dec 16 02:14:56 ispc su[1707002]: Successful su for root by root Dec 16 02:14:56 ispc su[1707002]: + ??? root:root Dec 16 02:14:56 ispc su[1707002]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:57 ispc su[1707002]: pam_unix(su:session): session closed for user root Dec 16 02:14:57 ispc su[1707005]: Successful su for root by root Dec 16 02:14:57 ispc su[1707005]: + ??? root:root Dec 16 02:14:57 ispc su[1707005]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:58 ispc su[1707005]: pam_unix(su:session): session closed for user root Dec 16 02:14:58 ispc su[1707011]: Successful su for root by root Dec 16 02:14:58 ispc su[1707011]: + ??? root:root Dec 16 02:14:58 ispc su[1707011]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:58 ispc su[1707011]: pam_unix(su:session): session closed for user root Dec 16 02:14:58 ispc su[1707014]: Successful su for root by root Dec 16 02:14:58 ispc su[1707014]: + ??? root:root Dec 16 02:14:58 ispc su[1707014]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:59 ispc su[1707014]: pam_unix(su:session): session closed for user root Dec 16 02:14:59 ispc su[1707024]: Successful su for root by root Dec 16 02:14:59 ispc su[1707024]: + ??? root:root Dec 16 02:14:59 ispc su[1707024]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:14:59 ispc su[1707024]: pam_unix(su:session): session closed for user root Dec 16 02:14:59 ispc su[1707027]: Successful su for root by root Dec 16 02:14:59 ispc su[1707027]: + ??? root:root Dec 16 02:14:59 ispc su[1707027]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:00 ispc su[1707027]: pam_unix(su:session): session closed for user root Dec 16 02:15:00 ispc su[1707033]: Successful su for root by root Dec 16 02:15:00 ispc su[1707033]: + ??? root:root Dec 16 02:15:00 ispc su[1707033]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:00 ispc su[1707033]: pam_unix(su:session): session closed for user root Dec 16 02:15:00 ispc su[1707036]: Successful su for root by root Dec 16 02:15:00 ispc su[1707036]: + ??? root:root Dec 16 02:15:00 ispc su[1707036]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:01 ispc CRON[1707040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:15:01 ispc CRON[1707041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:15:01 ispc CRON[1707042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:15:01 ispc CRON[1707043]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:15:01 ispc CRON[1707041]: pam_unix(cron:session): session closed for user root Dec 16 02:15:01 ispc CRON[1707043]: pam_unix(cron:session): session closed for user getmail Dec 16 02:15:02 ispc CRON[1707042]: pam_unix(cron:session): session closed for user root Dec 16 02:15:02 ispc CRON[1707040]: pam_unix(cron:session): session closed for user root Dec 16 02:15:03 ispc su[1707036]: pam_unix(su:session): session closed for user root Dec 16 02:15:03 ispc su[1707118]: Successful su for root by root Dec 16 02:15:03 ispc su[1707118]: + ??? root:root Dec 16 02:15:03 ispc su[1707118]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:03 ispc su[1707118]: pam_unix(su:session): session closed for user root Dec 16 02:15:03 ispc su[1707121]: Successful su for root by root Dec 16 02:15:03 ispc su[1707121]: + ??? root:root Dec 16 02:15:03 ispc su[1707121]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:03 ispc su[1707121]: pam_unix(su:session): session closed for user root Dec 16 02:15:03 ispc su[1707127]: Successful su for root by root Dec 16 02:15:03 ispc su[1707127]: + ??? root:root Dec 16 02:15:03 ispc su[1707127]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:04 ispc su[1707127]: pam_unix(su:session): session closed for user root Dec 16 02:15:04 ispc su[1707130]: Successful su for root by root Dec 16 02:15:04 ispc su[1707130]: + ??? root:root Dec 16 02:15:04 ispc su[1707130]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:24 ispc su[1707130]: pam_unix(su:session): session closed for user root Dec 16 02:15:24 ispc su[1707147]: Successful su for root by root Dec 16 02:15:24 ispc su[1707147]: + ??? root:root Dec 16 02:15:24 ispc su[1707147]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:24 ispc su[1707147]: pam_unix(su:session): session closed for user root Dec 16 02:15:24 ispc su[1707150]: Successful su for root by root Dec 16 02:15:24 ispc su[1707150]: + ??? root:root Dec 16 02:15:24 ispc su[1707150]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:24 ispc su[1707150]: pam_unix(su:session): session closed for user root Dec 16 02:15:25 ispc su[1707156]: Successful su for root by root Dec 16 02:15:25 ispc su[1707156]: + ??? root:root Dec 16 02:15:25 ispc su[1707156]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:25 ispc su[1707156]: pam_unix(su:session): session closed for user root Dec 16 02:15:25 ispc su[1707159]: Successful su for root by root Dec 16 02:15:25 ispc su[1707159]: + ??? root:root Dec 16 02:15:25 ispc su[1707159]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:30 ispc su[1707159]: pam_unix(su:session): session closed for user root Dec 16 02:15:30 ispc su[1707169]: Successful su for root by root Dec 16 02:15:30 ispc su[1707169]: + ??? root:root Dec 16 02:15:30 ispc su[1707169]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:30 ispc su[1707169]: pam_unix(su:session): session closed for user root Dec 16 02:15:30 ispc su[1707172]: Successful su for root by root Dec 16 02:15:30 ispc su[1707172]: + ??? root:root Dec 16 02:15:30 ispc su[1707172]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:32 ispc su[1707172]: pam_unix(su:session): session closed for user root Dec 16 02:15:32 ispc su[1707178]: Successful su for root by root Dec 16 02:15:32 ispc su[1707178]: + ??? root:root Dec 16 02:15:32 ispc su[1707178]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:32 ispc su[1707178]: pam_unix(su:session): session closed for user root Dec 16 02:15:32 ispc su[1707181]: Successful su for root by root Dec 16 02:15:32 ispc su[1707181]: + ??? root:root Dec 16 02:15:32 ispc su[1707181]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:41 ispc su[1707181]: pam_unix(su:session): session closed for user root Dec 16 02:15:41 ispc su[1707191]: Successful su for root by root Dec 16 02:15:41 ispc su[1707191]: + ??? root:root Dec 16 02:15:42 ispc su[1707191]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:42 ispc su[1707191]: pam_unix(su:session): session closed for user root Dec 16 02:15:42 ispc su[1707194]: Successful su for root by root Dec 16 02:15:42 ispc su[1707194]: + ??? root:root Dec 16 02:15:42 ispc su[1707194]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:44 ispc su[1707194]: pam_unix(su:session): session closed for user root Dec 16 02:15:44 ispc su[1707200]: Successful su for root by root Dec 16 02:15:44 ispc su[1707200]: + ??? root:root Dec 16 02:15:44 ispc su[1707200]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:15:44 ispc su[1707200]: pam_unix(su:session): session closed for user root Dec 16 02:15:44 ispc su[1707203]: Successful su for root by root Dec 16 02:15:44 ispc su[1707203]: + ??? root:root Dec 16 02:15:44 ispc su[1707203]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:01 ispc CRON[1707215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:16:02 ispc CRON[1707215]: pam_unix(cron:session): session closed for user root Dec 16 02:16:03 ispc su[1707203]: pam_unix(su:session): session closed for user root Dec 16 02:16:03 ispc su[1707228]: Successful su for root by root Dec 16 02:16:03 ispc su[1707228]: + ??? root:root Dec 16 02:16:03 ispc su[1707228]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:03 ispc su[1707228]: pam_unix(su:session): session closed for user root Dec 16 02:16:04 ispc su[1707231]: Successful su for root by root Dec 16 02:16:04 ispc su[1707231]: + ??? root:root Dec 16 02:16:04 ispc su[1707231]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:04 ispc su[1707231]: pam_unix(su:session): session closed for user root Dec 16 02:16:04 ispc su[1707237]: Successful su for root by root Dec 16 02:16:04 ispc su[1707237]: + ??? root:root Dec 16 02:16:04 ispc su[1707237]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:04 ispc su[1707237]: pam_unix(su:session): session closed for user root Dec 16 02:16:04 ispc su[1707240]: Successful su for root by root Dec 16 02:16:04 ispc su[1707240]: + ??? root:root Dec 16 02:16:04 ispc su[1707240]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:05 ispc su[1707240]: pam_unix(su:session): session closed for user root Dec 16 02:16:05 ispc su[1707246]: Successful su for root by root Dec 16 02:16:05 ispc su[1707246]: + ??? root:root Dec 16 02:16:05 ispc su[1707246]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:05 ispc su[1707246]: pam_unix(su:session): session closed for user root Dec 16 02:16:05 ispc su[1707249]: Successful su for root by root Dec 16 02:16:05 ispc su[1707249]: + ??? root:root Dec 16 02:16:05 ispc su[1707249]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:07 ispc su[1707249]: pam_unix(su:session): session closed for user root Dec 16 02:16:07 ispc su[1707255]: Successful su for root by root Dec 16 02:16:07 ispc su[1707255]: + ??? root:root Dec 16 02:16:08 ispc su[1707255]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:08 ispc su[1707255]: pam_unix(su:session): session closed for user root Dec 16 02:16:08 ispc su[1707258]: Successful su for root by root Dec 16 02:16:08 ispc su[1707258]: + ??? root:root Dec 16 02:16:08 ispc su[1707258]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:16 ispc saslauthd[1707266]: pam_mysql - SELECT returned no result. Dec 16 02:16:16 ispc saslauthd[1707266]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:16:16 ispc saslauthd[1707266]: do_auth : auth failure: [user=autocad] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:16:37 ispc su[1707258]: pam_unix(su:session): session closed for user root Dec 16 02:16:37 ispc su[1707280]: Successful su for root by root Dec 16 02:16:37 ispc su[1707280]: + ??? root:root Dec 16 02:16:37 ispc su[1707280]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:37 ispc su[1707280]: pam_unix(su:session): session closed for user root Dec 16 02:16:37 ispc su[1707283]: Successful su for root by root Dec 16 02:16:37 ispc su[1707283]: + ??? root:root Dec 16 02:16:37 ispc su[1707283]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:38 ispc su[1707283]: pam_unix(su:session): session closed for user root Dec 16 02:16:38 ispc su[1707289]: Successful su for root by root Dec 16 02:16:38 ispc su[1707289]: + ??? root:root Dec 16 02:16:38 ispc su[1707289]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:39 ispc su[1707289]: pam_unix(su:session): session closed for user root Dec 16 02:16:39 ispc su[1707292]: Successful su for root by root Dec 16 02:16:39 ispc su[1707292]: + ??? root:root Dec 16 02:16:39 ispc su[1707292]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:42 ispc su[1707292]: pam_unix(su:session): session closed for user root Dec 16 02:16:42 ispc su[1707302]: Successful su for root by root Dec 16 02:16:42 ispc su[1707302]: + ??? root:root Dec 16 02:16:42 ispc su[1707302]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:43 ispc su[1707302]: pam_unix(su:session): session closed for user root Dec 16 02:16:43 ispc su[1707305]: Successful su for root by root Dec 16 02:16:43 ispc su[1707305]: + ??? root:root Dec 16 02:16:43 ispc su[1707305]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:43 ispc su[1707305]: pam_unix(su:session): session closed for user root Dec 16 02:16:43 ispc su[1707311]: Successful su for root by root Dec 16 02:16:43 ispc su[1707311]: + ??? root:root Dec 16 02:16:43 ispc su[1707311]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:43 ispc su[1707311]: pam_unix(su:session): session closed for user root Dec 16 02:16:43 ispc su[1707314]: Successful su for root by root Dec 16 02:16:43 ispc su[1707314]: + ??? root:root Dec 16 02:16:43 ispc su[1707314]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:44 ispc su[1707314]: pam_unix(su:session): session closed for user root Dec 16 02:16:44 ispc su[1707320]: Successful su for root by root Dec 16 02:16:44 ispc su[1707320]: + ??? root:root Dec 16 02:16:44 ispc su[1707320]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:44 ispc su[1707320]: pam_unix(su:session): session closed for user root Dec 16 02:16:44 ispc su[1707323]: Successful su for root by root Dec 16 02:16:44 ispc su[1707323]: + ??? root:root Dec 16 02:16:44 ispc su[1707323]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:44 ispc su[1707323]: pam_unix(su:session): session closed for user root Dec 16 02:16:44 ispc su[1707329]: Successful su for root by root Dec 16 02:16:44 ispc su[1707329]: + ??? root:root Dec 16 02:16:44 ispc su[1707329]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:45 ispc su[1707329]: pam_unix(su:session): session closed for user root Dec 16 02:16:45 ispc su[1707332]: Successful su for root by root Dec 16 02:16:45 ispc su[1707332]: + ??? root:root Dec 16 02:16:45 ispc su[1707332]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:45 ispc su[1707332]: pam_unix(su:session): session closed for user root Dec 16 02:16:45 ispc su[1707338]: Successful su for root by root Dec 16 02:16:45 ispc su[1707338]: + ??? root:root Dec 16 02:16:45 ispc su[1707338]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:45 ispc su[1707338]: pam_unix(su:session): session closed for user root Dec 16 02:16:45 ispc su[1707341]: Successful su for root by root Dec 16 02:16:45 ispc su[1707341]: + ??? root:root Dec 16 02:16:45 ispc su[1707341]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:46 ispc su[1707341]: pam_unix(su:session): session closed for user root Dec 16 02:16:46 ispc su[1707348]: Successful su for root by root Dec 16 02:16:46 ispc su[1707348]: + ??? root:root Dec 16 02:16:46 ispc su[1707348]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:46 ispc su[1707348]: pam_unix(su:session): session closed for user root Dec 16 02:16:46 ispc su[1707351]: Successful su for root by root Dec 16 02:16:46 ispc su[1707351]: + ??? root:root Dec 16 02:16:46 ispc su[1707351]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:48 ispc su[1707351]: pam_unix(su:session): session closed for user root Dec 16 02:16:48 ispc su[1707357]: Successful su for root by root Dec 16 02:16:48 ispc su[1707357]: + ??? root:root Dec 16 02:16:48 ispc su[1707357]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:48 ispc su[1707357]: pam_unix(su:session): session closed for user root Dec 16 02:16:49 ispc su[1707360]: Successful su for root by root Dec 16 02:16:49 ispc su[1707360]: + ??? root:root Dec 16 02:16:49 ispc su[1707360]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:50 ispc su[1707360]: pam_unix(su:session): session closed for user root Dec 16 02:16:50 ispc su[1707366]: Successful su for root by root Dec 16 02:16:50 ispc su[1707366]: + ??? root:root Dec 16 02:16:50 ispc su[1707366]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:50 ispc su[1707366]: pam_unix(su:session): session closed for user root Dec 16 02:16:50 ispc su[1707369]: Successful su for root by root Dec 16 02:16:50 ispc su[1707369]: + ??? root:root Dec 16 02:16:50 ispc su[1707369]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:51 ispc su[1707369]: pam_unix(su:session): session closed for user root Dec 16 02:16:52 ispc su[1707379]: Successful su for root by root Dec 16 02:16:52 ispc su[1707379]: + ??? root:root Dec 16 02:16:52 ispc su[1707379]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:52 ispc su[1707379]: pam_unix(su:session): session closed for user root Dec 16 02:16:52 ispc su[1707382]: Successful su for root by root Dec 16 02:16:52 ispc su[1707382]: + ??? root:root Dec 16 02:16:52 ispc su[1707382]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:56 ispc su[1707382]: pam_unix(su:session): session closed for user root Dec 16 02:16:56 ispc su[1707388]: Successful su for root by root Dec 16 02:16:56 ispc su[1707388]: + ??? root:root Dec 16 02:16:56 ispc su[1707388]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:57 ispc su[1707388]: pam_unix(su:session): session closed for user root Dec 16 02:16:57 ispc su[1707391]: Successful su for root by root Dec 16 02:16:57 ispc su[1707391]: + ??? root:root Dec 16 02:16:57 ispc su[1707391]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:57 ispc su[1707391]: pam_unix(su:session): session closed for user root Dec 16 02:16:57 ispc su[1707397]: Successful su for root by root Dec 16 02:16:57 ispc su[1707397]: + ??? root:root Dec 16 02:16:57 ispc su[1707397]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:16:57 ispc su[1707397]: pam_unix(su:session): session closed for user root Dec 16 02:16:57 ispc su[1707400]: Successful su for root by root Dec 16 02:16:57 ispc su[1707400]: + ??? root:root Dec 16 02:16:57 ispc su[1707400]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:01 ispc CRON[1707409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:17:02 ispc su[1707400]: pam_unix(su:session): session closed for user root Dec 16 02:17:02 ispc su[1707418]: Successful su for root by root Dec 16 02:17:02 ispc su[1707418]: + ??? root:root Dec 16 02:17:02 ispc su[1707418]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:02 ispc su[1707418]: pam_unix(su:session): session closed for user root Dec 16 02:17:02 ispc su[1707421]: Successful su for root by root Dec 16 02:17:02 ispc su[1707421]: + ??? root:root Dec 16 02:17:02 ispc su[1707421]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:02 ispc CRON[1707409]: pam_unix(cron:session): session closed for user root Dec 16 02:17:18 ispc su[1707421]: pam_unix(su:session): session closed for user root Dec 16 02:17:18 ispc su[1707435]: Successful su for root by root Dec 16 02:17:18 ispc su[1707435]: + ??? root:root Dec 16 02:17:18 ispc su[1707435]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:18 ispc su[1707435]: pam_unix(su:session): session closed for user root Dec 16 02:17:18 ispc su[1707438]: Successful su for root by root Dec 16 02:17:18 ispc su[1707438]: + ??? root:root Dec 16 02:17:18 ispc su[1707438]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:20 ispc su[1707438]: pam_unix(su:session): session closed for user root Dec 16 02:17:20 ispc su[1707444]: Successful su for root by root Dec 16 02:17:20 ispc su[1707444]: + ??? root:root Dec 16 02:17:20 ispc su[1707444]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:20 ispc su[1707444]: pam_unix(su:session): session closed for user root Dec 16 02:17:20 ispc su[1707447]: Successful su for root by root Dec 16 02:17:20 ispc su[1707447]: + ??? root:root Dec 16 02:17:20 ispc su[1707447]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:22 ispc su[1707447]: pam_unix(su:session): session closed for user root Dec 16 02:17:22 ispc su[1707457]: Successful su for root by root Dec 16 02:17:22 ispc su[1707457]: + ??? root:root Dec 16 02:17:22 ispc su[1707457]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:22 ispc su[1707457]: pam_unix(su:session): session closed for user root Dec 16 02:17:22 ispc su[1707460]: Successful su for root by root Dec 16 02:17:22 ispc su[1707460]: + ??? root:root Dec 16 02:17:22 ispc su[1707460]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:23 ispc su[1707460]: pam_unix(su:session): session closed for user root Dec 16 02:17:23 ispc su[1707466]: Successful su for root by root Dec 16 02:17:23 ispc su[1707466]: + ??? root:root Dec 16 02:17:23 ispc su[1707466]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:23 ispc su[1707466]: pam_unix(su:session): session closed for user root Dec 16 02:17:23 ispc su[1707469]: Successful su for root by root Dec 16 02:17:23 ispc su[1707469]: + ??? root:root Dec 16 02:17:23 ispc su[1707469]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:27 ispc su[1707469]: pam_unix(su:session): session closed for user root Dec 16 02:17:27 ispc su[1707475]: Successful su for root by root Dec 16 02:17:27 ispc su[1707475]: + ??? root:root Dec 16 02:17:27 ispc su[1707475]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:27 ispc su[1707475]: pam_unix(su:session): session closed for user root Dec 16 02:17:27 ispc su[1707478]: Successful su for root by root Dec 16 02:17:27 ispc su[1707478]: + ??? root:root Dec 16 02:17:27 ispc su[1707478]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:28 ispc su[1707478]: pam_unix(su:session): session closed for user root Dec 16 02:17:28 ispc su[1707484]: Successful su for root by root Dec 16 02:17:28 ispc su[1707484]: + ??? root:root Dec 16 02:17:28 ispc su[1707484]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:28 ispc su[1707484]: pam_unix(su:session): session closed for user root Dec 16 02:17:28 ispc su[1707487]: Successful su for root by root Dec 16 02:17:28 ispc su[1707487]: + ??? root:root Dec 16 02:17:28 ispc su[1707487]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:29 ispc saslauthd[1707491]: pam_mysql - SELECT returned no result. Dec 16 02:17:29 ispc saslauthd[1707491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:17:29 ispc saslauthd[1707491]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:17:29 ispc su[1707487]: pam_unix(su:session): session closed for user root Dec 16 02:17:29 ispc su[1707494]: Successful su for root by root Dec 16 02:17:29 ispc su[1707494]: + ??? root:root Dec 16 02:17:29 ispc su[1707494]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:29 ispc su[1707494]: pam_unix(su:session): session closed for user root Dec 16 02:17:29 ispc su[1707497]: Successful su for root by root Dec 16 02:17:29 ispc su[1707497]: + ??? root:root Dec 16 02:17:29 ispc su[1707497]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:32 ispc su[1707497]: pam_unix(su:session): session closed for user root Dec 16 02:17:32 ispc su[1707507]: Successful su for root by root Dec 16 02:17:32 ispc su[1707507]: + ??? root:root Dec 16 02:17:32 ispc su[1707507]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:32 ispc su[1707507]: pam_unix(su:session): session closed for user root Dec 16 02:17:32 ispc su[1707510]: Successful su for root by root Dec 16 02:17:32 ispc su[1707510]: + ??? root:root Dec 16 02:17:32 ispc su[1707510]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:32 ispc su[1707510]: pam_unix(su:session): session closed for user root Dec 16 02:17:32 ispc su[1707516]: Successful su for root by root Dec 16 02:17:32 ispc su[1707516]: + ??? root:root Dec 16 02:17:32 ispc su[1707516]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:17:33 ispc su[1707516]: pam_unix(su:session): session closed for user root Dec 16 02:17:33 ispc su[1707519]: Successful su for root by root Dec 16 02:17:33 ispc su[1707519]: + ??? root:root Dec 16 02:17:33 ispc su[1707519]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:01 ispc CRON[1707543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:18:02 ispc CRON[1707543]: pam_unix(cron:session): session closed for user root Dec 16 02:18:02 ispc sshd[1707541]: Invalid user martof from 211.45.175.153 Dec 16 02:18:14 ispc su[1707519]: pam_unix(su:session): session closed for user root Dec 16 02:18:14 ispc su[1707564]: Successful su for root by root Dec 16 02:18:14 ispc su[1707564]: + ??? root:root Dec 16 02:18:14 ispc su[1707564]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:14 ispc su[1707564]: pam_unix(su:session): session closed for user root Dec 16 02:18:14 ispc su[1707567]: Successful su for root by root Dec 16 02:18:14 ispc su[1707567]: + ??? root:root Dec 16 02:18:15 ispc su[1707567]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:35 ispc postfix/smtpd[1707580]: sql auxprop plugin using mysql engine Dec 16 02:18:35 ispc postfix/smtpd[1707582]: sql auxprop plugin using mysql engine Dec 16 02:18:36 ispc postfix/smtpd[1707583]: sql auxprop plugin using mysql engine Dec 16 02:18:39 ispc su[1707567]: pam_unix(su:session): session closed for user root Dec 16 02:18:39 ispc su[1707586]: Successful su for root by root Dec 16 02:18:39 ispc su[1707586]: + ??? root:root Dec 16 02:18:39 ispc su[1707586]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:39 ispc su[1707586]: pam_unix(su:session): session closed for user root Dec 16 02:18:39 ispc su[1707589]: Successful su for root by root Dec 16 02:18:39 ispc su[1707589]: + ??? root:root Dec 16 02:18:39 ispc su[1707589]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:40 ispc su[1707589]: pam_unix(su:session): session closed for user root Dec 16 02:18:40 ispc su[1707595]: Successful su for root by root Dec 16 02:18:40 ispc su[1707595]: + ??? root:root Dec 16 02:18:40 ispc su[1707595]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:40 ispc su[1707595]: pam_unix(su:session): session closed for user root Dec 16 02:18:40 ispc su[1707598]: Successful su for root by root Dec 16 02:18:40 ispc su[1707598]: + ??? root:root Dec 16 02:18:40 ispc su[1707598]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:41 ispc su[1707598]: pam_unix(su:session): session closed for user root Dec 16 02:18:41 ispc su[1707604]: Successful su for root by root Dec 16 02:18:41 ispc su[1707604]: + ??? root:root Dec 16 02:18:41 ispc su[1707604]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:41 ispc su[1707604]: pam_unix(su:session): session closed for user root Dec 16 02:18:41 ispc su[1707607]: Successful su for root by root Dec 16 02:18:41 ispc su[1707607]: + ??? root:root Dec 16 02:18:41 ispc su[1707607]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:41 ispc su[1707607]: pam_unix(su:session): session closed for user root Dec 16 02:18:41 ispc su[1707613]: Successful su for root by root Dec 16 02:18:41 ispc su[1707613]: + ??? root:root Dec 16 02:18:41 ispc su[1707613]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:41 ispc su[1707613]: pam_unix(su:session): session closed for user root Dec 16 02:18:41 ispc su[1707616]: Successful su for root by root Dec 16 02:18:41 ispc su[1707616]: + ??? root:root Dec 16 02:18:41 ispc su[1707616]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:56 ispc su[1707616]: pam_unix(su:session): session closed for user root Dec 16 02:18:57 ispc su[1707630]: Successful su for root by root Dec 16 02:18:57 ispc su[1707630]: + ??? root:root Dec 16 02:18:57 ispc su[1707630]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:18:57 ispc su[1707630]: pam_unix(su:session): session closed for user root Dec 16 02:18:57 ispc su[1707633]: Successful su for root by root Dec 16 02:18:57 ispc su[1707633]: + ??? root:root Dec 16 02:18:57 ispc su[1707633]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:01 ispc su[1707633]: pam_unix(su:session): session closed for user root Dec 16 02:19:01 ispc su[1707639]: Successful su for root by root Dec 16 02:19:01 ispc su[1707639]: + ??? root:root Dec 16 02:19:01 ispc su[1707639]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:01 ispc su[1707639]: pam_unix(su:session): session closed for user root Dec 16 02:19:01 ispc su[1707642]: Successful su for root by root Dec 16 02:19:01 ispc su[1707642]: + ??? root:root Dec 16 02:19:01 ispc su[1707642]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:01 ispc CRON[1707646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:19:02 ispc su[1707642]: pam_unix(su:session): session closed for user root Dec 16 02:19:02 ispc su[1707655]: Successful su for root by root Dec 16 02:19:02 ispc su[1707655]: + ??? root:root Dec 16 02:19:02 ispc su[1707655]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:02 ispc su[1707655]: pam_unix(su:session): session closed for user root Dec 16 02:19:02 ispc su[1707662]: Successful su for root by root Dec 16 02:19:02 ispc su[1707662]: + ??? root:root Dec 16 02:19:02 ispc su[1707662]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:02 ispc CRON[1707646]: pam_unix(cron:session): session closed for user root Dec 16 02:19:03 ispc su[1707662]: pam_unix(su:session): session closed for user root Dec 16 02:19:03 ispc su[1707668]: Successful su for root by root Dec 16 02:19:03 ispc su[1707668]: + ??? root:root Dec 16 02:19:03 ispc su[1707668]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:03 ispc su[1707668]: pam_unix(su:session): session closed for user root Dec 16 02:19:03 ispc su[1707671]: Successful su for root by root Dec 16 02:19:03 ispc su[1707671]: + ??? root:root Dec 16 02:19:03 ispc su[1707671]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:04 ispc su[1707671]: pam_unix(su:session): session closed for user root Dec 16 02:19:04 ispc su[1707682]: Successful su for root by root Dec 16 02:19:04 ispc su[1707682]: + ??? root:root Dec 16 02:19:04 ispc su[1707682]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:04 ispc su[1707682]: pam_unix(su:session): session closed for user root Dec 16 02:19:04 ispc su[1707685]: Successful su for root by root Dec 16 02:19:04 ispc su[1707685]: + ??? root:root Dec 16 02:19:04 ispc su[1707685]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:08 ispc su[1707685]: pam_unix(su:session): session closed for user root Dec 16 02:19:08 ispc su[1707692]: Successful su for root by root Dec 16 02:19:08 ispc su[1707692]: + ??? root:root Dec 16 02:19:08 ispc su[1707692]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:08 ispc su[1707692]: pam_unix(su:session): session closed for user root Dec 16 02:19:08 ispc su[1707695]: Successful su for root by root Dec 16 02:19:08 ispc su[1707695]: + ??? root:root Dec 16 02:19:08 ispc su[1707695]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:08 ispc su[1707695]: pam_unix(su:session): session closed for user root Dec 16 02:19:08 ispc su[1707701]: Successful su for root by root Dec 16 02:19:08 ispc su[1707701]: + ??? root:root Dec 16 02:19:08 ispc su[1707701]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:08 ispc su[1707701]: pam_unix(su:session): session closed for user root Dec 16 02:19:08 ispc su[1707704]: Successful su for root by root Dec 16 02:19:08 ispc su[1707704]: + ??? root:root Dec 16 02:19:08 ispc su[1707704]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:15 ispc su[1707704]: pam_unix(su:session): session closed for user root Dec 16 02:19:15 ispc su[1707714]: Successful su for root by root Dec 16 02:19:15 ispc su[1707714]: + ??? root:root Dec 16 02:19:15 ispc su[1707714]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:15 ispc su[1707714]: pam_unix(su:session): session closed for user root Dec 16 02:19:15 ispc su[1707717]: Successful su for root by root Dec 16 02:19:15 ispc su[1707717]: + ??? root:root Dec 16 02:19:15 ispc su[1707717]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:23 ispc su[1707717]: pam_unix(su:session): session closed for user root Dec 16 02:19:23 ispc su[1707723]: Successful su for root by root Dec 16 02:19:23 ispc su[1707723]: + ??? root:root Dec 16 02:19:23 ispc su[1707723]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:23 ispc su[1707723]: pam_unix(su:session): session closed for user root Dec 16 02:19:23 ispc su[1707726]: Successful su for root by root Dec 16 02:19:23 ispc su[1707726]: + ??? root:root Dec 16 02:19:23 ispc su[1707726]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:41 ispc su[1707726]: pam_unix(su:session): session closed for user root Dec 16 02:19:41 ispc su[1707740]: Successful su for root by root Dec 16 02:19:41 ispc su[1707740]: + ??? root:root Dec 16 02:19:41 ispc su[1707740]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:41 ispc su[1707740]: pam_unix(su:session): session closed for user root Dec 16 02:19:41 ispc su[1707743]: Successful su for root by root Dec 16 02:19:41 ispc su[1707743]: + ??? root:root Dec 16 02:19:41 ispc su[1707743]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:43 ispc su[1707743]: pam_unix(su:session): session closed for user root Dec 16 02:19:44 ispc su[1707749]: Successful su for root by root Dec 16 02:19:44 ispc su[1707749]: + ??? root:root Dec 16 02:19:44 ispc su[1707749]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:44 ispc su[1707749]: pam_unix(su:session): session closed for user root Dec 16 02:19:44 ispc su[1707752]: Successful su for root by root Dec 16 02:19:44 ispc su[1707752]: + ??? root:root Dec 16 02:19:44 ispc su[1707752]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707752]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707762]: Successful su for root by root Dec 16 02:19:49 ispc su[1707762]: + ??? root:root Dec 16 02:19:49 ispc su[1707762]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707762]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707765]: Successful su for root by root Dec 16 02:19:49 ispc su[1707765]: + ??? root:root Dec 16 02:19:49 ispc su[1707765]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707765]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707771]: Successful su for root by root Dec 16 02:19:49 ispc su[1707771]: + ??? root:root Dec 16 02:19:49 ispc su[1707771]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707771]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707774]: Successful su for root by root Dec 16 02:19:49 ispc su[1707774]: + ??? root:root Dec 16 02:19:49 ispc su[1707774]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707774]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707780]: Successful su for root by root Dec 16 02:19:49 ispc su[1707780]: + ??? root:root Dec 16 02:19:49 ispc su[1707780]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707780]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707783]: Successful su for root by root Dec 16 02:19:49 ispc su[1707783]: + ??? root:root Dec 16 02:19:49 ispc su[1707783]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:49 ispc su[1707783]: pam_unix(su:session): session closed for user root Dec 16 02:19:49 ispc su[1707789]: Successful su for root by root Dec 16 02:19:49 ispc su[1707789]: + ??? root:root Dec 16 02:19:49 ispc su[1707789]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:19:50 ispc su[1707789]: pam_unix(su:session): session closed for user root Dec 16 02:19:50 ispc su[1707792]: Successful su for root by root Dec 16 02:19:50 ispc su[1707792]: + ??? root:root Dec 16 02:19:50 ispc su[1707792]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:02 ispc CRON[1707801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:20:02 ispc CRON[1707802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:20:02 ispc CRON[1707803]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:20:02 ispc CRON[1707804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:20:02 ispc CRON[1707805]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:20:02 ispc CRON[1707802]: pam_unix(cron:session): session closed for user root Dec 16 02:20:02 ispc CRON[1707803]: pam_unix(cron:session): session closed for user www-data Dec 16 02:20:02 ispc CRON[1707805]: pam_unix(cron:session): session closed for user getmail Dec 16 02:20:02 ispc CRON[1707804]: pam_unix(cron:session): session closed for user root Dec 16 02:20:03 ispc CRON[1707801]: pam_unix(cron:session): session closed for user root Dec 16 02:20:05 ispc su[1707792]: pam_unix(su:session): session closed for user root Dec 16 02:20:05 ispc su[1707881]: Successful su for root by root Dec 16 02:20:05 ispc su[1707881]: + ??? root:root Dec 16 02:20:05 ispc su[1707881]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:05 ispc su[1707881]: pam_unix(su:session): session closed for user root Dec 16 02:20:05 ispc su[1707884]: Successful su for root by root Dec 16 02:20:05 ispc su[1707884]: + ??? root:root Dec 16 02:20:05 ispc su[1707884]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:05 ispc su[1707884]: pam_unix(su:session): session closed for user root Dec 16 02:20:05 ispc su[1707890]: Successful su for root by root Dec 16 02:20:05 ispc su[1707890]: + ??? root:root Dec 16 02:20:05 ispc su[1707890]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:05 ispc su[1707890]: pam_unix(su:session): session closed for user root Dec 16 02:20:05 ispc su[1707897]: Successful su for root by root Dec 16 02:20:05 ispc su[1707897]: + ??? root:root Dec 16 02:20:05 ispc su[1707897]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:08 ispc postfix/smtpd[1707901]: sql auxprop plugin using mysql engine Dec 16 02:20:09 ispc su[1707897]: pam_unix(su:session): session closed for user root Dec 16 02:20:09 ispc su[1707905]: Successful su for root by root Dec 16 02:20:09 ispc su[1707905]: + ??? root:root Dec 16 02:20:09 ispc su[1707905]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:09 ispc su[1707905]: pam_unix(su:session): session closed for user root Dec 16 02:20:09 ispc su[1707908]: Successful su for root by root Dec 16 02:20:09 ispc su[1707908]: + ??? root:root Dec 16 02:20:09 ispc su[1707908]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:10 ispc su[1707908]: pam_unix(su:session): session closed for user root Dec 16 02:20:10 ispc su[1707914]: Successful su for root by root Dec 16 02:20:10 ispc su[1707914]: + ??? root:root Dec 16 02:20:10 ispc su[1707914]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:10 ispc su[1707914]: pam_unix(su:session): session closed for user root Dec 16 02:20:10 ispc su[1707917]: Successful su for root by root Dec 16 02:20:10 ispc su[1707917]: + ??? root:root Dec 16 02:20:10 ispc su[1707917]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:17 ispc su[1707917]: pam_unix(su:session): session closed for user root Dec 16 02:20:17 ispc su[1707927]: Successful su for root by root Dec 16 02:20:17 ispc su[1707927]: + ??? root:root Dec 16 02:20:17 ispc su[1707927]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:18 ispc su[1707927]: pam_unix(su:session): session closed for user root Dec 16 02:20:18 ispc su[1707930]: Successful su for root by root Dec 16 02:20:18 ispc su[1707930]: + ??? root:root Dec 16 02:20:18 ispc su[1707930]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:25 ispc su[1707930]: pam_unix(su:session): session closed for user root Dec 16 02:20:25 ispc su[1707938]: Successful su for root by root Dec 16 02:20:25 ispc su[1707938]: + ??? root:root Dec 16 02:20:25 ispc su[1707938]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:25 ispc su[1707938]: pam_unix(su:session): session closed for user root Dec 16 02:20:25 ispc su[1707941]: Successful su for root by root Dec 16 02:20:25 ispc su[1707941]: + ??? root:root Dec 16 02:20:25 ispc su[1707941]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:31 ispc su[1707941]: pam_unix(su:session): session closed for user root Dec 16 02:20:32 ispc sshd[1707949]: Invalid user matlbula from 110.32.34.138 Dec 16 02:20:33 ispc su[1708038]: Successful su for root by root Dec 16 02:20:33 ispc su[1708038]: + ??? root:root Dec 16 02:20:33 ispc su[1708038]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:20:41 ispc su[1708038]: pam_unix(su:session): session closed for user root Dec 16 02:20:41 ispc su[1708045]: Successful su for root by root Dec 16 02:20:41 ispc su[1708045]: + ??? root:root Dec 16 02:20:41 ispc su[1708045]: pam_unix(su:session): session opened for user root by (uid=0) Dec 16 02:21:01 ispc CRON[1708055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:21:01 ispc CRON[1708056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:21:01 ispc CRON[1708055]: pam_unix(cron:session): session closed for user root Dec 16 02:21:02 ispc CRON[1708056]: pam_unix(cron:session): session closed for user root Dec 16 02:21:55 ispc postfix/smtpd[1708090]: sql auxprop plugin using mysql engine Dec 16 02:21:59 ispc sshd[1708092]: Invalid user admin from 221.151.181.65 Dec 16 02:22:00 ispc saslauthd[1708098]: pam_mysql - SELECT returned no result. Dec 16 02:22:00 ispc saslauthd[1708098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:22:00 ispc saslauthd[1708098]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:22:01 ispc CRON[1708099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:22:02 ispc CRON[1708099]: pam_unix(cron:session): session closed for user root Dec 16 02:22:09 ispc saslauthd[1708114]: pam_mysql - SELECT returned no result. Dec 16 02:22:09 ispc saslauthd[1708114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:22:09 ispc saslauthd[1708114]: do_auth : auth failure: [user=printer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:22:40 ispc saslauthd[1708129]: pam_mysql - SELECT returned no result. Dec 16 02:22:40 ispc saslauthd[1708129]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:22:40 ispc saslauthd[1708129]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:23:01 ispc CRON[1708148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:23:01 ispc saslauthd[1708155]: pam_mysql - SELECT returned no result. Dec 16 02:23:01 ispc saslauthd[1708155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:23:01 ispc saslauthd[1708155]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:23:02 ispc sshd[1708146]: Invalid user capstan from 43.163.105.233 Dec 16 02:23:02 ispc CRON[1708148]: pam_unix(cron:session): session closed for user root Dec 16 02:23:14 ispc sshd[1708164]: Invalid user blceu from 110.32.34.138 Dec 16 02:24:01 ispc CRON[1708183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:24:02 ispc CRON[1708183]: pam_unix(cron:session): session closed for user root Dec 16 02:24:53 ispc sshd[1708220]: Invalid user pronajemplosin from 165.232.190.97 Dec 16 02:25:01 ispc CRON[1708226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:25:01 ispc CRON[1708227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:25:01 ispc CRON[1708228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:25:01 ispc CRON[1708229]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:25:01 ispc CRON[1708227]: pam_unix(cron:session): session closed for user root Dec 16 02:25:01 ispc CRON[1708229]: pam_unix(cron:session): session closed for user getmail Dec 16 02:25:02 ispc CRON[1708228]: pam_unix(cron:session): session closed for user root Dec 16 02:25:03 ispc CRON[1708226]: pam_unix(cron:session): session closed for user root Dec 16 02:25:28 ispc postfix/smtpd[1708315]: sql auxprop plugin using mysql engine Dec 16 02:25:28 ispc postfix/smtpd[1708318]: sql auxprop plugin using mysql engine Dec 16 02:25:29 ispc postfix/smtpd[1708319]: sql auxprop plugin using mysql engine Dec 16 02:26:01 ispc CRON[1708333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:26:02 ispc CRON[1708333]: pam_unix(cron:session): session closed for user root Dec 16 02:26:21 ispc postfix/smtpd[1708352]: sql auxprop plugin using mysql engine Dec 16 02:26:22 ispc postfix/smtpd[1708354]: sql auxprop plugin using mysql engine Dec 16 02:26:25 ispc CRON[1706352]: pam_unix(cron:session): session closed for user root Dec 16 02:26:43 ispc saslauthd[1708360]: pam_mysql - SELECT returned no result. Dec 16 02:26:43 ispc saslauthd[1708360]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:26:43 ispc saslauthd[1708360]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:27:01 ispc CRON[1708363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:27:01 ispc CRON[1708363]: pam_unix(cron:session): session closed for user root Dec 16 02:27:47 ispc sshd[1708380]: Invalid user martof from 119.205.233.162 Dec 16 02:27:53 ispc sshd[1708382]: Invalid user blceu from 51.79.36.60 Dec 16 02:28:02 ispc CRON[1708389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:28:02 ispc CRON[1708389]: pam_unix(cron:session): session closed for user root Dec 16 02:28:19 ispc saslauthd[1708402]: pam_mysql - SELECT returned no result. Dec 16 02:28:19 ispc saslauthd[1708402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:28:19 ispc saslauthd[1708402]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:28:25 ispc saslauthd[1708405]: pam_mysql - SELECT returned no result. Dec 16 02:28:25 ispc saslauthd[1708405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:28:25 ispc saslauthd[1708405]: do_auth : auth failure: [user=sales@racing-kennel.com] [service=smtp] [realm=racing-kennel.com] [mech=pam] [reason=PAM auth error] Dec 16 02:28:26 ispc sshd[1708403]: Invalid user capstan from 125.130.113.204 Dec 16 02:29:01 ispc CRON[1708406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:29:03 ispc CRON[1708406]: pam_unix(cron:session): session closed for user root Dec 16 02:29:36 ispc sshd[1708418]: Invalid user pronajemplosin from 5.132.127.172 Dec 16 02:30:01 ispc CRON[1708421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:30:01 ispc CRON[1708423]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:30:01 ispc CRON[1708424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:30:01 ispc CRON[1708425]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:30:01 ispc CRON[1708422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:30:01 ispc CRON[1708422]: pam_unix(cron:session): session closed for user root Dec 16 02:30:01 ispc CRON[1708423]: pam_unix(cron:session): session closed for user www-data Dec 16 02:30:01 ispc CRON[1708425]: pam_unix(cron:session): session closed for user getmail Dec 16 02:30:02 ispc CRON[1708421]: pam_unix(cron:session): session closed for user root Dec 16 02:30:56 ispc CRON[1708424]: pam_unix(cron:session): session closed for user root Dec 16 02:31:01 ispc CRON[1708609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:31:13 ispc saslauthd[1708625]: pam_mysql - SELECT returned no result. Dec 16 02:31:13 ispc saslauthd[1708625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:31:13 ispc saslauthd[1708625]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:31:22 ispc saslauthd[1708630]: pam_mysql - SELECT returned no result. Dec 16 02:31:22 ispc saslauthd[1708630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:31:22 ispc saslauthd[1708630]: do_auth : auth failure: [user=backuponly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:31:28 ispc saslauthd[1708632]: pam_mysql - SELECT returned no result. Dec 16 02:31:28 ispc saslauthd[1708632]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:31:28 ispc saslauthd[1708632]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:32:01 ispc CRON[1708646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:32:02 ispc CRON[1708646]: pam_unix(cron:session): session closed for user root Dec 16 02:33:01 ispc CRON[1708690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:33:02 ispc CRON[1708690]: pam_unix(cron:session): session closed for user root Dec 16 02:33:41 ispc sshd[1708717]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 02:34:01 ispc CRON[1708728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:34:02 ispc CRON[1708728]: pam_unix(cron:session): session closed for user root Dec 16 02:34:52 ispc postfix/smtpd[1708761]: sql auxprop plugin using mysql engine Dec 16 02:34:52 ispc postfix/smtpd[1708763]: sql auxprop plugin using mysql engine Dec 16 02:34:53 ispc postfix/smtpd[1708765]: sql auxprop plugin using mysql engine Dec 16 02:34:53 ispc postfix/smtpd[1708766]: sql auxprop plugin using mysql engine Dec 16 02:35:00 ispc saslauthd[1708771]: pam_mysql - SELECT returned no result. Dec 16 02:35:00 ispc saslauthd[1708771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:35:00 ispc saslauthd[1708771]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:35:01 ispc CRON[1708772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:35:01 ispc CRON[1708773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:35:01 ispc CRON[1708774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:35:01 ispc CRON[1708775]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:35:01 ispc CRON[1708773]: pam_unix(cron:session): session closed for user root Dec 16 02:35:01 ispc CRON[1708775]: pam_unix(cron:session): session closed for user getmail Dec 16 02:35:02 ispc CRON[1708774]: pam_unix(cron:session): session closed for user root Dec 16 02:35:02 ispc CRON[1708772]: pam_unix(cron:session): session closed for user root Dec 16 02:35:17 ispc sshd[1708853]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:35:30 ispc saslauthd[1708863]: pam_mysql - SELECT returned no result. Dec 16 02:35:30 ispc saslauthd[1708863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:35:30 ispc saslauthd[1708863]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:36:01 ispc CRON[1708876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:36:03 ispc saslauthd[1708884]: pam_mysql - SELECT returned no result. Dec 16 02:36:03 ispc saslauthd[1708884]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:36:03 ispc saslauthd[1708884]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:36:03 ispc CRON[1708876]: pam_unix(cron:session): session closed for user root Dec 16 02:36:13 ispc sshd[1708894]: Invalid user capstan from 125.130.113.204 Dec 16 02:36:32 ispc sshd[1708904]: Invalid user capstan from 125.130.113.204 Dec 16 02:36:37 ispc postfix/smtpd[1708918]: sql auxprop plugin using mysql engine Dec 16 02:37:01 ispc CRON[1708934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:37:02 ispc CRON[1708934]: pam_unix(cron:session): session closed for user root Dec 16 02:37:37 ispc saslauthd[1708960]: pam_mysql - SELECT returned no result. Dec 16 02:37:37 ispc saslauthd[1708960]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:37:37 ispc saslauthd[1708960]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:37:40 ispc postfix/smtpd[1708965]: sql auxprop plugin using mysql engine Dec 16 02:37:40 ispc postfix/smtpd[1708967]: sql auxprop plugin using mysql engine Dec 16 02:37:50 ispc saslauthd[1708975]: pam_mysql - SELECT returned no result. Dec 16 02:37:50 ispc saslauthd[1708975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:37:50 ispc saslauthd[1708975]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:38:00 ispc saslauthd[1708984]: pam_mysql - SELECT returned no result. Dec 16 02:38:00 ispc saslauthd[1708984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:38:00 ispc saslauthd[1708984]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:38:01 ispc CRON[1708985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:38:01 ispc CRON[1708985]: pam_unix(cron:session): session closed for user root Dec 16 02:38:07 ispc saslauthd[1708996]: pam_mysql - SELECT returned no result. Dec 16 02:38:07 ispc saslauthd[1708996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:38:07 ispc saslauthd[1708996]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:39:01 ispc CRON[1709023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:39:01 ispc CRON[1709024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:39:01 ispc CRON[1709023]: pam_unix(cron:session): session closed for user root Dec 16 02:39:02 ispc CRON[1709024]: pam_unix(cron:session): session closed for user root Dec 16 02:39:05 ispc saslauthd[1709045]: pam_mysql - SELECT returned no result. Dec 16 02:39:05 ispc saslauthd[1709045]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:39:05 ispc saslauthd[1709045]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:39:09 ispc saslauthd[1709050]: pam_mysql - SELECT returned no result. Dec 16 02:39:09 ispc saslauthd[1709050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:39:09 ispc saslauthd[1709050]: do_auth : auth failure: [user=info@zamestnanievzdravotnictve.sk] [service=smtp] [realm=zamestnanievzdravotnictve.sk] [mech=pam] [reason=PAM auth error] Dec 16 02:39:13 ispc saslauthd[1709051]: pam_mysql - SELECT returned no result. Dec 16 02:39:13 ispc saslauthd[1709051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:39:13 ispc saslauthd[1709051]: do_auth : auth failure: [user=reception] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:39:31 ispc saslauthd[1709060]: pam_mysql - SELECT returned no result. Dec 16 02:39:31 ispc saslauthd[1709060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:39:31 ispc saslauthd[1709060]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:39:46 ispc saslauthd[1709065]: pam_mysql - SELECT returned no result. Dec 16 02:39:46 ispc saslauthd[1709065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:39:46 ispc saslauthd[1709065]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:40:01 ispc CRON[1709074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:40:01 ispc CRON[1709075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:40:01 ispc CRON[1709076]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:40:01 ispc CRON[1709077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:40:01 ispc CRON[1709078]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:40:01 ispc CRON[1709076]: pam_unix(cron:session): session closed for user www-data Dec 16 02:40:01 ispc CRON[1709075]: pam_unix(cron:session): session closed for user root Dec 16 02:40:01 ispc CRON[1709078]: pam_unix(cron:session): session closed for user getmail Dec 16 02:40:02 ispc CRON[1709077]: pam_unix(cron:session): session closed for user root Dec 16 02:40:02 ispc CRON[1709074]: pam_unix(cron:session): session closed for user root Dec 16 02:40:32 ispc postfix/smtpd[1709165]: sql auxprop plugin using mysql engine Dec 16 02:41:01 ispc CRON[1709179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:41:02 ispc CRON[1709179]: pam_unix(cron:session): session closed for user root Dec 16 02:41:19 ispc sshd[1709194]: Invalid user diamantdi from 110.32.34.138 Dec 16 02:42:01 ispc CRON[1709213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:42:02 ispc CRON[1709213]: pam_unix(cron:session): session closed for user root Dec 16 02:43:01 ispc CRON[1709261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:43:02 ispc CRON[1709261]: pam_unix(cron:session): session closed for user root Dec 16 02:43:55 ispc postfix/smtpd[1709303]: sql auxprop plugin using mysql engine Dec 16 02:43:57 ispc saslauthd[1709307]: pam_mysql - SELECT returned no result. Dec 16 02:43:57 ispc saslauthd[1709307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:43:57 ispc saslauthd[1709307]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:44:01 ispc CRON[1709311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:44:02 ispc CRON[1709311]: pam_unix(cron:session): session closed for user root Dec 16 02:44:14 ispc sshd[1709326]: Invalid user pronajemplosin from 112.217.233.242 Dec 16 02:44:55 ispc postfix/smtpd[1709344]: sql auxprop plugin using mysql engine Dec 16 02:45:01 ispc CRON[1709350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:45:01 ispc CRON[1709351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:45:01 ispc CRON[1709352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:45:01 ispc CRON[1709353]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:45:01 ispc CRON[1709351]: pam_unix(cron:session): session closed for user root Dec 16 02:45:01 ispc CRON[1709353]: pam_unix(cron:session): session closed for user getmail Dec 16 02:45:02 ispc CRON[1709352]: pam_unix(cron:session): session closed for user root Dec 16 02:45:04 ispc CRON[1709350]: pam_unix(cron:session): session closed for user root Dec 16 02:45:31 ispc saslauthd[1709439]: pam_mysql - SELECT returned no result. Dec 16 02:45:31 ispc saslauthd[1709439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:45:31 ispc saslauthd[1709439]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:46:01 ispc CRON[1709448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:46:01 ispc CRON[1709448]: pam_unix(cron:session): session closed for user root Dec 16 02:46:26 ispc saslauthd[1709472]: pam_mysql - SELECT returned no result. Dec 16 02:46:26 ispc saslauthd[1709472]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:46:26 ispc saslauthd[1709472]: do_auth : auth failure: [user=backuprestore] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:01 ispc CRON[1709494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:47:03 ispc CRON[1709494]: pam_unix(cron:session): session closed for user root Dec 16 02:47:12 ispc postfix/smtpd[1709512]: sql auxprop plugin using mysql engine Dec 16 02:47:12 ispc saslauthd[1709514]: pam_mysql - SELECT returned no result. Dec 16 02:47:12 ispc saslauthd[1709514]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:12 ispc saslauthd[1709514]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:12 ispc saslauthd[1709516]: pam_mysql - SELECT returned no result. Dec 16 02:47:12 ispc saslauthd[1709516]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:12 ispc saslauthd[1709516]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:13 ispc postfix/smtpd[1709515]: sql auxprop plugin using mysql engine Dec 16 02:47:13 ispc saslauthd[1709517]: pam_mysql - SELECT returned no result. Dec 16 02:47:13 ispc saslauthd[1709517]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:13 ispc saslauthd[1709517]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:14 ispc saslauthd[1709522]: pam_mysql - SELECT returned no result. Dec 16 02:47:14 ispc saslauthd[1709522]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:14 ispc saslauthd[1709522]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:15 ispc saslauthd[1709523]: pam_mysql - SELECT returned no result. Dec 16 02:47:15 ispc saslauthd[1709523]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:15 ispc saslauthd[1709523]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:16 ispc saslauthd[1709524]: pam_mysql - SELECT returned no result. Dec 16 02:47:16 ispc saslauthd[1709524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:16 ispc saslauthd[1709524]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:17 ispc saslauthd[1709525]: pam_mysql - SELECT returned no result. Dec 16 02:47:17 ispc saslauthd[1709525]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:17 ispc saslauthd[1709525]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:18 ispc saslauthd[1709526]: pam_mysql - SELECT returned no result. Dec 16 02:47:18 ispc saslauthd[1709526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:18 ispc saslauthd[1709526]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:30 ispc saslauthd[1709531]: pam_mysql - SELECT returned no result. Dec 16 02:47:30 ispc saslauthd[1709531]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:30 ispc saslauthd[1709531]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:47:52 ispc saslauthd[1709544]: pam_mysql - SELECT returned no result. Dec 16 02:47:52 ispc saslauthd[1709544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:47:52 ispc saslauthd[1709544]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:48:01 ispc CRON[1709553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:48:02 ispc CRON[1709553]: pam_unix(cron:session): session closed for user root Dec 16 02:48:07 ispc saslauthd[1709568]: pam_mysql - SELECT returned no result. Dec 16 02:48:07 ispc saslauthd[1709568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:48:07 ispc saslauthd[1709568]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:48:36 ispc saslauthd[1709577]: pam_mysql - SELECT returned no result. Dec 16 02:48:36 ispc saslauthd[1709577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:48:36 ispc saslauthd[1709577]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:49:01 ispc CRON[1709591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:49:01 ispc CRON[1709591]: pam_unix(cron:session): session closed for user root Dec 16 02:50:01 ispc CRON[1709628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:50:01 ispc CRON[1709629]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 02:50:01 ispc CRON[1709630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:50:01 ispc CRON[1709631]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:50:01 ispc CRON[1709627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:50:01 ispc CRON[1709628]: pam_unix(cron:session): session closed for user root Dec 16 02:50:01 ispc CRON[1709629]: pam_unix(cron:session): session closed for user www-data Dec 16 02:50:01 ispc CRON[1709631]: pam_unix(cron:session): session closed for user getmail Dec 16 02:50:02 ispc CRON[1709630]: pam_unix(cron:session): session closed for user root Dec 16 02:50:02 ispc CRON[1709627]: pam_unix(cron:session): session closed for user root Dec 16 02:51:01 ispc CRON[1709729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:51:01 ispc CRON[1709729]: pam_unix(cron:session): session closed for user root Dec 16 02:51:23 ispc postfix/smtpd[1709754]: sql auxprop plugin using mysql engine Dec 16 02:51:23 ispc postfix/smtpd[1709757]: sql auxprop plugin using mysql engine Dec 16 02:51:23 ispc postfix/smtpd[1709758]: sql auxprop plugin using mysql engine Dec 16 02:51:29 ispc postfix/smtpd[1709762]: sql auxprop plugin using mysql engine Dec 16 02:51:29 ispc CRON[1708609]: pam_unix(cron:session): session closed for user root Dec 16 02:52:01 ispc CRON[1709766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:52:01 ispc CRON[1709766]: pam_unix(cron:session): session closed for user root Dec 16 02:52:38 ispc saslauthd[1709779]: pam_mysql - SELECT returned no result. Dec 16 02:52:38 ispc saslauthd[1709779]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:52:38 ispc saslauthd[1709779]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:53:01 ispc CRON[1709789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:53:02 ispc CRON[1709789]: pam_unix(cron:session): session closed for user root Dec 16 02:53:04 ispc saslauthd[1709802]: pam_mysql - SELECT returned no result. Dec 16 02:53:04 ispc saslauthd[1709802]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:53:04 ispc saslauthd[1709802]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:53:08 ispc saslauthd[1709803]: pam_mysql - SELECT returned no result. Dec 16 02:53:08 ispc saslauthd[1709803]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:53:08 ispc saslauthd[1709803]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:53:08 ispc sshd[1709801]: Did not receive identification string from 103.100.209.172 Dec 16 02:53:12 ispc sshd[1709804]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:53:27 ispc sshd[1709806]: Invalid user martof from 175.125.92.77 Dec 16 02:54:01 ispc CRON[1709808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:54:02 ispc CRON[1709808]: pam_unix(cron:session): session closed for user root Dec 16 02:54:29 ispc postfix/smtpd[1709821]: sql auxprop plugin using mysql engine Dec 16 02:55:01 ispc CRON[1709825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:55:01 ispc CRON[1709826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:55:01 ispc CRON[1709827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:55:01 ispc CRON[1709828]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 02:55:01 ispc CRON[1709826]: pam_unix(cron:session): session closed for user root Dec 16 02:55:01 ispc CRON[1709828]: pam_unix(cron:session): session closed for user getmail Dec 16 02:55:03 ispc CRON[1709825]: pam_unix(cron:session): session closed for user root Dec 16 02:55:09 ispc sshd[1709936]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 138.91.109.125 Dec 16 02:55:42 ispc sshd[1709939]: Invalid user blceu from 211.45.175.153 Dec 16 02:55:55 ispc CRON[1709827]: pam_unix(cron:session): session closed for user root Dec 16 02:56:01 ispc CRON[1709941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:56:37 ispc sshd[1709967]: Invalid user admin from 221.151.181.65 Dec 16 02:56:41 ispc saslauthd[1709975]: pam_mysql - SELECT returned no result. Dec 16 02:56:41 ispc saslauthd[1709975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:56:41 ispc saslauthd[1709975]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:56:51 ispc postfix/smtpd[1709981]: sql auxprop plugin using mysql engine Dec 16 02:56:52 ispc postfix/smtpd[1709983]: sql auxprop plugin using mysql engine Dec 16 02:57:00 ispc saslauthd[1709988]: pam_mysql - SELECT returned no result. Dec 16 02:57:00 ispc saslauthd[1709988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:57:00 ispc saslauthd[1709988]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 02:57:01 ispc CRON[1709989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:57:02 ispc CRON[1709989]: pam_unix(cron:session): session closed for user root Dec 16 02:57:17 ispc sshd[1710008]: Invalid user martof from 51.79.36.60 Dec 16 02:57:42 ispc sshd[1710018]: Bad protocol version identification '\026\003\001' from 64.62.156.132 Dec 16 02:57:45 ispc sshd[1710023]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:57:46 ispc sshd[1710030]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:57:46 ispc sshd[1710030]: Invalid user klape from 189.89.20.45 Dec 16 02:57:48 ispc sshd[1710032]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 02:57:48 ispc sshd[1710032]: Invalid user ubuntu from 189.89.20.45 Dec 16 02:58:01 ispc CRON[1710042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:58:01 ispc CRON[1710042]: pam_unix(cron:session): session closed for user root Dec 16 02:58:41 ispc sshd[1710071]: Invalid user martof from 211.23.78.98 Dec 16 02:58:59 ispc postfix/smtpd[1710081]: sql auxprop plugin using mysql engine Dec 16 02:59:01 ispc CRON[1710083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 02:59:02 ispc CRON[1710083]: pam_unix(cron:session): session closed for user root Dec 16 02:59:07 ispc sshd[1710094]: Invalid user matlbula from 8.133.194.64 Dec 16 02:59:18 ispc postfix/smtpd[1710106]: sql auxprop plugin using mysql engine Dec 16 02:59:19 ispc saslauthd[1710108]: pam_mysql - SELECT returned no result. Dec 16 02:59:19 ispc saslauthd[1710108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 02:59:19 ispc saslauthd[1710108]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 02:59:25 ispc sshd[1710110]: Invalid user blceu from 52.232.19.79 Dec 16 03:00:01 ispc CRON[1710130]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:00:01 ispc CRON[1710131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:00:01 ispc CRON[1710128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:00:01 ispc CRON[1710132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:00:01 ispc CRON[1710129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:00:01 ispc CRON[1710133]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:00:01 ispc CRON[1710130]: pam_unix(cron:session): session closed for user www-data Dec 16 03:00:01 ispc CRON[1710129]: pam_unix(cron:session): session closed for user root Dec 16 03:00:01 ispc CRON[1710133]: pam_unix(cron:session): session closed for user getmail Dec 16 03:00:01 ispc CRON[1710132]: pam_unix(cron:session): session closed for user root Dec 16 03:00:02 ispc CRON[1710128]: pam_unix(cron:session): session closed for user root Dec 16 03:00:02 ispc CRON[1710131]: pam_unix(cron:session): session closed for user root Dec 16 03:01:01 ispc CRON[1710311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:01:02 ispc CRON[1710311]: pam_unix(cron:session): session closed for user root Dec 16 03:01:24 ispc postfix/smtpd[1710332]: sql auxprop plugin using mysql engine Dec 16 03:01:28 ispc saslauthd[1710338]: pam_mysql - SELECT returned no result. Dec 16 03:01:28 ispc saslauthd[1710338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:01:28 ispc saslauthd[1710338]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:01:31 ispc saslauthd[1710339]: pam_mysql - SELECT returned no result. Dec 16 03:01:31 ispc saslauthd[1710339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:01:31 ispc saslauthd[1710339]: do_auth : auth failure: [user=basisk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:02:01 ispc CRON[1710353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:02:01 ispc CRON[1710352]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 03:02:01 ispc CRON[1710353]: pam_unix(cron:session): session closed for user root Dec 16 03:02:23 ispc sshd[1710601]: Invalid user blceu from 211.23.78.98 Dec 16 03:02:25 ispc sshd[1710628]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:02:25 ispc sshd[1710628]: Invalid user user from 2.57.121.25 Dec 16 03:02:45 ispc postfix/smtpd[1710997]: sql auxprop plugin using mysql engine Dec 16 03:02:45 ispc postfix/smtpd[1711000]: sql auxprop plugin using mysql engine Dec 16 03:02:45 ispc postfix/smtpd[1711004]: sql auxprop plugin using mysql engine Dec 16 03:03:01 ispc CRON[1711175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:03:01 ispc CRON[1711175]: pam_unix(cron:session): session closed for user root Dec 16 03:03:50 ispc CRON[1710352]: pam_unix(cron:session): session closed for user logcheck Dec 16 03:03:56 ispc postfix/smtpd[1711497]: sql auxprop plugin using mysql engine Dec 16 03:04:01 ispc CRON[1711504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:04:02 ispc CRON[1711504]: pam_unix(cron:session): session closed for user root Dec 16 03:05:01 ispc CRON[1711544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:05:01 ispc CRON[1711545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:05:01 ispc CRON[1711546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:05:01 ispc CRON[1711547]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:05:01 ispc CRON[1711545]: pam_unix(cron:session): session closed for user root Dec 16 03:05:01 ispc CRON[1711547]: pam_unix(cron:session): session closed for user getmail Dec 16 03:05:01 ispc CRON[1711546]: pam_unix(cron:session): session closed for user root Dec 16 03:05:02 ispc CRON[1711544]: pam_unix(cron:session): session closed for user root Dec 16 03:05:47 ispc postfix/smtpd[1711636]: sql auxprop plugin using mysql engine Dec 16 03:05:47 ispc saslauthd[1711638]: pam_mysql - SELECT returned no result. Dec 16 03:05:47 ispc saslauthd[1711638]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:05:47 ispc saslauthd[1711638]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:05:54 ispc saslauthd[1711643]: pam_mysql - SELECT returned no result. Dec 16 03:05:54 ispc saslauthd[1711643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:05:54 ispc saslauthd[1711643]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:06:01 ispc CRON[1711644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:06:02 ispc CRON[1711644]: pam_unix(cron:session): session closed for user root Dec 16 03:07:01 ispc CRON[1711682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:07:02 ispc CRON[1711682]: pam_unix(cron:session): session closed for user root Dec 16 03:07:14 ispc saslauthd[1711701]: pam_mysql - SELECT returned no result. Dec 16 03:07:14 ispc saslauthd[1711701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:07:14 ispc saslauthd[1711701]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:07:43 ispc sshd[1711712]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:07:43 ispc sshd[1711712]: Invalid user blceu from 157.245.115.125 Dec 16 03:08:01 ispc CRON[1711733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:08:02 ispc CRON[1711733]: pam_unix(cron:session): session closed for user root Dec 16 03:08:59 ispc postfix/smtpd[1711771]: sql auxprop plugin using mysql engine Dec 16 03:09:00 ispc saslauthd[1711773]: pam_mysql - SELECT returned no result. Dec 16 03:09:00 ispc saslauthd[1711773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:09:00 ispc saslauthd[1711773]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:09:01 ispc CRON[1711775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:09:01 ispc CRON[1711776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:09:01 ispc CRON[1711775]: pam_unix(cron:session): session closed for user root Dec 16 03:09:02 ispc CRON[1711776]: pam_unix(cron:session): session closed for user root Dec 16 03:09:08 ispc sshd[1711797]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:09:08 ispc sshd[1711797]: Invalid user ziplines from 103.146.203.212 Dec 16 03:09:56 ispc saslauthd[1711820]: pam_mysql - SELECT returned no result. Dec 16 03:09:56 ispc saslauthd[1711820]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:09:56 ispc saslauthd[1711820]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:10:01 ispc CRON[1711825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:10:01 ispc CRON[1711826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:10:01 ispc CRON[1711827]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:10:01 ispc CRON[1711829]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:10:01 ispc CRON[1711828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:10:01 ispc CRON[1711827]: pam_unix(cron:session): session closed for user www-data Dec 16 03:10:01 ispc CRON[1711826]: pam_unix(cron:session): session closed for user root Dec 16 03:10:02 ispc CRON[1711829]: pam_unix(cron:session): session closed for user getmail Dec 16 03:10:02 ispc CRON[1711825]: pam_unix(cron:session): session closed for user root Dec 16 03:10:03 ispc CRON[1711828]: pam_unix(cron:session): session closed for user root Dec 16 03:11:01 ispc CRON[1711938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:11:01 ispc CRON[1711938]: pam_unix(cron:session): session closed for user root Dec 16 03:11:08 ispc sshd[1711950]: Invalid user echo from 193.24.211.200 Dec 16 03:12:01 ispc CRON[1711978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:12:02 ispc CRON[1711978]: pam_unix(cron:session): session closed for user root Dec 16 03:12:24 ispc postfix/smtpd[1711997]: sql auxprop plugin using mysql engine Dec 16 03:12:25 ispc postfix/smtpd[1711999]: sql auxprop plugin using mysql engine Dec 16 03:12:25 ispc postfix/smtpd[1712000]: sql auxprop plugin using mysql engine Dec 16 03:12:26 ispc postfix/smtpd[1712001]: sql auxprop plugin using mysql engine Dec 16 03:13:01 ispc CRON[1712021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:13:02 ispc CRON[1712021]: pam_unix(cron:session): session closed for user root Dec 16 03:14:01 ispc CRON[1712056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:14:02 ispc CRON[1712056]: pam_unix(cron:session): session closed for user root Dec 16 03:14:06 ispc postfix/smtpd[1712071]: sql auxprop plugin using mysql engine Dec 16 03:14:12 ispc saslauthd[1712073]: pam_mysql - SELECT returned no result. Dec 16 03:14:12 ispc saslauthd[1712073]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:14:12 ispc saslauthd[1712073]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:14:15 ispc postfix/smtpd[1712078]: sql auxprop plugin using mysql engine Dec 16 03:14:16 ispc postfix/smtpd[1712080]: sql auxprop plugin using mysql engine Dec 16 03:14:39 ispc saslauthd[1712089]: pam_mysql - SELECT returned no result. Dec 16 03:14:39 ispc saslauthd[1712089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:14:39 ispc saslauthd[1712089]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:15:01 ispc CRON[1712099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:15:01 ispc CRON[1712100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:15:01 ispc CRON[1712101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:15:01 ispc CRON[1712102]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:15:02 ispc CRON[1712100]: pam_unix(cron:session): session closed for user root Dec 16 03:15:02 ispc CRON[1712102]: pam_unix(cron:session): session closed for user getmail Dec 16 03:15:02 ispc CRON[1712101]: pam_unix(cron:session): session closed for user root Dec 16 03:15:04 ispc CRON[1712099]: pam_unix(cron:session): session closed for user root Dec 16 03:16:01 ispc CRON[1712202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:16:02 ispc CRON[1712202]: pam_unix(cron:session): session closed for user root Dec 16 03:16:25 ispc postfix/smtpd[1712225]: sql auxprop plugin using mysql engine Dec 16 03:16:25 ispc CRON[1709941]: pam_unix(cron:session): session closed for user root Dec 16 03:16:37 ispc saslauthd[1712228]: pam_mysql - SELECT returned no result. Dec 16 03:16:37 ispc saslauthd[1712228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:16:37 ispc saslauthd[1712228]: do_auth : auth failure: [user=bbs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:16:43 ispc postfix/smtpd[1712229]: sql auxprop plugin using mysql engine Dec 16 03:17:01 ispc CRON[1712235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:17:02 ispc CRON[1712235]: pam_unix(cron:session): session closed for user root Dec 16 03:17:22 ispc saslauthd[1712247]: pam_mysql - SELECT returned no result. Dec 16 03:17:22 ispc saslauthd[1712247]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:17:22 ispc saslauthd[1712247]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:17:54 ispc su[1708045]: pam_unix(su:session): session closed for user root Dec 16 03:17:55 ispc CRON[1704731]: pam_unix(cron:session): session closed for user root Dec 16 03:17:56 ispc postfix/smtpd[1712296]: sql auxprop plugin using mysql engine Dec 16 03:18:01 ispc CRON[1712298]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 03:18:01 ispc CRON[1712299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:18:02 ispc CRON[1712299]: pam_unix(cron:session): session closed for user root Dec 16 03:18:07 ispc CRON[1712298]: pam_unix(cron:session): session closed for user amavis Dec 16 03:18:24 ispc saslauthd[1712324]: pam_mysql - SELECT returned no result. Dec 16 03:18:24 ispc saslauthd[1712324]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:18:24 ispc saslauthd[1712324]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:18:46 ispc sshd[1712325]: Invalid user blceu from 175.125.92.77 Dec 16 03:18:49 ispc saslauthd[1712327]: pam_mysql - SELECT returned no result. Dec 16 03:18:49 ispc saslauthd[1712327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:18:49 ispc saslauthd[1712327]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:19:00 ispc saslauthd[1712328]: pam_mysql - SELECT returned no result. Dec 16 03:19:00 ispc saslauthd[1712328]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:19:00 ispc saslauthd[1712328]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:19:01 ispc CRON[1712329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:19:01 ispc CRON[1712329]: pam_unix(cron:session): session closed for user root Dec 16 03:19:47 ispc sshd[1712344]: Invalid user ziplines from 175.125.92.77 Dec 16 03:19:49 ispc saslauthd[1712346]: pam_mysql - SELECT returned no result. Dec 16 03:19:49 ispc saslauthd[1712346]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:19:49 ispc saslauthd[1712346]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:20:01 ispc CRON[1712347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:20:01 ispc CRON[1712348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:20:01 ispc CRON[1712349]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:20:01 ispc CRON[1712350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:20:01 ispc CRON[1712351]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:20:02 ispc CRON[1712349]: pam_unix(cron:session): session closed for user www-data Dec 16 03:20:02 ispc CRON[1712348]: pam_unix(cron:session): session closed for user root Dec 16 03:20:02 ispc CRON[1712351]: pam_unix(cron:session): session closed for user getmail Dec 16 03:20:03 ispc CRON[1712347]: pam_unix(cron:session): session closed for user root Dec 16 03:20:51 ispc CRON[1712350]: pam_unix(cron:session): session closed for user root Dec 16 03:20:55 ispc sshd[1712464]: Invalid user klape from 77.241.18.2 Dec 16 03:20:55 ispc sshd[1712466]: Invalid user ubuntu from 77.241.18.2 Dec 16 03:21:01 ispc CRON[1712468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:21:01 ispc CRON[1712469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:21:01 ispc CRON[1712468]: pam_unix(cron:session): session closed for user root Dec 16 03:21:10 ispc postfix/smtpd[1712484]: sql auxprop plugin using mysql engine Dec 16 03:21:10 ispc postfix/smtpd[1712486]: sql auxprop plugin using mysql engine Dec 16 03:21:10 ispc postfix/smtpd[1712487]: sql auxprop plugin using mysql engine Dec 16 03:22:01 ispc CRON[1712511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:22:02 ispc CRON[1712511]: pam_unix(cron:session): session closed for user root Dec 16 03:22:04 ispc sshd[1712526]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:22:04 ispc sshd[1712526]: Invalid user ziplines from 157.245.115.125 Dec 16 03:22:48 ispc postfix/smtpd[1712558]: sql auxprop plugin using mysql engine Dec 16 03:22:52 ispc saslauthd[1712559]: pam_mysql - SELECT returned no result. Dec 16 03:22:52 ispc saslauthd[1712559]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:22:52 ispc saslauthd[1712559]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:23:01 ispc CRON[1712567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:23:02 ispc CRON[1712567]: pam_unix(cron:session): session closed for user root Dec 16 03:23:17 ispc saslauthd[1712590]: pam_mysql - SELECT returned no result. Dec 16 03:23:17 ispc saslauthd[1712590]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:23:17 ispc saslauthd[1712590]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:23:49 ispc sshd[1712603]: Invalid user capstan from 125.130.113.204 Dec 16 03:24:01 ispc CRON[1712611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:24:02 ispc CRON[1712611]: pam_unix(cron:session): session closed for user root Dec 16 03:24:46 ispc sshd[1712645]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:25:01 ispc CRON[1712653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:25:01 ispc CRON[1712654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:25:01 ispc CRON[1712655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:25:01 ispc CRON[1712656]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:25:01 ispc CRON[1712654]: pam_unix(cron:session): session closed for user root Dec 16 03:25:01 ispc CRON[1712656]: pam_unix(cron:session): session closed for user getmail Dec 16 03:25:02 ispc CRON[1712655]: pam_unix(cron:session): session closed for user root Dec 16 03:25:03 ispc CRON[1712653]: pam_unix(cron:session): session closed for user root Dec 16 03:25:33 ispc sshd[1712743]: Invalid user klape from 103.164.20.29 Dec 16 03:25:35 ispc sshd[1712745]: Invalid user ubuntu from 103.164.20.29 Dec 16 03:26:01 ispc CRON[1712767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:26:01 ispc CRON[1712767]: pam_unix(cron:session): session closed for user root Dec 16 03:27:01 ispc CRON[1712804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:27:02 ispc CRON[1712804]: pam_unix(cron:session): session closed for user root Dec 16 03:27:15 ispc sshd[1712819]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:27:15 ispc sshd[1712819]: Invalid user martof from 103.146.203.212 Dec 16 03:27:22 ispc postfix/smtpd[1712825]: sql auxprop plugin using mysql engine Dec 16 03:27:22 ispc saslauthd[1712828]: pam_mysql - SELECT returned no result. Dec 16 03:27:22 ispc saslauthd[1712828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:27:22 ispc saslauthd[1712828]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:28:01 ispc CRON[1712856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:28:03 ispc CRON[1712856]: pam_unix(cron:session): session closed for user root Dec 16 03:29:01 ispc CRON[1712893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:29:02 ispc CRON[1712893]: pam_unix(cron:session): session closed for user root Dec 16 03:30:01 ispc CRON[1712927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:30:01 ispc CRON[1712928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:30:01 ispc CRON[1712929]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:30:01 ispc CRON[1712930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:30:01 ispc CRON[1712931]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:30:01 ispc CRON[1712928]: pam_unix(cron:session): session closed for user root Dec 16 03:30:01 ispc CRON[1712929]: pam_unix(cron:session): session closed for user www-data Dec 16 03:30:01 ispc CRON[1712931]: pam_unix(cron:session): session closed for user getmail Dec 16 03:30:02 ispc CRON[1712930]: pam_unix(cron:session): session closed for user root Dec 16 03:30:04 ispc CRON[1712927]: pam_unix(cron:session): session closed for user root Dec 16 03:30:36 ispc postfix/smtpd[1713021]: sql auxprop plugin using mysql engine Dec 16 03:30:36 ispc saslauthd[1713023]: pam_mysql - SELECT returned no result. Dec 16 03:30:36 ispc saslauthd[1713023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:30:36 ispc saslauthd[1713023]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:30:51 ispc sshd[1713028]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:31:01 ispc CRON[1713034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:31:01 ispc CRON[1713034]: pam_unix(cron:session): session closed for user root Dec 16 03:31:10 ispc postfix/smtpd[1713049]: sql auxprop plugin using mysql engine Dec 16 03:31:11 ispc postfix/smtpd[1713051]: sql auxprop plugin using mysql engine Dec 16 03:31:11 ispc postfix/smtpd[1713052]: sql auxprop plugin using mysql engine Dec 16 03:31:27 ispc saslauthd[1713061]: pam_mysql - SELECT returned no result. Dec 16 03:31:27 ispc saslauthd[1713061]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:31:27 ispc saslauthd[1713061]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:31:42 ispc saslauthd[1713066]: pam_mysql - SELECT returned no result. Dec 16 03:31:42 ispc saslauthd[1713066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:31:42 ispc saslauthd[1713066]: do_auth : auth failure: [user=bciim] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:32:01 ispc saslauthd[1713075]: pam_mysql - SELECT returned no result. Dec 16 03:32:01 ispc saslauthd[1713075]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:32:01 ispc saslauthd[1713075]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:32:01 ispc CRON[1713076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:32:02 ispc CRON[1713076]: pam_unix(cron:session): session closed for user root Dec 16 03:32:03 ispc saslauthd[1713089]: pam_mysql - SELECT returned no result. Dec 16 03:32:03 ispc saslauthd[1713089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:32:03 ispc saslauthd[1713089]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:33:01 ispc CRON[1713127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:33:02 ispc CRON[1713127]: pam_unix(cron:session): session closed for user root Dec 16 03:33:13 ispc saslauthd[1713142]: pam_mysql - SELECT returned no result. Dec 16 03:33:13 ispc saslauthd[1713142]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:33:13 ispc saslauthd[1713142]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:33:24 ispc saslauthd[1713148]: pam_mysql - SELECT returned no result. Dec 16 03:33:24 ispc saslauthd[1713148]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:33:24 ispc saslauthd[1713148]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:33:37 ispc saslauthd[1713161]: pam_mysql - SELECT returned no result. Dec 16 03:33:37 ispc saslauthd[1713161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:33:37 ispc saslauthd[1713161]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:33:46 ispc saslauthd[1713162]: pam_mysql - SELECT returned no result. Dec 16 03:33:46 ispc saslauthd[1713162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:33:46 ispc saslauthd[1713162]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:34:01 ispc sshd[1713171]: Invalid user capstan from 125.130.113.204 Dec 16 03:34:01 ispc CRON[1713173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:34:02 ispc CRON[1713173]: pam_unix(cron:session): session closed for user root Dec 16 03:34:29 ispc saslauthd[1713198]: pam_mysql - SELECT returned no result. Dec 16 03:34:29 ispc saslauthd[1713198]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:34:29 ispc saslauthd[1713198]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:35:01 ispc CRON[1713211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:35:01 ispc CRON[1713212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:35:01 ispc CRON[1713213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:35:01 ispc CRON[1713214]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:35:01 ispc CRON[1713212]: pam_unix(cron:session): session closed for user root Dec 16 03:35:01 ispc CRON[1713214]: pam_unix(cron:session): session closed for user getmail Dec 16 03:35:02 ispc CRON[1713213]: pam_unix(cron:session): session closed for user root Dec 16 03:35:03 ispc CRON[1713211]: pam_unix(cron:session): session closed for user root Dec 16 03:35:32 ispc saslauthd[1713299]: pam_mysql - SELECT returned no result. Dec 16 03:35:32 ispc saslauthd[1713299]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:35:32 ispc saslauthd[1713299]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:35:40 ispc postfix/smtpd[1713301]: sql auxprop plugin using mysql engine Dec 16 03:35:40 ispc postfix/smtpd[1713308]: sql auxprop plugin using mysql engine Dec 16 03:35:40 ispc postfix/smtpd[1713303]: sql auxprop plugin using mysql engine Dec 16 03:36:01 ispc CRON[1713317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:36:01 ispc CRON[1713317]: pam_unix(cron:session): session closed for user root Dec 16 03:37:01 ispc CRON[1713359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:37:03 ispc CRON[1713359]: pam_unix(cron:session): session closed for user root Dec 16 03:38:01 ispc CRON[1713407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:38:02 ispc CRON[1713407]: pam_unix(cron:session): session closed for user root Dec 16 03:38:06 ispc sshd[1713424]: Invalid user klape from 2.57.217.229 Dec 16 03:38:06 ispc sshd[1713426]: Invalid user ubuntu from 2.57.217.229 Dec 16 03:38:58 ispc sshd[1713450]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:38:58 ispc sshd[1713450]: Invalid user martof from 193.110.157.47 Dec 16 03:39:01 ispc CRON[1713452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:39:01 ispc CRON[1713453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:39:01 ispc CRON[1713452]: pam_unix(cron:session): session closed for user root Dec 16 03:39:02 ispc CRON[1713453]: pam_unix(cron:session): session closed for user root Dec 16 03:39:32 ispc postfix/smtpd[1713487]: sql auxprop plugin using mysql engine Dec 16 03:39:35 ispc saslauthd[1713494]: pam_mysql - SELECT returned no result. Dec 16 03:39:35 ispc saslauthd[1713494]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:39:35 ispc saslauthd[1713494]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:40:01 ispc CRON[1713506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:40:01 ispc CRON[1713507]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:40:01 ispc CRON[1713508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:40:01 ispc CRON[1713509]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:40:01 ispc CRON[1713505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:40:01 ispc CRON[1713506]: pam_unix(cron:session): session closed for user root Dec 16 03:40:01 ispc CRON[1713507]: pam_unix(cron:session): session closed for user www-data Dec 16 03:40:01 ispc CRON[1713509]: pam_unix(cron:session): session closed for user getmail Dec 16 03:40:02 ispc CRON[1713508]: pam_unix(cron:session): session closed for user root Dec 16 03:40:03 ispc CRON[1713505]: pam_unix(cron:session): session closed for user root Dec 16 03:40:04 ispc postfix/smtpd[1713587]: sql auxprop plugin using mysql engine Dec 16 03:40:05 ispc postfix/smtpd[1713589]: sql auxprop plugin using mysql engine Dec 16 03:40:05 ispc postfix/smtpd[1713590]: sql auxprop plugin using mysql engine Dec 16 03:40:35 ispc saslauthd[1713606]: pam_mysql - SELECT returned no result. Dec 16 03:40:35 ispc saslauthd[1713606]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:40:35 ispc saslauthd[1713606]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:41:01 ispc CRON[1713623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:41:01 ispc CRON[1713623]: pam_unix(cron:session): session closed for user root Dec 16 03:41:26 ispc CRON[1712469]: pam_unix(cron:session): session closed for user root Dec 16 03:41:40 ispc sshd[1713646]: Invalid user pronajemplosin from 112.217.233.242 Dec 16 03:42:01 ispc CRON[1713648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:42:02 ispc CRON[1713648]: pam_unix(cron:session): session closed for user root Dec 16 03:43:01 ispc CRON[1713669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:43:01 ispc CRON[1713669]: pam_unix(cron:session): session closed for user root Dec 16 03:43:35 ispc saslauthd[1713682]: pam_mysql - SELECT returned no result. Dec 16 03:43:35 ispc saslauthd[1713682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:43:35 ispc saslauthd[1713682]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:44:01 ispc CRON[1713685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:44:02 ispc CRON[1713685]: pam_unix(cron:session): session closed for user root Dec 16 03:44:29 ispc saslauthd[1713699]: pam_mysql - SELECT returned no result. Dec 16 03:44:29 ispc saslauthd[1713699]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:29 ispc saslauthd[1713699]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:29 ispc postfix/smtpd[1713700]: sql auxprop plugin using mysql engine Dec 16 03:44:29 ispc saslauthd[1713703]: pam_mysql - SELECT returned no result. Dec 16 03:44:29 ispc saslauthd[1713703]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:29 ispc saslauthd[1713703]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:29 ispc saslauthd[1713704]: pam_mysql - SELECT returned no result. Dec 16 03:44:29 ispc saslauthd[1713704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:29 ispc saslauthd[1713704]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:31 ispc saslauthd[1713707]: pam_mysql - SELECT returned no result. Dec 16 03:44:31 ispc saslauthd[1713707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:31 ispc saslauthd[1713707]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:31 ispc postfix/smtpd[1713708]: sql auxprop plugin using mysql engine Dec 16 03:44:31 ispc sshd[1713705]: Invalid user blceu from 119.205.233.162 Dec 16 03:44:31 ispc saslauthd[1713709]: pam_mysql - SELECT returned no result. Dec 16 03:44:31 ispc saslauthd[1713709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:31 ispc saslauthd[1713709]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:31 ispc saslauthd[1713710]: pam_mysql - SELECT returned no result. Dec 16 03:44:31 ispc saslauthd[1713710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:31 ispc saslauthd[1713710]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:33 ispc saslauthd[1713711]: pam_mysql - SELECT returned no result. Dec 16 03:44:33 ispc saslauthd[1713711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:33 ispc saslauthd[1713711]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:35 ispc saslauthd[1713712]: pam_mysql - SELECT returned no result. Dec 16 03:44:35 ispc saslauthd[1713712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:35 ispc saslauthd[1713712]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:44:48 ispc saslauthd[1713713]: pam_mysql - SELECT returned no result. Dec 16 03:44:48 ispc saslauthd[1713713]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:44:48 ispc saslauthd[1713713]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:45:01 ispc CRON[1713714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:45:01 ispc CRON[1713715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:45:01 ispc CRON[1713716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:45:01 ispc CRON[1713717]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:45:01 ispc CRON[1713715]: pam_unix(cron:session): session closed for user root Dec 16 03:45:01 ispc CRON[1713717]: pam_unix(cron:session): session closed for user getmail Dec 16 03:45:03 ispc CRON[1713714]: pam_unix(cron:session): session closed for user root Dec 16 03:45:12 ispc saslauthd[1713860]: pam_mysql - SELECT returned no result. Dec 16 03:45:12 ispc saslauthd[1713860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:45:12 ispc saslauthd[1713860]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:45:53 ispc CRON[1713716]: pam_unix(cron:session): session closed for user root Dec 16 03:45:56 ispc sshd[1713904]: Invalid user blceu from 221.156.137.104 Dec 16 03:46:01 ispc CRON[1713906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:46:44 ispc saslauthd[1713938]: pam_mysql - SELECT returned no result. Dec 16 03:46:44 ispc saslauthd[1713938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:46:44 ispc saslauthd[1713938]: do_auth : auth failure: [user=bcim] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:47:01 ispc CRON[1713944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:47:03 ispc CRON[1713944]: pam_unix(cron:session): session closed for user root Dec 16 03:47:24 ispc postfix/smtpd[1713968]: sql auxprop plugin using mysql engine Dec 16 03:47:25 ispc postfix/smtpd[1713970]: sql auxprop plugin using mysql engine Dec 16 03:47:49 ispc saslauthd[1713986]: pam_mysql - SELECT returned no result. Dec 16 03:47:49 ispc saslauthd[1713986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:47:49 ispc saslauthd[1713986]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:48:01 ispc CRON[1713997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:48:02 ispc CRON[1713997]: pam_unix(cron:session): session closed for user root Dec 16 03:48:04 ispc sshd[1714008]: Invalid user matlbula from 175.125.95.234 Dec 16 03:48:20 ispc sshd[1714018]: Invalid user martof from 210.114.18.123 Dec 16 03:49:01 ispc CRON[1714046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:49:01 ispc CRON[1714046]: pam_unix(cron:session): session closed for user root Dec 16 03:49:09 ispc postfix/smtpd[1714061]: sql auxprop plugin using mysql engine Dec 16 03:49:12 ispc saslauthd[1714063]: pam_mysql - SELECT returned no result. Dec 16 03:49:12 ispc saslauthd[1714063]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:49:12 ispc saslauthd[1714063]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:49:12 ispc postfix/smtpd[1714064]: sql auxprop plugin using mysql engine Dec 16 03:49:12 ispc saslauthd[1714065]: pam_mysql - SELECT returned no result. Dec 16 03:49:12 ispc saslauthd[1714065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:49:12 ispc saslauthd[1714065]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:49:21 ispc saslauthd[1714070]: pam_mysql - SELECT returned no result. Dec 16 03:49:21 ispc saslauthd[1714070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:49:21 ispc saslauthd[1714070]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:49:25 ispc saslauthd[1714075]: pam_mysql - SELECT returned no result. Dec 16 03:49:25 ispc saslauthd[1714075]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:49:25 ispc saslauthd[1714075]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:49:34 ispc sshd[1714076]: Invalid user ziplines from 51.79.36.60 Dec 16 03:50:01 ispc CRON[1714090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:50:01 ispc CRON[1714091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:50:01 ispc CRON[1714092]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 03:50:01 ispc CRON[1714093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:50:01 ispc CRON[1714094]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:50:01 ispc CRON[1714092]: pam_unix(cron:session): session closed for user www-data Dec 16 03:50:01 ispc CRON[1714091]: pam_unix(cron:session): session closed for user root Dec 16 03:50:01 ispc CRON[1714094]: pam_unix(cron:session): session closed for user getmail Dec 16 03:50:02 ispc CRON[1714093]: pam_unix(cron:session): session closed for user root Dec 16 03:50:03 ispc CRON[1714090]: pam_unix(cron:session): session closed for user root Dec 16 03:50:28 ispc sshd[1714181]: Invalid user ziplines from 51.159.91.86 Dec 16 03:50:35 ispc saslauthd[1714183]: pam_mysql - SELECT returned no result. Dec 16 03:50:35 ispc saslauthd[1714183]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:50:35 ispc saslauthd[1714183]: do_auth : auth failure: [user=contabilidad] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:51:01 ispc CRON[1714196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:51:02 ispc CRON[1714196]: pam_unix(cron:session): session closed for user root Dec 16 03:51:04 ispc sshd[1714207]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:51:04 ispc sshd[1714207]: Invalid user blceu from 103.146.203.212 Dec 16 03:51:27 ispc saslauthd[1714217]: pam_mysql - SELECT returned no result. Dec 16 03:51:27 ispc saslauthd[1714217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:51:27 ispc saslauthd[1714217]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:52:01 ispc CRON[1714235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:52:01 ispc CRON[1714236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:52:02 ispc CRON[1714236]: pam_unix(cron:session): session closed for user root Dec 16 03:52:08 ispc sshd[1714252]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 03:53:01 ispc CRON[1714289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:53:02 ispc CRON[1714289]: pam_unix(cron:session): session closed for user root Dec 16 03:53:28 ispc postfix/smtpd[1714312]: sql auxprop plugin using mysql engine Dec 16 03:53:29 ispc saslauthd[1714314]: pam_mysql - SELECT returned no result. Dec 16 03:53:29 ispc saslauthd[1714314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:53:29 ispc saslauthd[1714314]: do_auth : auth failure: [user=abc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:53:48 ispc postfix/smtpd[1714323]: sql auxprop plugin using mysql engine Dec 16 03:54:01 ispc CRON[1714331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:54:01 ispc CRON[1714331]: pam_unix(cron:session): session closed for user root Dec 16 03:54:53 ispc saslauthd[1714369]: pam_mysql - SELECT returned no result. Dec 16 03:54:53 ispc saslauthd[1714369]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:54:53 ispc saslauthd[1714369]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:55:01 ispc CRON[1714371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:55:01 ispc CRON[1714372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:55:01 ispc CRON[1714373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:55:01 ispc CRON[1714374]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 03:55:01 ispc CRON[1714372]: pam_unix(cron:session): session closed for user root Dec 16 03:55:01 ispc CRON[1714374]: pam_unix(cron:session): session closed for user getmail Dec 16 03:55:02 ispc CRON[1714373]: pam_unix(cron:session): session closed for user root Dec 16 03:55:02 ispc CRON[1714371]: pam_unix(cron:session): session closed for user root Dec 16 03:55:13 ispc sshd[1714455]: Invalid user blceu from 51.159.91.86 Dec 16 03:55:18 ispc CRON[1714235]: pam_unix(cron:session): session closed for user root Dec 16 03:55:23 ispc saslauthd[1714461]: pam_mysql - SELECT returned no result. Dec 16 03:55:23 ispc saslauthd[1714461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:55:23 ispc saslauthd[1714461]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 03:56:01 ispc CRON[1714475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:56:02 ispc CRON[1714475]: pam_unix(cron:session): session closed for user root Dec 16 03:56:06 ispc postfix/smtpd[1714490]: sql auxprop plugin using mysql engine Dec 16 03:56:07 ispc postfix/smtpd[1714492]: sql auxprop plugin using mysql engine Dec 16 03:56:07 ispc postfix/smtpd[1714493]: sql auxprop plugin using mysql engine Dec 16 03:56:43 ispc sshd[1714509]: Invalid user blceu from 43.135.148.156 Dec 16 03:57:01 ispc CRON[1714520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:57:02 ispc CRON[1714520]: pam_unix(cron:session): session closed for user root Dec 16 03:57:32 ispc postfix/smtpd[1714544]: sql auxprop plugin using mysql engine Dec 16 03:57:32 ispc saslauthd[1714545]: pam_mysql - SELECT returned no result. Dec 16 03:57:32 ispc saslauthd[1714545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 03:57:32 ispc saslauthd[1714545]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 03:58:01 ispc CRON[1714566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:58:02 ispc CRON[1714566]: pam_unix(cron:session): session closed for user root Dec 16 03:59:01 ispc CRON[1714604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 03:59:02 ispc CRON[1714604]: pam_unix(cron:session): session closed for user root Dec 16 04:00:01 ispc CRON[1714646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:00:01 ispc CRON[1714647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:00:01 ispc CRON[1714648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:00:01 ispc CRON[1714643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:00:01 ispc CRON[1714644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:00:01 ispc CRON[1714645]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:00:01 ispc CRON[1714649]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:00:01 ispc CRON[1714644]: pam_unix(cron:session): session closed for user root Dec 16 04:00:01 ispc CRON[1714645]: pam_unix(cron:session): session closed for user www-data Dec 16 04:00:01 ispc CRON[1714649]: pam_unix(cron:session): session closed for user getmail Dec 16 04:00:01 ispc CRON[1714647]: pam_unix(cron:session): session closed for user root Dec 16 04:00:01 ispc CRON[1714648]: pam_unix(cron:session): session closed for user root Dec 16 04:00:02 ispc CRON[1714646]: pam_unix(cron:session): session closed for user root Dec 16 04:00:02 ispc CRON[1714643]: pam_unix(cron:session): session closed for user root Dec 16 04:00:07 ispc sshd[1714803]: Invalid user capstan from 43.163.105.233 Dec 16 04:00:51 ispc postfix/smtpd[1714825]: sql auxprop plugin using mysql engine Dec 16 04:00:53 ispc saslauthd[1714827]: pam_mysql - SELECT returned no result. Dec 16 04:00:53 ispc saslauthd[1714827]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:00:53 ispc saslauthd[1714827]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:01:01 ispc CRON[1714832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:01:01 ispc CRON[1714833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:01:02 ispc CRON[1714833]: pam_unix(cron:session): session closed for user root Dec 16 04:01:45 ispc saslauthd[1715338]: pam_mysql - SELECT returned no result. Dec 16 04:01:45 ispc saslauthd[1715338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:01:45 ispc saslauthd[1715338]: do_auth : auth failure: [user=bcms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:02:01 ispc CRON[1715460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:02:01 ispc CRON[1715459]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 04:02:02 ispc CRON[1715460]: pam_unix(cron:session): session closed for user root Dec 16 04:02:30 ispc postfix/smtpd[1715940]: sql auxprop plugin using mysql engine Dec 16 04:02:30 ispc postfix/smtpd[1715944]: sql auxprop plugin using mysql engine Dec 16 04:02:30 ispc postfix/smtpd[1715951]: sql auxprop plugin using mysql engine Dec 16 04:02:37 ispc postfix/smtpd[1716075]: sql auxprop plugin using mysql engine Dec 16 04:03:01 ispc CRON[1716467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:03:02 ispc CRON[1716467]: pam_unix(cron:session): session closed for user root Dec 16 04:03:53 ispc CRON[1715459]: pam_unix(cron:session): session closed for user logcheck Dec 16 04:03:59 ispc postfix/smtpd[1716762]: sql auxprop plugin using mysql engine Dec 16 04:04:01 ispc CRON[1716770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:04:02 ispc CRON[1716770]: pam_unix(cron:session): session closed for user root Dec 16 04:04:21 ispc postfix/smtpd[1716844]: sql auxprop plugin using mysql engine Dec 16 04:04:21 ispc postfix/smtpd[1716846]: sql auxprop plugin using mysql engine Dec 16 04:05:01 ispc CRON[1716864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:05:01 ispc CRON[1716865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:05:01 ispc CRON[1716866]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:05:01 ispc CRON[1716863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:05:01 ispc CRON[1716864]: pam_unix(cron:session): session closed for user root Dec 16 04:05:01 ispc CRON[1716866]: pam_unix(cron:session): session closed for user getmail Dec 16 04:05:02 ispc CRON[1716865]: pam_unix(cron:session): session closed for user root Dec 16 04:05:03 ispc CRON[1716863]: pam_unix(cron:session): session closed for user root Dec 16 04:05:25 ispc saslauthd[1716953]: pam_mysql - SELECT returned no result. Dec 16 04:05:25 ispc saslauthd[1716953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:05:25 ispc saslauthd[1716953]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:05:51 ispc saslauthd[1716962]: pam_mysql - SELECT returned no result. Dec 16 04:05:51 ispc saslauthd[1716962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:05:51 ispc saslauthd[1716962]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:06:01 ispc CRON[1716969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:06:02 ispc CRON[1716969]: pam_unix(cron:session): session closed for user root Dec 16 04:06:24 ispc CRON[1713906]: pam_unix(cron:session): session closed for user root Dec 16 04:06:33 ispc sshd[1716993]: Invalid user ziplines from 119.205.233.162 Dec 16 04:06:55 ispc su[1717070]: Successful su for amavis by root Dec 16 04:06:55 ispc su[1717070]: + ??? root:amavis Dec 16 04:06:55 ispc su[1717070]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 16 04:06:57 ispc postfix/smtpd[1717078]: sql auxprop plugin using mysql engine Dec 16 04:07:01 ispc CRON[1717081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:07:02 ispc CRON[1717081]: pam_unix(cron:session): session closed for user root Dec 16 04:07:16 ispc su[1717070]: pam_unix(su:session): session closed for user amavis Dec 16 04:08:01 ispc CRON[1717211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:08:02 ispc CRON[1717211]: pam_unix(cron:session): session closed for user root Dec 16 04:08:11 ispc postfix/smtpd[1717223]: sql auxprop plugin using mysql engine Dec 16 04:08:11 ispc postfix/smtpd[1717225]: sql auxprop plugin using mysql engine Dec 16 04:08:11 ispc postfix/smtpd[1717226]: sql auxprop plugin using mysql engine Dec 16 04:09:01 ispc CRON[1717229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:09:01 ispc CRON[1717230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:09:01 ispc CRON[1717229]: pam_unix(cron:session): session closed for user root Dec 16 04:09:02 ispc CRON[1717230]: pam_unix(cron:session): session closed for user root Dec 16 04:09:07 ispc postfix/smtpd[1717253]: sql auxprop plugin using mysql engine Dec 16 04:09:50 ispc postfix/smtpd[1717266]: sql auxprop plugin using mysql engine Dec 16 04:10:01 ispc CRON[1717269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:10:01 ispc CRON[1717270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:10:01 ispc CRON[1717271]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:10:01 ispc CRON[1717272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:10:01 ispc CRON[1717273]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:10:01 ispc CRON[1717270]: pam_unix(cron:session): session closed for user root Dec 16 04:10:01 ispc CRON[1717271]: pam_unix(cron:session): session closed for user www-data Dec 16 04:10:01 ispc CRON[1717273]: pam_unix(cron:session): session closed for user getmail Dec 16 04:10:02 ispc CRON[1717269]: pam_unix(cron:session): session closed for user root Dec 16 04:10:12 ispc saslauthd[1717378]: pam_mysql - SELECT returned no result. Dec 16 04:10:12 ispc saslauthd[1717378]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:10:12 ispc saslauthd[1717378]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:10:40 ispc CRON[1717272]: pam_unix(cron:session): session closed for user root Dec 16 04:11:01 ispc CRON[1717381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:12:01 ispc CRON[1717414]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:12:02 ispc CRON[1717414]: pam_unix(cron:session): session closed for user root Dec 16 04:12:23 ispc sshd[1717434]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:13:01 ispc CRON[1717460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:13:02 ispc CRON[1717460]: pam_unix(cron:session): session closed for user root Dec 16 04:13:05 ispc sshd[1717475]: Invalid user ziplines from 211.23.78.98 Dec 16 04:14:01 ispc CRON[1717503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:14:02 ispc CRON[1717503]: pam_unix(cron:session): session closed for user root Dec 16 04:14:07 ispc postfix/smtpd[1717518]: sql auxprop plugin using mysql engine Dec 16 04:14:08 ispc saslauthd[1717521]: pam_mysql - SELECT returned no result. Dec 16 04:14:08 ispc saslauthd[1717521]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:14:08 ispc saslauthd[1717521]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:14:30 ispc sshd[1717530]: Did not receive identification string from 147.185.132.76 Dec 16 04:14:44 ispc saslauthd[1717535]: pam_mysql - SELECT returned no result. Dec 16 04:14:44 ispc saslauthd[1717535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:14:44 ispc saslauthd[1717535]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:14:58 ispc saslauthd[1717545]: pam_mysql - SELECT returned no result. Dec 16 04:14:58 ispc saslauthd[1717545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:14:58 ispc saslauthd[1717545]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:15:01 ispc CRON[1717547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:15:01 ispc CRON[1717548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:15:01 ispc CRON[1717549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:15:01 ispc CRON[1717550]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:15:01 ispc CRON[1717548]: pam_unix(cron:session): session closed for user root Dec 16 04:15:01 ispc CRON[1717550]: pam_unix(cron:session): session closed for user getmail Dec 16 04:15:02 ispc CRON[1717549]: pam_unix(cron:session): session closed for user root Dec 16 04:15:03 ispc CRON[1717547]: pam_unix(cron:session): session closed for user root Dec 16 04:15:03 ispc sshd[1717544]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 04:16:01 ispc CRON[1717647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:16:03 ispc CRON[1717647]: pam_unix(cron:session): session closed for user root Dec 16 04:16:11 ispc CRON[1714832]: pam_unix(cron:session): session closed for user root Dec 16 04:16:12 ispc postfix/smtpd[1718067]: sql auxprop plugin using mysql engine Dec 16 04:16:49 ispc postfix/smtpd[1718089]: sql auxprop plugin using mysql engine Dec 16 04:16:50 ispc saslauthd[1718091]: pam_mysql - SELECT returned no result. Dec 16 04:16:50 ispc saslauthd[1718091]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:16:50 ispc saslauthd[1718091]: do_auth : auth failure: [user=bcnas] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:17:01 ispc CRON[1718096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:17:02 ispc CRON[1718096]: pam_unix(cron:session): session closed for user root Dec 16 04:18:01 ispc CRON[1718140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:18:02 ispc CRON[1718140]: pam_unix(cron:session): session closed for user root Dec 16 04:18:46 ispc postfix/smtpd[1718169]: sql auxprop plugin using mysql engine Dec 16 04:18:47 ispc saslauthd[1718171]: pam_mysql - SELECT returned no result. Dec 16 04:18:47 ispc saslauthd[1718171]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:18:47 ispc saslauthd[1718171]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:19:01 ispc CRON[1718180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:19:02 ispc CRON[1718180]: pam_unix(cron:session): session closed for user root Dec 16 04:19:21 ispc postfix/smtpd[1718201]: sql auxprop plugin using mysql engine Dec 16 04:19:21 ispc postfix/smtpd[1718203]: sql auxprop plugin using mysql engine Dec 16 04:19:21 ispc postfix/smtpd[1718205]: sql auxprop plugin using mysql engine Dec 16 04:19:37 ispc saslauthd[1718211]: pam_mysql - SELECT returned no result. Dec 16 04:19:37 ispc saslauthd[1718211]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:19:37 ispc saslauthd[1718211]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:19:38 ispc saslauthd[1718213]: pam_mysql - SELECT returned no result. Dec 16 04:19:38 ispc saslauthd[1718213]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:19:38 ispc saslauthd[1718213]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:19:38 ispc sshd[1718210]: Invalid user capstan from 125.130.113.204 Dec 16 04:20:01 ispc CRON[1718228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:20:01 ispc CRON[1718229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:20:01 ispc CRON[1718230]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:20:01 ispc CRON[1718231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:20:01 ispc CRON[1718232]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:20:01 ispc CRON[1718230]: pam_unix(cron:session): session closed for user www-data Dec 16 04:20:01 ispc CRON[1718229]: pam_unix(cron:session): session closed for user root Dec 16 04:20:01 ispc CRON[1718232]: pam_unix(cron:session): session closed for user getmail Dec 16 04:20:02 ispc CRON[1718231]: pam_unix(cron:session): session closed for user root Dec 16 04:20:03 ispc CRON[1718228]: pam_unix(cron:session): session closed for user root Dec 16 04:21:01 ispc CRON[1718331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:21:01 ispc CRON[1718332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:21:01 ispc CRON[1718331]: pam_unix(cron:session): session closed for user root Dec 16 04:21:02 ispc CRON[1718332]: pam_unix(cron:session): session closed for user root Dec 16 04:21:02 ispc saslauthd[1718345]: pam_mysql - SELECT returned no result. Dec 16 04:21:02 ispc saslauthd[1718345]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:21:02 ispc saslauthd[1718345]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:21:49 ispc sshd[1718367]: reverse mapping checking getaddrinfo for vps01.balloonhosting.com [78.46.80.6] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:22:01 ispc CRON[1718379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:22:02 ispc CRON[1718379]: pam_unix(cron:session): session closed for user root Dec 16 04:22:27 ispc saslauthd[1718402]: pam_mysql - SELECT returned no result. Dec 16 04:22:27 ispc saslauthd[1718402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:22:27 ispc saslauthd[1718402]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:22:44 ispc sshd[1718420]: Invalid user klape from 187.190.35.163 Dec 16 04:22:45 ispc sshd[1718422]: Invalid user ubuntu from 187.190.35.163 Dec 16 04:23:01 ispc CRON[1718432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:23:02 ispc CRON[1718432]: pam_unix(cron:session): session closed for user root Dec 16 04:23:24 ispc saslauthd[1718452]: pam_mysql - SELECT returned no result. Dec 16 04:23:24 ispc saslauthd[1718452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:23:24 ispc saslauthd[1718452]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:24:01 ispc CRON[1718471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:24:01 ispc CRON[1718471]: pam_unix(cron:session): session closed for user root Dec 16 04:25:01 ispc CRON[1718508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:25:01 ispc CRON[1718509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:25:01 ispc CRON[1718510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:25:01 ispc CRON[1718511]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:25:02 ispc CRON[1718509]: pam_unix(cron:session): session closed for user root Dec 16 04:25:02 ispc CRON[1718511]: pam_unix(cron:session): session closed for user getmail Dec 16 04:25:03 ispc CRON[1718510]: pam_unix(cron:session): session closed for user root Dec 16 04:25:04 ispc CRON[1718508]: pam_unix(cron:session): session closed for user root Dec 16 04:25:42 ispc sshd[1718601]: Invalid user pronajemplosin from 165.232.190.97 Dec 16 04:26:01 ispc CRON[1718613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:26:02 ispc CRON[1718613]: pam_unix(cron:session): session closed for user root Dec 16 04:26:08 ispc postfix/smtpd[1718624]: sql auxprop plugin using mysql engine Dec 16 04:26:08 ispc saslauthd[1718626]: pam_mysql - SELECT returned no result. Dec 16 04:26:08 ispc saslauthd[1718626]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:26:08 ispc saslauthd[1718626]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:27:01 ispc CRON[1718654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:27:01 ispc CRON[1718654]: pam_unix(cron:session): session closed for user root Dec 16 04:27:01 ispc postfix/smtpd[1718665]: sql auxprop plugin using mysql engine Dec 16 04:27:25 ispc sshd[1718677]: Invalid user blceu from 210.114.18.123 Dec 16 04:27:53 ispc postfix/smtpd[1718758]: sql auxprop plugin using mysql engine Dec 16 04:27:54 ispc saslauthd[1718766]: pam_mysql - SELECT returned no result. Dec 16 04:27:54 ispc saslauthd[1718766]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:27:54 ispc saslauthd[1718766]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:28:01 ispc CRON[1718771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:28:02 ispc CRON[1718771]: pam_unix(cron:session): session closed for user root Dec 16 04:28:05 ispc sshd[1718782]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:28:05 ispc sshd[1718782]: Invalid user blceu from 114.7.163.154 Dec 16 04:28:12 ispc sshd[1718788]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:28:12 ispc sshd[1718788]: Invalid user ziplines from 193.110.157.47 Dec 16 04:28:17 ispc saslauthd[1718790]: pam_mysql - SELECT returned no result. Dec 16 04:28:17 ispc saslauthd[1718790]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:28:17 ispc saslauthd[1718790]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:28:46 ispc saslauthd[1718803]: pam_mysql - SELECT returned no result. Dec 16 04:28:46 ispc saslauthd[1718803]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:28:46 ispc saslauthd[1718803]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:28:55 ispc saslauthd[1718808]: pam_mysql - SELECT returned no result. Dec 16 04:28:55 ispc saslauthd[1718808]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:28:55 ispc saslauthd[1718808]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:29:01 ispc CRON[1718813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:29:02 ispc CRON[1718813]: pam_unix(cron:session): session closed for user root Dec 16 04:29:07 ispc saslauthd[1718824]: pam_mysql - SELECT returned no result. Dec 16 04:29:07 ispc saslauthd[1718824]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:29:07 ispc saslauthd[1718824]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:29:16 ispc saslauthd[1718830]: pam_mysql - SELECT returned no result. Dec 16 04:29:16 ispc saslauthd[1718830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:29:16 ispc saslauthd[1718830]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:29:54 ispc saslauthd[1718847]: pam_mysql - SELECT returned no result. Dec 16 04:29:54 ispc saslauthd[1718847]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:29:54 ispc saslauthd[1718847]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:30:01 ispc CRON[1718852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:30:01 ispc CRON[1718853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:30:01 ispc CRON[1718854]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:30:01 ispc CRON[1718855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:30:01 ispc CRON[1718856]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:30:01 ispc CRON[1718853]: pam_unix(cron:session): session closed for user root Dec 16 04:30:01 ispc CRON[1718854]: pam_unix(cron:session): session closed for user www-data Dec 16 04:30:01 ispc CRON[1718856]: pam_unix(cron:session): session closed for user getmail Dec 16 04:30:02 ispc CRON[1718855]: pam_unix(cron:session): session closed for user root Dec 16 04:30:02 ispc CRON[1718852]: pam_unix(cron:session): session closed for user root Dec 16 04:30:13 ispc saslauthd[1718934]: pam_mysql - SELECT returned no result. Dec 16 04:30:13 ispc saslauthd[1718934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:30:13 ispc saslauthd[1718934]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:31:01 ispc CRON[1718952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:31:02 ispc CRON[1718952]: pam_unix(cron:session): session closed for user root Dec 16 04:31:07 ispc saslauthd[1718967]: pam_mysql - SELECT returned no result. Dec 16 04:31:07 ispc saslauthd[1718967]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:31:07 ispc saslauthd[1718967]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:31:23 ispc CRON[1717381]: pam_unix(cron:session): session closed for user root Dec 16 04:31:49 ispc saslauthd[1718977]: pam_mysql - SELECT returned no result. Dec 16 04:31:49 ispc saslauthd[1718977]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:31:49 ispc saslauthd[1718977]: do_auth : auth failure: [user=bewan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:32:01 ispc CRON[1718980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:32:02 ispc CRON[1718980]: pam_unix(cron:session): session closed for user root Dec 16 04:32:18 ispc sshd[1718996]: Invalid user klape from 13.70.185.98 Dec 16 04:32:44 ispc sshd[1719006]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:32:44 ispc sshd[1719006]: Invalid user user from 2.57.121.25 Dec 16 04:33:01 ispc saslauthd[1719014]: pam_mysql - SELECT returned no result. Dec 16 04:33:01 ispc saslauthd[1719014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:33:01 ispc saslauthd[1719014]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:33:01 ispc CRON[1719015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:33:02 ispc CRON[1719015]: pam_unix(cron:session): session closed for user root Dec 16 04:33:29 ispc sshd[1719027]: Invalid user blceu from 45.119.213.109 Dec 16 04:34:01 ispc CRON[1719029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:34:02 ispc CRON[1719029]: pam_unix(cron:session): session closed for user root Dec 16 04:35:00 ispc postfix/smtpd[1719048]: sql auxprop plugin using mysql engine Dec 16 04:35:00 ispc postfix/smtpd[1719051]: sql auxprop plugin using mysql engine Dec 16 04:35:01 ispc postfix/smtpd[1719052]: sql auxprop plugin using mysql engine Dec 16 04:35:01 ispc CRON[1719055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:35:01 ispc CRON[1719054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:35:01 ispc CRON[1719057]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:35:01 ispc CRON[1719056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:35:01 ispc CRON[1719055]: pam_unix(cron:session): session closed for user root Dec 16 04:35:01 ispc CRON[1719057]: pam_unix(cron:session): session closed for user getmail Dec 16 04:35:02 ispc CRON[1719054]: pam_unix(cron:session): session closed for user root Dec 16 04:35:41 ispc CRON[1719056]: pam_unix(cron:session): session closed for user root Dec 16 04:36:01 ispc CRON[1719165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:36:43 ispc sshd[1719190]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:37:01 ispc CRON[1719200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:37:02 ispc CRON[1719200]: pam_unix(cron:session): session closed for user root Dec 16 04:37:22 ispc postfix/smtpd[1719221]: sql auxprop plugin using mysql engine Dec 16 04:37:22 ispc saslauthd[1719223]: pam_mysql - SELECT returned no result. Dec 16 04:37:22 ispc saslauthd[1719223]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:37:22 ispc saslauthd[1719223]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:37:31 ispc saslauthd[1719228]: pam_mysql - SELECT returned no result. Dec 16 04:37:31 ispc saslauthd[1719228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:37:31 ispc saslauthd[1719228]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:38:01 ispc CRON[1719255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:38:02 ispc CRON[1719255]: pam_unix(cron:session): session closed for user root Dec 16 04:39:01 ispc CRON[1719294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:39:01 ispc CRON[1719295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:39:02 ispc CRON[1719294]: pam_unix(cron:session): session closed for user root Dec 16 04:39:02 ispc CRON[1719295]: pam_unix(cron:session): session closed for user root Dec 16 04:39:14 ispc sshd[1719320]: Invalid user blceu from 211.57.200.145 Dec 16 04:40:01 ispc CRON[1719342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:40:01 ispc CRON[1719343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:40:01 ispc CRON[1719344]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:40:01 ispc CRON[1719345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:40:01 ispc CRON[1719346]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:40:01 ispc CRON[1719344]: pam_unix(cron:session): session closed for user www-data Dec 16 04:40:01 ispc CRON[1719343]: pam_unix(cron:session): session closed for user root Dec 16 04:40:01 ispc CRON[1719346]: pam_unix(cron:session): session closed for user getmail Dec 16 04:40:02 ispc CRON[1719345]: pam_unix(cron:session): session closed for user root Dec 16 04:40:02 ispc CRON[1719342]: pam_unix(cron:session): session closed for user root Dec 16 04:40:27 ispc sshd[1719429]: Invalid user capstan from 103.172.236.164 Dec 16 04:41:01 ispc CRON[1719448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:41:02 ispc CRON[1719448]: pam_unix(cron:session): session closed for user root Dec 16 04:41:04 ispc postfix/smtpd[1719459]: sql auxprop plugin using mysql engine Dec 16 04:41:04 ispc postfix/smtpd[1719461]: sql auxprop plugin using mysql engine Dec 16 04:41:04 ispc postfix/smtpd[1719463]: sql auxprop plugin using mysql engine Dec 16 04:41:04 ispc postfix/smtpd[1719464]: sql auxprop plugin using mysql engine Dec 16 04:41:18 ispc postfix/smtpd[1719474]: sql auxprop plugin using mysql engine Dec 16 04:41:18 ispc saslauthd[1719476]: pam_mysql - SELECT returned no result. Dec 16 04:41:18 ispc saslauthd[1719476]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:18 ispc saslauthd[1719476]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:18 ispc saslauthd[1719477]: pam_mysql - SELECT returned no result. Dec 16 04:41:18 ispc saslauthd[1719477]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:18 ispc saslauthd[1719477]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:18 ispc saslauthd[1719478]: pam_mysql - SELECT returned no result. Dec 16 04:41:18 ispc saslauthd[1719478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:18 ispc saslauthd[1719478]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:19 ispc saslauthd[1719479]: pam_mysql - SELECT returned no result. Dec 16 04:41:19 ispc saslauthd[1719479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:19 ispc saslauthd[1719479]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:19 ispc saslauthd[1719480]: pam_mysql - SELECT returned no result. Dec 16 04:41:19 ispc saslauthd[1719480]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:19 ispc saslauthd[1719480]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:19 ispc saslauthd[1719481]: pam_mysql - SELECT returned no result. Dec 16 04:41:19 ispc saslauthd[1719481]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:19 ispc saslauthd[1719481]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:20 ispc sshd[1719469]: Did not receive identification string from 61.40.158.106 Dec 16 04:41:21 ispc saslauthd[1719482]: pam_mysql - SELECT returned no result. Dec 16 04:41:21 ispc saslauthd[1719482]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:21 ispc saslauthd[1719482]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:41:22 ispc saslauthd[1719483]: pam_mysql - SELECT returned no result. Dec 16 04:41:22 ispc saslauthd[1719483]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:22 ispc saslauthd[1719483]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:25 ispc saslauthd[1719484]: pam_mysql - SELECT returned no result. Dec 16 04:41:25 ispc saslauthd[1719484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:25 ispc saslauthd[1719484]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:35 ispc saslauthd[1719490]: pam_mysql - SELECT returned no result. Dec 16 04:41:35 ispc saslauthd[1719490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:41:35 ispc saslauthd[1719490]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:41:53 ispc sshd[1719501]: Invalid user klape from 67.205.163.146 Dec 16 04:41:54 ispc sshd[1719503]: Invalid user ubuntu from 67.205.163.146 Dec 16 04:42:00 ispc saslauthd[1719510]: pam_mysql - SELECT returned no result. Dec 16 04:42:00 ispc saslauthd[1719510]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:42:00 ispc saslauthd[1719510]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:42:01 ispc CRON[1719511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:42:01 ispc CRON[1719511]: pam_unix(cron:session): session closed for user root Dec 16 04:42:46 ispc postfix/smtpd[1719546]: sql auxprop plugin using mysql engine Dec 16 04:43:01 ispc CRON[1719555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:43:02 ispc CRON[1719555]: pam_unix(cron:session): session closed for user root Dec 16 04:43:25 ispc sshd[1719571]: Invalid user NL5xUDpV2xRa from 61.40.158.106 Dec 16 04:44:01 ispc CRON[1719594]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:44:03 ispc CRON[1719594]: pam_unix(cron:session): session closed for user root Dec 16 04:45:01 ispc CRON[1719626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:45:01 ispc CRON[1719627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:45:01 ispc CRON[1719628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:45:01 ispc CRON[1719629]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:45:01 ispc CRON[1719627]: pam_unix(cron:session): session closed for user root Dec 16 04:45:01 ispc CRON[1719629]: pam_unix(cron:session): session closed for user getmail Dec 16 04:45:01 ispc CRON[1719628]: pam_unix(cron:session): session closed for user root Dec 16 04:45:03 ispc CRON[1719626]: pam_unix(cron:session): session closed for user root Dec 16 04:45:38 ispc postfix/smtpd[1719719]: sql auxprop plugin using mysql engine Dec 16 04:45:39 ispc saslauthd[1719721]: pam_mysql - SELECT returned no result. Dec 16 04:45:39 ispc saslauthd[1719721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:45:39 ispc saslauthd[1719721]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:45:40 ispc saslauthd[1719722]: pam_mysql - SELECT returned no result. Dec 16 04:45:40 ispc saslauthd[1719722]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:45:40 ispc saslauthd[1719722]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:45:57 ispc saslauthd[1719731]: pam_mysql - SELECT returned no result. Dec 16 04:45:57 ispc saslauthd[1719731]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:45:57 ispc saslauthd[1719731]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:46:01 ispc CRON[1719732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:46:02 ispc CRON[1719732]: pam_unix(cron:session): session closed for user root Dec 16 04:46:07 ispc sshd[1719747]: Invalid user blceu from 51.79.36.60 Dec 16 04:46:08 ispc saslauthd[1719755]: pam_mysql - SELECT returned no result. Dec 16 04:46:08 ispc saslauthd[1719755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:46:08 ispc saslauthd[1719755]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:46:36 ispc saslauthd[1719768]: pam_mysql - SELECT returned no result. Dec 16 04:46:36 ispc saslauthd[1719768]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:46:36 ispc saslauthd[1719768]: do_auth : auth failure: [user=test2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:46:37 ispc postfix/smtpd[1719769]: sql auxprop plugin using mysql engine Dec 16 04:46:37 ispc postfix/smtpd[1719771]: sql auxprop plugin using mysql engine Dec 16 04:46:38 ispc postfix/smtpd[1719772]: sql auxprop plugin using mysql engine Dec 16 04:46:47 ispc saslauthd[1719777]: pam_mysql - SELECT returned no result. Dec 16 04:46:47 ispc saslauthd[1719777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:46:47 ispc saslauthd[1719777]: do_auth : auth failure: [user=billy-bob] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:47:01 ispc CRON[1719784]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:47:02 ispc CRON[1719784]: pam_unix(cron:session): session closed for user root Dec 16 04:48:01 ispc CRON[1719827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:48:02 ispc CRON[1719827]: pam_unix(cron:session): session closed for user root Dec 16 04:49:01 ispc CRON[1719864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:49:01 ispc CRON[1719864]: pam_unix(cron:session): session closed for user root Dec 16 04:50:01 ispc CRON[1719902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:50:01 ispc CRON[1719903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:50:01 ispc CRON[1719904]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 04:50:01 ispc CRON[1719905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:50:01 ispc CRON[1719906]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:50:01 ispc CRON[1719904]: pam_unix(cron:session): session closed for user www-data Dec 16 04:50:01 ispc CRON[1719903]: pam_unix(cron:session): session closed for user root Dec 16 04:50:01 ispc CRON[1719906]: pam_unix(cron:session): session closed for user getmail Dec 16 04:50:02 ispc CRON[1719905]: pam_unix(cron:session): session closed for user root Dec 16 04:50:03 ispc CRON[1719902]: pam_unix(cron:session): session closed for user root Dec 16 04:50:09 ispc postfix/smtpd[1719985]: sql auxprop plugin using mysql engine Dec 16 04:50:10 ispc saslauthd[1719987]: pam_mysql - SELECT returned no result. Dec 16 04:50:10 ispc saslauthd[1719987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:50:10 ispc saslauthd[1719987]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:50:32 ispc saslauthd[1719996]: pam_mysql - SELECT returned no result. Dec 16 04:50:32 ispc saslauthd[1719996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:50:32 ispc saslauthd[1719996]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:51:01 ispc CRON[1720014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:51:01 ispc CRON[1720014]: pam_unix(cron:session): session closed for user root Dec 16 04:51:17 ispc sshd[1720035]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 04:52:01 ispc CRON[1720053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:52:02 ispc CRON[1720053]: pam_unix(cron:session): session closed for user root Dec 16 04:52:54 ispc postfix/smtpd[1720092]: sql auxprop plugin using mysql engine Dec 16 04:52:54 ispc saslauthd[1720094]: pam_mysql - SELECT returned no result. Dec 16 04:52:54 ispc saslauthd[1720094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:52:54 ispc saslauthd[1720094]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:53:01 ispc CRON[1720100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:53:03 ispc CRON[1720100]: pam_unix(cron:session): session closed for user root Dec 16 04:54:01 ispc CRON[1720135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:54:02 ispc CRON[1720135]: pam_unix(cron:session): session closed for user root Dec 16 04:54:03 ispc saslauthd[1720146]: pam_mysql - SELECT returned no result. Dec 16 04:54:03 ispc saslauthd[1720146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:54:03 ispc saslauthd[1720146]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:54:21 ispc sshd[1720158]: Invalid user klape from 200.32.52.150 Dec 16 04:54:23 ispc sshd[1720160]: Invalid user ubuntu from 200.32.52.150 Dec 16 04:54:30 ispc saslauthd[1720167]: pam_mysql - SELECT returned no result. Dec 16 04:54:30 ispc saslauthd[1720167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:54:30 ispc saslauthd[1720167]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 04:55:01 ispc CRON[1720180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:55:01 ispc CRON[1720181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:55:01 ispc CRON[1720182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:55:01 ispc CRON[1720183]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 04:55:01 ispc postfix/smtpd[1720188]: sql auxprop plugin using mysql engine Dec 16 04:55:01 ispc CRON[1720181]: pam_unix(cron:session): session closed for user root Dec 16 04:55:01 ispc CRON[1720183]: pam_unix(cron:session): session closed for user getmail Dec 16 04:55:01 ispc postfix/smtpd[1720201]: sql auxprop plugin using mysql engine Dec 16 04:55:01 ispc postfix/smtpd[1720206]: sql auxprop plugin using mysql engine Dec 16 04:55:02 ispc CRON[1720182]: pam_unix(cron:session): session closed for user root Dec 16 04:55:03 ispc CRON[1720180]: pam_unix(cron:session): session closed for user root Dec 16 04:55:40 ispc sshd[1720272]: Invalid user martof from 221.156.137.104 Dec 16 04:56:01 ispc CRON[1720282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:56:01 ispc CRON[1720282]: pam_unix(cron:session): session closed for user root Dec 16 04:56:24 ispc CRON[1719165]: pam_unix(cron:session): session closed for user root Dec 16 04:56:46 ispc postfix/smtpd[1720309]: sql auxprop plugin using mysql engine Dec 16 04:56:46 ispc postfix/smtpd[1720312]: sql auxprop plugin using mysql engine Dec 16 04:56:46 ispc postfix/smtpd[1720313]: sql auxprop plugin using mysql engine Dec 16 04:57:01 ispc CRON[1720314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:57:02 ispc CRON[1720314]: pam_unix(cron:session): session closed for user root Dec 16 04:58:01 ispc CRON[1720349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:58:02 ispc CRON[1720349]: pam_unix(cron:session): session closed for user root Dec 16 04:58:36 ispc saslauthd[1720366]: pam_mysql - SELECT returned no result. Dec 16 04:58:36 ispc saslauthd[1720366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 04:58:36 ispc saslauthd[1720366]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 04:59:01 ispc CRON[1720367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 04:59:02 ispc CRON[1720367]: pam_unix(cron:session): session closed for user root Dec 16 05:00:01 ispc CRON[1720381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:00:01 ispc CRON[1720382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:00:01 ispc CRON[1720383]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:00:01 ispc CRON[1720384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:00:01 ispc CRON[1720385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:00:01 ispc CRON[1720386]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:00:01 ispc CRON[1720383]: pam_unix(cron:session): session closed for user www-data Dec 16 05:00:01 ispc CRON[1720382]: pam_unix(cron:session): session closed for user root Dec 16 05:00:01 ispc CRON[1720386]: pam_unix(cron:session): session closed for user getmail Dec 16 05:00:02 ispc CRON[1720384]: pam_unix(cron:session): session closed for user root Dec 16 05:00:03 ispc CRON[1720381]: pam_unix(cron:session): session closed for user root Dec 16 05:00:20 ispc sshd[1720600]: Invalid user ziplines from 221.156.137.104 Dec 16 05:00:58 ispc CRON[1720385]: pam_unix(cron:session): session closed for user root Dec 16 05:01:01 ispc CRON[1720652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:01:11 ispc sshd[1720665]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 05:01:46 ispc saslauthd[1720684]: pam_mysql - SELECT returned no result. Dec 16 05:01:46 ispc saslauthd[1720684]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:01:46 ispc saslauthd[1720684]: do_auth : auth failure: [user=bin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:01:59 ispc saslauthd[1720689]: pam_mysql - SELECT returned no result. Dec 16 05:01:59 ispc saslauthd[1720689]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:01:59 ispc saslauthd[1720689]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:02:01 ispc CRON[1720690]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 05:02:01 ispc CRON[1720691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:02:02 ispc CRON[1720691]: pam_unix(cron:session): session closed for user root Dec 16 05:02:39 ispc saslauthd[1721355]: pam_mysql - SELECT returned no result. Dec 16 05:02:39 ispc saslauthd[1721355]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:02:39 ispc saslauthd[1721355]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:02:45 ispc postfix/smtpd[1721437]: sql auxprop plugin using mysql engine Dec 16 05:03:01 ispc CRON[1721554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:03:01 ispc CRON[1721554]: pam_unix(cron:session): session closed for user root Dec 16 05:03:08 ispc sshd[1721595]: Invalid user ziplines from 210.114.18.123 Dec 16 05:03:32 ispc CRON[1720690]: pam_unix(cron:session): session closed for user logcheck Dec 16 05:03:40 ispc postfix/smtpd[1721792]: sql auxprop plugin using mysql engine Dec 16 05:04:01 ispc CRON[1721806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:04:02 ispc CRON[1721806]: pam_unix(cron:session): session closed for user root Dec 16 05:04:44 ispc postfix/smtpd[1721834]: sql auxprop plugin using mysql engine Dec 16 05:04:44 ispc postfix/smtpd[1721836]: sql auxprop plugin using mysql engine Dec 16 05:04:44 ispc postfix/smtpd[1721837]: sql auxprop plugin using mysql engine Dec 16 05:05:01 ispc CRON[1721849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:05:01 ispc CRON[1721850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:05:01 ispc CRON[1721851]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:05:01 ispc CRON[1721848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:05:01 ispc CRON[1721849]: pam_unix(cron:session): session closed for user root Dec 16 05:05:01 ispc CRON[1721851]: pam_unix(cron:session): session closed for user getmail Dec 16 05:05:02 ispc CRON[1721850]: pam_unix(cron:session): session closed for user root Dec 16 05:05:02 ispc postfix/smtpd[1721897]: sql auxprop plugin using mysql engine Dec 16 05:05:02 ispc CRON[1721848]: pam_unix(cron:session): session closed for user root Dec 16 05:05:04 ispc saslauthd[1721925]: pam_mysql - SELECT returned no result. Dec 16 05:05:04 ispc saslauthd[1721925]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:05:04 ispc saslauthd[1721925]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:05:08 ispc saslauthd[1721931]: pam_mysql - SELECT returned no result. Dec 16 05:05:08 ispc saslauthd[1721931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:05:08 ispc saslauthd[1721931]: do_auth : auth failure: [user=info@zip-lines.eu] [service=smtp] [realm=zip-lines.eu] [mech=pam] [reason=PAM auth error] Dec 16 05:05:27 ispc sshd[1721937]: reverse mapping checking getaddrinfo for vps01.balloonhosting.com [78.46.80.6] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 05:05:27 ispc sshd[1721937]: Invalid user pronajemplosin from 78.46.80.6 Dec 16 05:05:45 ispc saslauthd[1721947]: pam_mysql - SELECT returned no result. Dec 16 05:05:45 ispc saslauthd[1721947]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:05:45 ispc saslauthd[1721947]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:06:01 ispc CRON[1721957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:06:03 ispc CRON[1721957]: pam_unix(cron:session): session closed for user root Dec 16 05:06:16 ispc postfix/smtpd[1721972]: sql auxprop plugin using mysql engine Dec 16 05:07:01 ispc CRON[1721992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:07:01 ispc CRON[1721992]: pam_unix(cron:session): session closed for user root Dec 16 05:07:45 ispc postfix/smtpd[1722027]: sql auxprop plugin using mysql engine Dec 16 05:07:46 ispc postfix/smtpd[1722028]: sql auxprop plugin using mysql engine Dec 16 05:07:52 ispc saslauthd[1722029]: pam_mysql - SELECT returned no result. Dec 16 05:07:52 ispc saslauthd[1722029]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:07:52 ispc saslauthd[1722029]: do_auth : auth failure: [user=control] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:08:01 ispc CRON[1722039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:08:03 ispc CRON[1722039]: pam_unix(cron:session): session closed for user root Dec 16 05:09:01 ispc CRON[1722076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:09:01 ispc CRON[1722077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:09:01 ispc CRON[1722076]: pam_unix(cron:session): session closed for user root Dec 16 05:09:01 ispc CRON[1722077]: pam_unix(cron:session): session closed for user root Dec 16 05:09:35 ispc saslauthd[1722110]: pam_mysql - SELECT returned no result. Dec 16 05:09:35 ispc saslauthd[1722110]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:09:35 ispc saslauthd[1722110]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:09:55 ispc postfix/smtpd[1722119]: sql auxprop plugin using mysql engine Dec 16 05:09:56 ispc saslauthd[1722121]: pam_mysql - SELECT returned no result. Dec 16 05:09:56 ispc saslauthd[1722121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:09:56 ispc saslauthd[1722121]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:10:01 ispc CRON[1722127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:10:01 ispc CRON[1722128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:10:01 ispc CRON[1722129]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:10:01 ispc CRON[1722130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:10:01 ispc CRON[1722131]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:10:01 ispc CRON[1722129]: pam_unix(cron:session): session closed for user www-data Dec 16 05:10:01 ispc CRON[1722128]: pam_unix(cron:session): session closed for user root Dec 16 05:10:01 ispc CRON[1722131]: pam_unix(cron:session): session closed for user getmail Dec 16 05:10:02 ispc CRON[1722130]: pam_unix(cron:session): session closed for user root Dec 16 05:10:03 ispc CRON[1722127]: pam_unix(cron:session): session closed for user root Dec 16 05:10:49 ispc saslauthd[1722225]: pam_mysql - SELECT returned no result. Dec 16 05:10:49 ispc saslauthd[1722225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:10:49 ispc saslauthd[1722225]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:11:01 ispc CRON[1722230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:11:02 ispc CRON[1722230]: pam_unix(cron:session): session closed for user root Dec 16 05:12:01 ispc CRON[1722266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:12:02 ispc CRON[1722266]: pam_unix(cron:session): session closed for user root Dec 16 05:12:36 ispc postfix/smtpd[1722290]: sql auxprop plugin using mysql engine Dec 16 05:12:37 ispc saslauthd[1722292]: pam_mysql - SELECT returned no result. Dec 16 05:12:37 ispc saslauthd[1722292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:12:37 ispc saslauthd[1722292]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:13:00 ispc postfix/smtpd[1722317]: sql auxprop plugin using mysql engine Dec 16 05:13:01 ispc CRON[1722323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:13:02 ispc CRON[1722323]: pam_unix(cron:session): session closed for user root Dec 16 05:13:48 ispc postfix/smtpd[1722352]: sql auxprop plugin using mysql engine Dec 16 05:13:48 ispc postfix/smtpd[1722354]: sql auxprop plugin using mysql engine Dec 16 05:14:01 ispc CRON[1722360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:14:02 ispc CRON[1722360]: pam_unix(cron:session): session closed for user root Dec 16 05:15:01 ispc CRON[1722399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:15:01 ispc CRON[1722400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:15:01 ispc CRON[1722401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:15:01 ispc CRON[1722402]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:15:01 ispc CRON[1722400]: pam_unix(cron:session): session closed for user root Dec 16 05:15:01 ispc CRON[1722402]: pam_unix(cron:session): session closed for user getmail Dec 16 05:15:01 ispc CRON[1722401]: pam_unix(cron:session): session closed for user root Dec 16 05:15:02 ispc CRON[1722399]: pam_unix(cron:session): session closed for user root Dec 16 05:16:01 ispc CRON[1722501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:16:02 ispc CRON[1722501]: pam_unix(cron:session): session closed for user root Dec 16 05:16:11 ispc postfix/smtpd[1722517]: sql auxprop plugin using mysql engine Dec 16 05:16:12 ispc saslauthd[1722519]: pam_mysql - SELECT returned no result. Dec 16 05:16:12 ispc saslauthd[1722519]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:16:12 ispc saslauthd[1722519]: do_auth : auth failure: [user=blue] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:16:33 ispc saslauthd[1722529]: pam_mysql - SELECT returned no result. Dec 16 05:16:33 ispc saslauthd[1722529]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:16:33 ispc saslauthd[1722529]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:16:47 ispc postfix/smtpd[1722539]: sql auxprop plugin using mysql engine Dec 16 05:16:59 ispc saslauthd[1722545]: pam_mysql - SELECT returned no result. Dec 16 05:16:59 ispc saslauthd[1722545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:16:59 ispc saslauthd[1722545]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:17:01 ispc CRON[1722546]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:17:01 ispc CRON[1722547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:17:02 ispc CRON[1722547]: pam_unix(cron:session): session closed for user root Dec 16 05:17:03 ispc CRON[1722546]: pam_unix(cron:session): session closed for user www-data Dec 16 05:17:25 ispc sshd[1722570]: Invalid user klape from 36.50.177.171 Dec 16 05:17:28 ispc sshd[1722572]: Invalid user ubuntu from 36.50.177.171 Dec 16 05:18:01 ispc CRON[1722597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:18:02 ispc CRON[1722597]: pam_unix(cron:session): session closed for user root Dec 16 05:18:17 ispc postfix/smtpd[1722617]: sql auxprop plugin using mysql engine Dec 16 05:18:18 ispc postfix/smtpd[1722619]: sql auxprop plugin using mysql engine Dec 16 05:18:27 ispc sshd[1722624]: Invalid user blceu from 139.59.66.222 Dec 16 05:19:01 ispc CRON[1722640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:19:01 ispc CRON[1722640]: pam_unix(cron:session): session closed for user root Dec 16 05:19:11 ispc sshd[1722655]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 05:20:01 ispc CRON[1722677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:20:01 ispc CRON[1722678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:20:01 ispc CRON[1722679]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:20:01 ispc CRON[1722680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:20:01 ispc CRON[1722681]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:20:01 ispc CRON[1722679]: pam_unix(cron:session): session closed for user www-data Dec 16 05:20:01 ispc CRON[1722678]: pam_unix(cron:session): session closed for user root Dec 16 05:20:01 ispc CRON[1722681]: pam_unix(cron:session): session closed for user getmail Dec 16 05:20:02 ispc CRON[1722680]: pam_unix(cron:session): session closed for user root Dec 16 05:20:02 ispc postfix/smtpd[1722707]: sql auxprop plugin using mysql engine Dec 16 05:20:03 ispc CRON[1722677]: pam_unix(cron:session): session closed for user root Dec 16 05:20:03 ispc saslauthd[1722757]: pam_mysql - SELECT returned no result. Dec 16 05:20:03 ispc saslauthd[1722757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:20:03 ispc saslauthd[1722757]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:21:01 ispc CRON[1722781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:21:01 ispc CRON[1722782]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:21:01 ispc CRON[1722781]: pam_unix(cron:session): session closed for user root Dec 16 05:21:03 ispc CRON[1722782]: pam_unix(cron:session): session closed for user root Dec 16 05:21:34 ispc CRON[1720652]: pam_unix(cron:session): session closed for user root Dec 16 05:21:39 ispc saslauthd[1722811]: pam_mysql - SELECT returned no result. Dec 16 05:21:39 ispc saslauthd[1722811]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:21:39 ispc saslauthd[1722811]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:22:01 ispc CRON[1722814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:22:02 ispc CRON[1722814]: pam_unix(cron:session): session closed for user root Dec 16 05:22:52 ispc saslauthd[1722837]: pam_mysql - SELECT returned no result. Dec 16 05:22:52 ispc saslauthd[1722837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:22:52 ispc saslauthd[1722837]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:23:01 ispc CRON[1722838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:23:03 ispc CRON[1722838]: pam_unix(cron:session): session closed for user root Dec 16 05:23:49 ispc saslauthd[1722851]: pam_mysql - SELECT returned no result. Dec 16 05:23:49 ispc saslauthd[1722851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:23:49 ispc saslauthd[1722851]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:23:53 ispc saslauthd[1722852]: pam_mysql - SELECT returned no result. Dec 16 05:23:53 ispc saslauthd[1722852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:23:53 ispc saslauthd[1722852]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:24:01 ispc CRON[1722853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:24:02 ispc CRON[1722853]: pam_unix(cron:session): session closed for user root Dec 16 05:24:13 ispc postfix/smtpd[1722865]: sql auxprop plugin using mysql engine Dec 16 05:24:14 ispc postfix/smtpd[1722867]: sql auxprop plugin using mysql engine Dec 16 05:24:14 ispc postfix/smtpd[1722868]: sql auxprop plugin using mysql engine Dec 16 05:24:19 ispc saslauthd[1722869]: pam_mysql - SELECT returned no result. Dec 16 05:24:19 ispc saslauthd[1722869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:24:19 ispc saslauthd[1722869]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:24:30 ispc saslauthd[1722870]: pam_mysql - SELECT returned no result. Dec 16 05:24:30 ispc saslauthd[1722870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:24:30 ispc saslauthd[1722870]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:24:42 ispc saslauthd[1722871]: pam_mysql - SELECT returned no result. Dec 16 05:24:42 ispc saslauthd[1722871]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:24:42 ispc saslauthd[1722871]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:24:50 ispc saslauthd[1722873]: pam_mysql - SELECT returned no result. Dec 16 05:24:50 ispc saslauthd[1722873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:24:50 ispc saslauthd[1722873]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:24:56 ispc saslauthd[1722875]: pam_mysql - SELECT returned no result. Dec 16 05:24:56 ispc saslauthd[1722875]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:24:56 ispc saslauthd[1722875]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:25:01 ispc CRON[1722876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:25:01 ispc CRON[1722877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:25:01 ispc CRON[1722878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:25:01 ispc CRON[1722879]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:25:02 ispc CRON[1722877]: pam_unix(cron:session): session closed for user root Dec 16 05:25:02 ispc CRON[1722879]: pam_unix(cron:session): session closed for user getmail Dec 16 05:25:03 ispc CRON[1722876]: pam_unix(cron:session): session closed for user root Dec 16 05:25:39 ispc CRON[1722878]: pam_unix(cron:session): session closed for user root Dec 16 05:25:50 ispc saslauthd[1722987]: pam_mysql - SELECT returned no result. Dec 16 05:25:50 ispc saslauthd[1722987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:25:50 ispc saslauthd[1722987]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:26:01 ispc CRON[1722988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:27:01 ispc CRON[1723024]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:27:01 ispc CRON[1723025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:27:02 ispc CRON[1723025]: pam_unix(cron:session): session closed for user root Dec 16 05:27:58 ispc CRON[1723024]: pam_unix(cron:session): session closed for user www-data Dec 16 05:28:01 ispc CRON[1723079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:28:02 ispc CRON[1723079]: pam_unix(cron:session): session closed for user root Dec 16 05:28:04 ispc postfix/smtpd[1723094]: sql auxprop plugin using mysql engine Dec 16 05:28:45 ispc postfix/smtpd[1723114]: sql auxprop plugin using mysql engine Dec 16 05:28:45 ispc saslauthd[1723119]: pam_mysql - SELECT returned no result. Dec 16 05:28:45 ispc saslauthd[1723119]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:28:45 ispc saslauthd[1723119]: do_auth : auth failure: [user=info@jkbs.cz] [service=smtp] [realm=jkbs.cz] [mech=pam] [reason=PAM auth error] Dec 16 05:28:54 ispc sshd[1723120]: Invalid user ziplines from 139.59.66.222 Dec 16 05:29:00 ispc sshd[1723126]: Invalid user martof from 211.57.200.145 Dec 16 05:29:01 ispc CRON[1723128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:29:02 ispc CRON[1723128]: pam_unix(cron:session): session closed for user root Dec 16 05:29:21 ispc sshd[1723149]: Invalid user pronajemplosin from 165.232.190.97 Dec 16 05:30:01 ispc CRON[1723174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:30:01 ispc CRON[1723175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:30:01 ispc CRON[1723176]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:30:01 ispc CRON[1723177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:30:01 ispc CRON[1723178]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:30:01 ispc CRON[1723176]: pam_unix(cron:session): session closed for user www-data Dec 16 05:30:01 ispc CRON[1723175]: pam_unix(cron:session): session closed for user root Dec 16 05:30:01 ispc CRON[1723178]: pam_unix(cron:session): session closed for user getmail Dec 16 05:30:02 ispc CRON[1723177]: pam_unix(cron:session): session closed for user root Dec 16 05:30:03 ispc CRON[1723174]: pam_unix(cron:session): session closed for user root Dec 16 05:30:04 ispc saslauthd[1723252]: pam_mysql - SELECT returned no result. Dec 16 05:30:04 ispc saslauthd[1723252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:30:04 ispc saslauthd[1723252]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:30:05 ispc postfix/smtpd[1723253]: sql auxprop plugin using mysql engine Dec 16 05:30:06 ispc postfix/smtpd[1723255]: sql auxprop plugin using mysql engine Dec 16 05:30:06 ispc postfix/smtpd[1723256]: sql auxprop plugin using mysql engine Dec 16 05:30:14 ispc saslauthd[1723261]: pam_mysql - SELECT returned no result. Dec 16 05:30:14 ispc saslauthd[1723261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:30:14 ispc saslauthd[1723261]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:30:30 ispc saslauthd[1723270]: pam_mysql - SELECT returned no result. Dec 16 05:30:30 ispc saslauthd[1723270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:30:30 ispc saslauthd[1723270]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:30:33 ispc sshd[1723271]: Invalid user martof from 51.91.247.10 Dec 16 05:31:01 ispc CRON[1723286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:31:02 ispc CRON[1723286]: pam_unix(cron:session): session closed for user root Dec 16 05:31:06 ispc postfix/smtpd[1723297]: sql auxprop plugin using mysql engine Dec 16 05:31:10 ispc saslauthd[1723303]: pam_mysql - SELECT returned no result. Dec 16 05:31:10 ispc saslauthd[1723303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:31:10 ispc saslauthd[1723303]: do_auth : auth failure: [user=boss] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:32:01 ispc CRON[1723325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:32:01 ispc CRON[1723325]: pam_unix(cron:session): session closed for user root Dec 16 05:32:13 ispc sshd[1723343]: Invalid user klape from 51.77.222.24 Dec 16 05:32:13 ispc sshd[1723346]: Invalid user ubuntu from 51.77.222.24 Dec 16 05:33:01 ispc CRON[1723375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:33:02 ispc CRON[1723375]: pam_unix(cron:session): session closed for user root Dec 16 05:34:01 ispc CRON[1723412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:34:02 ispc CRON[1723412]: pam_unix(cron:session): session closed for user root Dec 16 05:34:04 ispc postfix/smtpd[1723423]: sql auxprop plugin using mysql engine Dec 16 05:35:01 ispc CRON[1723456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:35:01 ispc CRON[1723457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:35:01 ispc CRON[1723458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:35:01 ispc CRON[1723459]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:35:01 ispc CRON[1723457]: pam_unix(cron:session): session closed for user root Dec 16 05:35:01 ispc CRON[1723459]: pam_unix(cron:session): session closed for user getmail Dec 16 05:35:02 ispc CRON[1723458]: pam_unix(cron:session): session closed for user root Dec 16 05:35:03 ispc CRON[1723456]: pam_unix(cron:session): session closed for user root Dec 16 05:35:10 ispc sshd[1723532]: Invalid user martof from 119.205.233.162 Dec 16 05:36:01 ispc CRON[1723557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:36:01 ispc CRON[1723557]: pam_unix(cron:session): session closed for user root Dec 16 05:36:45 ispc sshd[1723584]: Invalid user ubuntu from 13.70.185.98 Dec 16 05:37:01 ispc CRON[1723596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:37:02 ispc CRON[1723596]: pam_unix(cron:session): session closed for user root Dec 16 05:37:09 ispc postfix/smtpd[1723612]: sql auxprop plugin using mysql engine Dec 16 05:37:09 ispc saslauthd[1723614]: pam_mysql - SELECT returned no result. Dec 16 05:37:09 ispc saslauthd[1723614]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:09 ispc saslauthd[1723614]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:15 ispc postfix/smtpd[1723619]: sql auxprop plugin using mysql engine Dec 16 05:37:16 ispc postfix/smtpd[1723621]: sql auxprop plugin using mysql engine Dec 16 05:37:27 ispc sshd[1723627]: Invalid user capstan from 103.172.236.164 Dec 16 05:37:50 ispc sshd[1723639]: Invalid user martof from 43.135.148.156 Dec 16 05:37:52 ispc saslauthd[1723641]: pam_mysql - SELECT returned no result. Dec 16 05:37:52 ispc saslauthd[1723641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:52 ispc saslauthd[1723641]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:52 ispc postfix/smtpd[1723642]: sql auxprop plugin using mysql engine Dec 16 05:37:52 ispc saslauthd[1723643]: pam_mysql - SELECT returned no result. Dec 16 05:37:52 ispc saslauthd[1723643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:52 ispc saslauthd[1723643]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:52 ispc postfix/smtpd[1723644]: sql auxprop plugin using mysql engine Dec 16 05:37:53 ispc postfix/smtpd[1723645]: sql auxprop plugin using mysql engine Dec 16 05:37:53 ispc saslauthd[1723647]: pam_mysql - SELECT returned no result. Dec 16 05:37:53 ispc saslauthd[1723647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:53 ispc saslauthd[1723647]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:53 ispc saslauthd[1723651]: pam_mysql - SELECT returned no result. Dec 16 05:37:53 ispc saslauthd[1723651]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:53 ispc saslauthd[1723651]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:53 ispc saslauthd[1723653]: pam_mysql - SELECT returned no result. Dec 16 05:37:53 ispc saslauthd[1723653]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:53 ispc saslauthd[1723653]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:53 ispc saslauthd[1723652]: pam_mysql - SELECT returned no result. Dec 16 05:37:53 ispc saslauthd[1723652]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:53 ispc saslauthd[1723652]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:56 ispc saslauthd[1723663]: pam_mysql - SELECT returned no result. Dec 16 05:37:56 ispc saslauthd[1723663]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:56 ispc saslauthd[1723663]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:37:57 ispc saslauthd[1723669]: pam_mysql - SELECT returned no result. Dec 16 05:37:57 ispc saslauthd[1723669]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:37:57 ispc saslauthd[1723669]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:38:01 ispc CRON[1723670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:38:03 ispc CRON[1723670]: pam_unix(cron:session): session closed for user root Dec 16 05:38:10 ispc saslauthd[1723686]: pam_mysql - SELECT returned no result. Dec 16 05:38:10 ispc saslauthd[1723686]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:38:10 ispc saslauthd[1723686]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:38:33 ispc saslauthd[1723695]: pam_mysql - SELECT returned no result. Dec 16 05:38:33 ispc saslauthd[1723695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:38:33 ispc saslauthd[1723695]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:38:52 ispc sshd[1723704]: Invalid user martof from 51.159.91.86 Dec 16 05:39:01 ispc CRON[1723710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:39:01 ispc CRON[1723711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:39:01 ispc CRON[1723710]: pam_unix(cron:session): session closed for user root Dec 16 05:39:02 ispc CRON[1723711]: pam_unix(cron:session): session closed for user root Dec 16 05:39:59 ispc postfix/smtpd[1723756]: sql auxprop plugin using mysql engine Dec 16 05:39:59 ispc postfix/smtpd[1723758]: sql auxprop plugin using mysql engine Dec 16 05:39:59 ispc postfix/smtpd[1723759]: sql auxprop plugin using mysql engine Dec 16 05:40:01 ispc CRON[1723761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:40:01 ispc CRON[1723762]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:40:01 ispc CRON[1723763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:40:01 ispc CRON[1723764]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:40:01 ispc CRON[1723760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:40:01 ispc CRON[1723761]: pam_unix(cron:session): session closed for user root Dec 16 05:40:01 ispc CRON[1723762]: pam_unix(cron:session): session closed for user www-data Dec 16 05:40:01 ispc CRON[1723764]: pam_unix(cron:session): session closed for user getmail Dec 16 05:40:01 ispc CRON[1723763]: pam_unix(cron:session): session closed for user root Dec 16 05:40:03 ispc CRON[1723760]: pam_unix(cron:session): session closed for user root Dec 16 05:41:01 ispc CRON[1723869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:41:01 ispc CRON[1723869]: pam_unix(cron:session): session closed for user root Dec 16 05:41:38 ispc sshd[1723894]: Invalid user martof from 175.125.92.77 Dec 16 05:41:48 ispc postfix/smtpd[1723903]: sql auxprop plugin using mysql engine Dec 16 05:41:51 ispc saslauthd[1723909]: pam_mysql - SELECT returned no result. Dec 16 05:41:51 ispc saslauthd[1723909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:41:51 ispc saslauthd[1723909]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:41:51 ispc postfix/smtpd[1723910]: sql auxprop plugin using mysql engine Dec 16 05:41:51 ispc saslauthd[1723911]: pam_mysql - SELECT returned no result. Dec 16 05:41:51 ispc saslauthd[1723911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:41:51 ispc saslauthd[1723911]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:41:53 ispc saslauthd[1723912]: pam_mysql - SELECT returned no result. Dec 16 05:41:53 ispc saslauthd[1723912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:41:53 ispc saslauthd[1723912]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:42:01 ispc CRON[1723917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:42:02 ispc CRON[1723917]: pam_unix(cron:session): session closed for user root Dec 16 05:42:25 ispc saslauthd[1723936]: pam_mysql - SELECT returned no result. Dec 16 05:42:25 ispc saslauthd[1723936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:42:25 ispc saslauthd[1723936]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:43:01 ispc CRON[1723960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:43:02 ispc sshd[1723958]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 05:43:02 ispc CRON[1723960]: pam_unix(cron:session): session closed for user root Dec 16 05:44:01 ispc CRON[1723995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:44:02 ispc saslauthd[1724002]: pam_mysql - SELECT returned no result. Dec 16 05:44:02 ispc saslauthd[1724002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:44:02 ispc saslauthd[1724002]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:44:02 ispc CRON[1723995]: pam_unix(cron:session): session closed for user root Dec 16 05:44:40 ispc postfix/smtpd[1724025]: sql auxprop plugin using mysql engine Dec 16 05:44:40 ispc postfix/smtpd[1724027]: sql auxprop plugin using mysql engine Dec 16 05:44:40 ispc postfix/smtpd[1724028]: sql auxprop plugin using mysql engine Dec 16 05:45:01 ispc CRON[1724039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:45:01 ispc CRON[1724040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:45:01 ispc CRON[1724041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:45:01 ispc CRON[1724042]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:45:02 ispc CRON[1724040]: pam_unix(cron:session): session closed for user root Dec 16 05:45:02 ispc CRON[1724042]: pam_unix(cron:session): session closed for user getmail Dec 16 05:45:02 ispc CRON[1724041]: pam_unix(cron:session): session closed for user root Dec 16 05:45:03 ispc CRON[1724039]: pam_unix(cron:session): session closed for user root Dec 16 05:45:58 ispc sshd[1724141]: Invalid user matlbula from 89.32.248.113 Dec 16 05:46:01 ispc CRON[1724145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:46:02 ispc CRON[1724145]: pam_unix(cron:session): session closed for user root Dec 16 05:46:07 ispc postfix/smtpd[1724160]: sql auxprop plugin using mysql engine Dec 16 05:46:08 ispc saslauthd[1724161]: pam_mysql - SELECT returned no result. Dec 16 05:46:08 ispc saslauthd[1724161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:46:08 ispc saslauthd[1724161]: do_auth : auth failure: [user=both] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:46:10 ispc saslauthd[1724163]: pam_mysql - SELECT returned no result. Dec 16 05:46:10 ispc saslauthd[1724163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:46:10 ispc saslauthd[1724163]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:46:23 ispc postfix/smtpd[1724168]: sql auxprop plugin using mysql engine Dec 16 05:46:23 ispc postfix/smtpd[1724170]: sql auxprop plugin using mysql engine Dec 16 05:46:23 ispc postfix/smtpd[1724171]: sql auxprop plugin using mysql engine Dec 16 05:46:27 ispc CRON[1722988]: pam_unix(cron:session): session closed for user root Dec 16 05:46:33 ispc postfix/smtpd[1724177]: sql auxprop plugin using mysql engine Dec 16 05:47:01 ispc CRON[1724178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:47:02 ispc CRON[1724178]: pam_unix(cron:session): session closed for user root Dec 16 05:47:16 ispc sshd[1724190]: Invalid user blceu from 106.12.215.233 Dec 16 05:48:01 ispc CRON[1724201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:48:03 ispc CRON[1724201]: pam_unix(cron:session): session closed for user root Dec 16 05:48:07 ispc sshd[1724215]: Invalid user klape from 70.37.89.177 Dec 16 05:48:08 ispc sshd[1724217]: Invalid user ubuntu from 70.37.89.177 Dec 16 05:48:40 ispc postfix/smtpd[1724221]: sql auxprop plugin using mysql engine Dec 16 05:48:41 ispc postfix/smtpd[1724224]: sql auxprop plugin using mysql engine Dec 16 05:48:52 ispc sshd[1724225]: reverse mapping checking getaddrinfo for vps01.balloonhosting.com [78.46.80.6] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 05:48:52 ispc sshd[1724225]: Invalid user pronajemplosin from 78.46.80.6 Dec 16 05:49:01 ispc CRON[1724227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:49:02 ispc CRON[1724227]: pam_unix(cron:session): session closed for user root Dec 16 05:50:01 ispc CRON[1724245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:50:01 ispc CRON[1724246]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 05:50:01 ispc CRON[1724247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:50:01 ispc CRON[1724244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:50:01 ispc CRON[1724248]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:50:01 ispc CRON[1724245]: pam_unix(cron:session): session closed for user root Dec 16 05:50:01 ispc CRON[1724246]: pam_unix(cron:session): session closed for user www-data Dec 16 05:50:01 ispc CRON[1724248]: pam_unix(cron:session): session closed for user getmail Dec 16 05:50:02 ispc CRON[1724244]: pam_unix(cron:session): session closed for user root Dec 16 05:50:34 ispc CRON[1724247]: pam_unix(cron:session): session closed for user root Dec 16 05:50:36 ispc saslauthd[1724357]: pam_mysql - SELECT returned no result. Dec 16 05:50:36 ispc saslauthd[1724357]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:50:36 ispc saslauthd[1724357]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:50:57 ispc postfix/smtpd[1724358]: sql auxprop plugin using mysql engine Dec 16 05:50:58 ispc postfix/smtpd[1724361]: sql auxprop plugin using mysql engine Dec 16 05:50:58 ispc postfix/smtpd[1724362]: sql auxprop plugin using mysql engine Dec 16 05:51:01 ispc CRON[1724363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:51:40 ispc postfix/smtpd[1724387]: sql auxprop plugin using mysql engine Dec 16 05:52:01 ispc CRON[1724398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:52:02 ispc CRON[1724398]: pam_unix(cron:session): session closed for user root Dec 16 05:53:01 ispc CRON[1724442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:53:02 ispc CRON[1724442]: pam_unix(cron:session): session closed for user root Dec 16 05:53:37 ispc postfix/smtpd[1724471]: sql auxprop plugin using mysql engine Dec 16 05:53:37 ispc postfix/smtpd[1724473]: sql auxprop plugin using mysql engine Dec 16 05:53:38 ispc postfix/smtpd[1724474]: sql auxprop plugin using mysql engine Dec 16 05:54:01 ispc CRON[1724485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:54:02 ispc CRON[1724485]: pam_unix(cron:session): session closed for user root Dec 16 05:55:01 ispc CRON[1724522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:55:01 ispc CRON[1724523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:55:01 ispc CRON[1724524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:55:01 ispc CRON[1724525]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 05:55:01 ispc CRON[1724523]: pam_unix(cron:session): session closed for user root Dec 16 05:55:01 ispc CRON[1724525]: pam_unix(cron:session): session closed for user getmail Dec 16 05:55:02 ispc CRON[1724524]: pam_unix(cron:session): session closed for user root Dec 16 05:55:02 ispc CRON[1724522]: pam_unix(cron:session): session closed for user root Dec 16 05:56:00 ispc sshd[1724621]: Invalid user martof from 139.59.66.222 Dec 16 05:56:01 ispc CRON[1724627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:56:02 ispc CRON[1724627]: pam_unix(cron:session): session closed for user root Dec 16 05:56:42 ispc sshd[1724655]: Bad protocol version identification 'GET / HTTP/1.1' from 65.49.20.67 Dec 16 05:56:55 ispc postfix/smtpd[1724660]: sql auxprop plugin using mysql engine Dec 16 05:56:55 ispc saslauthd[1724662]: pam_mysql - SELECT returned no result. Dec 16 05:56:55 ispc saslauthd[1724662]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:56:55 ispc saslauthd[1724662]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:57:01 ispc CRON[1724667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:57:02 ispc CRON[1724667]: pam_unix(cron:session): session closed for user root Dec 16 05:57:20 ispc saslauthd[1724682]: pam_mysql - SELECT returned no result. Dec 16 05:57:20 ispc saslauthd[1724682]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:57:20 ispc saslauthd[1724682]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:57:36 ispc postfix/smtpd[1724691]: sql auxprop plugin using mysql engine Dec 16 05:57:48 ispc sshd[1724704]: Invalid user klape from 103.164.20.29 Dec 16 05:57:49 ispc sshd[1724706]: Invalid user ubuntu from 103.164.20.29 Dec 16 05:58:01 ispc CRON[1724717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:58:01 ispc CRON[1724717]: pam_unix(cron:session): session closed for user root Dec 16 05:58:27 ispc saslauthd[1724740]: pam_mysql - SELECT returned no result. Dec 16 05:58:27 ispc saslauthd[1724740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 05:58:27 ispc saslauthd[1724740]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 05:59:01 ispc CRON[1724753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 05:59:02 ispc CRON[1724753]: pam_unix(cron:session): session closed for user root Dec 16 06:00:01 ispc CRON[1724789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:00:01 ispc CRON[1724790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:00:01 ispc CRON[1724791]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:00:01 ispc CRON[1724792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:00:01 ispc CRON[1724793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:00:01 ispc CRON[1724794]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:00:01 ispc CRON[1724790]: pam_unix(cron:session): session closed for user root Dec 16 06:00:01 ispc CRON[1724791]: pam_unix(cron:session): session closed for user www-data Dec 16 06:00:01 ispc CRON[1724794]: pam_unix(cron:session): session closed for user getmail Dec 16 06:00:03 ispc CRON[1724793]: pam_unix(cron:session): session closed for user root Dec 16 06:00:03 ispc CRON[1724792]: pam_unix(cron:session): session closed for user root Dec 16 06:00:03 ispc CRON[1724789]: pam_unix(cron:session): session closed for user root Dec 16 06:01:01 ispc CRON[1724973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:01:02 ispc CRON[1724973]: pam_unix(cron:session): session closed for user root Dec 16 06:01:03 ispc postfix/smtpd[1724984]: sql auxprop plugin using mysql engine Dec 16 06:01:04 ispc saslauthd[1724986]: pam_mysql - SELECT returned no result. Dec 16 06:01:04 ispc saslauthd[1724986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:01:04 ispc saslauthd[1724986]: do_auth : auth failure: [user=bpel] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:02:01 ispc CRON[1725012]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 06:02:01 ispc CRON[1725013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:02:02 ispc CRON[1725013]: pam_unix(cron:session): session closed for user root Dec 16 06:03:01 ispc CRON[1725869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:03:02 ispc CRON[1725869]: pam_unix(cron:session): session closed for user root Dec 16 06:03:20 ispc postfix/smtpd[1725951]: sql auxprop plugin using mysql engine Dec 16 06:03:21 ispc postfix/smtpd[1725954]: sql auxprop plugin using mysql engine Dec 16 06:03:21 ispc postfix/smtpd[1725957]: sql auxprop plugin using mysql engine Dec 16 06:03:21 ispc postfix/smtpd[1725959]: sql auxprop plugin using mysql engine Dec 16 06:03:36 ispc CRON[1725012]: pam_unix(cron:session): session closed for user logcheck Dec 16 06:03:50 ispc postfix/smtpd[1726100]: sql auxprop plugin using mysql engine Dec 16 06:04:01 ispc CRON[1726112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:04:01 ispc CRON[1726112]: pam_unix(cron:session): session closed for user root Dec 16 06:04:05 ispc sshd[1726123]: Invalid user blceu from 220.196.191.58 Dec 16 06:04:06 ispc saslauthd[1726125]: pam_mysql - SELECT returned no result. Dec 16 06:04:06 ispc saslauthd[1726125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:04:06 ispc saslauthd[1726125]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:05:01 ispc CRON[1726152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:05:01 ispc CRON[1726153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:05:01 ispc CRON[1726154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:05:01 ispc CRON[1726155]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:05:02 ispc CRON[1726153]: pam_unix(cron:session): session closed for user root Dec 16 06:05:02 ispc CRON[1726155]: pam_unix(cron:session): session closed for user getmail Dec 16 06:05:02 ispc CRON[1726154]: pam_unix(cron:session): session closed for user root Dec 16 06:05:03 ispc CRON[1726152]: pam_unix(cron:session): session closed for user root Dec 16 06:05:48 ispc sshd[1726249]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:05:50 ispc sshd[1726251]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:05:50 ispc sshd[1726251]: Invalid user klape from 189.89.20.45 Dec 16 06:05:51 ispc sshd[1726253]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:05:51 ispc sshd[1726253]: Invalid user ubuntu from 189.89.20.45 Dec 16 06:06:01 ispc CRON[1726261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:06:01 ispc CRON[1726261]: pam_unix(cron:session): session closed for user root Dec 16 06:06:27 ispc sshd[1726284]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:06:27 ispc sshd[1726284]: Invalid user martof from 114.7.163.154 Dec 16 06:06:57 ispc postfix/smtpd[1726298]: sql auxprop plugin using mysql engine Dec 16 06:06:57 ispc saslauthd[1726300]: pam_mysql - SELECT returned no result. Dec 16 06:06:57 ispc saslauthd[1726300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:06:57 ispc saslauthd[1726300]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:07:01 ispc CRON[1726301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:07:02 ispc CRON[1726301]: pam_unix(cron:session): session closed for user root Dec 16 06:07:31 ispc sshd[1726324]: Invalid user blceu from 175.125.92.77 Dec 16 06:08:01 ispc CRON[1726349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:08:02 ispc CRON[1726349]: pam_unix(cron:session): session closed for user root Dec 16 06:08:33 ispc sshd[1726373]: Invalid user ziplines from 175.125.92.77 Dec 16 06:08:41 ispc postfix/smtpd[1726379]: sql auxprop plugin using mysql engine Dec 16 06:08:59 ispc sshd[1726390]: Invalid user ziplines from 43.135.148.156 Dec 16 06:09:01 ispc CRON[1726392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:09:01 ispc CRON[1726393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:09:01 ispc CRON[1726392]: pam_unix(cron:session): session closed for user root Dec 16 06:09:01 ispc CRON[1726393]: pam_unix(cron:session): session closed for user root Dec 16 06:09:19 ispc sshd[1726422]: Invalid user matlbula from 51.159.18.215 Dec 16 06:10:01 ispc CRON[1726442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:10:01 ispc CRON[1726443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:10:01 ispc CRON[1726444]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:10:01 ispc CRON[1726445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:10:01 ispc CRON[1726446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:10:01 ispc CRON[1726443]: pam_unix(cron:session): session closed for user root Dec 16 06:10:01 ispc CRON[1726444]: pam_unix(cron:session): session closed for user www-data Dec 16 06:10:02 ispc CRON[1726446]: pam_unix(cron:session): session closed for user getmail Dec 16 06:10:02 ispc CRON[1726445]: pam_unix(cron:session): session closed for user root Dec 16 06:10:03 ispc CRON[1726442]: pam_unix(cron:session): session closed for user root Dec 16 06:10:35 ispc sshd[1726528]: Invalid user ubuntu from 40.127.67.83 Dec 16 06:10:52 ispc postfix/smtpd[1726543]: sql auxprop plugin using mysql engine Dec 16 06:10:53 ispc saslauthd[1726545]: pam_mysql - SELECT returned no result. Dec 16 06:10:53 ispc saslauthd[1726545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:10:53 ispc saslauthd[1726545]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:11:01 ispc CRON[1726550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:11:02 ispc CRON[1726550]: pam_unix(cron:session): session closed for user root Dec 16 06:11:24 ispc sshd[1726570]: Did not receive identification string from 45.140.17.97 Dec 16 06:11:30 ispc CRON[1724363]: pam_unix(cron:session): session closed for user root Dec 16 06:11:52 ispc sshd[1726575]: Invalid user blceu from 43.135.148.156 Dec 16 06:11:54 ispc sshd[1726577]: Invalid user ziplines from 51.159.91.86 Dec 16 06:12:01 ispc CRON[1726579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:12:02 ispc CRON[1726579]: pam_unix(cron:session): session closed for user root Dec 16 06:12:50 ispc sshd[1726601]: Invalid user blceu from 51.91.247.10 Dec 16 06:13:01 ispc CRON[1726603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:13:02 ispc CRON[1726603]: pam_unix(cron:session): session closed for user root Dec 16 06:14:01 ispc CRON[1726617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:14:03 ispc CRON[1726617]: pam_unix(cron:session): session closed for user root Dec 16 06:15:01 ispc CRON[1726631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:15:01 ispc CRON[1726632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:15:01 ispc CRON[1726633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:15:01 ispc CRON[1726634]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:15:01 ispc CRON[1726632]: pam_unix(cron:session): session closed for user root Dec 16 06:15:01 ispc CRON[1726634]: pam_unix(cron:session): session closed for user getmail Dec 16 06:15:02 ispc CRON[1726631]: pam_unix(cron:session): session closed for user root Dec 16 06:15:48 ispc CRON[1726633]: pam_unix(cron:session): session closed for user root Dec 16 06:16:01 ispc CRON[1726817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:16:08 ispc saslauthd[1726829]: pam_mysql - SELECT returned no result. Dec 16 06:16:08 ispc saslauthd[1726829]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:16:08 ispc saslauthd[1726829]: do_auth : auth failure: [user=browse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:16:41 ispc sshd[1726842]: Invalid user blceu from 51.159.91.86 Dec 16 06:17:01 ispc CRON[1726852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:17:02 ispc CRON[1726852]: pam_unix(cron:session): session closed for user root Dec 16 06:17:25 ispc saslauthd[1726876]: pam_mysql - SELECT returned no result. Dec 16 06:17:25 ispc saslauthd[1726876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:17:25 ispc saslauthd[1726876]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:17:29 ispc saslauthd[1726877]: pam_mysql - SELECT returned no result. Dec 16 06:17:29 ispc saslauthd[1726877]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:17:29 ispc saslauthd[1726877]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:18:01 ispc CRON[1726900]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 06:18:01 ispc CRON[1726901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:18:03 ispc CRON[1726901]: pam_unix(cron:session): session closed for user root Dec 16 06:18:06 ispc sshd[1726920]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:18:07 ispc CRON[1726900]: pam_unix(cron:session): session closed for user amavis Dec 16 06:18:09 ispc postfix/smtpd[1726930]: sql auxprop plugin using mysql engine Dec 16 06:18:25 ispc postfix/smtpd[1726941]: sql auxprop plugin using mysql engine Dec 16 06:18:25 ispc postfix/smtpd[1726943]: sql auxprop plugin using mysql engine Dec 16 06:18:26 ispc postfix/smtpd[1726944]: sql auxprop plugin using mysql engine Dec 16 06:19:01 ispc CRON[1726959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:19:02 ispc CRON[1726959]: pam_unix(cron:session): session closed for user root Dec 16 06:20:01 ispc CRON[1726999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:20:01 ispc CRON[1727000]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:20:01 ispc CRON[1726996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:20:01 ispc CRON[1726997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:20:01 ispc CRON[1726998]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:20:01 ispc CRON[1726997]: pam_unix(cron:session): session closed for user root Dec 16 06:20:01 ispc CRON[1726998]: pam_unix(cron:session): session closed for user www-data Dec 16 06:20:01 ispc CRON[1727000]: pam_unix(cron:session): session closed for user getmail Dec 16 06:20:02 ispc CRON[1726999]: pam_unix(cron:session): session closed for user root Dec 16 06:20:03 ispc postfix/smtpd[1727049]: sql auxprop plugin using mysql engine Dec 16 06:20:03 ispc saslauthd[1727064]: pam_mysql - SELECT returned no result. Dec 16 06:20:03 ispc saslauthd[1727064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:20:03 ispc saslauthd[1727064]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:20:03 ispc CRON[1726996]: pam_unix(cron:session): session closed for user root Dec 16 06:20:05 ispc saslauthd[1727080]: pam_mysql - SELECT returned no result. Dec 16 06:20:05 ispc saslauthd[1727080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:20:05 ispc saslauthd[1727080]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:20:18 ispc saslauthd[1727087]: pam_mysql - SELECT returned no result. Dec 16 06:20:18 ispc saslauthd[1727087]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:20:18 ispc saslauthd[1727087]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:20:30 ispc saslauthd[1727092]: pam_mysql - SELECT returned no result. Dec 16 06:20:30 ispc saslauthd[1727092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:20:30 ispc saslauthd[1727092]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:20:39 ispc saslauthd[1727098]: pam_mysql - SELECT returned no result. Dec 16 06:20:39 ispc saslauthd[1727098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:20:39 ispc saslauthd[1727098]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:20:50 ispc sshd[1727103]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:20:50 ispc sshd[1727103]: Invalid user blceu from 193.110.157.47 Dec 16 06:21:01 ispc CRON[1727109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:21:01 ispc CRON[1727110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:21:02 ispc CRON[1727109]: pam_unix(cron:session): session closed for user root Dec 16 06:21:02 ispc CRON[1727110]: pam_unix(cron:session): session closed for user root Dec 16 06:22:01 ispc CRON[1727148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:22:02 ispc CRON[1727148]: pam_unix(cron:session): session closed for user root Dec 16 06:22:16 ispc saslauthd[1727165]: pam_mysql - SELECT returned no result. Dec 16 06:22:16 ispc saslauthd[1727165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:22:16 ispc saslauthd[1727165]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:23:01 ispc CRON[1727199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:23:01 ispc CRON[1727199]: pam_unix(cron:session): session closed for user root Dec 16 06:24:01 ispc CRON[1727241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:24:02 ispc CRON[1727241]: pam_unix(cron:session): session closed for user root Dec 16 06:24:06 ispc postfix/smtpd[1727252]: sql auxprop plugin using mysql engine Dec 16 06:24:07 ispc saslauthd[1727254]: pam_mysql - SELECT returned no result. Dec 16 06:24:07 ispc saslauthd[1727254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:24:07 ispc saslauthd[1727254]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:24:39 ispc sshd[1727268]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:25:00 ispc postfix/smtpd[1727280]: sql auxprop plugin using mysql engine Dec 16 06:25:00 ispc postfix/smtpd[1727283]: sql auxprop plugin using mysql engine Dec 16 06:25:01 ispc CRON[1727290]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:25:01 ispc CRON[1727287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:25:01 ispc CRON[1727288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:25:01 ispc CRON[1727289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:25:01 ispc CRON[1727288]: pam_unix(cron:session): session closed for user root Dec 16 06:25:01 ispc CRON[1727290]: pam_unix(cron:session): session closed for user getmail Dec 16 06:25:02 ispc CRON[1727289]: pam_unix(cron:session): session closed for user root Dec 16 06:25:03 ispc CRON[1727287]: pam_unix(cron:session): session closed for user root Dec 16 06:25:25 ispc sshd[1727371]: Invalid user ziplines from 211.57.200.145 Dec 16 06:26:01 ispc CRON[1727388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:26:03 ispc CRON[1727388]: pam_unix(cron:session): session closed for user root Dec 16 06:26:30 ispc sshd[1727413]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:26:30 ispc sshd[1727413]: Invalid user zednictvistastny from 103.112.245.93 Dec 16 06:27:01 ispc CRON[1727427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:27:01 ispc CRON[1727427]: pam_unix(cron:session): session closed for user root Dec 16 06:28:01 ispc CRON[1727471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:28:02 ispc CRON[1727471]: pam_unix(cron:session): session closed for user root Dec 16 06:28:57 ispc postfix/smtpd[1727510]: sql auxprop plugin using mysql engine Dec 16 06:28:57 ispc saslauthd[1727513]: pam_mysql - SELECT returned no result. Dec 16 06:28:57 ispc saslauthd[1727513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:28:57 ispc saslauthd[1727513]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:29:01 ispc CRON[1727514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:29:02 ispc CRON[1727514]: pam_unix(cron:session): session closed for user root Dec 16 06:29:14 ispc sshd[1727529]: Invalid user ziplines from 211.45.175.153 Dec 16 06:30:01 ispc CRON[1727553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:30:01 ispc CRON[1727554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:30:01 ispc CRON[1727555]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:30:01 ispc CRON[1727556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:30:01 ispc CRON[1727557]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:30:01 ispc CRON[1727555]: pam_unix(cron:session): session closed for user www-data Dec 16 06:30:01 ispc CRON[1727554]: pam_unix(cron:session): session closed for user root Dec 16 06:30:02 ispc CRON[1727557]: pam_unix(cron:session): session closed for user getmail Dec 16 06:30:03 ispc CRON[1727556]: pam_unix(cron:session): session closed for user root Dec 16 06:30:03 ispc CRON[1727553]: pam_unix(cron:session): session closed for user root Dec 16 06:30:16 ispc postfix/smtpd[1727635]: sql auxprop plugin using mysql engine Dec 16 06:30:17 ispc postfix/smtpd[1727637]: sql auxprop plugin using mysql engine Dec 16 06:30:17 ispc postfix/smtpd[1727638]: sql auxprop plugin using mysql engine Dec 16 06:30:38 ispc saslauthd[1727647]: pam_mysql - SELECT returned no result. Dec 16 06:30:38 ispc saslauthd[1727647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:30:38 ispc saslauthd[1727647]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:31:01 ispc CRON[1727661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:31:02 ispc CRON[1727661]: pam_unix(cron:session): session closed for user root Dec 16 06:31:10 ispc saslauthd[1727676]: pam_mysql - SELECT returned no result. Dec 16 06:31:10 ispc saslauthd[1727676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:31:10 ispc saslauthd[1727676]: do_auth : auth failure: [user=bsxuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:32:01 ispc CRON[1727698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:32:02 ispc CRON[1727698]: pam_unix(cron:session): session closed for user root Dec 16 06:32:27 ispc sshd[1727717]: Invalid user pronajemplosin from 112.217.233.242 Dec 16 06:33:01 ispc CRON[1727739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:33:02 ispc CRON[1727739]: pam_unix(cron:session): session closed for user root Dec 16 06:34:01 ispc CRON[1727776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:34:02 ispc CRON[1727776]: pam_unix(cron:session): session closed for user root Dec 16 06:34:24 ispc postfix/smtpd[1727796]: sql auxprop plugin using mysql engine Dec 16 06:34:24 ispc postfix/smtpd[1727798]: sql auxprop plugin using mysql engine Dec 16 06:34:24 ispc postfix/smtpd[1727799]: sql auxprop plugin using mysql engine Dec 16 06:34:24 ispc postfix/smtpd[1727800]: sql auxprop plugin using mysql engine Dec 16 06:34:24 ispc postfix/smtpd[1727801]: sql auxprop plugin using mysql engine Dec 16 06:34:25 ispc saslauthd[1727802]: pam_mysql - SELECT returned no result. Dec 16 06:34:25 ispc saslauthd[1727802]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:25 ispc saslauthd[1727802]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:25 ispc saslauthd[1727807]: pam_mysql - SELECT returned no result. Dec 16 06:34:25 ispc saslauthd[1727807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:25 ispc saslauthd[1727807]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:25 ispc saslauthd[1727808]: pam_mysql - SELECT returned no result. Dec 16 06:34:25 ispc saslauthd[1727808]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:25 ispc saslauthd[1727808]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:25 ispc saslauthd[1727809]: pam_mysql - SELECT returned no result. Dec 16 06:34:25 ispc saslauthd[1727809]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:25 ispc saslauthd[1727809]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:26 ispc saslauthd[1727810]: pam_mysql - SELECT returned no result. Dec 16 06:34:26 ispc saslauthd[1727810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:26 ispc saslauthd[1727810]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:26 ispc saslauthd[1727811]: pam_mysql - SELECT returned no result. Dec 16 06:34:26 ispc saslauthd[1727811]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:26 ispc saslauthd[1727811]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:28 ispc saslauthd[1727812]: pam_mysql - SELECT returned no result. Dec 16 06:34:28 ispc saslauthd[1727812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:28 ispc saslauthd[1727812]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:29 ispc saslauthd[1727813]: pam_mysql - SELECT returned no result. Dec 16 06:34:29 ispc saslauthd[1727813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:29 ispc saslauthd[1727813]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:34:42 ispc saslauthd[1727818]: pam_mysql - SELECT returned no result. Dec 16 06:34:42 ispc saslauthd[1727818]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:34:42 ispc saslauthd[1727818]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:35:01 ispc CRON[1727829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:35:01 ispc CRON[1727830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:35:01 ispc CRON[1727831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:35:01 ispc CRON[1727832]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:35:01 ispc CRON[1727830]: pam_unix(cron:session): session closed for user root Dec 16 06:35:01 ispc CRON[1727832]: pam_unix(cron:session): session closed for user getmail Dec 16 06:35:03 ispc CRON[1727831]: pam_unix(cron:session): session closed for user root Dec 16 06:35:04 ispc CRON[1727829]: pam_unix(cron:session): session closed for user root Dec 16 06:35:08 ispc saslauthd[1727911]: pam_mysql - SELECT returned no result. Dec 16 06:35:08 ispc saslauthd[1727911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:35:08 ispc saslauthd[1727911]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:35:53 ispc sshd[1727931]: Invalid user capstan from 103.172.236.164 Dec 16 06:36:01 ispc CRON[1727937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:36:02 ispc CRON[1727937]: pam_unix(cron:session): session closed for user root Dec 16 06:36:28 ispc CRON[1726817]: pam_unix(cron:session): session closed for user root Dec 16 06:37:01 ispc CRON[1727960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:37:02 ispc CRON[1727960]: pam_unix(cron:session): session closed for user root Dec 16 06:37:21 ispc saslauthd[1727973]: pam_mysql - SELECT returned no result. Dec 16 06:37:21 ispc saslauthd[1727973]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:37:21 ispc saslauthd[1727973]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:38:01 ispc CRON[1727990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:38:04 ispc CRON[1727990]: pam_unix(cron:session): session closed for user root Dec 16 06:38:22 ispc saslauthd[1728001]: pam_mysql - SELECT returned no result. Dec 16 06:38:22 ispc saslauthd[1728001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:38:22 ispc saslauthd[1728001]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:38:26 ispc saslauthd[1728002]: pam_mysql - SELECT returned no result. Dec 16 06:38:26 ispc saslauthd[1728002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:38:26 ispc saslauthd[1728002]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:39:01 ispc CRON[1728004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:39:01 ispc CRON[1728005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:39:01 ispc CRON[1728004]: pam_unix(cron:session): session closed for user root Dec 16 06:39:02 ispc CRON[1728005]: pam_unix(cron:session): session closed for user root Dec 16 06:39:23 ispc sshd[1728028]: Invalid user blceu from 35.239.77.168 Dec 16 06:39:42 ispc sshd[1728032]: Invalid user blceu from 221.156.137.104 Dec 16 06:40:01 ispc CRON[1728034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:40:01 ispc CRON[1728035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:40:01 ispc CRON[1728036]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:40:01 ispc CRON[1728037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:40:01 ispc CRON[1728038]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:40:01 ispc CRON[1728035]: pam_unix(cron:session): session closed for user root Dec 16 06:40:01 ispc CRON[1728036]: pam_unix(cron:session): session closed for user www-data Dec 16 06:40:01 ispc CRON[1728038]: pam_unix(cron:session): session closed for user getmail Dec 16 06:40:02 ispc CRON[1728034]: pam_unix(cron:session): session closed for user root Dec 16 06:40:20 ispc saslauthd[1728146]: pam_mysql - SELECT returned no result. Dec 16 06:40:20 ispc saslauthd[1728146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:40:20 ispc saslauthd[1728146]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:40:41 ispc CRON[1728037]: pam_unix(cron:session): session closed for user root Dec 16 06:41:01 ispc CRON[1728148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:41:42 ispc saslauthd[1728172]: pam_mysql - SELECT returned no result. Dec 16 06:41:42 ispc saslauthd[1728172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:41:42 ispc saslauthd[1728172]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:42:01 ispc CRON[1728182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:42:02 ispc CRON[1728182]: pam_unix(cron:session): session closed for user root Dec 16 06:42:03 ispc saslauthd[1728193]: pam_mysql - SELECT returned no result. Dec 16 06:42:03 ispc saslauthd[1728193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:42:03 ispc saslauthd[1728193]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:43:01 ispc CRON[1728227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:43:02 ispc CRON[1728227]: pam_unix(cron:session): session closed for user root Dec 16 06:43:35 ispc saslauthd[1728250]: pam_mysql - SELECT returned no result. Dec 16 06:43:35 ispc saslauthd[1728250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:43:35 ispc saslauthd[1728250]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:43:39 ispc sshd[1728255]: Did not receive identification string from 113.20.111.142 Dec 16 06:43:41 ispc sshd[1728256]: Did not receive identification string from 113.20.111.142 Dec 16 06:43:52 ispc sshd[1728257]: reverse mapping checking getaddrinfo for static.cmcti.vn [113.20.111.142] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:43:52 ispc sshd[1728257]: Invalid user admin from 113.20.111.142 Dec 16 06:44:01 ispc CRON[1728267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:44:02 ispc CRON[1728267]: pam_unix(cron:session): session closed for user root Dec 16 06:45:01 ispc CRON[1728303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:45:01 ispc CRON[1728304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:45:01 ispc CRON[1728305]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:45:01 ispc CRON[1728302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:45:01 ispc CRON[1728303]: pam_unix(cron:session): session closed for user root Dec 16 06:45:01 ispc CRON[1728305]: pam_unix(cron:session): session closed for user getmail Dec 16 06:45:02 ispc CRON[1728304]: pam_unix(cron:session): session closed for user root Dec 16 06:45:03 ispc CRON[1728302]: pam_unix(cron:session): session closed for user root Dec 16 06:45:32 ispc sshd[1728392]: Invalid user ziplines from 45.119.213.109 Dec 16 06:46:01 ispc CRON[1728407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:46:02 ispc CRON[1728407]: pam_unix(cron:session): session closed for user root Dec 16 06:46:09 ispc postfix/smtpd[1728420]: sql auxprop plugin using mysql engine Dec 16 06:46:12 ispc saslauthd[1728426]: pam_mysql - SELECT returned no result. Dec 16 06:46:12 ispc saslauthd[1728426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:46:12 ispc saslauthd[1728426]: do_auth : auth failure: [user=bubba] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:46:17 ispc postfix/smtpd[1728427]: sql auxprop plugin using mysql engine Dec 16 06:47:01 ispc CRON[1728452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:47:02 ispc CRON[1728452]: pam_unix(cron:session): session closed for user root Dec 16 06:47:03 ispc postfix/smtpd[1728463]: sql auxprop plugin using mysql engine Dec 16 06:47:42 ispc sshd[1728488]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:47:42 ispc sshd[1728488]: Invalid user ziplines from 114.7.163.154 Dec 16 06:48:01 ispc CRON[1728507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:48:03 ispc CRON[1728507]: pam_unix(cron:session): session closed for user root Dec 16 06:48:41 ispc sshd[1728531]: Invalid user martof from 45.119.213.109 Dec 16 06:48:45 ispc postfix/smtpd[1728537]: sql auxprop plugin using mysql engine Dec 16 06:48:46 ispc saslauthd[1728539]: pam_mysql - SELECT returned no result. Dec 16 06:48:46 ispc saslauthd[1728539]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:48:46 ispc saslauthd[1728539]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:49:01 ispc CRON[1728544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:49:02 ispc CRON[1728544]: pam_unix(cron:session): session closed for user root Dec 16 06:50:01 ispc CRON[1728581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:50:01 ispc CRON[1728582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:50:01 ispc CRON[1728583]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 06:50:01 ispc CRON[1728584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:50:01 ispc CRON[1728585]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:50:01 ispc CRON[1728583]: pam_unix(cron:session): session closed for user www-data Dec 16 06:50:01 ispc CRON[1728582]: pam_unix(cron:session): session closed for user root Dec 16 06:50:01 ispc CRON[1728585]: pam_unix(cron:session): session closed for user getmail Dec 16 06:50:02 ispc CRON[1728584]: pam_unix(cron:session): session closed for user root Dec 16 06:50:03 ispc CRON[1728581]: pam_unix(cron:session): session closed for user root Dec 16 06:51:01 ispc CRON[1728684]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:51:02 ispc CRON[1728684]: pam_unix(cron:session): session closed for user root Dec 16 06:51:51 ispc sshd[1728717]: Invalid user blceu from 119.205.233.162 Dec 16 06:52:01 ispc CRON[1728725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:52:01 ispc CRON[1728726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:52:02 ispc CRON[1728726]: pam_unix(cron:session): session closed for user root Dec 16 06:52:02 ispc sshd[1728723]: Invalid user martof from 210.114.18.123 Dec 16 06:53:01 ispc CRON[1728774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:53:02 ispc CRON[1728774]: pam_unix(cron:session): session closed for user root Dec 16 06:53:31 ispc postfix/smtpd[1728798]: sql auxprop plugin using mysql engine Dec 16 06:53:32 ispc saslauthd[1728801]: pam_mysql - SELECT returned no result. Dec 16 06:53:32 ispc saslauthd[1728801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:53:32 ispc saslauthd[1728801]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:53:33 ispc postfix/smtpd[1728802]: sql auxprop plugin using mysql engine Dec 16 06:53:35 ispc saslauthd[1728803]: pam_mysql - SELECT returned no result. Dec 16 06:53:35 ispc saslauthd[1728803]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:53:35 ispc saslauthd[1728803]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:53:41 ispc sshd[1728808]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 06:53:41 ispc sshd[1728808]: Invalid user ziplines from 103.146.203.212 Dec 16 06:53:55 ispc saslauthd[1728814]: pam_mysql - SELECT returned no result. Dec 16 06:53:55 ispc saslauthd[1728814]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:53:55 ispc saslauthd[1728814]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 06:54:01 ispc CRON[1728819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:54:02 ispc CRON[1728819]: pam_unix(cron:session): session closed for user root Dec 16 06:55:01 ispc CRON[1728856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:55:01 ispc CRON[1728857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:55:01 ispc CRON[1728858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:55:01 ispc CRON[1728859]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 06:55:01 ispc CRON[1728857]: pam_unix(cron:session): session closed for user root Dec 16 06:55:01 ispc CRON[1728859]: pam_unix(cron:session): session closed for user getmail Dec 16 06:55:01 ispc CRON[1728858]: pam_unix(cron:session): session closed for user root Dec 16 06:55:02 ispc CRON[1728856]: pam_unix(cron:session): session closed for user root Dec 16 06:55:18 ispc CRON[1728725]: pam_unix(cron:session): session closed for user root Dec 16 06:56:01 ispc CRON[1728956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:56:02 ispc CRON[1728956]: pam_unix(cron:session): session closed for user root Dec 16 06:56:09 ispc sshd[1728971]: Invalid user martof from 211.45.175.153 Dec 16 06:57:01 ispc CRON[1728994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:57:02 ispc CRON[1728994]: pam_unix(cron:session): session closed for user root Dec 16 06:58:01 ispc CRON[1729039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:58:02 ispc CRON[1729039]: pam_unix(cron:session): session closed for user root Dec 16 06:58:20 ispc sshd[1729058]: Invalid user lanovacentra from 35.239.77.168 Dec 16 06:59:01 ispc CRON[1729076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 06:59:02 ispc CRON[1729076]: pam_unix(cron:session): session closed for user root Dec 16 06:59:04 ispc postfix/smtpd[1729087]: sql auxprop plugin using mysql engine Dec 16 06:59:04 ispc saslauthd[1729090]: pam_mysql - SELECT returned no result. Dec 16 06:59:04 ispc saslauthd[1729090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 06:59:04 ispc saslauthd[1729090]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:00:01 ispc CRON[1729118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:00:01 ispc CRON[1729119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:00:01 ispc CRON[1729120]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:00:01 ispc CRON[1729121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:00:01 ispc CRON[1729122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:00:01 ispc CRON[1729123]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:00:01 ispc CRON[1729120]: pam_unix(cron:session): session closed for user www-data Dec 16 07:00:01 ispc CRON[1729119]: pam_unix(cron:session): session closed for user root Dec 16 07:00:01 ispc CRON[1729123]: pam_unix(cron:session): session closed for user getmail Dec 16 07:00:02 ispc CRON[1729122]: pam_unix(cron:session): session closed for user root Dec 16 07:00:02 ispc CRON[1729121]: pam_unix(cron:session): session closed for user root Dec 16 07:00:02 ispc CRON[1729118]: pam_unix(cron:session): session closed for user root Dec 16 07:01:01 ispc postfix/smtpd[1729300]: sql auxprop plugin using mysql engine Dec 16 07:01:01 ispc CRON[1729302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:01:02 ispc saslauthd[1729309]: pam_mysql - SELECT returned no result. Dec 16 07:01:02 ispc saslauthd[1729309]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:01:02 ispc saslauthd[1729309]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:01:02 ispc CRON[1729302]: pam_unix(cron:session): session closed for user root Dec 16 07:01:13 ispc saslauthd[1729320]: pam_mysql - SELECT returned no result. Dec 16 07:01:13 ispc saslauthd[1729320]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:01:13 ispc saslauthd[1729320]: do_auth : auth failure: [user=builtin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:01:31 ispc CRON[1728148]: pam_unix(cron:session): session closed for user root Dec 16 07:02:01 ispc CRON[1729331]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 07:02:01 ispc CRON[1729332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:02:01 ispc CRON[1729332]: pam_unix(cron:session): session closed for user root Dec 16 07:03:01 ispc CRON[1730157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:03:03 ispc CRON[1730157]: pam_unix(cron:session): session closed for user root Dec 16 07:03:18 ispc saslauthd[1730202]: pam_mysql - SELECT returned no result. Dec 16 07:03:18 ispc saslauthd[1730202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:03:18 ispc saslauthd[1730202]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:03:35 ispc CRON[1729331]: pam_unix(cron:session): session closed for user logcheck Dec 16 07:03:44 ispc postfix/smtpd[1730387]: sql auxprop plugin using mysql engine Dec 16 07:03:50 ispc sshd[1730391]: Invalid user blceu from 211.57.200.145 Dec 16 07:03:54 ispc sshd[1730393]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:03:54 ispc sshd[1730393]: Invalid user blceu from 114.7.163.154 Dec 16 07:04:01 ispc CRON[1730395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:04:02 ispc CRON[1730395]: pam_unix(cron:session): session closed for user root Dec 16 07:04:47 ispc saslauthd[1730417]: pam_mysql - SELECT returned no result. Dec 16 07:04:47 ispc saslauthd[1730417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:04:47 ispc saslauthd[1730417]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:05:01 ispc CRON[1730419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:05:01 ispc CRON[1730420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:05:01 ispc CRON[1730421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:05:01 ispc CRON[1730422]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:05:01 ispc CRON[1730420]: pam_unix(cron:session): session closed for user root Dec 16 07:05:01 ispc CRON[1730422]: pam_unix(cron:session): session closed for user getmail Dec 16 07:05:03 ispc CRON[1730419]: pam_unix(cron:session): session closed for user root Dec 16 07:05:14 ispc sshd[1730532]: Invalid user klape from 77.241.18.2 Dec 16 07:05:15 ispc sshd[1730534]: Invalid user ubuntu from 77.241.18.2 Dec 16 07:05:20 ispc postfix/smtpd[1730538]: sql auxprop plugin using mysql engine Dec 16 07:05:41 ispc CRON[1730421]: pam_unix(cron:session): session closed for user root Dec 16 07:06:01 ispc CRON[1730545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:07:01 ispc CRON[1730578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:07:03 ispc CRON[1730578]: pam_unix(cron:session): session closed for user root Dec 16 07:07:37 ispc sshd[1730607]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:07:55 ispc postfix/smtpd[1730626]: sql auxprop plugin using mysql engine Dec 16 07:07:56 ispc saslauthd[1730628]: pam_mysql - SELECT returned no result. Dec 16 07:07:56 ispc saslauthd[1730628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:07:56 ispc saslauthd[1730628]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:08:01 ispc CRON[1730629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:08:02 ispc CRON[1730629]: pam_unix(cron:session): session closed for user root Dec 16 07:09:01 ispc CRON[1730666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:09:01 ispc CRON[1730667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:09:01 ispc CRON[1730666]: pam_unix(cron:session): session closed for user root Dec 16 07:09:01 ispc CRON[1730667]: pam_unix(cron:session): session closed for user root Dec 16 07:10:01 ispc CRON[1730714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:10:01 ispc CRON[1730715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:10:01 ispc CRON[1730716]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:10:01 ispc CRON[1730717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:10:01 ispc CRON[1730718]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:10:01 ispc CRON[1730715]: pam_unix(cron:session): session closed for user root Dec 16 07:10:01 ispc CRON[1730716]: pam_unix(cron:session): session closed for user www-data Dec 16 07:10:01 ispc CRON[1730718]: pam_unix(cron:session): session closed for user getmail Dec 16 07:10:02 ispc CRON[1730717]: pam_unix(cron:session): session closed for user root Dec 16 07:10:03 ispc CRON[1730714]: pam_unix(cron:session): session closed for user root Dec 16 07:10:08 ispc postfix/smtpd[1730796]: sql auxprop plugin using mysql engine Dec 16 07:10:08 ispc saslauthd[1730798]: pam_mysql - SELECT returned no result. Dec 16 07:10:08 ispc saslauthd[1730798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:10:08 ispc saslauthd[1730798]: do_auth : auth failure: [user=test123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:10:27 ispc saslauthd[1730804]: pam_mysql - SELECT returned no result. Dec 16 07:10:27 ispc saslauthd[1730804]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:10:27 ispc saslauthd[1730804]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:11:01 ispc CRON[1730821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:11:02 ispc CRON[1730821]: pam_unix(cron:session): session closed for user root Dec 16 07:11:48 ispc sshd[1730849]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:11:48 ispc sshd[1730849]: Invalid user martof from 103.146.203.212 Dec 16 07:12:01 ispc CRON[1730859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:12:02 ispc CRON[1730859]: pam_unix(cron:session): session closed for user root Dec 16 07:12:04 ispc sshd[1730870]: Did not receive identification string from 195.184.76.138 Dec 16 07:12:15 ispc sshd[1730871]: Did not receive identification string from 195.184.76.213 Dec 16 07:12:23 ispc sshd[1730882]: Bad protocol version identification '\026\003\003\001\247\001' from 195.184.76.138 Dec 16 07:12:26 ispc sshd[1730883]: Did not receive identification string from 195.184.76.140 Dec 16 07:12:53 ispc sshd[1730899]: Invalid user ziplines from 119.205.233.162 Dec 16 07:13:01 ispc CRON[1730911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:13:01 ispc CRON[1730911]: pam_unix(cron:session): session closed for user root Dec 16 07:13:20 ispc postfix/smtpd[1730947]: sql auxprop plugin using mysql engine Dec 16 07:13:28 ispc postfix/smtpd[1730967]: sql auxprop plugin using mysql engine Dec 16 07:13:29 ispc saslauthd[1730969]: pam_mysql - SELECT returned no result. Dec 16 07:13:29 ispc saslauthd[1730969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:13:29 ispc saslauthd[1730969]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:14:01 ispc CRON[1730987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:14:02 ispc CRON[1730987]: pam_unix(cron:session): session closed for user root Dec 16 07:14:44 ispc postfix/smtpd[1731022]: sql auxprop plugin using mysql engine Dec 16 07:15:00 ispc sshd[1731030]: Invalid user klape from 2.57.217.229 Dec 16 07:15:00 ispc sshd[1731032]: Invalid user ubuntu from 2.57.217.229 Dec 16 07:15:01 ispc CRON[1731034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:15:01 ispc CRON[1731035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:15:01 ispc CRON[1731036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:15:01 ispc CRON[1731037]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:15:01 ispc CRON[1731035]: pam_unix(cron:session): session closed for user root Dec 16 07:15:01 ispc CRON[1731037]: pam_unix(cron:session): session closed for user getmail Dec 16 07:15:02 ispc CRON[1731036]: pam_unix(cron:session): session closed for user root Dec 16 07:15:02 ispc CRON[1731034]: pam_unix(cron:session): session closed for user root Dec 16 07:16:01 ispc CRON[1731138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:16:03 ispc postfix/smtpd[1731145]: sql auxprop plugin using mysql engine Dec 16 07:16:03 ispc CRON[1731138]: pam_unix(cron:session): session closed for user root Dec 16 07:16:03 ispc saslauthd[1731151]: pam_mysql - SELECT returned no result. Dec 16 07:16:03 ispc saslauthd[1731151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:03 ispc saslauthd[1731151]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:07 ispc saslauthd[1731156]: pam_mysql - SELECT returned no result. Dec 16 07:16:07 ispc saslauthd[1731156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:07 ispc saslauthd[1731156]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:13 ispc saslauthd[1731158]: pam_mysql - SELECT returned no result. Dec 16 07:16:13 ispc saslauthd[1731158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:13 ispc saslauthd[1731158]: do_auth : auth failure: [user=cablecom] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:18 ispc saslauthd[1731163]: pam_mysql - SELECT returned no result. Dec 16 07:16:18 ispc saslauthd[1731163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:18 ispc saslauthd[1731163]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:20 ispc saslauthd[1731164]: pam_mysql - SELECT returned no result. Dec 16 07:16:20 ispc saslauthd[1731164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:20 ispc saslauthd[1731164]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:31 ispc saslauthd[1731170]: pam_mysql - SELECT returned no result. Dec 16 07:16:31 ispc saslauthd[1731170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:31 ispc saslauthd[1731170]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:16:41 ispc saslauthd[1731175]: pam_mysql - SELECT returned no result. Dec 16 07:16:41 ispc saslauthd[1731175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:16:41 ispc saslauthd[1731175]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:17:01 ispc CRON[1731184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:17:01 ispc CRON[1731184]: pam_unix(cron:session): session closed for user root Dec 16 07:17:20 ispc sshd[1731203]: Invalid user ziplines from 51.91.247.10 Dec 16 07:18:01 ispc CRON[1731233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:18:02 ispc CRON[1731233]: pam_unix(cron:session): session closed for user root Dec 16 07:19:01 ispc CRON[1731269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:19:02 ispc CRON[1731269]: pam_unix(cron:session): session closed for user root Dec 16 07:19:24 ispc sshd[1731288]: Invalid user pronajemplosin from 36.50.176.13 Dec 16 07:20:01 ispc CRON[1731307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:20:01 ispc CRON[1731308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:20:01 ispc CRON[1731309]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:20:01 ispc CRON[1731310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:20:01 ispc CRON[1731311]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:20:01 ispc CRON[1731309]: pam_unix(cron:session): session closed for user www-data Dec 16 07:20:01 ispc CRON[1731308]: pam_unix(cron:session): session closed for user root Dec 16 07:20:01 ispc CRON[1731311]: pam_unix(cron:session): session closed for user getmail Dec 16 07:20:02 ispc CRON[1731310]: pam_unix(cron:session): session closed for user root Dec 16 07:20:03 ispc CRON[1731307]: pam_unix(cron:session): session closed for user root Dec 16 07:21:01 ispc CRON[1731405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:21:01 ispc CRON[1731406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:21:01 ispc CRON[1731405]: pam_unix(cron:session): session closed for user root Dec 16 07:21:01 ispc CRON[1731406]: pam_unix(cron:session): session closed for user root Dec 16 07:21:31 ispc postfix/smtpd[1731431]: sql auxprop plugin using mysql engine Dec 16 07:21:31 ispc saslauthd[1731434]: pam_mysql - SELECT returned no result. Dec 16 07:21:31 ispc saslauthd[1731434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:21:31 ispc saslauthd[1731434]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:22:01 ispc CRON[1731447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:22:02 ispc CRON[1731447]: pam_unix(cron:session): session closed for user root Dec 16 07:22:32 ispc postfix/smtpd[1731472]: sql auxprop plugin using mysql engine Dec 16 07:23:01 ispc CRON[1731497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:23:02 ispc CRON[1731497]: pam_unix(cron:session): session closed for user root Dec 16 07:24:01 ispc CRON[1731536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:24:01 ispc CRON[1731536]: pam_unix(cron:session): session closed for user root Dec 16 07:24:11 ispc sshd[1731552]: Did not receive identification string from 91.231.89.116 Dec 16 07:24:22 ispc sshd[1731553]: Did not receive identification string from 91.231.89.116 Dec 16 07:24:35 ispc sshd[1731563]: Bad protocol version identification '\026\003\003\001\247\001' from 91.231.89.204 Dec 16 07:24:38 ispc sshd[1731564]: Did not receive identification string from 91.231.89.112 Dec 16 07:25:01 ispc CRON[1731577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:25:01 ispc CRON[1731578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:25:01 ispc CRON[1731579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:25:01 ispc CRON[1731580]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:25:02 ispc CRON[1731578]: pam_unix(cron:session): session closed for user root Dec 16 07:25:02 ispc CRON[1731580]: pam_unix(cron:session): session closed for user getmail Dec 16 07:25:02 ispc CRON[1731579]: pam_unix(cron:session): session closed for user root Dec 16 07:25:03 ispc CRON[1731577]: pam_unix(cron:session): session closed for user root Dec 16 07:25:38 ispc sshd[1731669]: Invalid user matlbula from 110.32.34.138 Dec 16 07:26:01 ispc CRON[1731679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:26:01 ispc CRON[1731679]: pam_unix(cron:session): session closed for user root Dec 16 07:26:29 ispc CRON[1730545]: pam_unix(cron:session): session closed for user root Dec 16 07:26:29 ispc postfix/smtpd[1731705]: sql auxprop plugin using mysql engine Dec 16 07:27:01 ispc CRON[1731708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:27:01 ispc CRON[1731708]: pam_unix(cron:session): session closed for user root Dec 16 07:27:22 ispc saslauthd[1731723]: pam_mysql - SELECT returned no result. Dec 16 07:27:22 ispc saslauthd[1731723]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:27:22 ispc saslauthd[1731723]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:28:01 ispc CRON[1731734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:28:03 ispc CRON[1731734]: pam_unix(cron:session): session closed for user root Dec 16 07:29:01 ispc CRON[1731749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:29:03 ispc CRON[1731749]: pam_unix(cron:session): session closed for user root Dec 16 07:29:06 ispc sshd[1731763]: Invalid user blceu from 210.114.18.123 Dec 16 07:29:31 ispc sshd[1731772]: Invalid user pronajemplosin from 112.217.233.242 Dec 16 07:29:46 ispc sshd[1731775]: Did not receive identification string from 92.118.39.95 Dec 16 07:30:01 ispc CRON[1731776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:30:01 ispc CRON[1731777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:30:01 ispc CRON[1731778]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:30:01 ispc CRON[1731779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:30:01 ispc CRON[1731780]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:30:01 ispc CRON[1731778]: pam_unix(cron:session): session closed for user www-data Dec 16 07:30:01 ispc CRON[1731777]: pam_unix(cron:session): session closed for user root Dec 16 07:30:01 ispc CRON[1731780]: pam_unix(cron:session): session closed for user getmail Dec 16 07:30:02 ispc CRON[1731776]: pam_unix(cron:session): session closed for user root Dec 16 07:30:45 ispc CRON[1731779]: pam_unix(cron:session): session closed for user root Dec 16 07:31:01 ispc CRON[1731967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:31:19 ispc saslauthd[1731983]: pam_mysql - SELECT returned no result. Dec 16 07:31:19 ispc saslauthd[1731983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:19 ispc saslauthd[1731983]: do_auth : auth failure: [user=ccrusr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:48 ispc postfix/smtpd[1731996]: sql auxprop plugin using mysql engine Dec 16 07:31:48 ispc saslauthd[1731999]: pam_mysql - SELECT returned no result. Dec 16 07:31:48 ispc saslauthd[1731999]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:48 ispc saslauthd[1731999]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:48 ispc postfix/smtpd[1731998]: sql auxprop plugin using mysql engine Dec 16 07:31:48 ispc saslauthd[1732001]: pam_mysql - SELECT returned no result. Dec 16 07:31:48 ispc saslauthd[1732001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:48 ispc saslauthd[1732001]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:48 ispc saslauthd[1732002]: pam_mysql - SELECT returned no result. Dec 16 07:31:48 ispc saslauthd[1732002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:48 ispc saslauthd[1732002]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:48 ispc postfix/smtpd[1732000]: sql auxprop plugin using mysql engine Dec 16 07:31:48 ispc saslauthd[1732003]: pam_mysql - SELECT returned no result. Dec 16 07:31:48 ispc saslauthd[1732003]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:48 ispc saslauthd[1732003]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:49 ispc saslauthd[1732004]: pam_mysql - SELECT returned no result. Dec 16 07:31:49 ispc saslauthd[1732004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:49 ispc saslauthd[1732004]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:50 ispc saslauthd[1732005]: pam_mysql - SELECT returned no result. Dec 16 07:31:50 ispc saslauthd[1732005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:50 ispc saslauthd[1732005]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:51 ispc saslauthd[1732006]: pam_mysql - SELECT returned no result. Dec 16 07:31:51 ispc saslauthd[1732006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:51 ispc saslauthd[1732006]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:31:52 ispc saslauthd[1732007]: pam_mysql - SELECT returned no result. Dec 16 07:31:52 ispc saslauthd[1732007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:31:52 ispc saslauthd[1732007]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:32:01 ispc CRON[1732012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:32:02 ispc CRON[1732012]: pam_unix(cron:session): session closed for user root Dec 16 07:32:04 ispc saslauthd[1732028]: pam_mysql - SELECT returned no result. Dec 16 07:32:04 ispc saslauthd[1732028]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:32:04 ispc saslauthd[1732028]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:32:21 ispc sshd[1732035]: Invalid user blceu from 211.45.175.153 Dec 16 07:32:31 ispc saslauthd[1732042]: pam_mysql - SELECT returned no result. Dec 16 07:32:31 ispc saslauthd[1732042]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:32:31 ispc saslauthd[1732042]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:33:01 ispc CRON[1732063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:33:02 ispc CRON[1732063]: pam_unix(cron:session): session closed for user root Dec 16 07:33:02 ispc saslauthd[1732074]: pam_mysql - SELECT returned no result. Dec 16 07:33:02 ispc saslauthd[1732074]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:33:02 ispc saslauthd[1732074]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:33:16 ispc saslauthd[1732084]: pam_mysql - SELECT returned no result. Dec 16 07:33:16 ispc saslauthd[1732084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:33:16 ispc saslauthd[1732084]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:33:54 ispc sshd[1732100]: Invalid user solana from 92.118.39.95 Dec 16 07:34:01 ispc CRON[1732108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:34:01 ispc CRON[1732108]: pam_unix(cron:session): session closed for user root Dec 16 07:34:39 ispc sshd[1732135]: Invalid user capstan from 103.172.236.164 Dec 16 07:34:45 ispc postfix/smtpd[1732137]: sql auxprop plugin using mysql engine Dec 16 07:34:57 ispc sshd[1732143]: Did not receive identification string from 192.227.134.84 Dec 16 07:35:01 ispc CRON[1732148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:35:01 ispc CRON[1732149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:35:01 ispc CRON[1732150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:35:01 ispc CRON[1732151]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:35:02 ispc CRON[1732149]: pam_unix(cron:session): session closed for user root Dec 16 07:35:02 ispc CRON[1732151]: pam_unix(cron:session): session closed for user getmail Dec 16 07:35:02 ispc CRON[1732150]: pam_unix(cron:session): session closed for user root Dec 16 07:35:03 ispc CRON[1732148]: pam_unix(cron:session): session closed for user root Dec 16 07:35:04 ispc postfix/smtpd[1732224]: sql auxprop plugin using mysql engine Dec 16 07:35:04 ispc saslauthd[1732226]: pam_mysql - SELECT returned no result. Dec 16 07:35:04 ispc saslauthd[1732226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:35:04 ispc saslauthd[1732226]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:35:09 ispc saslauthd[1732231]: pam_mysql - SELECT returned no result. Dec 16 07:35:09 ispc saslauthd[1732231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:35:09 ispc saslauthd[1732231]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:35:23 ispc sshd[1732236]: Invalid user blceu from 139.59.66.222 Dec 16 07:36:01 ispc CRON[1732256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:36:02 ispc CRON[1732256]: pam_unix(cron:session): session closed for user root Dec 16 07:36:25 ispc sshd[1732275]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:36:25 ispc sshd[1732275]: Invalid user blceu from 103.146.203.212 Dec 16 07:36:49 ispc sshd[1732285]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:36:49 ispc sshd[1732285]: Invalid user zednictvistastny from 103.112.245.93 Dec 16 07:37:01 ispc CRON[1732296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:37:02 ispc CRON[1732296]: pam_unix(cron:session): session closed for user root Dec 16 07:37:08 ispc postfix/smtpd[1732307]: sql auxprop plugin using mysql engine Dec 16 07:37:09 ispc saslauthd[1732309]: pam_mysql - SELECT returned no result. Dec 16 07:37:09 ispc saslauthd[1732309]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:37:09 ispc saslauthd[1732309]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:37:10 ispc sshd[1732310]: Invalid user ubuntu from 92.118.39.95 Dec 16 07:38:01 ispc CRON[1732342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:38:02 ispc CRON[1732342]: pam_unix(cron:session): session closed for user root Dec 16 07:38:03 ispc saslauthd[1732357]: pam_mysql - SELECT returned no result. Dec 16 07:38:03 ispc saslauthd[1732357]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:38:03 ispc saslauthd[1732357]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:38:31 ispc saslauthd[1732366]: pam_mysql - SELECT returned no result. Dec 16 07:38:31 ispc saslauthd[1732366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:38:31 ispc saslauthd[1732366]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:39:01 ispc CRON[1732381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:39:01 ispc CRON[1732380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:39:02 ispc CRON[1732380]: pam_unix(cron:session): session closed for user root Dec 16 07:39:02 ispc CRON[1732381]: pam_unix(cron:session): session closed for user root Dec 16 07:40:01 ispc CRON[1732427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:40:01 ispc CRON[1732428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:40:01 ispc CRON[1732429]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:40:01 ispc CRON[1732430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:40:01 ispc CRON[1732431]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:40:01 ispc CRON[1732428]: pam_unix(cron:session): session closed for user root Dec 16 07:40:01 ispc CRON[1732429]: pam_unix(cron:session): session closed for user www-data Dec 16 07:40:01 ispc CRON[1732431]: pam_unix(cron:session): session closed for user getmail Dec 16 07:40:02 ispc CRON[1732430]: pam_unix(cron:session): session closed for user root Dec 16 07:40:02 ispc CRON[1732427]: pam_unix(cron:session): session closed for user root Dec 16 07:40:30 ispc sshd[1732518]: Invalid user solv from 92.118.39.95 Dec 16 07:41:01 ispc CRON[1732532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:41:02 ispc CRON[1732532]: pam_unix(cron:session): session closed for user root Dec 16 07:42:01 ispc CRON[1732567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:42:02 ispc CRON[1732567]: pam_unix(cron:session): session closed for user root Dec 16 07:42:19 ispc sshd[1732582]: Invalid user installer from 116.110.11.222 Dec 16 07:42:27 ispc sshd[1732588]: Invalid user guest from 116.110.11.222 Dec 16 07:42:36 ispc sshd[1732596]: Invalid user user from 116.110.15.155 Dec 16 07:42:39 ispc sshd[1732598]: Invalid user admin from 116.110.15.155 Dec 16 07:42:50 ispc sshd[1732611]: Invalid user user from 116.110.11.222 Dec 16 07:42:55 ispc sshd[1732613]: Invalid user admin from 116.110.11.222 Dec 16 07:42:59 ispc sshd[1732624]: Invalid user ftp from 116.110.15.155 Dec 16 07:43:01 ispc CRON[1732632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:43:02 ispc CRON[1732632]: pam_unix(cron:session): session closed for user root Dec 16 07:43:05 ispc sshd[1732643]: Invalid user admin from 116.110.15.155 Dec 16 07:43:11 ispc sshd[1732647]: Invalid user support from 116.110.15.155 Dec 16 07:43:14 ispc sshd[1732645]: Invalid user test from 116.110.11.222 Dec 16 07:43:22 ispc sshd[1732662]: Invalid user oracle from 116.110.11.222 Dec 16 07:43:25 ispc sshd[1732664]: Invalid user admin from 116.110.15.155 Dec 16 07:43:37 ispc sshd[1732684]: Invalid user pronajemplosin from 165.232.190.97 Dec 16 07:43:45 ispc sshd[1732691]: Invalid user sol from 92.118.39.95 Dec 16 07:44:01 ispc CRON[1732703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:44:02 ispc CRON[1732703]: pam_unix(cron:session): session closed for user root Dec 16 07:44:02 ispc postfix/smtpd[1732714]: sql auxprop plugin using mysql engine Dec 16 07:44:03 ispc saslauthd[1732717]: pam_mysql - SELECT returned no result. Dec 16 07:44:03 ispc saslauthd[1732717]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:44:03 ispc saslauthd[1732717]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:44:25 ispc postfix/smtpd[1732729]: sql auxprop plugin using mysql engine Dec 16 07:44:54 ispc sshd[1732746]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 07:45:01 ispc CRON[1732752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:45:01 ispc CRON[1732753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:45:01 ispc CRON[1732754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:45:01 ispc CRON[1732755]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:45:01 ispc CRON[1732753]: pam_unix(cron:session): session closed for user root Dec 16 07:45:01 ispc CRON[1732755]: pam_unix(cron:session): session closed for user getmail Dec 16 07:45:02 ispc CRON[1732754]: pam_unix(cron:session): session closed for user root Dec 16 07:45:03 ispc CRON[1732752]: pam_unix(cron:session): session closed for user root Dec 16 07:45:53 ispc sshd[1732852]: Invalid user blceu from 117.50.70.169 Dec 16 07:46:01 ispc CRON[1732859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:46:02 ispc CRON[1732859]: pam_unix(cron:session): session closed for user root Dec 16 07:46:11 ispc sshd[1732871]: Invalid user ziplines from 139.59.66.222 Dec 16 07:46:19 ispc sshd[1732877]: Invalid user martof from 221.156.137.104 Dec 16 07:46:21 ispc postfix/smtpd[1732879]: sql auxprop plugin using mysql engine Dec 16 07:46:22 ispc saslauthd[1732885]: pam_mysql - SELECT returned no result. Dec 16 07:46:22 ispc saslauthd[1732885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:46:22 ispc saslauthd[1732885]: do_auth : auth failure: [user=ceconsl] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:46:59 ispc sshd[1732900]: Invalid user sol from 92.118.39.95 Dec 16 07:47:01 ispc CRON[1732902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:47:02 ispc CRON[1732902]: pam_unix(cron:session): session closed for user root Dec 16 07:47:45 ispc sshd[1732938]: Invalid user diamantdi from 35.239.77.168 Dec 16 07:48:01 ispc CRON[1732947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:48:01 ispc CRON[1732947]: pam_unix(cron:session): session closed for user root Dec 16 07:49:01 ispc CRON[1732985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:49:02 ispc CRON[1732985]: pam_unix(cron:session): session closed for user root Dec 16 07:49:34 ispc postfix/smtpd[1733013]: sql auxprop plugin using mysql engine Dec 16 07:49:35 ispc saslauthd[1733015]: pam_mysql - SELECT returned no result. Dec 16 07:49:35 ispc saslauthd[1733015]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:49:35 ispc saslauthd[1733015]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:50:01 ispc CRON[1733029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:50:01 ispc CRON[1733030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:50:01 ispc CRON[1733031]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 07:50:01 ispc CRON[1733032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:50:01 ispc CRON[1733033]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:50:01 ispc CRON[1733031]: pam_unix(cron:session): session closed for user www-data Dec 16 07:50:01 ispc CRON[1733030]: pam_unix(cron:session): session closed for user root Dec 16 07:50:01 ispc CRON[1733033]: pam_unix(cron:session): session closed for user getmail Dec 16 07:50:02 ispc CRON[1733032]: pam_unix(cron:session): session closed for user root Dec 16 07:50:03 ispc CRON[1733029]: pam_unix(cron:session): session closed for user root Dec 16 07:50:07 ispc sshd[1733111]: Invalid user sol from 92.118.39.95 Dec 16 07:50:10 ispc saslauthd[1733119]: pam_mysql - SELECT returned no result. Dec 16 07:50:10 ispc saslauthd[1733119]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:50:10 ispc saslauthd[1733119]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:50:47 ispc sshd[1733133]: Invalid user ziplines from 221.156.137.104 Dec 16 07:51:01 ispc CRON[1733153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:51:02 ispc CRON[1733153]: pam_unix(cron:session): session closed for user root Dec 16 07:51:28 ispc CRON[1731967]: pam_unix(cron:session): session closed for user root Dec 16 07:52:01 ispc CRON[1733179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:52:02 ispc CRON[1733179]: pam_unix(cron:session): session closed for user root Dec 16 07:52:05 ispc sshd[1733191]: Invalid user martof from 43.135.148.156 Dec 16 07:52:35 ispc sshd[1733194]: Invalid user martof from 211.57.200.145 Dec 16 07:53:01 ispc CRON[1733204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:53:02 ispc CRON[1733204]: pam_unix(cron:session): session closed for user root Dec 16 07:53:20 ispc saslauthd[1733217]: pam_mysql - SELECT returned no result. Dec 16 07:53:20 ispc saslauthd[1733217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:53:20 ispc saslauthd[1733217]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:54:01 ispc CRON[1733219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:54:02 ispc CRON[1733219]: pam_unix(cron:session): session closed for user root Dec 16 07:55:01 ispc CRON[1733235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:55:01 ispc CRON[1733236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:55:01 ispc CRON[1733237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:55:01 ispc CRON[1733238]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 07:55:01 ispc CRON[1733236]: pam_unix(cron:session): session closed for user root Dec 16 07:55:01 ispc CRON[1733238]: pam_unix(cron:session): session closed for user getmail Dec 16 07:55:03 ispc CRON[1733235]: pam_unix(cron:session): session closed for user root Dec 16 07:55:30 ispc saslauthd[1733343]: pam_mysql - SELECT returned no result. Dec 16 07:55:30 ispc saslauthd[1733343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:55:30 ispc saslauthd[1733343]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 07:55:35 ispc CRON[1733237]: pam_unix(cron:session): session closed for user root Dec 16 07:56:01 ispc CRON[1733345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:57:01 ispc CRON[1733382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:57:02 ispc CRON[1733382]: pam_unix(cron:session): session closed for user root Dec 16 07:57:54 ispc sshd[1733418]: Invalid user martof from 51.159.91.86 Dec 16 07:58:01 ispc CRON[1733435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:58:02 ispc CRON[1733435]: pam_unix(cron:session): session closed for user root Dec 16 07:59:01 ispc CRON[1733470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 07:59:02 ispc CRON[1733470]: pam_unix(cron:session): session closed for user root Dec 16 07:59:51 ispc postfix/smtpd[1733508]: sql auxprop plugin using mysql engine Dec 16 07:59:52 ispc saslauthd[1733511]: pam_mysql - SELECT returned no result. Dec 16 07:59:52 ispc saslauthd[1733511]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 07:59:52 ispc saslauthd[1733511]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:00:01 ispc CRON[1733517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:00:01 ispc CRON[1733518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:00:01 ispc CRON[1733519]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:00:01 ispc CRON[1733520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:00:01 ispc CRON[1733521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:00:01 ispc CRON[1733522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:00:01 ispc CRON[1733523]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:00:01 ispc CRON[1733518]: pam_unix(cron:session): session closed for user root Dec 16 08:00:01 ispc CRON[1733519]: pam_unix(cron:session): session closed for user www-data Dec 16 08:00:01 ispc CRON[1733521]: pam_unix(cron:session): session closed for user root Dec 16 08:00:01 ispc CRON[1733523]: pam_unix(cron:session): session closed for user getmail Dec 16 08:00:02 ispc CRON[1733522]: pam_unix(cron:session): session closed for user root Dec 16 08:00:02 ispc CRON[1733520]: pam_unix(cron:session): session closed for user root Dec 16 08:00:03 ispc CRON[1733517]: pam_unix(cron:session): session closed for user root Dec 16 08:01:00 ispc sshd[1733711]: Did not receive identification string from 45.140.17.97 Dec 16 08:01:01 ispc CRON[1733712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:01:01 ispc CRON[1733712]: pam_unix(cron:session): session closed for user root Dec 16 08:01:27 ispc postfix/smtpd[1733733]: sql auxprop plugin using mysql engine Dec 16 08:01:27 ispc saslauthd[1733735]: pam_mysql - SELECT returned no result. Dec 16 08:01:27 ispc saslauthd[1733735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:01:27 ispc saslauthd[1733735]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:01:27 ispc saslauthd[1733736]: pam_mysql - SELECT returned no result. Dec 16 08:01:27 ispc saslauthd[1733736]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:01:27 ispc saslauthd[1733736]: do_auth : auth failure: [user=cgadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:02:01 ispc CRON[1733750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:02:01 ispc CRON[1733749]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 08:02:02 ispc CRON[1733750]: pam_unix(cron:session): session closed for user root Dec 16 08:02:41 ispc postfix/smtpd[1734420]: sql auxprop plugin using mysql engine Dec 16 08:03:01 ispc CRON[1734583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:03:02 ispc CRON[1734583]: pam_unix(cron:session): session closed for user root Dec 16 08:03:42 ispc CRON[1733749]: pam_unix(cron:session): session closed for user logcheck Dec 16 08:03:55 ispc postfix/smtpd[1734846]: sql auxprop plugin using mysql engine Dec 16 08:04:01 ispc CRON[1734851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:04:03 ispc CRON[1734851]: pam_unix(cron:session): session closed for user root Dec 16 08:04:43 ispc postfix/smtpd[1734880]: sql auxprop plugin using mysql engine Dec 16 08:04:44 ispc saslauthd[1734882]: pam_mysql - SELECT returned no result. Dec 16 08:04:44 ispc saslauthd[1734882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:04:44 ispc saslauthd[1734882]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:05:01 ispc CRON[1734891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:05:01 ispc CRON[1734892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:05:01 ispc CRON[1734893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:05:01 ispc CRON[1734894]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:05:01 ispc CRON[1734892]: pam_unix(cron:session): session closed for user root Dec 16 08:05:01 ispc CRON[1734894]: pam_unix(cron:session): session closed for user getmail Dec 16 08:05:01 ispc CRON[1734893]: pam_unix(cron:session): session closed for user root Dec 16 08:05:02 ispc CRON[1734891]: pam_unix(cron:session): session closed for user root Dec 16 08:05:04 ispc saslauthd[1734967]: pam_mysql - SELECT returned no result. Dec 16 08:05:04 ispc saslauthd[1734967]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:05:04 ispc saslauthd[1734967]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:05:19 ispc saslauthd[1734978]: pam_mysql - SELECT returned no result. Dec 16 08:05:19 ispc saslauthd[1734978]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:05:19 ispc saslauthd[1734978]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:06:01 ispc CRON[1734997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:06:01 ispc CRON[1734997]: pam_unix(cron:session): session closed for user root Dec 16 08:07:01 ispc CRON[1735033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:07:02 ispc CRON[1735033]: pam_unix(cron:session): session closed for user root Dec 16 08:07:12 ispc postfix/smtpd[1735049]: sql auxprop plugin using mysql engine Dec 16 08:07:12 ispc saslauthd[1735051]: pam_mysql - SELECT returned no result. Dec 16 08:07:12 ispc saslauthd[1735051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:07:12 ispc saslauthd[1735051]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:08:01 ispc CRON[1735078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:08:02 ispc CRON[1735078]: pam_unix(cron:session): session closed for user root Dec 16 08:09:01 ispc CRON[1735117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:09:01 ispc CRON[1735118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:09:01 ispc CRON[1735117]: pam_unix(cron:session): session closed for user root Dec 16 08:09:02 ispc CRON[1735118]: pam_unix(cron:session): session closed for user root Dec 16 08:10:00 ispc postfix/smtpd[1735167]: sql auxprop plugin using mysql engine Dec 16 08:10:01 ispc saslauthd[1735169]: pam_mysql - SELECT returned no result. Dec 16 08:10:01 ispc saslauthd[1735169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:10:01 ispc saslauthd[1735169]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:10:01 ispc CRON[1735171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:10:01 ispc CRON[1735172]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:10:01 ispc CRON[1735173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:10:01 ispc CRON[1735174]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:10:01 ispc CRON[1735170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:10:01 ispc CRON[1735171]: pam_unix(cron:session): session closed for user root Dec 16 08:10:01 ispc CRON[1735172]: pam_unix(cron:session): session closed for user www-data Dec 16 08:10:01 ispc CRON[1735174]: pam_unix(cron:session): session closed for user getmail Dec 16 08:10:01 ispc CRON[1735173]: pam_unix(cron:session): session closed for user root Dec 16 08:10:02 ispc CRON[1735170]: pam_unix(cron:session): session closed for user root Dec 16 08:11:01 ispc CRON[1735272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:11:02 ispc CRON[1735272]: pam_unix(cron:session): session closed for user root Dec 16 08:12:01 ispc CRON[1735310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:12:02 ispc CRON[1735310]: pam_unix(cron:session): session closed for user root Dec 16 08:12:42 ispc postfix/smtpd[1735337]: sql auxprop plugin using mysql engine Dec 16 08:12:42 ispc saslauthd[1735339]: pam_mysql - SELECT returned no result. Dec 16 08:12:42 ispc saslauthd[1735339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:12:42 ispc saslauthd[1735339]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:12:46 ispc saslauthd[1735347]: pam_mysql - SELECT returned no result. Dec 16 08:12:46 ispc saslauthd[1735347]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:12:46 ispc saslauthd[1735347]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:12:51 ispc saslauthd[1735352]: pam_mysql - SELECT returned no result. Dec 16 08:12:51 ispc saslauthd[1735352]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:12:51 ispc saslauthd[1735352]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:13:01 ispc CRON[1735358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:13:01 ispc saslauthd[1735365]: pam_mysql - SELECT returned no result. Dec 16 08:13:01 ispc saslauthd[1735365]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:13:01 ispc saslauthd[1735365]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:13:02 ispc CRON[1735358]: pam_unix(cron:session): session closed for user root Dec 16 08:13:09 ispc sshd[1735373]: Invalid user klape from 187.190.35.163 Dec 16 08:13:10 ispc sshd[1735375]: Invalid user ubuntu from 187.190.35.163 Dec 16 08:13:11 ispc saslauthd[1735381]: pam_mysql - SELECT returned no result. Dec 16 08:13:11 ispc saslauthd[1735381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:13:11 ispc saslauthd[1735381]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:13:12 ispc saslauthd[1735383]: pam_mysql - SELECT returned no result. Dec 16 08:13:12 ispc saslauthd[1735383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:13:12 ispc saslauthd[1735383]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:13:30 ispc postfix/smtpd[1735400]: sql auxprop plugin using mysql engine Dec 16 08:13:45 ispc sshd[1735415]: Invalid user martof from 139.59.66.222 Dec 16 08:14:01 ispc CRON[1735431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:14:02 ispc CRON[1735431]: pam_unix(cron:session): session closed for user root Dec 16 08:14:41 ispc postfix/smtpd[1735455]: sql auxprop plugin using mysql engine Dec 16 08:15:01 ispc CRON[1735464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:15:01 ispc CRON[1735465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:15:01 ispc CRON[1735466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:15:01 ispc CRON[1735467]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:15:01 ispc CRON[1735465]: pam_unix(cron:session): session closed for user root Dec 16 08:15:01 ispc CRON[1735467]: pam_unix(cron:session): session closed for user getmail Dec 16 08:15:02 ispc CRON[1735466]: pam_unix(cron:session): session closed for user root Dec 16 08:15:03 ispc CRON[1735464]: pam_unix(cron:session): session closed for user root Dec 16 08:16:01 ispc CRON[1735567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:16:02 ispc CRON[1735567]: pam_unix(cron:session): session closed for user root Dec 16 08:16:32 ispc postfix/smtpd[1735592]: sql auxprop plugin using mysql engine Dec 16 08:16:33 ispc CRON[1733345]: pam_unix(cron:session): session closed for user root Dec 16 08:16:35 ispc saslauthd[1735596]: pam_mysql - SELECT returned no result. Dec 16 08:16:35 ispc saslauthd[1735596]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:16:35 ispc saslauthd[1735596]: do_auth : auth failure: [user=checkfs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:17:01 ispc CRON[1735600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:17:02 ispc CRON[1735600]: pam_unix(cron:session): session closed for user root Dec 16 08:18:01 ispc CRON[1735624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:18:02 ispc CRON[1735624]: pam_unix(cron:session): session closed for user root Dec 16 08:18:08 ispc saslauthd[1735636]: pam_mysql - SELECT returned no result. Dec 16 08:18:08 ispc saslauthd[1735636]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:18:08 ispc saslauthd[1735636]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:18:20 ispc sshd[1735639]: Invalid user klape from 36.50.177.171 Dec 16 08:18:28 ispc sshd[1735641]: Invalid user ubuntu from 36.50.177.171 Dec 16 08:19:01 ispc CRON[1735643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:19:02 ispc CRON[1735643]: pam_unix(cron:session): session closed for user root Dec 16 08:20:01 ispc CRON[1735658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:20:01 ispc CRON[1735659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:20:01 ispc CRON[1735660]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:20:01 ispc CRON[1735661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:20:01 ispc CRON[1735662]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:20:01 ispc CRON[1735659]: pam_unix(cron:session): session closed for user root Dec 16 08:20:01 ispc CRON[1735660]: pam_unix(cron:session): session closed for user www-data Dec 16 08:20:01 ispc CRON[1735662]: pam_unix(cron:session): session closed for user getmail Dec 16 08:20:02 ispc CRON[1735658]: pam_unix(cron:session): session closed for user root Dec 16 08:20:33 ispc postfix/smtpd[1735768]: sql auxprop plugin using mysql engine Dec 16 08:20:35 ispc CRON[1735661]: pam_unix(cron:session): session closed for user root Dec 16 08:21:01 ispc CRON[1735771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:21:01 ispc CRON[1735772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:21:02 ispc CRON[1735771]: pam_unix(cron:session): session closed for user root Dec 16 08:21:39 ispc saslauthd[1735798]: pam_mysql - SELECT returned no result. Dec 16 08:21:39 ispc saslauthd[1735798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:21:39 ispc saslauthd[1735798]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:22:01 ispc CRON[1735809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:22:01 ispc CRON[1735809]: pam_unix(cron:session): session closed for user root Dec 16 08:23:01 ispc CRON[1735851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:23:02 ispc CRON[1735851]: pam_unix(cron:session): session closed for user root Dec 16 08:23:25 ispc sshd[1735872]: Invalid user ziplines from 43.135.148.156 Dec 16 08:23:38 ispc postfix/smtpd[1735890]: sql auxprop plugin using mysql engine Dec 16 08:23:39 ispc saslauthd[1735892]: pam_mysql - SELECT returned no result. Dec 16 08:23:39 ispc saslauthd[1735892]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:23:39 ispc saslauthd[1735892]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:23:40 ispc sshd[1735888]: Invalid user martof from 175.125.92.77 Dec 16 08:24:01 ispc CRON[1735902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:24:02 ispc CRON[1735902]: pam_unix(cron:session): session closed for user root Dec 16 08:25:01 ispc CRON[1735938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:25:01 ispc CRON[1735939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:25:01 ispc CRON[1735940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:25:01 ispc CRON[1735941]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:25:01 ispc CRON[1735939]: pam_unix(cron:session): session closed for user root Dec 16 08:25:01 ispc CRON[1735941]: pam_unix(cron:session): session closed for user getmail Dec 16 08:25:02 ispc CRON[1735940]: pam_unix(cron:session): session closed for user root Dec 16 08:25:02 ispc CRON[1735938]: pam_unix(cron:session): session closed for user root Dec 16 08:26:01 ispc CRON[1736040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:26:02 ispc CRON[1736040]: pam_unix(cron:session): session closed for user root Dec 16 08:27:01 ispc CRON[1736077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:27:03 ispc CRON[1736077]: pam_unix(cron:session): session closed for user root Dec 16 08:28:01 ispc CRON[1736123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:28:01 ispc CRON[1736123]: pam_unix(cron:session): session closed for user root Dec 16 08:28:09 ispc sshd[1736138]: Did not receive identification string from 192.227.134.84 Dec 16 08:29:01 ispc CRON[1736160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:29:02 ispc CRON[1736160]: pam_unix(cron:session): session closed for user root Dec 16 08:29:03 ispc postfix/smtpd[1736171]: sql auxprop plugin using mysql engine Dec 16 08:29:04 ispc saslauthd[1736174]: pam_mysql - SELECT returned no result. Dec 16 08:29:04 ispc saslauthd[1736174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:04 ispc saslauthd[1736174]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:37 ispc postfix/smtpd[1736188]: sql auxprop plugin using mysql engine Dec 16 08:29:37 ispc postfix/smtpd[1736190]: sql auxprop plugin using mysql engine Dec 16 08:29:37 ispc saslauthd[1736191]: pam_mysql - SELECT returned no result. Dec 16 08:29:37 ispc saslauthd[1736191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:37 ispc saslauthd[1736191]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:37 ispc postfix/smtpd[1736192]: sql auxprop plugin using mysql engine Dec 16 08:29:37 ispc saslauthd[1736193]: pam_mysql - SELECT returned no result. Dec 16 08:29:37 ispc saslauthd[1736193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:37 ispc saslauthd[1736193]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:37 ispc saslauthd[1736198]: pam_mysql - SELECT returned no result. Dec 16 08:29:37 ispc saslauthd[1736198]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:37 ispc saslauthd[1736198]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:37 ispc saslauthd[1736199]: pam_mysql - SELECT returned no result. Dec 16 08:29:38 ispc saslauthd[1736199]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:38 ispc saslauthd[1736199]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:38 ispc saslauthd[1736200]: pam_mysql - SELECT returned no result. Dec 16 08:29:38 ispc saslauthd[1736200]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:38 ispc saslauthd[1736200]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:38 ispc saslauthd[1736201]: pam_mysql - SELECT returned no result. Dec 16 08:29:38 ispc saslauthd[1736201]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:38 ispc saslauthd[1736201]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:39 ispc saslauthd[1736202]: pam_mysql - SELECT returned no result. Dec 16 08:29:39 ispc saslauthd[1736202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:39 ispc saslauthd[1736202]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:40 ispc saslauthd[1736203]: pam_mysql - SELECT returned no result. Dec 16 08:29:40 ispc saslauthd[1736203]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:40 ispc saslauthd[1736203]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:29:53 ispc saslauthd[1736208]: pam_mysql - SELECT returned no result. Dec 16 08:29:53 ispc saslauthd[1736208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:29:53 ispc saslauthd[1736208]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:30:01 ispc CRON[1736215]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:30:01 ispc CRON[1736216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:30:01 ispc CRON[1736217]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:30:01 ispc CRON[1736213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:30:01 ispc CRON[1736214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:30:01 ispc CRON[1736215]: pam_unix(cron:session): session closed for user www-data Dec 16 08:30:01 ispc CRON[1736214]: pam_unix(cron:session): session closed for user root Dec 16 08:30:01 ispc CRON[1736217]: pam_unix(cron:session): session closed for user getmail Dec 16 08:30:02 ispc CRON[1736216]: pam_unix(cron:session): session closed for user root Dec 16 08:30:04 ispc CRON[1736213]: pam_unix(cron:session): session closed for user root Dec 16 08:30:13 ispc sshd[1736297]: Invalid user klape from 103.164.20.29 Dec 16 08:30:14 ispc sshd[1736299]: Invalid user ubuntu from 103.164.20.29 Dec 16 08:30:19 ispc saslauthd[1736305]: pam_mysql - SELECT returned no result. Dec 16 08:30:19 ispc saslauthd[1736305]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:30:19 ispc saslauthd[1736305]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:31:01 ispc CRON[1736324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:31:02 ispc CRON[1736324]: pam_unix(cron:session): session closed for user root Dec 16 08:31:42 ispc saslauthd[1736353]: pam_mysql - SELECT returned no result. Dec 16 08:31:42 ispc saslauthd[1736353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:31:42 ispc saslauthd[1736353]: do_auth : auth failure: [user=checkfsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:31:54 ispc sshd[1736359]: Invalid user klape from 115.190.171.196 Dec 16 08:32:01 ispc CRON[1736367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:32:01 ispc CRON[1736367]: pam_unix(cron:session): session closed for user root Dec 16 08:32:15 ispc saslauthd[1736382]: pam_mysql - SELECT returned no result. Dec 16 08:32:15 ispc saslauthd[1736382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:32:15 ispc saslauthd[1736382]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:32:19 ispc saslauthd[1736387]: pam_mysql - SELECT returned no result. Dec 16 08:32:19 ispc saslauthd[1736387]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:32:19 ispc saslauthd[1736387]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:33:01 ispc CRON[1736411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:33:03 ispc CRON[1736411]: pam_unix(cron:session): session closed for user root Dec 16 08:34:01 ispc CRON[1736449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:34:02 ispc CRON[1736449]: pam_unix(cron:session): session closed for user root Dec 16 08:34:36 ispc postfix/smtpd[1736473]: sql auxprop plugin using mysql engine Dec 16 08:34:37 ispc saslauthd[1736475]: pam_mysql - SELECT returned no result. Dec 16 08:34:37 ispc saslauthd[1736475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:34:37 ispc saslauthd[1736475]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:34:37 ispc saslauthd[1736476]: pam_mysql - SELECT returned no result. Dec 16 08:34:37 ispc saslauthd[1736476]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:34:37 ispc saslauthd[1736476]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:35:01 ispc CRON[1736489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:35:01 ispc CRON[1736490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:35:01 ispc CRON[1736491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:35:01 ispc CRON[1736492]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:35:01 ispc CRON[1736490]: pam_unix(cron:session): session closed for user root Dec 16 08:35:01 ispc CRON[1736492]: pam_unix(cron:session): session closed for user getmail Dec 16 08:35:02 ispc CRON[1736491]: pam_unix(cron:session): session closed for user root Dec 16 08:35:02 ispc CRON[1736489]: pam_unix(cron:session): session closed for user root Dec 16 08:36:01 ispc CRON[1736590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:36:01 ispc CRON[1736590]: pam_unix(cron:session): session closed for user root Dec 16 08:37:01 ispc CRON[1736626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:37:02 ispc CRON[1736626]: pam_unix(cron:session): session closed for user root Dec 16 08:37:17 ispc postfix/smtpd[1736641]: sql auxprop plugin using mysql engine Dec 16 08:37:17 ispc saslauthd[1736643]: pam_mysql - SELECT returned no result. Dec 16 08:37:17 ispc saslauthd[1736643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:37:17 ispc saslauthd[1736643]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:38:01 ispc CRON[1736668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:38:02 ispc CRON[1736668]: pam_unix(cron:session): session closed for user root Dec 16 08:39:01 ispc CRON[1736704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:39:01 ispc CRON[1736705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:39:01 ispc CRON[1736704]: pam_unix(cron:session): session closed for user root Dec 16 08:39:01 ispc CRON[1736705]: pam_unix(cron:session): session closed for user root Dec 16 08:40:01 ispc CRON[1736756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:40:01 ispc CRON[1736757]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:40:01 ispc CRON[1736755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:40:01 ispc CRON[1736758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:40:01 ispc CRON[1736759]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:40:02 ispc CRON[1736756]: pam_unix(cron:session): session closed for user root Dec 16 08:40:02 ispc CRON[1736757]: pam_unix(cron:session): session closed for user www-data Dec 16 08:40:02 ispc CRON[1736759]: pam_unix(cron:session): session closed for user getmail Dec 16 08:40:02 ispc CRON[1736758]: pam_unix(cron:session): session closed for user root Dec 16 08:40:03 ispc CRON[1736755]: pam_unix(cron:session): session closed for user root Dec 16 08:40:09 ispc postfix/smtpd[1736837]: sql auxprop plugin using mysql engine Dec 16 08:40:09 ispc saslauthd[1736839]: pam_mysql - SELECT returned no result. Dec 16 08:40:09 ispc saslauthd[1736839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:40:09 ispc saslauthd[1736839]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:41:01 ispc CRON[1736862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:41:02 ispc CRON[1736862]: pam_unix(cron:session): session closed for user root Dec 16 08:41:24 ispc CRON[1735772]: pam_unix(cron:session): session closed for user root Dec 16 08:42:01 ispc CRON[1736892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:42:02 ispc CRON[1736892]: pam_unix(cron:session): session closed for user root Dec 16 08:42:11 ispc postfix/smtpd[1736904]: sql auxprop plugin using mysql engine Dec 16 08:42:43 ispc sshd[1736908]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 08:42:43 ispc sshd[1736908]: Invalid user martof from 114.7.163.154 Dec 16 08:43:01 ispc CRON[1736919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:43:02 ispc CRON[1736919]: pam_unix(cron:session): session closed for user root Dec 16 08:44:01 ispc CRON[1736933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:44:03 ispc CRON[1736933]: pam_unix(cron:session): session closed for user root Dec 16 08:45:01 ispc CRON[1736945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:45:01 ispc CRON[1736946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:45:01 ispc CRON[1736947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:45:01 ispc CRON[1736948]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:45:01 ispc CRON[1736946]: pam_unix(cron:session): session closed for user root Dec 16 08:45:01 ispc CRON[1736948]: pam_unix(cron:session): session closed for user getmail Dec 16 08:45:03 ispc CRON[1736945]: pam_unix(cron:session): session closed for user root Dec 16 08:45:46 ispc CRON[1736947]: pam_unix(cron:session): session closed for user root Dec 16 08:45:48 ispc saslauthd[1737133]: pam_mysql - SELECT returned no result. Dec 16 08:45:48 ispc saslauthd[1737133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:45:48 ispc saslauthd[1737133]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:46:01 ispc CRON[1737137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:46:53 ispc saslauthd[1737166]: pam_mysql - SELECT returned no result. Dec 16 08:46:53 ispc saslauthd[1737166]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:46:53 ispc saslauthd[1737166]: do_auth : auth failure: [user=checksys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:47:01 ispc CRON[1737171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:47:02 ispc CRON[1737171]: pam_unix(cron:session): session closed for user root Dec 16 08:48:01 ispc CRON[1737214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:48:02 ispc CRON[1737214]: pam_unix(cron:session): session closed for user root Dec 16 08:48:15 ispc sshd[1737229]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 08:48:15 ispc sshd[1737229]: Invalid user ziplines from 103.146.203.212 Dec 16 08:48:20 ispc sshd[1737237]: Invalid user blceu from 175.125.92.77 Dec 16 08:49:01 ispc CRON[1737256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:49:02 ispc CRON[1737256]: pam_unix(cron:session): session closed for user root Dec 16 08:49:19 ispc sshd[1737275]: Invalid user ziplines from 175.125.92.77 Dec 16 08:49:23 ispc sshd[1737277]: Invalid user ziplines from 211.57.200.145 Dec 16 08:50:01 ispc CRON[1737304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:50:01 ispc CRON[1737305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:50:01 ispc CRON[1737306]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 08:50:01 ispc CRON[1737307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:50:01 ispc CRON[1737308]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:50:01 ispc CRON[1737306]: pam_unix(cron:session): session closed for user www-data Dec 16 08:50:01 ispc CRON[1737305]: pam_unix(cron:session): session closed for user root Dec 16 08:50:01 ispc CRON[1737308]: pam_unix(cron:session): session closed for user getmail Dec 16 08:50:02 ispc CRON[1737307]: pam_unix(cron:session): session closed for user root Dec 16 08:50:03 ispc CRON[1737304]: pam_unix(cron:session): session closed for user root Dec 16 08:51:01 ispc CRON[1737406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:51:02 ispc CRON[1737406]: pam_unix(cron:session): session closed for user root Dec 16 08:51:51 ispc postfix/smtpd[1737440]: sql auxprop plugin using mysql engine Dec 16 08:51:52 ispc saslauthd[1737443]: pam_mysql - SELECT returned no result. Dec 16 08:51:52 ispc saslauthd[1737443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:51:52 ispc saslauthd[1737443]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:51:53 ispc saslauthd[1737444]: pam_mysql - SELECT returned no result. Dec 16 08:51:53 ispc saslauthd[1737444]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:51:53 ispc saslauthd[1737444]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:52:01 ispc CRON[1737449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:52:02 ispc CRON[1737449]: pam_unix(cron:session): session closed for user root Dec 16 08:52:50 ispc sshd[1737488]: Invalid user klape from 51.77.222.24 Dec 16 08:52:50 ispc sshd[1737490]: Invalid user ubuntu from 51.77.222.24 Dec 16 08:53:01 ispc CRON[1737503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:53:02 ispc CRON[1737503]: pam_unix(cron:session): session closed for user root Dec 16 08:54:01 ispc CRON[1737536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:54:02 ispc CRON[1737536]: pam_unix(cron:session): session closed for user root Dec 16 08:55:01 ispc CRON[1737574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:55:01 ispc CRON[1737575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:55:01 ispc CRON[1737576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:55:01 ispc CRON[1737577]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 08:55:01 ispc CRON[1737575]: pam_unix(cron:session): session closed for user root Dec 16 08:55:01 ispc CRON[1737577]: pam_unix(cron:session): session closed for user getmail Dec 16 08:55:02 ispc CRON[1737574]: pam_unix(cron:session): session closed for user root Dec 16 08:55:02 ispc CRON[1737576]: pam_unix(cron:session): session closed for user root Dec 16 08:55:26 ispc sshd[1737664]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 08:55:26 ispc sshd[1737664]: Invalid user zednictvistastny from 103.112.245.93 Dec 16 08:56:01 ispc CRON[1737678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:56:02 ispc CRON[1737678]: pam_unix(cron:session): session closed for user root Dec 16 08:56:39 ispc postfix/smtpd[1737708]: sql auxprop plugin using mysql engine Dec 16 08:56:40 ispc saslauthd[1737711]: pam_mysql - SELECT returned no result. Dec 16 08:56:40 ispc saslauthd[1737711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:56:40 ispc saslauthd[1737711]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:56:44 ispc saslauthd[1737713]: pam_mysql - SELECT returned no result. Dec 16 08:56:44 ispc saslauthd[1737713]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 08:56:44 ispc saslauthd[1737713]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 08:57:01 ispc CRON[1737723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:57:02 ispc CRON[1737723]: pam_unix(cron:session): session closed for user root Dec 16 08:57:09 ispc sshd[1737740]: Invalid user klape from 200.32.52.150 Dec 16 08:57:10 ispc sshd[1737742]: Invalid user ubuntu from 200.32.52.150 Dec 16 08:58:01 ispc CRON[1737775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:58:02 ispc CRON[1737775]: pam_unix(cron:session): session closed for user root Dec 16 08:59:01 ispc CRON[1737813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 08:59:02 ispc CRON[1737813]: pam_unix(cron:session): session closed for user root Dec 16 09:00:01 ispc CRON[1737856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:00:01 ispc CRON[1737857]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:00:01 ispc CRON[1737852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:00:01 ispc CRON[1737854]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:00:01 ispc CRON[1737855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:00:01 ispc CRON[1737853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:00:01 ispc CRON[1737854]: pam_unix(cron:session): session closed for user www-data Dec 16 09:00:01 ispc CRON[1737853]: pam_unix(cron:session): session closed for user root Dec 16 09:00:01 ispc CRON[1737857]: pam_unix(cron:session): session closed for user getmail Dec 16 09:00:01 ispc CRON[1737856]: pam_unix(cron:session): session closed for user root Dec 16 09:00:01 ispc CRON[1737852]: pam_unix(cron:session): session closed for user root Dec 16 09:00:02 ispc CRON[1737855]: pam_unix(cron:session): session closed for user root Dec 16 09:00:03 ispc postfix/smtpd[1738009]: sql auxprop plugin using mysql engine Dec 16 09:01:01 ispc CRON[1738033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:01:01 ispc CRON[1738033]: pam_unix(cron:session): session closed for user root Dec 16 09:01:29 ispc postfix/smtpd[1738056]: sql auxprop plugin using mysql engine Dec 16 09:01:29 ispc saslauthd[1738058]: pam_mysql - SELECT returned no result. Dec 16 09:01:29 ispc saslauthd[1738058]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:01:29 ispc saslauthd[1738058]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:02:01 ispc CRON[1738071]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 09:02:01 ispc CRON[1738072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:02:02 ispc CRON[1738072]: pam_unix(cron:session): session closed for user root Dec 16 09:02:04 ispc saslauthd[1738108]: pam_mysql - SELECT returned no result. Dec 16 09:02:04 ispc saslauthd[1738108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:02:04 ispc saslauthd[1738108]: do_auth : auth failure: [user=circ] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:02:19 ispc saslauthd[1738429]: pam_mysql - SELECT returned no result. Dec 16 09:02:19 ispc saslauthd[1738429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:02:19 ispc saslauthd[1738429]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:03:01 ispc CRON[1738936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:03:01 ispc CRON[1738936]: pam_unix(cron:session): session closed for user root Dec 16 09:03:34 ispc CRON[1738071]: pam_unix(cron:session): session closed for user logcheck Dec 16 09:03:45 ispc postfix/smtpd[1739161]: sql auxprop plugin using mysql engine Dec 16 09:04:01 ispc CRON[1739169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:04:01 ispc CRON[1739169]: pam_unix(cron:session): session closed for user root Dec 16 09:05:01 ispc CRON[1739209]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:05:01 ispc CRON[1739206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:05:01 ispc CRON[1739207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:05:01 ispc CRON[1739208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:05:01 ispc CRON[1739207]: pam_unix(cron:session): session closed for user root Dec 16 09:05:01 ispc CRON[1739209]: pam_unix(cron:session): session closed for user getmail Dec 16 09:05:02 ispc CRON[1739208]: pam_unix(cron:session): session closed for user root Dec 16 09:05:03 ispc CRON[1739206]: pam_unix(cron:session): session closed for user root Dec 16 09:05:13 ispc postfix/smtpd[1739286]: sql auxprop plugin using mysql engine Dec 16 09:05:19 ispc sshd[1739293]: Bad protocol version identification 'GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1' from 137.184.135.133 Dec 16 09:05:19 ispc sshd[1739292]: Bad protocol version identification 'GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1' from 137.184.135.133 Dec 16 09:05:21 ispc postfix/smtpd[1739294]: sql auxprop plugin using mysql engine Dec 16 09:06:01 ispc CRON[1739317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:06:02 ispc CRON[1739317]: pam_unix(cron:session): session closed for user root Dec 16 09:06:14 ispc saslauthd[1739336]: pam_mysql - SELECT returned no result. Dec 16 09:06:14 ispc saslauthd[1739336]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:06:14 ispc saslauthd[1739336]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:06:16 ispc saslauthd[1739337]: pam_mysql - SELECT returned no result. Dec 16 09:06:16 ispc saslauthd[1739337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:06:16 ispc saslauthd[1739337]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:06:24 ispc CRON[1737137]: pam_unix(cron:session): session closed for user root Dec 16 09:06:47 ispc sshd[1739343]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:06:47 ispc sshd[1739343]: Invalid user martof from 103.146.203.212 Dec 16 09:07:01 ispc CRON[1739349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:07:02 ispc CRON[1739349]: pam_unix(cron:session): session closed for user root Dec 16 09:08:01 ispc CRON[1739374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:08:02 ispc CRON[1739374]: pam_unix(cron:session): session closed for user root Dec 16 09:08:54 ispc saslauthd[1739394]: pam_mysql - SELECT returned no result. Dec 16 09:08:54 ispc saslauthd[1739394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:08:54 ispc saslauthd[1739394]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:01 ispc CRON[1739396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:09:01 ispc CRON[1739395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:09:01 ispc CRON[1739395]: pam_unix(cron:session): session closed for user root Dec 16 09:09:02 ispc CRON[1739396]: pam_unix(cron:session): session closed for user root Dec 16 09:09:03 ispc saslauthd[1739418]: pam_mysql - SELECT returned no result. Dec 16 09:09:03 ispc saslauthd[1739418]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:09:03 ispc saslauthd[1739418]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:14 ispc postfix/smtpd[1739419]: sql auxprop plugin using mysql engine Dec 16 09:09:14 ispc saslauthd[1739421]: pam_mysql - SELECT returned no result. Dec 16 09:09:14 ispc saslauthd[1739421]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:09:14 ispc saslauthd[1739421]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:14 ispc saslauthd[1739422]: pam_mysql - SELECT returned no result. Dec 16 09:09:14 ispc saslauthd[1739422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:09:14 ispc saslauthd[1739422]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:25 ispc saslauthd[1739423]: pam_mysql - SELECT returned no result. Dec 16 09:09:25 ispc saslauthd[1739423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:09:25 ispc saslauthd[1739423]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:41 ispc saslauthd[1739424]: pam_mysql - SELECT returned no result. Dec 16 09:09:41 ispc saslauthd[1739424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:09:41 ispc saslauthd[1739424]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:09:54 ispc postfix/smtpd[1739427]: sql auxprop plugin using mysql engine Dec 16 09:09:59 ispc sshd[1739425]: Invalid user anoraksro from 117.50.70.169 Dec 16 09:10:01 ispc CRON[1739431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:10:01 ispc CRON[1739430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:10:01 ispc CRON[1739432]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:10:01 ispc CRON[1739433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:10:01 ispc CRON[1739434]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:10:01 ispc CRON[1739432]: pam_unix(cron:session): session closed for user www-data Dec 16 09:10:01 ispc CRON[1739431]: pam_unix(cron:session): session closed for user root Dec 16 09:10:01 ispc CRON[1739434]: pam_unix(cron:session): session closed for user getmail Dec 16 09:10:03 ispc CRON[1739430]: pam_unix(cron:session): session closed for user root Dec 16 09:10:36 ispc CRON[1739433]: pam_unix(cron:session): session closed for user root Dec 16 09:11:01 ispc CRON[1739541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:11:21 ispc saslauthd[1739557]: pam_mysql - SELECT returned no result. Dec 16 09:11:21 ispc saslauthd[1739557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:11:21 ispc saslauthd[1739557]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:11:50 ispc saslauthd[1739570]: pam_mysql - SELECT returned no result. Dec 16 09:11:50 ispc saslauthd[1739570]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:11:50 ispc saslauthd[1739570]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:12:01 ispc CRON[1739577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:12:02 ispc CRON[1739577]: pam_unix(cron:session): session closed for user root Dec 16 09:12:24 ispc sshd[1739604]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:12:28 ispc saslauthd[1739607]: pam_mysql - SELECT returned no result. Dec 16 09:12:28 ispc saslauthd[1739607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:12:28 ispc saslauthd[1739607]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:13:01 ispc CRON[1739632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:13:02 ispc CRON[1739632]: pam_unix(cron:session): session closed for user root Dec 16 09:14:01 ispc CRON[1739668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:14:01 ispc CRON[1739668]: pam_unix(cron:session): session closed for user root Dec 16 09:14:56 ispc sshd[1739699]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:14:58 ispc sshd[1739701]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:14:58 ispc sshd[1739701]: Invalid user klape from 189.89.20.45 Dec 16 09:15:00 ispc sshd[1739707]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:15:00 ispc sshd[1739707]: Invalid user ubuntu from 189.89.20.45 Dec 16 09:15:01 ispc CRON[1739709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:15:01 ispc CRON[1739710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:15:01 ispc CRON[1739711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:15:01 ispc CRON[1739712]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:15:01 ispc CRON[1739710]: pam_unix(cron:session): session closed for user root Dec 16 09:15:01 ispc CRON[1739712]: pam_unix(cron:session): session closed for user getmail Dec 16 09:15:02 ispc CRON[1739711]: pam_unix(cron:session): session closed for user root Dec 16 09:15:02 ispc CRON[1739709]: pam_unix(cron:session): session closed for user root Dec 16 09:16:01 ispc CRON[1739813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:16:02 ispc CRON[1739813]: pam_unix(cron:session): session closed for user root Dec 16 09:16:56 ispc postfix/smtpd[1739845]: sql auxprop plugin using mysql engine Dec 16 09:16:57 ispc postfix/smtpd[1739848]: sql auxprop plugin using mysql engine Dec 16 09:16:57 ispc saslauthd[1739849]: pam_mysql - SELECT returned no result. Dec 16 09:16:57 ispc saslauthd[1739849]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:16:57 ispc saslauthd[1739849]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:16:58 ispc saslauthd[1739850]: pam_mysql - SELECT returned no result. Dec 16 09:16:58 ispc saslauthd[1739850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:16:58 ispc saslauthd[1739850]: do_auth : auth failure: [user=cisco] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:17:01 ispc CRON[1739855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:17:02 ispc CRON[1739855]: pam_unix(cron:session): session closed for user root Dec 16 09:17:56 ispc postfix/smtpd[1739896]: sql auxprop plugin using mysql engine Dec 16 09:18:01 ispc CRON[1739897]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 09:18:01 ispc CRON[1739898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:18:01 ispc CRON[1739898]: pam_unix(cron:session): session closed for user root Dec 16 09:18:04 ispc CRON[1739897]: pam_unix(cron:session): session closed for user amavis Dec 16 09:18:05 ispc postfix/smtpd[1739925]: sql auxprop plugin using mysql engine Dec 16 09:19:01 ispc CRON[1739950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:19:01 ispc CRON[1739950]: pam_unix(cron:session): session closed for user root Dec 16 09:19:24 ispc postfix/smtpd[1739971]: sql auxprop plugin using mysql engine Dec 16 09:20:01 ispc CRON[1739990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:20:01 ispc CRON[1739991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:20:01 ispc CRON[1739992]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:20:01 ispc CRON[1739993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:20:01 ispc CRON[1739994]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:20:01 ispc CRON[1739992]: pam_unix(cron:session): session closed for user www-data Dec 16 09:20:01 ispc sshd[1739989]: Did not receive identification string from 192.227.134.84 Dec 16 09:20:01 ispc CRON[1739991]: pam_unix(cron:session): session closed for user root Dec 16 09:20:01 ispc CRON[1739994]: pam_unix(cron:session): session closed for user getmail Dec 16 09:20:02 ispc CRON[1739990]: pam_unix(cron:session): session closed for user root Dec 16 09:20:02 ispc CRON[1739993]: pam_unix(cron:session): session closed for user root Dec 16 09:21:01 ispc CRON[1740095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:21:01 ispc CRON[1740096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:21:01 ispc CRON[1740095]: pam_unix(cron:session): session closed for user root Dec 16 09:21:01 ispc CRON[1740096]: pam_unix(cron:session): session closed for user root Dec 16 09:21:11 ispc sshd[1740113]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:21:11 ispc sshd[1740113]: Invalid user martof from 193.110.157.47 Dec 16 09:22:01 ispc CRON[1740141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:22:02 ispc CRON[1740141]: pam_unix(cron:session): session closed for user root Dec 16 09:22:10 ispc sshd[1740156]: Bad protocol version identification 'GET / HTTP/1.1' from 159.65.153.173 Dec 16 09:22:10 ispc sshd[1740157]: Bad protocol version identification 'GET /favicon.ico HTTP/1.1' from 159.65.153.173 Dec 16 09:23:01 ispc CRON[1740190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:23:02 ispc CRON[1740190]: pam_unix(cron:session): session closed for user root Dec 16 09:24:01 ispc CRON[1740223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:24:02 ispc CRON[1740223]: pam_unix(cron:session): session closed for user root Dec 16 09:24:02 ispc sshd[1740221]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:24:02 ispc sshd[1740221]: Invalid user ziplines from 114.7.163.154 Dec 16 09:25:01 ispc CRON[1740264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:25:01 ispc CRON[1740265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:25:01 ispc CRON[1740266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:25:01 ispc CRON[1740267]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:25:01 ispc CRON[1740265]: pam_unix(cron:session): session closed for user root Dec 16 09:25:01 ispc CRON[1740267]: pam_unix(cron:session): session closed for user getmail Dec 16 09:25:01 ispc CRON[1740266]: pam_unix(cron:session): session closed for user root Dec 16 09:25:01 ispc CRON[1740264]: pam_unix(cron:session): session closed for user root Dec 16 09:26:01 ispc CRON[1740368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:26:02 ispc CRON[1740368]: pam_unix(cron:session): session closed for user root Dec 16 09:26:54 ispc postfix/smtpd[1740403]: sql auxprop plugin using mysql engine Dec 16 09:26:55 ispc postfix/smtpd[1740407]: sql auxprop plugin using mysql engine Dec 16 09:26:55 ispc saslauthd[1740406]: pam_mysql - SELECT returned no result. Dec 16 09:26:55 ispc saslauthd[1740406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:55 ispc saslauthd[1740406]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:55 ispc postfix/smtpd[1740409]: sql auxprop plugin using mysql engine Dec 16 09:26:55 ispc saslauthd[1740408]: pam_mysql - SELECT returned no result. Dec 16 09:26:55 ispc saslauthd[1740408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:55 ispc saslauthd[1740408]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:56 ispc saslauthd[1740410]: pam_mysql - SELECT returned no result. Dec 16 09:26:56 ispc saslauthd[1740410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:56 ispc saslauthd[1740410]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:56 ispc saslauthd[1740415]: pam_mysql - SELECT returned no result. Dec 16 09:26:56 ispc saslauthd[1740415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:56 ispc saslauthd[1740415]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:56 ispc postfix/smtpd[1740417]: sql auxprop plugin using mysql engine Dec 16 09:26:56 ispc saslauthd[1740416]: pam_mysql - SELECT returned no result. Dec 16 09:26:56 ispc saslauthd[1740416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:56 ispc saslauthd[1740416]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:57 ispc saslauthd[1740418]: pam_mysql - SELECT returned no result. Dec 16 09:26:57 ispc saslauthd[1740418]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:57 ispc saslauthd[1740418]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:26:58 ispc saslauthd[1740419]: pam_mysql - SELECT returned no result. Dec 16 09:26:58 ispc saslauthd[1740419]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:26:58 ispc saslauthd[1740419]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:27:01 ispc CRON[1740420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:27:01 ispc CRON[1740420]: pam_unix(cron:session): session closed for user root Dec 16 09:27:02 ispc saslauthd[1740431]: pam_mysql - SELECT returned no result. Dec 16 09:27:02 ispc saslauthd[1740431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:27:02 ispc saslauthd[1740431]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:27:11 ispc saslauthd[1740436]: pam_mysql - SELECT returned no result. Dec 16 09:27:11 ispc saslauthd[1740436]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:27:11 ispc saslauthd[1740436]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:27:36 ispc saslauthd[1740449]: pam_mysql - SELECT returned no result. Dec 16 09:27:36 ispc saslauthd[1740449]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:27:36 ispc saslauthd[1740449]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:27:57 ispc saslauthd[1740470]: pam_mysql - SELECT returned no result. Dec 16 09:27:57 ispc saslauthd[1740470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:27:57 ispc saslauthd[1740470]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:28:01 ispc CRON[1740471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:28:02 ispc CRON[1740471]: pam_unix(cron:session): session closed for user root Dec 16 09:28:35 ispc sshd[1740495]: Invalid user admin from 45.148.10.121 Dec 16 09:28:52 ispc saslauthd[1740507]: pam_mysql - SELECT returned no result. Dec 16 09:28:52 ispc saslauthd[1740507]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:28:52 ispc saslauthd[1740507]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:29:01 ispc CRON[1740512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:29:01 ispc CRON[1740512]: pam_unix(cron:session): session closed for user root Dec 16 09:29:08 ispc saslauthd[1740527]: pam_mysql - SELECT returned no result. Dec 16 09:29:08 ispc saslauthd[1740527]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:29:08 ispc saslauthd[1740527]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:29:12 ispc saslauthd[1740528]: pam_mysql - SELECT returned no result. Dec 16 09:29:12 ispc saslauthd[1740528]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:29:12 ispc saslauthd[1740528]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:29:26 ispc saslauthd[1740533]: pam_mysql - SELECT returned no result. Dec 16 09:29:26 ispc saslauthd[1740533]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:29:26 ispc saslauthd[1740533]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:30:01 ispc CRON[1740553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:30:01 ispc CRON[1740550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:30:01 ispc CRON[1740554]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:30:01 ispc CRON[1740551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:30:01 ispc CRON[1740552]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:30:01 ispc CRON[1740551]: pam_unix(cron:session): session closed for user root Dec 16 09:30:01 ispc CRON[1740552]: pam_unix(cron:session): session closed for user www-data Dec 16 09:30:01 ispc CRON[1740554]: pam_unix(cron:session): session closed for user getmail Dec 16 09:30:02 ispc CRON[1740550]: pam_unix(cron:session): session closed for user root Dec 16 09:30:02 ispc CRON[1740553]: pam_unix(cron:session): session closed for user root Dec 16 09:30:41 ispc saslauthd[1740647]: pam_mysql - SELECT returned no result. Dec 16 09:30:41 ispc saslauthd[1740647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:30:41 ispc saslauthd[1740647]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:31:01 ispc CRON[1740659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:31:01 ispc sshd[1740657]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 09:31:01 ispc sshd[1740657]: Invalid user blceu from 103.146.203.212 Dec 16 09:31:01 ispc CRON[1740659]: pam_unix(cron:session): session closed for user root Dec 16 09:31:10 ispc postfix/smtpd[1740680]: sql auxprop plugin using mysql engine Dec 16 09:31:28 ispc CRON[1739541]: pam_unix(cron:session): session closed for user root Dec 16 09:32:01 ispc CRON[1740690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:32:08 ispc postfix/smtpd[1740701]: sql auxprop plugin using mysql engine Dec 16 09:32:08 ispc CRON[1740690]: pam_unix(cron:session): session closed for user root Dec 16 09:32:08 ispc saslauthd[1740705]: pam_mysql - SELECT returned no result. Dec 16 09:32:08 ispc saslauthd[1740705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:32:08 ispc saslauthd[1740705]: do_auth : auth failure: [user=clearone] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:33:01 ispc CRON[1740718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:33:01 ispc CRON[1740718]: pam_unix(cron:session): session closed for user root Dec 16 09:33:48 ispc postfix/smtpd[1740740]: sql auxprop plugin using mysql engine Dec 16 09:34:01 ispc CRON[1740747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:34:02 ispc CRON[1740747]: pam_unix(cron:session): session closed for user root Dec 16 09:35:01 ispc CRON[1740762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:35:01 ispc CRON[1740765]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:35:01 ispc CRON[1740764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:35:01 ispc CRON[1740763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:35:01 ispc CRON[1740763]: pam_unix(cron:session): session closed for user root Dec 16 09:35:01 ispc CRON[1740765]: pam_unix(cron:session): session closed for user getmail Dec 16 09:35:01 ispc CRON[1740762]: pam_unix(cron:session): session closed for user root Dec 16 09:35:35 ispc CRON[1740764]: pam_unix(cron:session): session closed for user root Dec 16 09:35:37 ispc sshd[1740874]: Invalid user klape from 70.37.89.177 Dec 16 09:35:38 ispc sshd[1740876]: Invalid user ubuntu from 70.37.89.177 Dec 16 09:36:01 ispc CRON[1740878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:36:05 ispc postfix/smtpd[1740890]: sql auxprop plugin using mysql engine Dec 16 09:37:01 ispc CRON[1740914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:37:01 ispc CRON[1740914]: pam_unix(cron:session): session closed for user root Dec 16 09:38:01 ispc CRON[1740965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:38:02 ispc CRON[1740965]: pam_unix(cron:session): session closed for user root Dec 16 09:38:42 ispc postfix/smtpd[1740992]: sql auxprop plugin using mysql engine Dec 16 09:38:43 ispc saslauthd[1740994]: pam_mysql - SELECT returned no result. Dec 16 09:38:43 ispc saslauthd[1740994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:38:43 ispc saslauthd[1740994]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:39:01 ispc CRON[1741004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:39:01 ispc CRON[1741005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:39:01 ispc CRON[1741004]: pam_unix(cron:session): session closed for user root Dec 16 09:39:02 ispc CRON[1741005]: pam_unix(cron:session): session closed for user root Dec 16 09:40:01 ispc CRON[1741052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:40:01 ispc CRON[1741053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:40:01 ispc CRON[1741054]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:40:01 ispc CRON[1741055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:40:01 ispc CRON[1741056]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:40:01 ispc CRON[1741053]: pam_unix(cron:session): session closed for user root Dec 16 09:40:01 ispc CRON[1741054]: pam_unix(cron:session): session closed for user www-data Dec 16 09:40:01 ispc CRON[1741056]: pam_unix(cron:session): session closed for user getmail Dec 16 09:40:01 ispc CRON[1741055]: pam_unix(cron:session): session closed for user root Dec 16 09:40:01 ispc CRON[1741052]: pam_unix(cron:session): session closed for user root Dec 16 09:41:01 ispc CRON[1741165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:41:02 ispc CRON[1741165]: pam_unix(cron:session): session closed for user root Dec 16 09:41:14 ispc postfix/smtpd[1741185]: sql auxprop plugin using mysql engine Dec 16 09:41:14 ispc saslauthd[1741187]: pam_mysql - SELECT returned no result. Dec 16 09:41:14 ispc saslauthd[1741187]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:41:14 ispc saslauthd[1741187]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:42:01 ispc CRON[1741219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:42:01 ispc CRON[1741219]: pam_unix(cron:session): session closed for user root Dec 16 09:43:01 ispc CRON[1741269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:43:02 ispc CRON[1741269]: pam_unix(cron:session): session closed for user root Dec 16 09:44:01 ispc CRON[1741305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:44:01 ispc CRON[1741305]: pam_unix(cron:session): session closed for user root Dec 16 09:45:01 ispc CRON[1741345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:45:01 ispc CRON[1741348]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:45:01 ispc CRON[1741346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:45:01 ispc CRON[1741347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:45:01 ispc CRON[1741346]: pam_unix(cron:session): session closed for user root Dec 16 09:45:01 ispc CRON[1741348]: pam_unix(cron:session): session closed for user getmail Dec 16 09:45:02 ispc CRON[1741347]: pam_unix(cron:session): session closed for user root Dec 16 09:45:02 ispc CRON[1741345]: pam_unix(cron:session): session closed for user root Dec 16 09:46:01 ispc CRON[1741446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:46:02 ispc CRON[1741446]: pam_unix(cron:session): session closed for user root Dec 16 09:47:01 ispc CRON[1741482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:47:01 ispc CRON[1741482]: pam_unix(cron:session): session closed for user root Dec 16 09:47:15 ispc postfix/smtpd[1741497]: sql auxprop plugin using mysql engine Dec 16 09:47:16 ispc saslauthd[1741500]: pam_mysql - SELECT returned no result. Dec 16 09:47:16 ispc saslauthd[1741500]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:47:16 ispc saslauthd[1741500]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:47:33 ispc saslauthd[1741509]: pam_mysql - SELECT returned no result. Dec 16 09:47:33 ispc saslauthd[1741509]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:47:33 ispc saslauthd[1741509]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:48:01 ispc CRON[1741533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:48:02 ispc CRON[1741533]: pam_unix(cron:session): session closed for user root Dec 16 09:49:01 ispc CRON[1741570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:49:02 ispc CRON[1741570]: pam_unix(cron:session): session closed for user root Dec 16 09:50:01 ispc CRON[1741611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:50:01 ispc CRON[1741614]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:50:01 ispc CRON[1741612]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 09:50:01 ispc CRON[1741610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:50:01 ispc CRON[1741613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:50:01 ispc CRON[1741612]: pam_unix(cron:session): session closed for user www-data Dec 16 09:50:01 ispc CRON[1741611]: pam_unix(cron:session): session closed for user root Dec 16 09:50:01 ispc CRON[1741614]: pam_unix(cron:session): session closed for user getmail Dec 16 09:50:02 ispc CRON[1741610]: pam_unix(cron:session): session closed for user root Dec 16 09:50:02 ispc CRON[1741613]: pam_unix(cron:session): session closed for user root Dec 16 09:50:40 ispc postfix/smtpd[1741705]: sql auxprop plugin using mysql engine Dec 16 09:50:46 ispc sshd[1741712]: Did not receive identification string from 45.140.17.97 Dec 16 09:50:47 ispc postfix/smtpd[1741713]: sql auxprop plugin using mysql engine Dec 16 09:50:59 ispc postfix/smtpd[1741724]: sql auxprop plugin using mysql engine Dec 16 09:51:01 ispc CRON[1741736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:51:02 ispc CRON[1741736]: pam_unix(cron:session): session closed for user root Dec 16 09:52:01 ispc CRON[1741774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:52:01 ispc CRON[1741775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:52:01 ispc CRON[1741775]: pam_unix(cron:session): session closed for user root Dec 16 09:53:01 ispc CRON[1741823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:53:02 ispc CRON[1741823]: pam_unix(cron:session): session closed for user root Dec 16 09:53:15 ispc postfix/smtpd[1741838]: sql auxprop plugin using mysql engine Dec 16 09:53:15 ispc saslauthd[1741840]: pam_mysql - SELECT returned no result. Dec 16 09:53:15 ispc saslauthd[1741840]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:53:15 ispc saslauthd[1741840]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:54:01 ispc CRON[1741863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:54:01 ispc CRON[1741863]: pam_unix(cron:session): session closed for user root Dec 16 09:55:02 ispc CRON[1741905]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 09:55:02 ispc CRON[1741902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:55:02 ispc CRON[1741903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:55:02 ispc CRON[1741904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:55:02 ispc CRON[1741903]: pam_unix(cron:session): session closed for user root Dec 16 09:55:02 ispc CRON[1741905]: pam_unix(cron:session): session closed for user getmail Dec 16 09:55:02 ispc CRON[1741902]: pam_unix(cron:session): session closed for user root Dec 16 09:55:02 ispc CRON[1741904]: pam_unix(cron:session): session closed for user root Dec 16 09:55:17 ispc CRON[1741774]: pam_unix(cron:session): session closed for user root Dec 16 09:55:52 ispc sshd[1741999]: Invalid user blceu from 45.119.213.109 Dec 16 09:56:01 ispc CRON[1742005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:56:02 ispc CRON[1742005]: pam_unix(cron:session): session closed for user root Dec 16 09:56:21 ispc CRON[1740878]: pam_unix(cron:session): session closed for user root Dec 16 09:56:21 ispc postfix/smtpd[1742022]: sql auxprop plugin using mysql engine Dec 16 09:56:39 ispc saslauthd[1742027]: pam_mysql - SELECT returned no result. Dec 16 09:56:39 ispc saslauthd[1742027]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 09:56:39 ispc saslauthd[1742027]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 09:56:50 ispc postfix/smtpd[1742028]: sql auxprop plugin using mysql engine Dec 16 09:57:01 ispc CRON[1742033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:57:02 ispc CRON[1742033]: pam_unix(cron:session): session closed for user root Dec 16 09:58:01 ispc CRON[1742056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:58:02 ispc CRON[1742056]: pam_unix(cron:session): session closed for user root Dec 16 09:59:01 ispc CRON[1742074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 09:59:02 ispc CRON[1742074]: pam_unix(cron:session): session closed for user root Dec 16 09:59:02 ispc sshd[1742072]: Invalid user pronajemplosin from 165.232.190.97 Dec 16 10:00:01 ispc CRON[1742086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:00:01 ispc CRON[1742087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:00:01 ispc CRON[1742088]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:00:01 ispc CRON[1742089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:00:01 ispc CRON[1742090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:00:01 ispc CRON[1742091]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:00:01 ispc CRON[1742088]: pam_unix(cron:session): session closed for user www-data Dec 16 10:00:01 ispc CRON[1742087]: pam_unix(cron:session): session closed for user root Dec 16 10:00:01 ispc CRON[1742091]: pam_unix(cron:session): session closed for user getmail Dec 16 10:00:02 ispc CRON[1742086]: pam_unix(cron:session): session closed for user root Dec 16 10:00:02 ispc CRON[1742089]: pam_unix(cron:session): session closed for user root Dec 16 10:00:43 ispc CRON[1742090]: pam_unix(cron:session): session closed for user root Dec 16 10:01:01 ispc CRON[1742352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:02:01 ispc CRON[1742386]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 10:02:01 ispc CRON[1742387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:02:02 ispc CRON[1742387]: pam_unix(cron:session): session closed for user root Dec 16 10:02:17 ispc postfix/smtpd[1742765]: sql auxprop plugin using mysql engine Dec 16 10:02:18 ispc saslauthd[1742772]: pam_mysql - SELECT returned no result. Dec 16 10:02:18 ispc saslauthd[1742772]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:02:18 ispc saslauthd[1742772]: do_auth : auth failure: [user=cmaker] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:02:24 ispc saslauthd[1742881]: pam_mysql - SELECT returned no result. Dec 16 10:02:24 ispc saslauthd[1742881]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:02:24 ispc saslauthd[1742881]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:03:01 ispc CRON[1743261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:03:02 ispc CRON[1743261]: pam_unix(cron:session): session closed for user root Dec 16 10:03:22 ispc CRON[1742386]: pam_unix(cron:session): session closed for user logcheck Dec 16 10:03:32 ispc postfix/smtpd[1743474]: sql auxprop plugin using mysql engine Dec 16 10:04:01 ispc CRON[1743491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:04:02 ispc CRON[1743491]: pam_unix(cron:session): session closed for user root Dec 16 10:05:01 ispc CRON[1743528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:05:01 ispc CRON[1743529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:05:01 ispc CRON[1743530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:05:01 ispc CRON[1743531]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:05:01 ispc CRON[1743529]: pam_unix(cron:session): session closed for user root Dec 16 10:05:01 ispc CRON[1743531]: pam_unix(cron:session): session closed for user getmail Dec 16 10:05:02 ispc CRON[1743530]: pam_unix(cron:session): session closed for user root Dec 16 10:05:02 ispc CRON[1743528]: pam_unix(cron:session): session closed for user root Dec 16 10:05:07 ispc postfix/smtpd[1743608]: sql auxprop plugin using mysql engine Dec 16 10:05:07 ispc saslauthd[1743610]: pam_mysql - SELECT returned no result. Dec 16 10:05:07 ispc saslauthd[1743610]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:05:07 ispc saslauthd[1743610]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:05:14 ispc saslauthd[1743611]: pam_mysql - SELECT returned no result. Dec 16 10:05:14 ispc saslauthd[1743611]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:05:14 ispc saslauthd[1743611]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:05:19 ispc sshd[1743616]: Invalid user AdminGPON from 45.148.10.121 Dec 16 10:05:26 ispc saslauthd[1743622]: pam_mysql - SELECT returned no result. Dec 16 10:05:26 ispc saslauthd[1743622]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:05:26 ispc saslauthd[1743622]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:05:35 ispc sshd[1743623]: reverse mapping checking getaddrinfo for ip-112-245-3-93.indowebsite.net [103.112.245.93] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:05:35 ispc sshd[1743623]: Invalid user zednictvistastny from 103.112.245.93 Dec 16 10:05:37 ispc saslauthd[1743629]: pam_mysql - SELECT returned no result. Dec 16 10:05:37 ispc saslauthd[1743629]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:05:37 ispc saslauthd[1743629]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:05:43 ispc saslauthd[1743630]: pam_mysql - SELECT returned no result. Dec 16 10:05:43 ispc saslauthd[1743630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:05:43 ispc saslauthd[1743630]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:06:01 ispc CRON[1743639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:06:03 ispc CRON[1743639]: pam_unix(cron:session): session closed for user root Dec 16 10:06:07 ispc saslauthd[1743654]: pam_mysql - SELECT returned no result. Dec 16 10:06:07 ispc saslauthd[1743654]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:06:07 ispc saslauthd[1743654]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:06:32 ispc saslauthd[1743664]: pam_mysql - SELECT returned no result. Dec 16 10:06:32 ispc saslauthd[1743664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:06:32 ispc saslauthd[1743664]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:07:01 ispc CRON[1743678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:07:01 ispc CRON[1743678]: pam_unix(cron:session): session closed for user root Dec 16 10:07:18 ispc postfix/smtpd[1743693]: sql auxprop plugin using mysql engine Dec 16 10:08:01 ispc CRON[1743723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:08:03 ispc CRON[1743723]: pam_unix(cron:session): session closed for user root Dec 16 10:09:01 ispc CRON[1743760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:09:01 ispc CRON[1743761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:09:02 ispc CRON[1743760]: pam_unix(cron:session): session closed for user root Dec 16 10:09:02 ispc CRON[1743761]: pam_unix(cron:session): session closed for user root Dec 16 10:09:12 ispc postfix/smtpd[1743787]: sql auxprop plugin using mysql engine Dec 16 10:09:13 ispc saslauthd[1743789]: pam_mysql - SELECT returned no result. Dec 16 10:09:13 ispc saslauthd[1743789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:09:13 ispc saslauthd[1743789]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:10:01 ispc CRON[1743813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:10:01 ispc CRON[1743814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:10:01 ispc CRON[1743815]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:10:01 ispc CRON[1743816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:10:01 ispc CRON[1743817]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:10:01 ispc CRON[1743815]: pam_unix(cron:session): session closed for user www-data Dec 16 10:10:01 ispc CRON[1743814]: pam_unix(cron:session): session closed for user root Dec 16 10:10:01 ispc CRON[1743817]: pam_unix(cron:session): session closed for user getmail Dec 16 10:10:02 ispc CRON[1743816]: pam_unix(cron:session): session closed for user root Dec 16 10:10:02 ispc CRON[1743813]: pam_unix(cron:session): session closed for user root Dec 16 10:10:26 ispc sshd[1743899]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:10:26 ispc sshd[1743899]: Invalid user ziplines from 193.110.157.47 Dec 16 10:11:01 ispc CRON[1743915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:11:02 ispc CRON[1743915]: pam_unix(cron:session): session closed for user root Dec 16 10:11:07 ispc sshd[1743930]: Invalid user ziplines from 165.227.38.205 Dec 16 10:11:41 ispc sshd[1743950]: Invalid user blceu from 207.180.205.87 Dec 16 10:11:43 ispc sshd[1743952]: Invalid user blceu from 94.130.106.125 Dec 16 10:11:52 ispc postfix/smtpd[1743958]: sql auxprop plugin using mysql engine Dec 16 10:11:52 ispc saslauthd[1743960]: pam_mysql - SELECT returned no result. Dec 16 10:11:52 ispc saslauthd[1743960]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:11:52 ispc saslauthd[1743960]: do_auth : auth failure: [user=noreply@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 10:12:01 ispc CRON[1743965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:12:02 ispc CRON[1743965]: pam_unix(cron:session): session closed for user root Dec 16 10:12:09 ispc sshd[1743980]: Invalid user blceu from 82.202.131.77 Dec 16 10:13:01 ispc CRON[1744017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:13:02 ispc CRON[1744017]: pam_unix(cron:session): session closed for user root Dec 16 10:13:05 ispc sshd[1744028]: Invalid user ziplines from 217.160.218.56 Dec 16 10:13:13 ispc sshd[1744036]: reverse mapping checking getaddrinfo for 78.27.202.235.mirohost.cloud [78.27.202.235] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:13:13 ispc sshd[1744036]: Invalid user ziplines from 78.27.202.235 Dec 16 10:13:14 ispc saslauthd[1744038]: pam_mysql - SELECT returned no result. Dec 16 10:13:14 ispc saslauthd[1744038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:13:14 ispc saslauthd[1744038]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:13:37 ispc sshd[1744051]: Invalid user martof from 89.116.28.199 Dec 16 10:13:45 ispc sshd[1744057]: Invalid user ziplines from 45.79.208.179 Dec 16 10:13:53 ispc sshd[1744063]: Invalid user blceu from 95.170.74.113 Dec 16 10:14:01 ispc CRON[1744069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:14:01 ispc CRON[1744069]: pam_unix(cron:session): session closed for user root Dec 16 10:14:14 ispc sshd[1744086]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:14:14 ispc sshd[1744086]: Invalid user blceu from 203.151.66.147 Dec 16 10:14:19 ispc sshd[1744095]: reverse mapping checking getaddrinfo for static.120.253.208.85.clients.irandns.com [85.208.253.120] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:14:19 ispc sshd[1744095]: Invalid user ziplines from 85.208.253.120 Dec 16 10:14:21 ispc saslauthd[1744097]: pam_mysql - SELECT returned no result. Dec 16 10:14:21 ispc saslauthd[1744097]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:14:21 ispc saslauthd[1744097]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:14:29 ispc sshd[1744098]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:14:29 ispc sshd[1744098]: Invalid user blceu from 185.149.234.57 Dec 16 10:15:01 ispc CRON[1744118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:15:01 ispc CRON[1744119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:15:01 ispc CRON[1744120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:15:01 ispc CRON[1744121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:15:01 ispc CRON[1744119]: pam_unix(cron:session): session closed for user root Dec 16 10:15:02 ispc CRON[1744121]: pam_unix(cron:session): session closed for user getmail Dec 16 10:15:02 ispc CRON[1744120]: pam_unix(cron:session): session closed for user root Dec 16 10:15:05 ispc CRON[1744118]: pam_unix(cron:session): session closed for user root Dec 16 10:16:00 ispc sshd[1744222]: Invalid user martof from 64.226.109.250 Dec 16 10:16:01 ispc CRON[1744228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:16:01 ispc CRON[1744228]: pam_unix(cron:session): session closed for user root Dec 16 10:16:09 ispc sshd[1744241]: reverse mapping checking getaddrinfo for static.213.164.213.185.clients.irandns.com [185.213.164.213] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:16:22 ispc sshd[1744253]: Invalid user martof from 84.247.162.87 Dec 16 10:17:01 ispc CRON[1744271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:17:02 ispc CRON[1744271]: pam_unix(cron:session): session closed for user root Dec 16 10:17:16 ispc postfix/smtpd[1744292]: sql auxprop plugin using mysql engine Dec 16 10:17:18 ispc saslauthd[1744294]: pam_mysql - SELECT returned no result. Dec 16 10:17:18 ispc saslauthd[1744294]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:17:18 ispc saslauthd[1744294]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:17:24 ispc saslauthd[1744301]: pam_mysql - SELECT returned no result. Dec 16 10:17:24 ispc saslauthd[1744301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:17:24 ispc saslauthd[1744301]: do_auth : auth failure: [user=conferencing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:18:01 ispc CRON[1744330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:18:02 ispc CRON[1744330]: pam_unix(cron:session): session closed for user root Dec 16 10:18:05 ispc sshd[1744345]: Invalid user martof from 5.188.158.241 Dec 16 10:18:37 ispc sshd[1744360]: Invalid user blceu from 212.227.185.39 Dec 16 10:18:38 ispc sshd[1744362]: Invalid user martof from 82.165.42.244 Dec 16 10:19:01 ispc CRON[1744373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:19:02 ispc CRON[1744373]: pam_unix(cron:session): session closed for user root Dec 16 10:19:18 ispc sshd[1744394]: Invalid user ziplines from 193.123.91.230 Dec 16 10:19:25 ispc sshd[1744398]: Invalid user ziplines from 37.60.231.58 Dec 16 10:19:31 ispc sshd[1744404]: Invalid user ziplines from 185.30.34.189 Dec 16 10:19:34 ispc sshd[1744406]: Invalid user blceu from 164.68.98.218 Dec 16 10:19:37 ispc sshd[1744412]: Invalid user martof from 142.79.227.70 Dec 16 10:19:47 ispc sshd[1744420]: Invalid user ziplines from 95.216.43.126 Dec 16 10:20:01 ispc CRON[1744430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:20:01 ispc CRON[1744431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:20:01 ispc CRON[1744432]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:20:01 ispc CRON[1744433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:20:01 ispc CRON[1744434]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:20:01 ispc CRON[1744432]: pam_unix(cron:session): session closed for user www-data Dec 16 10:20:01 ispc CRON[1744431]: pam_unix(cron:session): session closed for user root Dec 16 10:20:01 ispc CRON[1744434]: pam_unix(cron:session): session closed for user getmail Dec 16 10:20:02 ispc CRON[1744433]: pam_unix(cron:session): session closed for user root Dec 16 10:20:03 ispc CRON[1744430]: pam_unix(cron:session): session closed for user root Dec 16 10:20:12 ispc sshd[1744514]: Address 65.20.68.39 maps to 65.20.68.39.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:20:12 ispc sshd[1744514]: Invalid user martof from 65.20.68.39 Dec 16 10:20:29 ispc sshd[1744525]: Invalid user ziplines from 141.94.71.131 Dec 16 10:20:37 ispc sshd[1744527]: Invalid user blceu from 209.145.48.233 Dec 16 10:20:53 ispc sshd[1744540]: Invalid user martof from 46.16.12.202 Dec 16 10:20:58 ispc sshd[1744544]: reverse mapping checking getaddrinfo for 202.118.150.203.sta.inet.co.th [203.150.118.202] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:20:58 ispc sshd[1744544]: Invalid user blceu from 203.150.118.202 Dec 16 10:21:01 ispc CRON[1744551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:21:01 ispc CRON[1744552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:21:01 ispc CRON[1744551]: pam_unix(cron:session): session closed for user root Dec 16 10:21:01 ispc CRON[1744552]: pam_unix(cron:session): session closed for user root Dec 16 10:21:29 ispc postfix/smtpd[1744577]: sql auxprop plugin using mysql engine Dec 16 10:21:29 ispc CRON[1742352]: pam_unix(cron:session): session closed for user root Dec 16 10:21:49 ispc sshd[1744584]: Invalid user blceu from 89.185.227.121 Dec 16 10:22:01 ispc CRON[1744586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:22:02 ispc CRON[1744586]: pam_unix(cron:session): session closed for user root Dec 16 10:22:29 ispc sshd[1744598]: Did not receive identification string from 209.38.98.130 Dec 16 10:23:01 ispc CRON[1744623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:23:02 ispc CRON[1744623]: pam_unix(cron:session): session closed for user root Dec 16 10:23:03 ispc sshd[1744635]: Invalid user martof from 185.142.159.122 Dec 16 10:24:01 ispc CRON[1744648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:24:02 ispc CRON[1744648]: pam_unix(cron:session): session closed for user root Dec 16 10:24:20 ispc postfix/smtpd[1744667]: sql auxprop plugin using mysql engine Dec 16 10:24:20 ispc saslauthd[1744671]: pam_mysql - SELECT returned no result. Dec 16 10:24:20 ispc saslauthd[1744671]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:20 ispc saslauthd[1744671]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:21 ispc postfix/smtpd[1744670]: sql auxprop plugin using mysql engine Dec 16 10:24:21 ispc saslauthd[1744672]: pam_mysql - SELECT returned no result. Dec 16 10:24:21 ispc saslauthd[1744672]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:21 ispc saslauthd[1744672]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:21 ispc postfix/smtpd[1744673]: sql auxprop plugin using mysql engine Dec 16 10:24:21 ispc postfix/smtpd[1744674]: sql auxprop plugin using mysql engine Dec 16 10:24:21 ispc saslauthd[1744675]: pam_mysql - SELECT returned no result. Dec 16 10:24:21 ispc saslauthd[1744675]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:21 ispc saslauthd[1744675]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:21 ispc saslauthd[1744676]: pam_mysql - SELECT returned no result. Dec 16 10:24:21 ispc saslauthd[1744676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:21 ispc saslauthd[1744676]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:21 ispc saslauthd[1744677]: pam_mysql - SELECT returned no result. Dec 16 10:24:21 ispc saslauthd[1744677]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:21 ispc saslauthd[1744677]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:21 ispc saslauthd[1744678]: pam_mysql - SELECT returned no result. Dec 16 10:24:21 ispc saslauthd[1744678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:21 ispc saslauthd[1744678]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:22 ispc saslauthd[1744679]: pam_mysql - SELECT returned no result. Dec 16 10:24:22 ispc saslauthd[1744679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:22 ispc saslauthd[1744679]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:25 ispc sshd[1744680]: Invalid user blceu from 103.29.180.47 Dec 16 10:24:26 ispc sshd[1744682]: Invalid user blceu from 35.200.246.108 Dec 16 10:24:26 ispc saslauthd[1744684]: pam_mysql - SELECT returned no result. Dec 16 10:24:26 ispc saslauthd[1744684]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:26 ispc saslauthd[1744684]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:33 ispc saslauthd[1744685]: pam_mysql - SELECT returned no result. Dec 16 10:24:33 ispc saslauthd[1744685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:33 ispc saslauthd[1744685]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:36 ispc saslauthd[1744686]: pam_mysql - SELECT returned no result. Dec 16 10:24:36 ispc saslauthd[1744686]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:24:36 ispc saslauthd[1744686]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:24:47 ispc sshd[1744688]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:24:47 ispc postfix/smtpd[1744690]: sql auxprop plugin using mysql engine Dec 16 10:25:01 ispc saslauthd[1744697]: pam_mysql - SELECT returned no result. Dec 16 10:25:01 ispc saslauthd[1744697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:25:01 ispc saslauthd[1744697]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:25:01 ispc CRON[1744698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:25:01 ispc CRON[1744699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:25:01 ispc CRON[1744700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:25:01 ispc CRON[1744701]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:25:01 ispc CRON[1744699]: pam_unix(cron:session): session closed for user root Dec 16 10:25:02 ispc CRON[1744701]: pam_unix(cron:session): session closed for user getmail Dec 16 10:25:02 ispc CRON[1744698]: pam_unix(cron:session): session closed for user root Dec 16 10:25:06 ispc sshd[1744803]: Did not receive identification string from 192.227.134.84 Dec 16 10:25:41 ispc CRON[1744700]: pam_unix(cron:session): session closed for user root Dec 16 10:25:53 ispc saslauthd[1744814]: pam_mysql - SELECT returned no result. Dec 16 10:25:53 ispc saslauthd[1744814]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:25:53 ispc saslauthd[1744814]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:25:58 ispc saslauthd[1744817]: pam_mysql - SELECT returned no result. Dec 16 10:25:58 ispc saslauthd[1744817]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:25:58 ispc saslauthd[1744817]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:26:01 ispc CRON[1744818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:26:10 ispc sshd[1744830]: Invalid user blceu from 185.252.233.149 Dec 16 10:26:15 ispc sshd[1744838]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:26:21 ispc sshd[1744840]: Invalid user ziplines from 155.4.68.68 Dec 16 10:26:30 ispc saslauthd[1744848]: pam_mysql - SELECT returned no result. Dec 16 10:26:30 ispc saslauthd[1744848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:26:30 ispc saslauthd[1744848]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:26:54 ispc saslauthd[1744872]: pam_mysql - SELECT returned no result. Dec 16 10:26:54 ispc saslauthd[1744872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:26:54 ispc saslauthd[1744872]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:26:57 ispc saslauthd[1744873]: pam_mysql - SELECT returned no result. Dec 16 10:26:57 ispc saslauthd[1744873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:26:57 ispc saslauthd[1744873]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:27:01 ispc CRON[1744874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:27:02 ispc CRON[1744874]: pam_unix(cron:session): session closed for user root Dec 16 10:27:06 ispc sshd[1744889]: Invalid user ziplines from 165.227.134.232 Dec 16 10:27:16 ispc sshd[1744897]: Invalid user martof from 95.216.43.126 Dec 16 10:28:01 ispc CRON[1744934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:28:02 ispc CRON[1744934]: pam_unix(cron:session): session closed for user root Dec 16 10:28:43 ispc sshd[1744967]: Invalid user ziplines from 91.107.213.61 Dec 16 10:28:50 ispc sshd[1744974]: Invalid user martof from 51.91.76.213 Dec 16 10:28:56 ispc sshd[1744977]: Invalid user ziplines from 27.254.144.183 Dec 16 10:29:01 ispc CRON[1744983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:29:01 ispc CRON[1744983]: pam_unix(cron:session): session closed for user root Dec 16 10:29:24 ispc sshd[1745006]: Invalid user ziplines from 212.227.185.39 Dec 16 10:30:01 ispc CRON[1745030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:30:01 ispc CRON[1745031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:30:01 ispc CRON[1745032]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:30:01 ispc CRON[1745033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:30:01 ispc CRON[1745034]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:30:01 ispc CRON[1745032]: pam_unix(cron:session): session closed for user www-data Dec 16 10:30:01 ispc CRON[1745031]: pam_unix(cron:session): session closed for user root Dec 16 10:30:02 ispc CRON[1745034]: pam_unix(cron:session): session closed for user getmail Dec 16 10:30:02 ispc CRON[1745033]: pam_unix(cron:session): session closed for user root Dec 16 10:30:02 ispc CRON[1745030]: pam_unix(cron:session): session closed for user root Dec 16 10:30:29 ispc sshd[1745122]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:31:01 ispc CRON[1745143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:31:02 ispc CRON[1745143]: pam_unix(cron:session): session closed for user root Dec 16 10:31:09 ispc sshd[1745154]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:31:09 ispc sshd[1745154]: Invalid user ziplines from 185.149.234.57 Dec 16 10:31:14 ispc sshd[1745160]: Invalid user martof from 167.99.241.111 Dec 16 10:31:33 ispc sshd[1745177]: Invalid user blceu from 34.34.216.115 Dec 16 10:32:01 ispc CRON[1745193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:32:01 ispc CRON[1745193]: pam_unix(cron:session): session closed for user root Dec 16 10:32:09 ispc sshd[1745204]: Invalid user blceu from 45.251.72.2 Dec 16 10:32:14 ispc sshd[1745214]: Invalid user blceu from 34.45.101.184 Dec 16 10:32:26 ispc postfix/smtpd[1745222]: sql auxprop plugin using mysql engine Dec 16 10:32:27 ispc saslauthd[1745225]: pam_mysql - SELECT returned no result. Dec 16 10:32:27 ispc saslauthd[1745225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:32:27 ispc saslauthd[1745225]: do_auth : auth failure: [user=core] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:32:56 ispc sshd[1745248]: Invalid user blceu from 147.182.232.222 Dec 16 10:33:01 ispc CRON[1745254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:33:02 ispc CRON[1745254]: pam_unix(cron:session): session closed for user root Dec 16 10:33:13 ispc sshd[1745269]: Invalid user ziplines from 103.88.243.44 Dec 16 10:33:42 ispc sshd[1745286]: Invalid user ziplines from 20.123.103.162 Dec 16 10:33:55 ispc sshd[1745297]: Invalid user ziplines from 51.159.220.100 Dec 16 10:34:01 ispc CRON[1745301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:34:02 ispc CRON[1745301]: pam_unix(cron:session): session closed for user root Dec 16 10:34:54 ispc sshd[1745345]: Invalid user blceu from 162.244.30.110 Dec 16 10:35:01 ispc CRON[1745349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:35:01 ispc CRON[1745350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:35:01 ispc CRON[1745351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:35:01 ispc CRON[1745352]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:35:01 ispc CRON[1745350]: pam_unix(cron:session): session closed for user root Dec 16 10:35:01 ispc CRON[1745352]: pam_unix(cron:session): session closed for user getmail Dec 16 10:35:02 ispc CRON[1745351]: pam_unix(cron:session): session closed for user root Dec 16 10:35:03 ispc CRON[1745349]: pam_unix(cron:session): session closed for user root Dec 16 10:35:45 ispc sshd[1745460]: Invalid user martof from 88.159.150.1 Dec 16 10:35:55 ispc sshd[1745468]: Invalid user ziplines from 188.137.240.63 Dec 16 10:36:01 ispc CRON[1745472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:36:01 ispc CRON[1745472]: pam_unix(cron:session): session closed for user root Dec 16 10:36:26 ispc postfix/smtpd[1745505]: sql auxprop plugin using mysql engine Dec 16 10:36:27 ispc saslauthd[1745508]: pam_mysql - SELECT returned no result. Dec 16 10:36:27 ispc saslauthd[1745508]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:36:27 ispc saslauthd[1745508]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:36:35 ispc sshd[1745513]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:37:01 ispc CRON[1745527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:37:02 ispc CRON[1745527]: pam_unix(cron:session): session closed for user root Dec 16 10:37:14 ispc sshd[1745542]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:37:14 ispc sshd[1745542]: Invalid user ziplines from 217.73.131.131 Dec 16 10:37:19 ispc sshd[1745550]: Invalid user blceu from 217.154.113.158 Dec 16 10:37:23 ispc sshd[1745552]: Invalid user martof from 150.136.139.6 Dec 16 10:37:27 ispc sshd[1745560]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:38:01 ispc postfix/smtpd[1745607]: sql auxprop plugin using mysql engine Dec 16 10:38:01 ispc sshd[1745608]: Invalid user ziplines from 45.195.200.16 Dec 16 10:38:01 ispc CRON[1745611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:38:02 ispc CRON[1745611]: pam_unix(cron:session): session closed for user root Dec 16 10:38:20 ispc sshd[1745639]: Invalid user martof from 130.107.159.69 Dec 16 10:38:36 ispc sshd[1745653]: Invalid user blceu from 51.38.188.27 Dec 16 10:39:01 ispc CRON[1745666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:39:01 ispc CRON[1745667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:39:01 ispc CRON[1745666]: pam_unix(cron:session): session closed for user root Dec 16 10:39:02 ispc CRON[1745667]: pam_unix(cron:session): session closed for user root Dec 16 10:39:20 ispc sshd[1745698]: Invalid user blceu from 13.91.251.48 Dec 16 10:39:33 ispc sshd[1745706]: Invalid user blceu from 220.196.191.58 Dec 16 10:40:01 ispc CRON[1745723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:40:01 ispc CRON[1745724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:40:01 ispc CRON[1745725]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:40:01 ispc CRON[1745726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:40:01 ispc CRON[1745727]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:40:01 ispc CRON[1745725]: pam_unix(cron:session): session closed for user www-data Dec 16 10:40:01 ispc CRON[1745724]: pam_unix(cron:session): session closed for user root Dec 16 10:40:01 ispc CRON[1745727]: pam_unix(cron:session): session closed for user getmail Dec 16 10:40:02 ispc CRON[1745726]: pam_unix(cron:session): session closed for user root Dec 16 10:40:03 ispc CRON[1745723]: pam_unix(cron:session): session closed for user root Dec 16 10:40:40 ispc sshd[1745822]: Invalid user martof from 154.12.227.220 Dec 16 10:40:51 ispc sshd[1745830]: reverse mapping checking getaddrinfo for 104-129-23-171-host.colocrossing.com [104.129.23.171] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:41:01 ispc CRON[1745836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:41:02 ispc CRON[1745836]: pam_unix(cron:session): session closed for user root Dec 16 10:41:11 ispc postfix/smtpd[1745851]: sql auxprop plugin using mysql engine Dec 16 10:41:11 ispc postfix/smtpd[1745853]: sql auxprop plugin using mysql engine Dec 16 10:41:59 ispc sshd[1745890]: Invalid user blceu from 95.216.43.126 Dec 16 10:42:00 ispc sshd[1745880]: Invalid user ziplines from 134.209.151.59 Dec 16 10:42:01 ispc CRON[1745892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:42:01 ispc CRON[1745892]: pam_unix(cron:session): session closed for user root Dec 16 10:42:04 ispc sshd[1745903]: reverse mapping checking getaddrinfo for mail.gig-facility.com [146.19.212.19] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:42:05 ispc postfix/smtpd[1745905]: sql auxprop plugin using mysql engine Dec 16 10:42:10 ispc sshd[1745912]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:42:10 ispc sshd[1745912]: Invalid user blceu from 198.38.87.182 Dec 16 10:42:27 ispc sshd[1745922]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:42:36 ispc sshd[1745930]: Invalid user ziplines from 40.76.167.156 Dec 16 10:43:01 ispc CRON[1745956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:43:03 ispc CRON[1745956]: pam_unix(cron:session): session closed for user root Dec 16 10:43:39 ispc postfix/smtpd[1745989]: sql auxprop plugin using mysql engine Dec 16 10:44:01 ispc CRON[1746003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:44:01 ispc CRON[1746003]: pam_unix(cron:session): session closed for user root Dec 16 10:44:17 ispc sshd[1745995]: Invalid user ziplines from 20.198.21.68 Dec 16 10:45:01 ispc CRON[1746054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:45:01 ispc CRON[1746055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:45:01 ispc CRON[1746056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:45:01 ispc CRON[1746057]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:45:01 ispc CRON[1746055]: pam_unix(cron:session): session closed for user root Dec 16 10:45:01 ispc CRON[1746057]: pam_unix(cron:session): session closed for user getmail Dec 16 10:45:02 ispc CRON[1746056]: pam_unix(cron:session): session closed for user root Dec 16 10:45:02 ispc CRON[1746054]: pam_unix(cron:session): session closed for user root Dec 16 10:45:06 ispc saslauthd[1746132]: pam_mysql - SELECT returned no result. Dec 16 10:45:06 ispc saslauthd[1746132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:45:06 ispc saslauthd[1746132]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:45:21 ispc sshd[1746146]: Invalid user martof from 142.132.152.202 Dec 16 10:45:31 ispc sshd[1746155]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:45:31 ispc sshd[1746155]: Invalid user martof from 185.56.238.58 Dec 16 10:45:43 ispc sshd[1746161]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:45:49 ispc sshd[1746165]: Invalid user ziplines from 207.216.238.215 Dec 16 10:45:50 ispc sshd[1746167]: Address 185.23.74.60 maps to cp1.turkclouds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:45:52 ispc sshd[1746174]: Invalid user ziplines from 207.244.235.16 Dec 16 10:46:01 ispc CRON[1746182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:46:02 ispc CRON[1746182]: pam_unix(cron:session): session closed for user root Dec 16 10:46:07 ispc saslauthd[1746193]: pam_mysql - SELECT returned no result. Dec 16 10:46:07 ispc saslauthd[1746193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:46:07 ispc saslauthd[1746193]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:46:22 ispc CRON[1744818]: pam_unix(cron:session): session closed for user root Dec 16 10:46:25 ispc sshd[1746204]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:46:25 ispc sshd[1746204]: Invalid user blceu from 185.56.238.58 Dec 16 10:47:01 ispc CRON[1746210]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:47:02 ispc CRON[1746210]: pam_unix(cron:session): session closed for user root Dec 16 10:47:06 ispc sshd[1746222]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:47:06 ispc sshd[1746222]: Invalid user blceu from 217.73.131.131 Dec 16 10:47:07 ispc sshd[1746224]: Invalid user martof from 173.249.15.193 Dec 16 10:47:08 ispc sshd[1746226]: Address 185.23.74.60 maps to cp1.turkclouds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:47:12 ispc sshd[1746228]: Invalid user martof from 37.187.3.60 Dec 16 10:47:16 ispc sshd[1746230]: Invalid user ziplines from 46.16.12.202 Dec 16 10:47:18 ispc sshd[1746232]: Invalid user blceu from 193.108.53.174 Dec 16 10:47:30 ispc saslauthd[1746238]: pam_mysql - SELECT returned no result. Dec 16 10:47:30 ispc saslauthd[1746238]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:47:30 ispc saslauthd[1746238]: do_auth : auth failure: [user=craft] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:48:01 ispc sshd[1746254]: Invalid user blceu from 27.254.144.183 Dec 16 10:48:01 ispc CRON[1746256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:48:02 ispc CRON[1746256]: pam_unix(cron:session): session closed for user root Dec 16 10:48:18 ispc sshd[1746268]: Invalid user martof from 51.38.188.27 Dec 16 10:48:27 ispc sshd[1746270]: Invalid user martof from 159.223.21.212 Dec 16 10:48:27 ispc sshd[1746272]: Invalid user martof from 193.108.53.174 Dec 16 10:49:01 ispc CRON[1746276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:49:02 ispc CRON[1746276]: pam_unix(cron:session): session closed for user root Dec 16 10:49:41 ispc sshd[1746299]: Invalid user klape from 2.57.217.229 Dec 16 10:49:42 ispc sshd[1746302]: Invalid user ubuntu from 2.57.217.229 Dec 16 10:49:48 ispc saslauthd[1746304]: pam_mysql - SELECT returned no result. Dec 16 10:49:48 ispc saslauthd[1746304]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:49:48 ispc saslauthd[1746304]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:49:50 ispc postfix/smtpd[1746305]: sql auxprop plugin using mysql engine Dec 16 10:49:56 ispc sshd[1746308]: Invalid user ziplines from 69.163.193.37 Dec 16 10:50:01 ispc CRON[1746310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:50:01 ispc CRON[1746311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:50:01 ispc CRON[1746312]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 10:50:01 ispc CRON[1746313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:50:01 ispc CRON[1746314]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:50:01 ispc CRON[1746311]: pam_unix(cron:session): session closed for user root Dec 16 10:50:01 ispc CRON[1746312]: pam_unix(cron:session): session closed for user www-data Dec 16 10:50:01 ispc CRON[1746314]: pam_unix(cron:session): session closed for user getmail Dec 16 10:50:03 ispc CRON[1746310]: pam_unix(cron:session): session closed for user root Dec 16 10:50:14 ispc sshd[1746421]: reverse mapping checking getaddrinfo for 119.170.70.95.static.turk.net [95.70.170.119] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:50:25 ispc sshd[1746425]: Invalid user ziplines from 20.99.217.47 Dec 16 10:50:37 ispc CRON[1746313]: pam_unix(cron:session): session closed for user root Dec 16 10:51:01 ispc sshd[1746430]: Invalid user ziplines from 84.32.22.46 Dec 16 10:51:01 ispc CRON[1746432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:51:21 ispc sshd[1746448]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:51:21 ispc sshd[1746448]: Invalid user martof from 170.205.37.134 Dec 16 10:52:00 ispc sshd[1746472]: Invalid user ziplines from 31.40.198.92 Dec 16 10:52:00 ispc sshd[1746474]: Invalid user martof from 54.36.175.199 Dec 16 10:52:01 ispc CRON[1746478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:52:02 ispc CRON[1746478]: pam_unix(cron:session): session closed for user root Dec 16 10:52:51 ispc sshd[1746507]: Invalid user martof from 20.198.21.68 Dec 16 10:53:01 ispc CRON[1746536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:53:02 ispc CRON[1746536]: pam_unix(cron:session): session closed for user root Dec 16 10:53:14 ispc sshd[1746556]: Invalid user blceu from 103.89.86.250 Dec 16 10:53:34 ispc sshd[1746569]: reverse mapping checking getaddrinfo for 103-67-220-67.clients.gthost.com [67.220.67.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:54:01 ispc CRON[1746585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:54:02 ispc CRON[1746585]: pam_unix(cron:session): session closed for user root Dec 16 10:54:03 ispc sshd[1746596]: Invalid user blceu from 20.123.103.162 Dec 16 10:54:46 ispc sshd[1746618]: Invalid user admin from 209.38.98.130 Dec 16 10:54:59 ispc postfix/smtpd[1746630]: sql auxprop plugin using mysql engine Dec 16 10:55:00 ispc saslauthd[1746633]: pam_mysql - SELECT returned no result. Dec 16 10:55:00 ispc saslauthd[1746633]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:55:00 ispc saslauthd[1746633]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:55:01 ispc CRON[1746634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:55:01 ispc CRON[1746635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:55:01 ispc CRON[1746636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:55:01 ispc CRON[1746637]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 10:55:01 ispc CRON[1746635]: pam_unix(cron:session): session closed for user root Dec 16 10:55:01 ispc CRON[1746637]: pam_unix(cron:session): session closed for user getmail Dec 16 10:55:02 ispc CRON[1746636]: pam_unix(cron:session): session closed for user root Dec 16 10:55:03 ispc CRON[1746634]: pam_unix(cron:session): session closed for user root Dec 16 10:55:18 ispc sshd[1746721]: Invalid user admin from 209.38.98.130 Dec 16 10:55:22 ispc sshd[1746723]: Invalid user martof from 188.137.240.63 Dec 16 10:55:47 ispc sshd[1746736]: reverse mapping checking getaddrinfo for erk.rauf.fvds.ru [185.200.178.73] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:55:51 ispc sshd[1746742]: Invalid user admin from 209.38.98.130 Dec 16 10:55:58 ispc sshd[1746745]: Invalid user ziplines from 211.45.175.153 Dec 16 10:56:01 ispc CRON[1746752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:56:01 ispc CRON[1746752]: pam_unix(cron:session): session closed for user root Dec 16 10:56:03 ispc sshd[1746763]: Invalid user martof from 69.163.193.37 Dec 16 10:56:18 ispc sshd[1746773]: Invalid user martof from 103.88.243.44 Dec 16 10:56:22 ispc sshd[1746776]: Invalid user admin from 209.38.98.130 Dec 16 10:56:46 ispc sshd[1746789]: Invalid user blceu from 213.163.141.197 Dec 16 10:56:51 ispc postfix/smtpd[1746797]: sql auxprop plugin using mysql engine Dec 16 10:56:52 ispc sshd[1746798]: Invalid user admin from 209.38.98.130 Dec 16 10:56:53 ispc sshd[1746801]: Invalid user blceu from 64.225.53.31 Dec 16 10:57:01 ispc CRON[1746807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:57:03 ispc CRON[1746807]: pam_unix(cron:session): session closed for user root Dec 16 10:57:10 ispc sshd[1746822]: Invalid user ziplines from 173.212.237.203 Dec 16 10:57:22 ispc sshd[1746828]: Invalid user admin from 209.38.98.130 Dec 16 10:57:39 ispc sshd[1746844]: Invalid user ziplines from 35.221.71.118 Dec 16 10:57:40 ispc sshd[1746846]: Address 194.87.226.206 maps to bmplawyers.ru, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:57:57 ispc sshd[1746864]: Invalid user klape from 77.241.18.2 Dec 16 10:57:58 ispc sshd[1746866]: Invalid user ziplines from 82.202.131.77 Dec 16 10:57:59 ispc sshd[1746872]: Invalid user ubuntu from 77.241.18.2 Dec 16 10:58:01 ispc CRON[1746876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:58:01 ispc CRON[1746876]: pam_unix(cron:session): session closed for user root Dec 16 10:58:12 ispc sshd[1746892]: Invalid user ziplines from 91.229.9.5 Dec 16 10:58:20 ispc sshd[1746900]: Invalid user ziplines from 64.225.53.31 Dec 16 10:58:32 ispc sshd[1746906]: Invalid user ziplines from 108.143.167.55 Dec 16 10:58:42 ispc postfix/smtpd[1746912]: sql auxprop plugin using mysql engine Dec 16 10:58:43 ispc saslauthd[1746914]: pam_mysql - SELECT returned no result. Dec 16 10:58:43 ispc saslauthd[1746914]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 10:58:43 ispc saslauthd[1746914]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 10:58:50 ispc sshd[1746915]: Invalid user martof from 84.32.22.46 Dec 16 10:58:53 ispc sshd[1746921]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:53 ispc sshd[1746923]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:54 ispc sshd[1746925]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:55 ispc sshd[1746927]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:55 ispc sshd[1746929]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:56 ispc sshd[1746931]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:56 ispc sshd[1746934]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:57 ispc sshd[1746938]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:58 ispc sshd[1746940]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:58 ispc sshd[1746942]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:58:59 ispc sshd[1746944]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:00 ispc sshd[1746946]: Invalid user martof from 209.38.140.118 Dec 16 10:59:00 ispc sshd[1746948]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:00 ispc sshd[1746954]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:01 ispc sshd[1746956]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:01 ispc sshd[1746958]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:01 ispc CRON[1746962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 10:59:01 ispc sshd[1746960]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:02 ispc sshd[1746969]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:02 ispc CRON[1746962]: pam_unix(cron:session): session closed for user root Dec 16 10:59:02 ispc sshd[1746972]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:03 ispc sshd[1746977]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:03 ispc sshd[1746977]: Invalid user Antminer from 179.43.184.242 Dec 16 10:59:04 ispc sshd[1746979]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:04 ispc sshd[1746979]: Invalid user Antminer from 179.43.184.242 Dec 16 10:59:04 ispc sshd[1746981]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:05 ispc sshd[1746983]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:05 ispc sshd[1746985]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:06 ispc sshd[1746987]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:07 ispc sshd[1746989]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:07 ispc sshd[1746991]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:07 ispc sshd[1746991]: Invalid user admin from 179.43.184.242 Dec 16 10:59:08 ispc sshd[1746993]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 10:59:08 ispc sshd[1746993]: Invalid user baikal from 179.43.184.242 Dec 16 10:59:28 ispc sshd[1747005]: Invalid user ziplines from 162.244.30.110 Dec 16 10:59:32 ispc sshd[1747013]: Invalid user blceu from 40.76.167.156 Dec 16 10:59:32 ispc sshd[1747007]: Invalid user martof from 167.71.224.20 Dec 16 11:00:01 ispc CRON[1747035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:00:01 ispc CRON[1747036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:00:01 ispc CRON[1747037]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:00:01 ispc CRON[1747033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:00:01 ispc CRON[1747034]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:00:01 ispc CRON[1747032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:00:01 ispc CRON[1747033]: pam_unix(cron:session): session closed for user root Dec 16 11:00:01 ispc CRON[1747034]: pam_unix(cron:session): session closed for user www-data Dec 16 11:00:01 ispc CRON[1747037]: pam_unix(cron:session): session closed for user getmail Dec 16 11:00:02 ispc CRON[1747036]: pam_unix(cron:session): session closed for user root Dec 16 11:00:02 ispc CRON[1747035]: pam_unix(cron:session): session closed for user root Dec 16 11:00:02 ispc sshd[1747116]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:00:02 ispc sshd[1747116]: Invalid user ziplines from 170.205.37.134 Dec 16 11:00:03 ispc CRON[1747032]: pam_unix(cron:session): session closed for user root Dec 16 11:00:20 ispc sshd[1747197]: reverse mapping checking getaddrinfo for 104-129-23-171-host.colocrossing.com [104.129.23.171] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:01:01 ispc CRON[1747220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:01:02 ispc CRON[1747220]: pam_unix(cron:session): session closed for user root Dec 16 11:01:09 ispc sshd[1747237]: Invalid user blceu from 45.79.208.179 Dec 16 11:01:19 ispc sshd[1747246]: Invalid user martof from 34.45.101.184 Dec 16 11:01:29 ispc postfix/smtpd[1747252]: sql auxprop plugin using mysql engine Dec 16 11:01:29 ispc saslauthd[1747254]: pam_mysql - SELECT returned no result. Dec 16 11:01:29 ispc saslauthd[1747254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:01:29 ispc saslauthd[1747254]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:01:32 ispc saslauthd[1747257]: pam_mysql - SELECT returned no result. Dec 16 11:01:32 ispc saslauthd[1747257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:01:32 ispc saslauthd[1747257]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:01:32 ispc sshd[1747255]: Invalid user ziplines from 185.252.233.149 Dec 16 11:01:46 ispc saslauthd[1747268]: pam_mysql - SELECT returned no result. Dec 16 11:01:46 ispc saslauthd[1747268]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:01:46 ispc saslauthd[1747268]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:01:46 ispc sshd[1747269]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:01:52 ispc sshd[1747271]: reverse mapping checking getaddrinfo for 202.118.150.203.sta.inet.co.th [203.150.118.202] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:01:52 ispc sshd[1747271]: Invalid user ziplines from 203.150.118.202 Dec 16 11:01:57 ispc saslauthd[1747277]: pam_mysql - SELECT returned no result. Dec 16 11:01:57 ispc saslauthd[1747277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:01:57 ispc saslauthd[1747277]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:02:01 ispc CRON[1747279]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 11:02:01 ispc CRON[1747280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:02:01 ispc CRON[1747280]: pam_unix(cron:session): session closed for user root Dec 16 11:02:05 ispc sshd[1747340]: Invalid user perl from 91.99.198.164 Dec 16 11:02:25 ispc sshd[1747674]: Invalid user martof from 34.16.97.46 Dec 16 11:02:39 ispc saslauthd[1747938]: pam_mysql - SELECT returned no result. Dec 16 11:02:39 ispc saslauthd[1747938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:02:39 ispc saslauthd[1747938]: do_auth : auth failure: [user=cusadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:02:49 ispc saslauthd[1748059]: pam_mysql - SELECT returned no result. Dec 16 11:02:49 ispc saslauthd[1748059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:02:49 ispc saslauthd[1748059]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:02:50 ispc sshd[1748064]: Invalid user blceu from 91.107.213.61 Dec 16 11:03:01 ispc CRON[1748153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:03:02 ispc CRON[1748153]: pam_unix(cron:session): session closed for user root Dec 16 11:03:20 ispc sshd[1748190]: Invalid user blceu from 134.209.151.59 Dec 16 11:03:29 ispc sshd[1748277]: Invalid user martof from 208.84.101.131 Dec 16 11:03:31 ispc sshd[1748287]: Invalid user klape from 103.164.20.29 Dec 16 11:03:33 ispc sshd[1748298]: Invalid user ubuntu from 103.164.20.29 Dec 16 11:03:37 ispc sshd[1748355]: Invalid user martof from 46.101.247.45 Dec 16 11:03:41 ispc CRON[1747279]: pam_unix(cron:session): session closed for user logcheck Dec 16 11:03:55 ispc postfix/smtpd[1748398]: sql auxprop plugin using mysql engine Dec 16 11:04:01 ispc CRON[1748409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:04:03 ispc CRON[1748409]: pam_unix(cron:session): session closed for user root Dec 16 11:05:01 ispc CRON[1748447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:05:01 ispc CRON[1748448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:05:01 ispc CRON[1748449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:05:01 ispc CRON[1748450]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:05:01 ispc sshd[1748445]: Invalid user admin from 175.125.92.77 Dec 16 11:05:01 ispc CRON[1748448]: pam_unix(cron:session): session closed for user root Dec 16 11:05:01 ispc CRON[1748450]: pam_unix(cron:session): session closed for user getmail Dec 16 11:05:02 ispc CRON[1748449]: pam_unix(cron:session): session closed for user root Dec 16 11:05:04 ispc CRON[1748447]: pam_unix(cron:session): session closed for user root Dec 16 11:05:31 ispc sshd[1748537]: Address 185.23.74.60 maps to cp1.turkclouds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:06:01 ispc CRON[1748554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:06:01 ispc CRON[1748554]: pam_unix(cron:session): session closed for user root Dec 16 11:06:13 ispc sshd[1748569]: Address 87.106.39.91 maps to vo-onderwijs.nl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:06:13 ispc sshd[1748569]: Invalid user martof from 87.106.39.91 Dec 16 11:07:00 ispc sshd[1748587]: Invalid user martof from 51.83.71.191 Dec 16 11:07:01 ispc CRON[1748600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:07:02 ispc sshd[1748598]: Invalid user ziplines from 208.84.101.131 Dec 16 11:07:02 ispc CRON[1748600]: pam_unix(cron:session): session closed for user root Dec 16 11:07:13 ispc sshd[1748589]: Invalid user martof from 34.14.135.37 Dec 16 11:07:14 ispc sshd[1748611]: Invalid user ziplines from 157.245.110.11 Dec 16 11:07:16 ispc sshd[1748617]: Invalid user blceu from 138.68.66.198 Dec 16 11:07:33 ispc postfix/smtpd[1748629]: sql auxprop plugin using mysql engine Dec 16 11:07:33 ispc saslauthd[1748632]: pam_mysql - SELECT returned no result. Dec 16 11:07:33 ispc saslauthd[1748632]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:07:33 ispc saslauthd[1748632]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:07:38 ispc saslauthd[1748634]: pam_mysql - SELECT returned no result. Dec 16 11:07:38 ispc saslauthd[1748634]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:07:38 ispc saslauthd[1748634]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:08:00 ispc sshd[1748656]: Invalid user ziplines from 81.177.135.81 Dec 16 11:08:01 ispc CRON[1748658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:08:02 ispc CRON[1748658]: pam_unix(cron:session): session closed for user root Dec 16 11:09:01 ispc CRON[1748696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:09:01 ispc CRON[1748697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:09:01 ispc CRON[1748696]: pam_unix(cron:session): session closed for user root Dec 16 11:09:01 ispc CRON[1748697]: pam_unix(cron:session): session closed for user root Dec 16 11:09:02 ispc sshd[1748694]: Invalid user blceu from 209.38.140.118 Dec 16 11:09:55 ispc sshd[1748742]: Invalid user blceu from 138.197.196.23 Dec 16 11:09:58 ispc sshd[1748744]: Invalid user perl from 91.99.198.164 Dec 16 11:10:01 ispc CRON[1748747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:10:01 ispc CRON[1748748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:10:01 ispc CRON[1748749]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:10:01 ispc CRON[1748750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:10:01 ispc CRON[1748751]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:10:01 ispc CRON[1748748]: pam_unix(cron:session): session closed for user root Dec 16 11:10:01 ispc CRON[1748749]: pam_unix(cron:session): session closed for user www-data Dec 16 11:10:01 ispc CRON[1748751]: pam_unix(cron:session): session closed for user getmail Dec 16 11:10:02 ispc CRON[1748750]: pam_unix(cron:session): session closed for user root Dec 16 11:10:03 ispc CRON[1748747]: pam_unix(cron:session): session closed for user root Dec 16 11:10:24 ispc sshd[1748844]: Invalid user martof from 20.46.107.252 Dec 16 11:10:41 ispc sshd[1748851]: Invalid user blceu from 79.137.79.129 Dec 16 11:11:01 ispc CRON[1748863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:11:02 ispc CRON[1748863]: pam_unix(cron:session): session closed for user root Dec 16 11:11:23 ispc postfix/smtpd[1748885]: sql auxprop plugin using mysql engine Dec 16 11:11:23 ispc CRON[1746432]: pam_unix(cron:session): session closed for user root Dec 16 11:11:56 ispc postfix/smtpd[1748889]: sql auxprop plugin using mysql engine Dec 16 11:12:01 ispc CRON[1748893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:12:02 ispc CRON[1748893]: pam_unix(cron:session): session closed for user root Dec 16 11:12:28 ispc sshd[1748904]: Invalid user ziplines from 34.16.97.46 Dec 16 11:12:30 ispc sshd[1748906]: Invalid user ziplines from 149.102.156.14 Dec 16 11:12:36 ispc sshd[1748908]: Invalid user blceu from 72.61.142.137 Dec 16 11:12:54 ispc sshd[1748921]: Invalid user blceu from 167.99.11.156 Dec 16 11:13:00 ispc sshd[1748923]: Invalid user ziplines from 148.113.202.131 Dec 16 11:13:01 ispc CRON[1748925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:13:03 ispc CRON[1748925]: pam_unix(cron:session): session closed for user root Dec 16 11:13:53 ispc sshd[1748942]: Invalid user martof from 82.202.131.77 Dec 16 11:14:01 ispc CRON[1748946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:14:01 ispc CRON[1748946]: pam_unix(cron:session): session closed for user root Dec 16 11:15:01 ispc CRON[1748964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:15:01 ispc CRON[1748966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:15:01 ispc CRON[1748967]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:15:01 ispc CRON[1748965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:15:01 ispc CRON[1748965]: pam_unix(cron:session): session closed for user root Dec 16 11:15:01 ispc CRON[1748967]: pam_unix(cron:session): session closed for user getmail Dec 16 11:15:04 ispc CRON[1748964]: pam_unix(cron:session): session closed for user root Dec 16 11:15:24 ispc sshd[1749150]: Invalid user martof from 89.185.227.121 Dec 16 11:15:47 ispc CRON[1748966]: pam_unix(cron:session): session closed for user root Dec 16 11:16:01 ispc CRON[1749162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:16:01 ispc sshd[1749167]: Invalid user martof from 69.62.106.124 Dec 16 11:16:14 ispc sshd[1749181]: Invalid user klape from 36.50.177.171 Dec 16 11:16:16 ispc sshd[1749187]: Invalid user ubuntu from 36.50.177.171 Dec 16 11:16:21 ispc saslauthd[1749197]: pam_mysql - SELECT returned no result. Dec 16 11:16:21 ispc saslauthd[1749197]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:16:21 ispc saslauthd[1749197]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:16:23 ispc saslauthd[1749198]: pam_mysql - SELECT returned no result. Dec 16 11:16:23 ispc saslauthd[1749198]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:16:23 ispc saslauthd[1749198]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 11:16:29 ispc saslauthd[1749200]: pam_mysql - SELECT returned no result. Dec 16 11:16:29 ispc saslauthd[1749200]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:16:29 ispc saslauthd[1749200]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:17:01 ispc CRON[1749217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:17:01 ispc CRON[1749217]: pam_unix(cron:session): session closed for user root Dec 16 11:17:03 ispc saslauthd[1749234]: pam_mysql - SELECT returned no result. Dec 16 11:17:03 ispc saslauthd[1749234]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:17:03 ispc saslauthd[1749234]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:17:21 ispc postfix/smtpd[1749242]: sql auxprop plugin using mysql engine Dec 16 11:17:31 ispc sshd[1749248]: Invalid user ziplines from 5.188.158.241 Dec 16 11:17:47 ispc saslauthd[1749262]: pam_mysql - SELECT returned no result. Dec 16 11:17:47 ispc saslauthd[1749262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:17:47 ispc saslauthd[1749262]: do_auth : auth failure: [user=cust] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:18:01 ispc CRON[1749274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:18:02 ispc CRON[1749274]: pam_unix(cron:session): session closed for user root Dec 16 11:18:39 ispc sshd[1749308]: Invalid user blceu from 51.222.143.241 Dec 16 11:19:00 ispc sshd[1749320]: Invalid user user from 45.148.10.121 Dec 16 11:19:01 ispc CRON[1749322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:19:01 ispc CRON[1749322]: pam_unix(cron:session): session closed for user root Dec 16 11:19:17 ispc postfix/smtpd[1749341]: sql auxprop plugin using mysql engine Dec 16 11:19:26 ispc sshd[1749347]: Invalid user ziplines from 209.145.48.233 Dec 16 11:19:41 ispc sshd[1749353]: Invalid user ziplines from 37.76.121.162 Dec 16 11:20:01 ispc CRON[1749363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:20:01 ispc CRON[1749364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:20:01 ispc CRON[1749365]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:20:01 ispc CRON[1749366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:20:01 ispc CRON[1749367]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:20:01 ispc CRON[1749365]: pam_unix(cron:session): session closed for user www-data Dec 16 11:20:01 ispc CRON[1749364]: pam_unix(cron:session): session closed for user root Dec 16 11:20:01 ispc CRON[1749367]: pam_unix(cron:session): session closed for user getmail Dec 16 11:20:02 ispc CRON[1749366]: pam_unix(cron:session): session closed for user root Dec 16 11:20:03 ispc CRON[1749363]: pam_unix(cron:session): session closed for user root Dec 16 11:20:49 ispc sshd[1749469]: Invalid user martof from 89.23.112.188 Dec 16 11:21:01 ispc CRON[1749479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:21:01 ispc CRON[1749480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:21:01 ispc CRON[1749479]: pam_unix(cron:session): session closed for user root Dec 16 11:21:02 ispc CRON[1749480]: pam_unix(cron:session): session closed for user root Dec 16 11:21:04 ispc sshd[1749495]: Invalid user blceu from 203.161.63.168 Dec 16 11:21:05 ispc sshd[1749473]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:21:09 ispc sshd[1749504]: reverse mapping checking getaddrinfo for 103-67-220-67.clients.gthost.com [67.220.67.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:21:44 ispc sshd[1749521]: reverse mapping checking getaddrinfo for reattend-nondegerming.vpsrdns.web-hosting.com [159.198.41.186] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:21:48 ispc sshd[1749523]: Invalid user blceu from 185.142.159.122 Dec 16 11:22:01 ispc CRON[1749533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:22:01 ispc CRON[1749533]: pam_unix(cron:session): session closed for user root Dec 16 11:22:02 ispc sshd[1749544]: Invalid user martof from 91.229.9.5 Dec 16 11:22:03 ispc postfix/smtpd[1749546]: sql auxprop plugin using mysql engine Dec 16 11:22:03 ispc postfix/smtpd[1749550]: sql auxprop plugin using mysql engine Dec 16 11:22:03 ispc postfix/smtpd[1749551]: sql auxprop plugin using mysql engine Dec 16 11:22:03 ispc postfix/smtpd[1749552]: sql auxprop plugin using mysql engine Dec 16 11:22:03 ispc saslauthd[1749553]: pam_mysql - SELECT returned no result. Dec 16 11:22:03 ispc saslauthd[1749553]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:03 ispc saslauthd[1749553]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:03 ispc postfix/smtpd[1749554]: sql auxprop plugin using mysql engine Dec 16 11:22:03 ispc postfix/smtpd[1749555]: sql auxprop plugin using mysql engine Dec 16 11:22:04 ispc saslauthd[1749556]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749556]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:04 ispc saslauthd[1749558]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749558]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749558]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:04 ispc saslauthd[1749557]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749557]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:04 ispc saslauthd[1749559]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749559]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749559]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:04 ispc saslauthd[1749560]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749560]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749560]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:04 ispc saslauthd[1749561]: pam_mysql - SELECT returned no result. Dec 16 11:22:04 ispc saslauthd[1749561]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:04 ispc saslauthd[1749561]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:08 ispc saslauthd[1749564]: pam_mysql - SELECT returned no result. Dec 16 11:22:08 ispc saslauthd[1749564]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:08 ispc saslauthd[1749564]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:18 ispc saslauthd[1749572]: pam_mysql - SELECT returned no result. Dec 16 11:22:18 ispc saslauthd[1749572]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:18 ispc saslauthd[1749572]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:22 ispc sshd[1749577]: reverse mapping checking getaddrinfo for 103.14.121.65-static-reverse.gooddomainregistry.com [103.14.121.65] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:22:28 ispc saslauthd[1749581]: pam_mysql - SELECT returned no result. Dec 16 11:22:28 ispc saslauthd[1749581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:28 ispc saslauthd[1749581]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:43 ispc saslauthd[1749590]: pam_mysql - SELECT returned no result. Dec 16 11:22:43 ispc saslauthd[1749590]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:43 ispc saslauthd[1749590]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:47 ispc sshd[1749599]: Invalid user martof from 211.45.175.153 Dec 16 11:22:53 ispc saslauthd[1749607]: pam_mysql - SELECT returned no result. Dec 16 11:22:53 ispc saslauthd[1749607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:53 ispc saslauthd[1749607]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:22:57 ispc saslauthd[1749608]: pam_mysql - SELECT returned no result. Dec 16 11:22:57 ispc saslauthd[1749608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:22:57 ispc saslauthd[1749608]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:23:01 ispc CRON[1749615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:23:02 ispc CRON[1749615]: pam_unix(cron:session): session closed for user root Dec 16 11:23:47 ispc saslauthd[1749650]: pam_mysql - SELECT returned no result. Dec 16 11:23:47 ispc saslauthd[1749650]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:23:47 ispc saslauthd[1749650]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:23:48 ispc sshd[1749651]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:24:01 ispc CRON[1749663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:24:02 ispc CRON[1749663]: pam_unix(cron:session): session closed for user root Dec 16 11:24:14 ispc sshd[1749682]: Invalid user blceu from 34.91.58.35 Dec 16 11:24:38 ispc sshd[1749692]: Invalid user martof from 40.76.167.156 Dec 16 11:24:58 ispc saslauthd[1749706]: pam_mysql - SELECT returned no result. Dec 16 11:24:58 ispc saslauthd[1749706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:24:58 ispc saslauthd[1749706]: do_auth : auth failure: [user=hr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:25:01 ispc CRON[1749707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:25:01 ispc CRON[1749708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:25:01 ispc CRON[1749709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:25:01 ispc CRON[1749710]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:25:01 ispc CRON[1749708]: pam_unix(cron:session): session closed for user root Dec 16 11:25:01 ispc CRON[1749710]: pam_unix(cron:session): session closed for user getmail Dec 16 11:25:01 ispc CRON[1749709]: pam_unix(cron:session): session closed for user root Dec 16 11:25:02 ispc CRON[1749707]: pam_unix(cron:session): session closed for user root Dec 16 11:25:02 ispc sshd[1749787]: Invalid user blceu from 212.41.10.146 Dec 16 11:25:04 ispc saslauthd[1749789]: pam_mysql - SELECT returned no result. Dec 16 11:25:04 ispc saslauthd[1749789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:25:04 ispc saslauthd[1749789]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:25:05 ispc sshd[1749790]: Invalid user blceu from 217.182.206.144 Dec 16 11:25:12 ispc sshd[1749793]: Invalid user blceu from 195.7.4.233 Dec 16 11:26:01 ispc CRON[1749821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:26:01 ispc CRON[1749821]: pam_unix(cron:session): session closed for user root Dec 16 11:26:04 ispc sshd[1749836]: Invalid user ziplines from 84.247.162.87 Dec 16 11:26:25 ispc sshd[1749847]: reverse mapping checking getaddrinfo for static-103-186-185-235.hostingraja.in [103.186.185.235] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:26:39 ispc sshd[1749853]: Invalid user ziplines from 138.201.35.187 Dec 16 11:27:01 ispc CRON[1749866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:27:02 ispc CRON[1749866]: pam_unix(cron:session): session closed for user root Dec 16 11:27:27 ispc sshd[1749890]: Invalid user blceu from 185.77.240.2 Dec 16 11:27:58 ispc sshd[1749917]: Invalid user martof from 222.236.46.74 Dec 16 11:28:01 ispc CRON[1749919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:28:02 ispc CRON[1749919]: pam_unix(cron:session): session closed for user root Dec 16 11:28:12 ispc sshd[1749934]: Invalid user blceu from 37.27.87.70 Dec 16 11:29:01 ispc CRON[1749960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:29:02 ispc CRON[1749960]: pam_unix(cron:session): session closed for user root Dec 16 11:29:38 ispc sshd[1749985]: Invalid user admin from 175.125.92.77 Dec 16 11:30:01 ispc CRON[1749999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:30:01 ispc CRON[1750000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:30:01 ispc CRON[1750001]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:30:01 ispc CRON[1750002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:30:01 ispc CRON[1750003]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:30:01 ispc CRON[1750000]: pam_unix(cron:session): session closed for user root Dec 16 11:30:01 ispc CRON[1750001]: pam_unix(cron:session): session closed for user www-data Dec 16 11:30:01 ispc CRON[1750003]: pam_unix(cron:session): session closed for user getmail Dec 16 11:30:02 ispc CRON[1750002]: pam_unix(cron:session): session closed for user root Dec 16 11:30:03 ispc CRON[1749999]: pam_unix(cron:session): session closed for user root Dec 16 11:30:36 ispc sshd[1750093]: Invalid user admin from 175.125.92.77 Dec 16 11:30:59 ispc sshd[1750109]: Invalid user Can't open edapass from 109.73.196.37 Dec 16 11:31:01 ispc CRON[1750116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:31:01 ispc CRON[1750116]: pam_unix(cron:session): session closed for user root Dec 16 11:31:05 ispc postfix/smtpd[1750127]: sql auxprop plugin using mysql engine Dec 16 11:31:15 ispc sshd[1750134]: Invalid user admin from 120.48.125.223 Dec 16 11:31:58 ispc sshd[1750156]: Invalid user ziplines from 51.91.76.213 Dec 16 11:32:01 ispc CRON[1750164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:32:02 ispc CRON[1750164]: pam_unix(cron:session): session closed for user root Dec 16 11:32:55 ispc postfix/smtpd[1750213]: sql auxprop plugin using mysql engine Dec 16 11:32:56 ispc saslauthd[1750215]: pam_mysql - SELECT returned no result. Dec 16 11:32:56 ispc saslauthd[1750215]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:32:56 ispc saslauthd[1750215]: do_auth : auth failure: [user=dadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:33:01 ispc CRON[1750216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:33:02 ispc CRON[1750216]: pam_unix(cron:session): session closed for user root Dec 16 11:33:26 ispc sshd[1750244]: reverse mapping checking getaddrinfo for 81.31.154.66.hostvps.it [81.31.154.66] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:33:26 ispc sshd[1750244]: Invalid user Can't open edapass from 81.31.154.66 Dec 16 11:34:01 ispc CRON[1750258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:34:03 ispc CRON[1750258]: pam_unix(cron:session): session closed for user root Dec 16 11:34:36 ispc sshd[1750289]: Invalid user martof from 31.40.198.92 Dec 16 11:34:38 ispc sshd[1750291]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:35:01 ispc CRON[1750311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:35:01 ispc CRON[1750312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:35:01 ispc CRON[1750313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:35:01 ispc CRON[1750314]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:35:01 ispc CRON[1750312]: pam_unix(cron:session): session closed for user root Dec 16 11:35:01 ispc CRON[1750314]: pam_unix(cron:session): session closed for user getmail Dec 16 11:35:01 ispc CRON[1750313]: pam_unix(cron:session): session closed for user root Dec 16 11:35:03 ispc CRON[1750311]: pam_unix(cron:session): session closed for user root Dec 16 11:35:53 ispc sshd[1750413]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:36:01 ispc CRON[1750419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:36:01 ispc CRON[1750419]: pam_unix(cron:session): session closed for user root Dec 16 11:36:17 ispc sshd[1750435]: Invalid user Can't open edapass from 91.210.169.33 Dec 16 11:36:28 ispc postfix/smtpd[1750444]: sql auxprop plugin using mysql engine Dec 16 11:36:28 ispc CRON[1749162]: pam_unix(cron:session): session closed for user root Dec 16 11:37:01 ispc CRON[1750456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:37:03 ispc CRON[1750456]: pam_unix(cron:session): session closed for user root Dec 16 11:37:08 ispc sshd[1750469]: Invalid user perl from 15.235.193.214 Dec 16 11:38:01 ispc CRON[1750484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:38:02 ispc CRON[1750484]: pam_unix(cron:session): session closed for user root Dec 16 11:38:44 ispc sshd[1750502]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:38:49 ispc sshd[1750506]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:39:01 ispc CRON[1750510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:39:01 ispc CRON[1750511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:39:01 ispc CRON[1750510]: pam_unix(cron:session): session closed for user root Dec 16 11:39:02 ispc CRON[1750511]: pam_unix(cron:session): session closed for user root Dec 16 11:39:39 ispc sshd[1750535]: Did not receive identification string from 103.47.224.7 Dec 16 11:40:01 ispc CRON[1750542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:40:01 ispc CRON[1750543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:40:01 ispc CRON[1750544]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:40:01 ispc CRON[1750545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:40:01 ispc CRON[1750546]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:40:01 ispc CRON[1750544]: pam_unix(cron:session): session closed for user www-data Dec 16 11:40:01 ispc CRON[1750543]: pam_unix(cron:session): session closed for user root Dec 16 11:40:01 ispc CRON[1750546]: pam_unix(cron:session): session closed for user getmail Dec 16 11:40:02 ispc CRON[1750542]: pam_unix(cron:session): session closed for user root Dec 16 11:40:06 ispc saslauthd[1750653]: pam_mysql - SELECT returned no result. Dec 16 11:40:06 ispc saslauthd[1750653]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:40:06 ispc saslauthd[1750653]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:40:22 ispc sshd[1750658]: Invalid user Can't open edapass from 51.158.253.248 Dec 16 11:40:23 ispc postfix/smtpd[1750660]: sql auxprop plugin using mysql engine Dec 16 11:40:39 ispc CRON[1750545]: pam_unix(cron:session): session closed for user root Dec 16 11:40:41 ispc sshd[1750664]: Did not receive identification string from 45.140.17.97 Dec 16 11:40:51 ispc sshd[1750669]: Did not receive identification string from 47.104.198.108 Dec 16 11:41:01 ispc CRON[1750673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:41:36 ispc sshd[1750703]: Invalid user Can't open edapass from 156.67.111.86 Dec 16 11:42:01 ispc CRON[1750717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:42:01 ispc CRON[1750717]: pam_unix(cron:session): session closed for user root Dec 16 11:43:02 ispc CRON[1750768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:43:03 ispc CRON[1750768]: pam_unix(cron:session): session closed for user root Dec 16 11:44:01 ispc CRON[1750812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:44:02 ispc CRON[1750812]: pam_unix(cron:session): session closed for user root Dec 16 11:44:17 ispc sshd[1750828]: Invalid user Can't open edapass from 156.67.111.86 Dec 16 11:44:48 ispc sshd[1750845]: Invalid user Can't open edapass from 167.172.179.243 Dec 16 11:45:01 ispc CRON[1750855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:45:01 ispc CRON[1750856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:45:01 ispc CRON[1750857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:45:01 ispc CRON[1750858]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:45:01 ispc CRON[1750856]: pam_unix(cron:session): session closed for user root Dec 16 11:45:01 ispc CRON[1750858]: pam_unix(cron:session): session closed for user getmail Dec 16 11:45:01 ispc CRON[1750857]: pam_unix(cron:session): session closed for user root Dec 16 11:45:02 ispc CRON[1750855]: pam_unix(cron:session): session closed for user root Dec 16 11:45:44 ispc sshd[1750954]: Did not receive identification string from 193.32.162.151 Dec 16 11:46:01 ispc CRON[1750970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:46:02 ispc CRON[1750970]: pam_unix(cron:session): session closed for user root Dec 16 11:46:07 ispc sshd[1750981]: Invalid user blceu from 51.91.76.213 Dec 16 11:46:25 ispc postfix/smtpd[1751007]: sql auxprop plugin using mysql engine Dec 16 11:46:26 ispc saslauthd[1751010]: pam_mysql - SELECT returned no result. Dec 16 11:46:26 ispc saslauthd[1751010]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:46:26 ispc saslauthd[1751010]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:47:01 ispc CRON[1751031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:47:02 ispc CRON[1751031]: pam_unix(cron:session): session closed for user root Dec 16 11:47:41 ispc sshd[1751062]: Invalid user Can't open edapass from 83.229.124.21 Dec 16 11:48:00 ispc sshd[1751086]: Invalid user Can't open edapass from 217.154.227.39 Dec 16 11:48:01 ispc CRON[1751088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:48:01 ispc CRON[1751088]: pam_unix(cron:session): session closed for user root Dec 16 11:48:13 ispc postfix/smtpd[1751111]: sql auxprop plugin using mysql engine Dec 16 11:48:14 ispc saslauthd[1751113]: pam_mysql - SELECT returned no result. Dec 16 11:48:14 ispc saslauthd[1751113]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:48:14 ispc saslauthd[1751113]: do_auth : auth failure: [user=daemon] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:48:35 ispc sshd[1751125]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:49:01 ispc CRON[1751139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:49:02 ispc saslauthd[1751150]: pam_mysql - SELECT returned no result. Dec 16 11:49:02 ispc saslauthd[1751150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:49:02 ispc saslauthd[1751150]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:49:02 ispc CRON[1751139]: pam_unix(cron:session): session closed for user root Dec 16 11:49:28 ispc saslauthd[1751171]: pam_mysql - SELECT returned no result. Dec 16 11:49:28 ispc saslauthd[1751171]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:49:28 ispc saslauthd[1751171]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:49:29 ispc sshd[1751163]: Invalid user klape from 40.127.67.83 Dec 16 11:49:51 ispc sshd[1751183]: Invalid user Can't open edapass from 161.97.103.99 Dec 16 11:50:01 ispc CRON[1751190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:50:01 ispc CRON[1751191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:50:01 ispc CRON[1751192]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 11:50:01 ispc CRON[1751193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:50:01 ispc CRON[1751194]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:50:01 ispc CRON[1751192]: pam_unix(cron:session): session closed for user www-data Dec 16 11:50:01 ispc CRON[1751191]: pam_unix(cron:session): session closed for user root Dec 16 11:50:02 ispc CRON[1751194]: pam_unix(cron:session): session closed for user getmail Dec 16 11:50:02 ispc CRON[1751193]: pam_unix(cron:session): session closed for user root Dec 16 11:50:04 ispc CRON[1751190]: pam_unix(cron:session): session closed for user root Dec 16 11:51:01 ispc CRON[1751309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:51:01 ispc sshd[1751311]: Invalid user ziplines from 152.53.239.119 Dec 16 11:51:02 ispc CRON[1751309]: pam_unix(cron:session): session closed for user root Dec 16 11:51:33 ispc sshd[1751341]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 11:51:36 ispc sshd[1751345]: Invalid user admin from 193.32.162.151 Dec 16 11:52:01 ispc CRON[1751363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:52:02 ispc CRON[1751363]: pam_unix(cron:session): session closed for user root Dec 16 11:53:01 ispc CRON[1751411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:53:02 ispc CRON[1751411]: pam_unix(cron:session): session closed for user root Dec 16 11:53:22 ispc sshd[1751432]: Invalid user martof from 27.254.144.183 Dec 16 11:53:51 ispc sshd[1751452]: Invalid user klape from 187.190.35.163 Dec 16 11:53:52 ispc sshd[1751454]: Invalid user ubuntu from 187.190.35.163 Dec 16 11:54:01 ispc CRON[1751462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:54:02 ispc CRON[1751462]: pam_unix(cron:session): session closed for user root Dec 16 11:54:55 ispc sshd[1751496]: Invalid user oracle from 193.32.162.151 Dec 16 11:55:01 ispc CRON[1751502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:55:01 ispc CRON[1751503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:55:01 ispc CRON[1751504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:55:01 ispc CRON[1751505]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 11:55:01 ispc CRON[1751503]: pam_unix(cron:session): session closed for user root Dec 16 11:55:01 ispc CRON[1751505]: pam_unix(cron:session): session closed for user getmail Dec 16 11:55:01 ispc CRON[1751504]: pam_unix(cron:session): session closed for user root Dec 16 11:55:02 ispc CRON[1751502]: pam_unix(cron:session): session closed for user root Dec 16 11:55:02 ispc postfix/smtpd[1751578]: sql auxprop plugin using mysql engine Dec 16 11:55:03 ispc saslauthd[1751581]: pam_mysql - SELECT returned no result. Dec 16 11:55:03 ispc saslauthd[1751581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:55:03 ispc saslauthd[1751581]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:55:28 ispc sshd[1751597]: Invalid user Can't open edapass from 135.181.107.123 Dec 16 11:55:55 ispc sshd[1751611]: Invalid user blceu from 57.131.22.60 Dec 16 11:56:01 ispc CRON[1751613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:56:02 ispc CRON[1751613]: pam_unix(cron:session): session closed for user root Dec 16 11:56:09 ispc sshd[1751628]: Invalid user ubnt from 45.148.10.121 Dec 16 11:56:24 ispc sshd[1751640]: Invalid user Can't open edapass from 101.33.78.6 Dec 16 11:57:01 ispc CRON[1751656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:57:03 ispc CRON[1751656]: pam_unix(cron:session): session closed for user root Dec 16 11:57:46 ispc postfix/smtpd[1751696]: sql auxprop plugin using mysql engine Dec 16 11:57:47 ispc saslauthd[1751697]: pam_mysql - SELECT returned no result. Dec 16 11:57:47 ispc saslauthd[1751697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:57:47 ispc saslauthd[1751697]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:57:49 ispc saslauthd[1751698]: pam_mysql - SELECT returned no result. Dec 16 11:57:49 ispc saslauthd[1751698]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:57:49 ispc saslauthd[1751698]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:58:00 ispc sshd[1751706]: Invalid user martof from 185.208.181.153 Dec 16 11:58:01 ispc CRON[1751708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:58:02 ispc CRON[1751708]: pam_unix(cron:session): session closed for user root Dec 16 11:58:08 ispc saslauthd[1751725]: pam_mysql - SELECT returned no result. Dec 16 11:58:08 ispc saslauthd[1751725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:58:08 ispc saslauthd[1751725]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:58:16 ispc saslauthd[1751730]: pam_mysql - SELECT returned no result. Dec 16 11:58:16 ispc saslauthd[1751730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:58:16 ispc saslauthd[1751730]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:58:20 ispc sshd[1751731]: Invalid user hmsftp from 193.32.162.151 Dec 16 11:58:44 ispc sshd[1751746]: Invalid user Can't open edapass from 188.137.240.63 Dec 16 11:59:01 ispc CRON[1751755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 11:59:01 ispc CRON[1751755]: pam_unix(cron:session): session closed for user root Dec 16 11:59:34 ispc sshd[1751782]: Invalid user blceu from 211.45.175.153 Dec 16 11:59:36 ispc saslauthd[1751788]: pam_mysql - SELECT returned no result. Dec 16 11:59:36 ispc saslauthd[1751788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:59:36 ispc saslauthd[1751788]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 11:59:41 ispc saslauthd[1751789]: pam_mysql - SELECT returned no result. Dec 16 11:59:41 ispc saslauthd[1751789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 11:59:41 ispc saslauthd[1751789]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:00:01 ispc CRON[1751802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:00:01 ispc CRON[1751803]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:00:01 ispc CRON[1751804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:00:01 ispc CRON[1751805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:00:01 ispc CRON[1751806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:00:01 ispc CRON[1751807]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:00:01 ispc CRON[1751801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:00:01 ispc CRON[1751803]: pam_unix(cron:session): session closed for user www-data Dec 16 12:00:01 ispc CRON[1751802]: pam_unix(cron:session): session closed for user root Dec 16 12:00:01 ispc CRON[1751805]: pam_unix(cron:session): session closed for user root Dec 16 12:00:01 ispc CRON[1751807]: pam_unix(cron:session): session closed for user getmail Dec 16 12:00:02 ispc CRON[1751806]: pam_unix(cron:session): session closed for user root Dec 16 12:00:03 ispc CRON[1751804]: pam_unix(cron:session): session closed for user root Dec 16 12:00:03 ispc CRON[1751801]: pam_unix(cron:session): session closed for user root Dec 16 12:00:21 ispc sshd[1751969]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:00:21 ispc sshd[1751969]: Invalid user blceu from 193.110.157.47 Dec 16 12:01:01 ispc CRON[1751993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:01:03 ispc CRON[1751993]: pam_unix(cron:session): session closed for user root Dec 16 12:01:26 ispc CRON[1750673]: pam_unix(cron:session): session closed for user root Dec 16 12:01:26 ispc postfix/smtpd[1752020]: sql auxprop plugin using mysql engine Dec 16 12:01:39 ispc sshd[1752025]: Invalid user loginuser from 193.32.162.151 Dec 16 12:01:47 ispc sshd[1752028]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:02:01 ispc CRON[1752034]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 12:02:01 ispc CRON[1752035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:02:02 ispc CRON[1752035]: pam_unix(cron:session): session closed for user root Dec 16 12:02:15 ispc sshd[1752282]: Invalid user blceu from 165.227.38.205 Dec 16 12:02:24 ispc sshd[1752348]: Invalid user Can't open edapass from 209.38.140.118 Dec 16 12:02:42 ispc sshd[1752612]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:02:59 ispc postfix/smtpd[1752772]: sql auxprop plugin using mysql engine Dec 16 12:03:01 ispc CRON[1752799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:03:02 ispc CRON[1752799]: pam_unix(cron:session): session closed for user root Dec 16 12:03:21 ispc sshd[1752914]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:03:37 ispc sshd[1752991]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:03:42 ispc saslauthd[1753029]: pam_mysql - SELECT returned no result. Dec 16 12:03:42 ispc saslauthd[1753029]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:03:42 ispc saslauthd[1753029]: do_auth : auth failure: [user=db2fenc1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:03:52 ispc CRON[1752034]: pam_unix(cron:session): session closed for user logcheck Dec 16 12:04:01 ispc CRON[1753105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:04:02 ispc CRON[1753105]: pam_unix(cron:session): session closed for user root Dec 16 12:04:07 ispc postfix/smtpd[1753117]: sql auxprop plugin using mysql engine Dec 16 12:04:56 ispc sshd[1753124]: Invalid user loginuser from 193.32.162.151 Dec 16 12:05:01 ispc CRON[1753127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:05:01 ispc CRON[1753128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:05:01 ispc CRON[1753129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:05:01 ispc CRON[1753130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:05:01 ispc CRON[1753131]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:05:01 ispc CRON[1753129]: pam_unix(cron:session): session closed for user root Dec 16 12:05:01 ispc CRON[1753131]: pam_unix(cron:session): session closed for user getmail Dec 16 12:05:03 ispc CRON[1753128]: pam_unix(cron:session): session closed for user root Dec 16 12:05:04 ispc CRON[1753127]: pam_unix(cron:session): session closed for user root Dec 16 12:05:34 ispc CRON[1753130]: pam_unix(cron:session): session closed for user root Dec 16 12:05:43 ispc sshd[1753244]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:05:53 ispc sshd[1753248]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:06:01 ispc CRON[1753250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:06:43 ispc sshd[1753283]: Invalid user matlbula from 36.134.126.74 Dec 16 12:07:01 ispc CRON[1753297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:07:02 ispc CRON[1753297]: pam_unix(cron:session): session closed for user root Dec 16 12:07:19 ispc sshd[1753318]: Invalid user Can't open edapass from 65.21.245.10 Dec 16 12:07:23 ispc sshd[1753321]: Invalid user Can't open edapass from 91.210.169.33 Dec 16 12:07:59 ispc sshd[1753351]: Invalid user ziplines from 45.119.213.109 Dec 16 12:08:01 ispc CRON[1753353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:08:02 ispc sshd[1753357]: Invalid user loginuser from 193.32.162.151 Dec 16 12:08:02 ispc CRON[1753353]: pam_unix(cron:session): session closed for user root Dec 16 12:08:04 ispc sshd[1753368]: reverse mapping checking getaddrinfo for 202.118.150.203.sta.inet.co.th [203.150.118.202] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:08:48 ispc sshd[1753403]: reverse mapping checking getaddrinfo for abts-kk-static-233.56.166.122.airtelbroadband.in [122.166.56.233] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:09:01 ispc CRON[1753412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:09:01 ispc CRON[1753413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:09:02 ispc CRON[1753412]: pam_unix(cron:session): session closed for user root Dec 16 12:09:02 ispc CRON[1753413]: pam_unix(cron:session): session closed for user root Dec 16 12:09:53 ispc postfix/smtpd[1753460]: sql auxprop plugin using mysql engine Dec 16 12:09:53 ispc saslauthd[1753463]: pam_mysql - SELECT returned no result. Dec 16 12:09:53 ispc saslauthd[1753463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:09:53 ispc saslauthd[1753463]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:10:01 ispc CRON[1753470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:10:01 ispc CRON[1753471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:10:01 ispc CRON[1753472]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:10:01 ispc CRON[1753473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:10:01 ispc CRON[1753474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:10:01 ispc CRON[1753471]: pam_unix(cron:session): session closed for user root Dec 16 12:10:01 ispc CRON[1753472]: pam_unix(cron:session): session closed for user www-data Dec 16 12:10:01 ispc CRON[1753474]: pam_unix(cron:session): session closed for user getmail Dec 16 12:10:02 ispc CRON[1753473]: pam_unix(cron:session): session closed for user root Dec 16 12:10:02 ispc CRON[1753470]: pam_unix(cron:session): session closed for user root Dec 16 12:10:07 ispc sshd[1753548]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:10:10 ispc saslauthd[1753554]: pam_mysql - SELECT returned no result. Dec 16 12:10:10 ispc saslauthd[1753554]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:10:10 ispc saslauthd[1753554]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:10:30 ispc sshd[1753566]: Invalid user Can't open edapass from 65.21.245.10 Dec 16 12:10:47 ispc sshd[1753577]: Invalid user Can't open edapass from 101.33.78.6 Dec 16 12:11:01 ispc CRON[1753587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:11:02 ispc CRON[1753587]: pam_unix(cron:session): session closed for user root Dec 16 12:11:13 ispc sshd[1753609]: Invalid user martof from 45.119.213.109 Dec 16 12:11:20 ispc sshd[1753612]: Invalid user martof from 31.97.61.45 Dec 16 12:11:40 ispc sshd[1753629]: Invalid user ziplines from 49.247.24.89 Dec 16 12:12:01 ispc CRON[1753647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:12:02 ispc CRON[1753647]: pam_unix(cron:session): session closed for user root Dec 16 12:12:55 ispc sshd[1753695]: Invalid user martof from 152.53.239.119 Dec 16 12:13:01 ispc CRON[1753700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:13:02 ispc CRON[1753700]: pam_unix(cron:session): session closed for user root Dec 16 12:13:08 ispc sshd[1753715]: Invalid user Can't open edapass from 101.33.78.6 Dec 16 12:13:16 ispc sshd[1753724]: Invalid user Can't open edapass from 65.21.108.255 Dec 16 12:13:40 ispc sshd[1753736]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:14:01 ispc CRON[1753747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:14:02 ispc CRON[1753747]: pam_unix(cron:session): session closed for user root Dec 16 12:14:12 ispc sshd[1753774]: Invalid user klape from 51.77.222.24 Dec 16 12:14:13 ispc sshd[1753776]: Invalid user ubuntu from 51.77.222.24 Dec 16 12:15:01 ispc CRON[1753804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:15:01 ispc CRON[1753805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:15:01 ispc CRON[1753806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:15:01 ispc CRON[1753807]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:15:01 ispc CRON[1753805]: pam_unix(cron:session): session closed for user root Dec 16 12:15:01 ispc CRON[1753807]: pam_unix(cron:session): session closed for user getmail Dec 16 12:15:01 ispc CRON[1753806]: pam_unix(cron:session): session closed for user root Dec 16 12:15:02 ispc CRON[1753804]: pam_unix(cron:session): session closed for user root Dec 16 12:15:32 ispc sshd[1753899]: Did not receive identification string from 192.227.134.84 Dec 16 12:15:35 ispc postfix/smtpd[1753900]: sql auxprop plugin using mysql engine Dec 16 12:15:43 ispc sshd[1753908]: Invalid user Can't open edapass from 194.163.169.185 Dec 16 12:15:47 ispc sshd[1753916]: Invalid user Can't open edapass from 91.210.169.33 Dec 16 12:16:01 ispc CRON[1753924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:16:02 ispc CRON[1753924]: pam_unix(cron:session): session closed for user root Dec 16 12:16:32 ispc sshd[1753957]: reverse mapping checking getaddrinfo for mail.gig-facility.com [146.19.212.19] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:17:01 ispc CRON[1753977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:17:01 ispc CRON[1753977]: pam_unix(cron:session): session closed for user root Dec 16 12:17:18 ispc sshd[1753993]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:17:18 ispc sshd[1753993]: Invalid user martof from 203.205.27.100 Dec 16 12:17:43 ispc sshd[1754009]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:18:01 ispc CRON[1754028]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 12:18:01 ispc CRON[1754029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:18:02 ispc CRON[1754029]: pam_unix(cron:session): session closed for user root Dec 16 12:18:05 ispc CRON[1754028]: pam_unix(cron:session): session closed for user amavis Dec 16 12:18:07 ispc postfix/smtpd[1754052]: sql auxprop plugin using mysql engine Dec 16 12:18:13 ispc postfix/smtpd[1754059]: sql auxprop plugin using mysql engine Dec 16 12:18:13 ispc saslauthd[1754060]: pam_mysql - SELECT returned no result. Dec 16 12:18:13 ispc saslauthd[1754060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:18:13 ispc saslauthd[1754060]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:18:30 ispc postfix/smtpd[1754067]: sql auxprop plugin using mysql engine Dec 16 12:18:43 ispc saslauthd[1754078]: pam_mysql - SELECT returned no result. Dec 16 12:18:43 ispc saslauthd[1754078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:18:43 ispc saslauthd[1754078]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:18:55 ispc sshd[1754090]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:18:58 ispc saslauthd[1754093]: pam_mysql - SELECT returned no result. Dec 16 12:18:58 ispc saslauthd[1754093]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:18:58 ispc saslauthd[1754093]: do_auth : auth failure: [user=db2inst1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:01 ispc sshd[1754094]: Invalid user Can't open edapass from 167.172.179.243 Dec 16 12:19:01 ispc CRON[1754100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:19:02 ispc CRON[1754100]: pam_unix(cron:session): session closed for user root Dec 16 12:19:10 ispc sshd[1754111]: Invalid user perl from 51.195.100.96 Dec 16 12:19:22 ispc saslauthd[1754123]: pam_mysql - SELECT returned no result. Dec 16 12:19:22 ispc saslauthd[1754123]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:22 ispc saslauthd[1754123]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:22 ispc postfix/smtpd[1754122]: sql auxprop plugin using mysql engine Dec 16 12:19:23 ispc saslauthd[1754125]: pam_mysql - SELECT returned no result. Dec 16 12:19:23 ispc saslauthd[1754125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:23 ispc saslauthd[1754125]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:23 ispc saslauthd[1754124]: pam_mysql - SELECT returned no result. Dec 16 12:19:23 ispc saslauthd[1754124]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:23 ispc saslauthd[1754124]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:24 ispc saslauthd[1754127]: pam_mysql - SELECT returned no result. Dec 16 12:19:24 ispc saslauthd[1754127]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:24 ispc saslauthd[1754127]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:24 ispc postfix/smtpd[1754126]: sql auxprop plugin using mysql engine Dec 16 12:19:24 ispc saslauthd[1754128]: pam_mysql - SELECT returned no result. Dec 16 12:19:24 ispc saslauthd[1754128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:24 ispc saslauthd[1754128]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:26 ispc saslauthd[1754131]: pam_mysql - SELECT returned no result. Dec 16 12:19:26 ispc saslauthd[1754131]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:26 ispc saslauthd[1754131]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:27 ispc saslauthd[1754132]: pam_mysql - SELECT returned no result. Dec 16 12:19:27 ispc saslauthd[1754132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:27 ispc saslauthd[1754132]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:28 ispc saslauthd[1754133]: pam_mysql - SELECT returned no result. Dec 16 12:19:28 ispc saslauthd[1754133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:28 ispc saslauthd[1754133]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:38 ispc saslauthd[1754139]: pam_mysql - SELECT returned no result. Dec 16 12:19:38 ispc saslauthd[1754139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:38 ispc saslauthd[1754139]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:53 ispc saslauthd[1754149]: pam_mysql - SELECT returned no result. Dec 16 12:19:53 ispc saslauthd[1754149]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:53 ispc saslauthd[1754149]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:57 ispc saslauthd[1754151]: pam_mysql - SELECT returned no result. Dec 16 12:19:57 ispc saslauthd[1754151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:57 ispc saslauthd[1754151]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:19:58 ispc saslauthd[1754152]: pam_mysql - SELECT returned no result. Dec 16 12:19:58 ispc saslauthd[1754152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:19:58 ispc saslauthd[1754152]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:20:01 ispc saslauthd[1754155]: pam_mysql - SELECT returned no result. Dec 16 12:20:01 ispc saslauthd[1754155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:20:01 ispc saslauthd[1754155]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:20:01 ispc CRON[1754156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:20:01 ispc CRON[1754157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:20:01 ispc CRON[1754158]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:20:01 ispc CRON[1754159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:20:01 ispc CRON[1754160]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:20:01 ispc CRON[1754157]: pam_unix(cron:session): session closed for user root Dec 16 12:20:01 ispc CRON[1754158]: pam_unix(cron:session): session closed for user www-data Dec 16 12:20:01 ispc CRON[1754160]: pam_unix(cron:session): session closed for user getmail Dec 16 12:20:02 ispc CRON[1754159]: pam_unix(cron:session): session closed for user root Dec 16 12:20:02 ispc CRON[1754156]: pam_unix(cron:session): session closed for user root Dec 16 12:20:31 ispc sshd[1754254]: Invalid user martof from 5.133.121.104 Dec 16 12:20:37 ispc sshd[1754263]: Invalid user Can't open edapass from 194.163.169.185 Dec 16 12:21:01 ispc CRON[1754277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:21:01 ispc CRON[1754278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:21:01 ispc CRON[1754277]: pam_unix(cron:session): session closed for user root Dec 16 12:21:02 ispc CRON[1754278]: pam_unix(cron:session): session closed for user root Dec 16 12:21:08 ispc saslauthd[1754295]: pam_mysql - SELECT returned no result. Dec 16 12:21:08 ispc saslauthd[1754295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:21:08 ispc saslauthd[1754295]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:21:38 ispc saslauthd[1754312]: pam_mysql - SELECT returned no result. Dec 16 12:21:38 ispc saslauthd[1754312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:21:38 ispc saslauthd[1754312]: do_auth : auth failure: [user=test@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 12:22:01 ispc CRON[1754325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:22:02 ispc CRON[1754325]: pam_unix(cron:session): session closed for user root Dec 16 12:23:01 ispc CRON[1754372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:23:03 ispc CRON[1754372]: pam_unix(cron:session): session closed for user root Dec 16 12:23:12 ispc sshd[1754389]: reverse mapping checking getaddrinfo for 212.175.29.177.static.ttnet.com.tr [212.175.29.177] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:23:41 ispc postfix/smtpd[1754411]: sql auxprop plugin using mysql engine Dec 16 12:23:42 ispc saslauthd[1754413]: pam_mysql - SELECT returned no result. Dec 16 12:23:42 ispc saslauthd[1754413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:23:42 ispc saslauthd[1754413]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:23:49 ispc sshd[1754420]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:23:51 ispc sshd[1754422]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:23:51 ispc sshd[1754422]: Invalid user klape from 189.89.20.45 Dec 16 12:23:53 ispc sshd[1754424]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:23:53 ispc sshd[1754424]: Invalid user ubuntu from 189.89.20.45 Dec 16 12:24:01 ispc CRON[1754431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:24:02 ispc CRON[1754431]: pam_unix(cron:session): session closed for user root Dec 16 12:25:01 ispc CRON[1754473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:25:01 ispc CRON[1754474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:25:01 ispc CRON[1754475]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:25:01 ispc CRON[1754472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:25:01 ispc CRON[1754473]: pam_unix(cron:session): session closed for user root Dec 16 12:25:01 ispc CRON[1754475]: pam_unix(cron:session): session closed for user getmail Dec 16 12:25:02 ispc CRON[1754474]: pam_unix(cron:session): session closed for user root Dec 16 12:25:02 ispc CRON[1754472]: pam_unix(cron:session): session closed for user root Dec 16 12:25:15 ispc sshd[1754555]: reverse mapping checking getaddrinfo for 202.118.150.203.sta.inet.co.th [203.150.118.202] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:25:33 ispc sshd[1754570]: Invalid user Can't open edapass from 185.111.156.83 Dec 16 12:26:01 ispc CRON[1754586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:26:02 ispc CRON[1754586]: pam_unix(cron:session): session closed for user root Dec 16 12:26:27 ispc CRON[1753250]: pam_unix(cron:session): session closed for user root Dec 16 12:26:27 ispc postfix/smtpd[1754609]: sql auxprop plugin using mysql engine Dec 16 12:27:01 ispc CRON[1754619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:27:01 ispc CRON[1754619]: pam_unix(cron:session): session closed for user root Dec 16 12:28:01 ispc CRON[1754648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:28:02 ispc CRON[1754648]: pam_unix(cron:session): session closed for user root Dec 16 12:29:01 ispc CRON[1754670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:29:03 ispc CRON[1754670]: pam_unix(cron:session): session closed for user root Dec 16 12:29:20 ispc sshd[1754685]: Invalid user Can't open edapass from 194.61.28.147 Dec 16 12:29:40 ispc saslauthd[1754688]: pam_mysql - SELECT returned no result. Dec 16 12:29:40 ispc saslauthd[1754688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:29:40 ispc saslauthd[1754688]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:30:01 ispc CRON[1754695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:30:01 ispc CRON[1754696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:30:01 ispc CRON[1754697]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:30:01 ispc CRON[1754698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:30:01 ispc CRON[1754699]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:30:01 ispc CRON[1754697]: pam_unix(cron:session): session closed for user www-data Dec 16 12:30:01 ispc CRON[1754696]: pam_unix(cron:session): session closed for user root Dec 16 12:30:01 ispc CRON[1754699]: pam_unix(cron:session): session closed for user getmail Dec 16 12:30:02 ispc CRON[1754695]: pam_unix(cron:session): session closed for user root Dec 16 12:30:44 ispc CRON[1754698]: pam_unix(cron:session): session closed for user root Dec 16 12:31:01 ispc CRON[1754903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:31:32 ispc sshd[1754929]: reverse mapping checking getaddrinfo for vds1507797.hosted-by-itldc.com [46.28.71.92] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:31:45 ispc sshd[1754943]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:32:01 ispc CRON[1754953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:32:02 ispc CRON[1754953]: pam_unix(cron:session): session closed for user root Dec 16 12:32:03 ispc sshd[1754964]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:32:49 ispc postfix/smtpd[1755008]: sql auxprop plugin using mysql engine Dec 16 12:33:01 ispc CRON[1755016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:33:02 ispc CRON[1755016]: pam_unix(cron:session): session closed for user root Dec 16 12:33:07 ispc sshd[1755031]: Invalid user admin from 45.148.10.121 Dec 16 12:34:01 ispc CRON[1755057]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:34:01 ispc CRON[1755057]: pam_unix(cron:session): session closed for user root Dec 16 12:34:13 ispc postfix/smtpd[1755072]: sql auxprop plugin using mysql engine Dec 16 12:34:16 ispc saslauthd[1755078]: pam_mysql - SELECT returned no result. Dec 16 12:34:16 ispc saslauthd[1755078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:34:16 ispc saslauthd[1755078]: do_auth : auth failure: [user=dbase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:34:50 ispc postfix/smtpd[1755094]: sql auxprop plugin using mysql engine Dec 16 12:35:01 ispc CRON[1755103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:35:01 ispc CRON[1755102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:35:01 ispc CRON[1755104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:35:01 ispc CRON[1755105]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:35:01 ispc CRON[1755103]: pam_unix(cron:session): session closed for user root Dec 16 12:35:01 ispc CRON[1755105]: pam_unix(cron:session): session closed for user getmail Dec 16 12:35:01 ispc CRON[1755104]: pam_unix(cron:session): session closed for user root Dec 16 12:35:01 ispc CRON[1755102]: pam_unix(cron:session): session closed for user root Dec 16 12:36:01 ispc CRON[1755217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:36:02 ispc CRON[1755217]: pam_unix(cron:session): session closed for user root Dec 16 12:36:07 ispc sshd[1755238]: Invalid user Can't open edapass from 209.38.140.118 Dec 16 12:36:41 ispc sshd[1755261]: Invalid user martof from 141.94.71.131 Dec 16 12:37:01 ispc CRON[1755273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:37:01 ispc CRON[1755273]: pam_unix(cron:session): session closed for user root Dec 16 12:37:21 ispc sshd[1755294]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:37:21 ispc sshd[1755294]: Invalid user martof from 185.149.234.57 Dec 16 12:38:01 ispc CRON[1755333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:38:02 ispc CRON[1755333]: pam_unix(cron:session): session closed for user root Dec 16 12:38:08 ispc sshd[1755344]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:39:01 ispc CRON[1755375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:39:01 ispc CRON[1755374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:39:01 ispc CRON[1755374]: pam_unix(cron:session): session closed for user root Dec 16 12:39:01 ispc CRON[1755375]: pam_unix(cron:session): session closed for user root Dec 16 12:39:44 ispc sshd[1755415]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:39:49 ispc postfix/smtpd[1755418]: sql auxprop plugin using mysql engine Dec 16 12:39:49 ispc saslauthd[1755421]: pam_mysql - SELECT returned no result. Dec 16 12:39:49 ispc saslauthd[1755421]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:39:49 ispc saslauthd[1755421]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:40:01 ispc CRON[1755435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:40:01 ispc CRON[1755432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:40:01 ispc CRON[1755433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:40:01 ispc CRON[1755434]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:40:01 ispc CRON[1755436]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:40:01 ispc CRON[1755434]: pam_unix(cron:session): session closed for user www-data Dec 16 12:40:01 ispc CRON[1755433]: pam_unix(cron:session): session closed for user root Dec 16 12:40:01 ispc CRON[1755436]: pam_unix(cron:session): session closed for user getmail Dec 16 12:40:02 ispc CRON[1755435]: pam_unix(cron:session): session closed for user root Dec 16 12:40:02 ispc CRON[1755432]: pam_unix(cron:session): session closed for user root Dec 16 12:41:01 ispc CRON[1755532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:41:01 ispc CRON[1755532]: pam_unix(cron:session): session closed for user root Dec 16 12:41:58 ispc sshd[1755579]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:42:01 ispc CRON[1755581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:42:02 ispc CRON[1755581]: pam_unix(cron:session): session closed for user root Dec 16 12:42:32 ispc sshd[1755609]: Invalid user Can't open edapass from 209.38.140.118 Dec 16 12:42:45 ispc sshd[1755626]: Invalid user Can't open edapass from 5.129.195.224 Dec 16 12:43:01 ispc CRON[1755639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:43:01 ispc CRON[1755639]: pam_unix(cron:session): session closed for user root Dec 16 12:43:10 ispc postfix/smtpd[1755659]: sql auxprop plugin using mysql engine Dec 16 12:43:10 ispc saslauthd[1755662]: pam_mysql - SELECT returned no result. Dec 16 12:43:10 ispc saslauthd[1755662]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:43:10 ispc saslauthd[1755662]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:44:01 ispc CRON[1755685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:44:02 ispc CRON[1755685]: pam_unix(cron:session): session closed for user root Dec 16 12:44:32 ispc sshd[1755713]: Invalid user pronajemplosin from 183.215.179.154 Dec 16 12:44:48 ispc sshd[1755728]: reverse mapping checking getaddrinfo for 81.31.154.66.hostvps.it [81.31.154.66] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:44:48 ispc sshd[1755728]: Invalid user Can't open edapass from 81.31.154.66 Dec 16 12:45:01 ispc CRON[1755737]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:45:01 ispc CRON[1755735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:45:01 ispc CRON[1755734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:45:01 ispc CRON[1755736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:45:01 ispc CRON[1755735]: pam_unix(cron:session): session closed for user root Dec 16 12:45:01 ispc CRON[1755737]: pam_unix(cron:session): session closed for user getmail Dec 16 12:45:02 ispc CRON[1755736]: pam_unix(cron:session): session closed for user root Dec 16 12:45:02 ispc CRON[1755734]: pam_unix(cron:session): session closed for user root Dec 16 12:45:14 ispc sshd[1755814]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:46:01 ispc CRON[1755845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:46:02 ispc CRON[1755845]: pam_unix(cron:session): session closed for user root Dec 16 12:46:20 ispc sshd[1755865]: Invalid user ziplines from 185.142.159.122 Dec 16 12:46:31 ispc postfix/smtpd[1755872]: sql auxprop plugin using mysql engine Dec 16 12:46:32 ispc saslauthd[1755875]: pam_mysql - SELECT returned no result. Dec 16 12:46:32 ispc saslauthd[1755875]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:46:32 ispc saslauthd[1755875]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:47:01 ispc CRON[1755890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:47:01 ispc CRON[1755890]: pam_unix(cron:session): session closed for user root Dec 16 12:48:01 ispc CRON[1755941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:48:02 ispc CRON[1755941]: pam_unix(cron:session): session closed for user root Dec 16 12:48:34 ispc sshd[1755966]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:48:38 ispc sshd[1755969]: Invalid user Can't open edapass from 51.38.188.27 Dec 16 12:49:01 ispc CRON[1755986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:49:02 ispc CRON[1755986]: pam_unix(cron:session): session closed for user root Dec 16 12:49:19 ispc sshd[1756005]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:49:56 ispc postfix/smtpd[1756027]: sql auxprop plugin using mysql engine Dec 16 12:49:58 ispc saslauthd[1756030]: pam_mysql - SELECT returned no result. Dec 16 12:49:58 ispc saslauthd[1756030]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:49:58 ispc saslauthd[1756030]: do_auth : auth failure: [user=debug] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:50:01 ispc CRON[1756031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:50:01 ispc CRON[1756032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:50:01 ispc CRON[1756033]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 12:50:01 ispc CRON[1756034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:50:01 ispc CRON[1756035]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:50:01 ispc CRON[1756033]: pam_unix(cron:session): session closed for user www-data Dec 16 12:50:01 ispc CRON[1756032]: pam_unix(cron:session): session closed for user root Dec 16 12:50:01 ispc CRON[1756035]: pam_unix(cron:session): session closed for user getmail Dec 16 12:50:01 ispc CRON[1756034]: pam_unix(cron:session): session closed for user root Dec 16 12:50:02 ispc CRON[1756031]: pam_unix(cron:session): session closed for user root Dec 16 12:51:01 ispc CRON[1756143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:51:01 ispc CRON[1756143]: pam_unix(cron:session): session closed for user root Dec 16 12:51:22 ispc CRON[1754903]: pam_unix(cron:session): session closed for user root Dec 16 12:51:23 ispc saslauthd[1756167]: pam_mysql - SELECT returned no result. Dec 16 12:51:23 ispc saslauthd[1756167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:51:23 ispc saslauthd[1756167]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:51:38 ispc sshd[1756168]: reverse mapping checking getaddrinfo for 212.175.29.177.static.ttnet.com.tr [212.175.29.177] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:51:38 ispc sshd[1756168]: Invalid user Can't open edapass from 212.175.29.177 Dec 16 12:52:01 ispc CRON[1756171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:52:01 ispc CRON[1756170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:52:02 ispc CRON[1756171]: pam_unix(cron:session): session closed for user root Dec 16 12:53:01 ispc CRON[1756202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:53:01 ispc CRON[1756202]: pam_unix(cron:session): session closed for user root Dec 16 12:53:04 ispc postfix/smtpd[1756215]: sql auxprop plugin using mysql engine Dec 16 12:53:15 ispc saslauthd[1756222]: pam_mysql - SELECT returned no result. Dec 16 12:53:15 ispc saslauthd[1756222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:53:15 ispc saslauthd[1756222]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:01 ispc CRON[1756229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:54:02 ispc CRON[1756229]: pam_unix(cron:session): session closed for user root Dec 16 12:54:06 ispc saslauthd[1756243]: pam_mysql - SELECT returned no result. Dec 16 12:54:06 ispc saslauthd[1756243]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:54:06 ispc saslauthd[1756243]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:10 ispc saslauthd[1756244]: pam_mysql - SELECT returned no result. Dec 16 12:54:10 ispc saslauthd[1756244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:54:10 ispc saslauthd[1756244]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:13 ispc saslauthd[1756245]: pam_mysql - SELECT returned no result. Dec 16 12:54:13 ispc saslauthd[1756245]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:54:13 ispc saslauthd[1756245]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:23 ispc saslauthd[1756248]: pam_mysql - SELECT returned no result. Dec 16 12:54:23 ispc saslauthd[1756248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:54:23 ispc saslauthd[1756248]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:34 ispc saslauthd[1756251]: pam_mysql - SELECT returned no result. Dec 16 12:54:34 ispc saslauthd[1756251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:54:34 ispc saslauthd[1756251]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:54:50 ispc sshd[1756253]: Invalid user Can't open edapass from 51.158.253.248 Dec 16 12:55:01 ispc CRON[1756256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:55:01 ispc CRON[1756255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:55:01 ispc CRON[1756257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:55:01 ispc CRON[1756258]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 12:55:01 ispc CRON[1756256]: pam_unix(cron:session): session closed for user root Dec 16 12:55:01 ispc CRON[1756258]: pam_unix(cron:session): session closed for user getmail Dec 16 12:55:03 ispc CRON[1756255]: pam_unix(cron:session): session closed for user root Dec 16 12:55:18 ispc CRON[1756170]: pam_unix(cron:session): session closed for user root Dec 16 12:55:48 ispc CRON[1756257]: pam_unix(cron:session): session closed for user root Dec 16 12:56:01 ispc CRON[1756380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:56:24 ispc saslauthd[1756401]: pam_mysql - SELECT returned no result. Dec 16 12:56:24 ispc saslauthd[1756401]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 12:56:24 ispc saslauthd[1756401]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 12:57:01 ispc CRON[1756419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:57:02 ispc CRON[1756419]: pam_unix(cron:session): session closed for user root Dec 16 12:58:01 ispc CRON[1756472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:58:02 ispc CRON[1756472]: pam_unix(cron:session): session closed for user root Dec 16 12:58:40 ispc sshd[1756510]: reverse mapping checking getaddrinfo for vds1507797.hosted-by-itldc.com [46.28.71.92] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:59:01 ispc CRON[1756527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 12:59:02 ispc CRON[1756527]: pam_unix(cron:session): session closed for user root Dec 16 12:59:11 ispc sshd[1756546]: reverse mapping checking getaddrinfo for 104-129-23-171-host.colocrossing.com [104.129.23.171] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 12:59:11 ispc sshd[1756546]: Invalid user Can't open edapass from 104.129.23.171 Dec 16 12:59:37 ispc sshd[1756468]: Invalid user ziplines from 161.35.218.223 Dec 16 13:00:01 ispc CRON[1756578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:00:01 ispc CRON[1756580]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:00:01 ispc CRON[1756575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:00:01 ispc CRON[1756576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:00:01 ispc CRON[1756579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:00:01 ispc CRON[1756577]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:00:01 ispc CRON[1756577]: pam_unix(cron:session): session closed for user www-data Dec 16 13:00:01 ispc CRON[1756576]: pam_unix(cron:session): session closed for user root Dec 16 13:00:01 ispc CRON[1756580]: pam_unix(cron:session): session closed for user getmail Dec 16 13:00:02 ispc CRON[1756579]: pam_unix(cron:session): session closed for user root Dec 16 13:00:02 ispc CRON[1756575]: pam_unix(cron:session): session closed for user root Dec 16 13:00:02 ispc CRON[1756578]: pam_unix(cron:session): session closed for user root Dec 16 13:00:34 ispc sshd[1756747]: Invalid user klape from 200.32.52.150 Dec 16 13:00:35 ispc sshd[1756749]: Invalid user ubuntu from 200.32.52.150 Dec 16 13:01:01 ispc CRON[1756770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:01:01 ispc CRON[1756770]: pam_unix(cron:session): session closed for user root Dec 16 13:01:20 ispc sshd[1756793]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:02:01 ispc CRON[1756820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:02:01 ispc CRON[1756819]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 13:02:02 ispc CRON[1756820]: pam_unix(cron:session): session closed for user root Dec 16 13:03:01 ispc CRON[1757697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:03:01 ispc CRON[1757697]: pam_unix(cron:session): session closed for user root Dec 16 13:03:17 ispc sshd[1757805]: Invalid user from 147.182.205.88 Dec 16 13:03:26 ispc CRON[1756819]: pam_unix(cron:session): session closed for user logcheck Dec 16 13:03:32 ispc postfix/smtpd[1757906]: sql auxprop plugin using mysql engine Dec 16 13:03:32 ispc postfix/smtpd[1757911]: sql auxprop plugin using mysql engine Dec 16 13:03:35 ispc postfix/smtpd[1757914]: sql auxprop plugin using mysql engine Dec 16 13:04:01 ispc CRON[1757932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:04:02 ispc CRON[1757932]: pam_unix(cron:session): session closed for user root Dec 16 13:04:04 ispc sshd[1757949]: Address 185.23.74.60 maps to cp1.turkclouds.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:04:44 ispc sshd[1757965]: Invalid user blceu from 141.94.71.131 Dec 16 13:05:01 ispc CRON[1757979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:05:01 ispc CRON[1757980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:05:01 ispc CRON[1757981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:05:01 ispc CRON[1757982]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:05:01 ispc CRON[1757980]: pam_unix(cron:session): session closed for user root Dec 16 13:05:01 ispc CRON[1757982]: pam_unix(cron:session): session closed for user getmail Dec 16 13:05:01 ispc CRON[1757981]: pam_unix(cron:session): session closed for user root Dec 16 13:05:02 ispc CRON[1757979]: pam_unix(cron:session): session closed for user root Dec 16 13:05:15 ispc postfix/smtpd[1758063]: sql auxprop plugin using mysql engine Dec 16 13:05:17 ispc saslauthd[1758065]: pam_mysql - SELECT returned no result. Dec 16 13:05:17 ispc saslauthd[1758065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:05:17 ispc saslauthd[1758065]: do_auth : auth failure: [user=default] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:05:36 ispc sshd[1758073]: Invalid user Can't open edapass from 195.15.215.34 Dec 16 13:06:01 ispc CRON[1758090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:06:01 ispc CRON[1758090]: pam_unix(cron:session): session closed for user root Dec 16 13:06:23 ispc saslauthd[1758114]: pam_mysql - SELECT returned no result. Dec 16 13:06:23 ispc saslauthd[1758114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:06:23 ispc saslauthd[1758114]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:06:39 ispc postfix/smtpd[1758123]: sql auxprop plugin using mysql engine Dec 16 13:07:01 ispc CRON[1758134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:07:02 ispc CRON[1758134]: pam_unix(cron:session): session closed for user root Dec 16 13:07:54 ispc sshd[1758176]: Invalid user ziplines from 103.89.86.250 Dec 16 13:08:01 ispc CRON[1758191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:08:02 ispc CRON[1758191]: pam_unix(cron:session): session closed for user root Dec 16 13:08:31 ispc postfix/smtpd[1758217]: sql auxprop plugin using mysql engine Dec 16 13:09:01 ispc CRON[1758229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:09:01 ispc CRON[1758230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:09:01 ispc CRON[1758229]: pam_unix(cron:session): session closed for user root Dec 16 13:09:01 ispc CRON[1758230]: pam_unix(cron:session): session closed for user root Dec 16 13:09:29 ispc sshd[1758264]: Invalid user admin from 120.48.125.223 Dec 16 13:09:40 ispc sshd[1758271]: Invalid user Can't open edapass from 51.38.188.27 Dec 16 13:10:01 ispc CRON[1758287]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:10:01 ispc CRON[1758288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:10:01 ispc CRON[1758285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:10:01 ispc CRON[1758286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:10:01 ispc CRON[1758289]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:10:01 ispc CRON[1758286]: pam_unix(cron:session): session closed for user root Dec 16 13:10:01 ispc CRON[1758287]: pam_unix(cron:session): session closed for user www-data Dec 16 13:10:01 ispc CRON[1758289]: pam_unix(cron:session): session closed for user getmail Dec 16 13:10:02 ispc CRON[1758285]: pam_unix(cron:session): session closed for user root Dec 16 13:10:02 ispc CRON[1758288]: pam_unix(cron:session): session closed for user root Dec 16 13:10:41 ispc sshd[1758384]: Invalid user messagebus from 45.148.10.121 Dec 16 13:11:01 ispc CRON[1758401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:11:01 ispc CRON[1758401]: pam_unix(cron:session): session closed for user root Dec 16 13:11:08 ispc sshd[1758417]: Invalid user Can't open edapass from 185.208.181.149 Dec 16 13:11:41 ispc sshd[1758438]: Invalid user perl from 51.195.100.96 Dec 16 13:12:01 ispc sshd[1758450]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:12:01 ispc CRON[1758452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:12:02 ispc CRON[1758452]: pam_unix(cron:session): session closed for user root Dec 16 13:12:11 ispc sshd[1758467]: Invalid user Can't open edapass from 109.73.196.37 Dec 16 13:12:39 ispc postfix/smtpd[1758486]: sql auxprop plugin using mysql engine Dec 16 13:12:40 ispc saslauthd[1758489]: pam_mysql - SELECT returned no result. Dec 16 13:12:40 ispc saslauthd[1758489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:12:40 ispc saslauthd[1758489]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:12:53 ispc postfix/smtpd[1758502]: sql auxprop plugin using mysql engine Dec 16 13:13:01 ispc CRON[1758508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:13:01 ispc CRON[1758508]: pam_unix(cron:session): session closed for user root Dec 16 13:13:11 ispc sshd[1758523]: Did not receive identification string from 192.227.134.84 Dec 16 13:14:01 ispc CRON[1758546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:14:02 ispc CRON[1758546]: pam_unix(cron:session): session closed for user root Dec 16 13:14:08 ispc saslauthd[1758558]: pam_mysql - SELECT returned no result. Dec 16 13:14:08 ispc saslauthd[1758558]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:14:08 ispc saslauthd[1758558]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:14:15 ispc sshd[1758563]: Invalid user Can't open edapass from 83.229.124.21 Dec 16 13:14:52 ispc sshd[1758584]: reverse mapping checking getaddrinfo for 104-129-23-171-host.colocrossing.com [104.129.23.171] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:14:52 ispc sshd[1758584]: Invalid user Can't open edapass from 104.129.23.171 Dec 16 13:15:01 ispc CRON[1758594]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:15:01 ispc CRON[1758591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:15:01 ispc CRON[1758592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:15:01 ispc CRON[1758593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:15:01 ispc CRON[1758592]: pam_unix(cron:session): session closed for user root Dec 16 13:15:01 ispc CRON[1758594]: pam_unix(cron:session): session closed for user getmail Dec 16 13:15:01 ispc CRON[1758593]: pam_unix(cron:session): session closed for user root Dec 16 13:15:02 ispc CRON[1758591]: pam_unix(cron:session): session closed for user root Dec 16 13:16:01 ispc CRON[1758695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:16:01 ispc CRON[1758695]: pam_unix(cron:session): session closed for user root Dec 16 13:16:16 ispc postfix/smtpd[1758716]: sql auxprop plugin using mysql engine Dec 16 13:16:17 ispc postfix/smtpd[1758718]: sql auxprop plugin using mysql engine Dec 16 13:16:17 ispc saslauthd[1758719]: pam_mysql - SELECT returned no result. Dec 16 13:16:17 ispc saslauthd[1758719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:16:17 ispc saslauthd[1758719]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:16:17 ispc saslauthd[1758720]: pam_mysql - SELECT returned no result. Dec 16 13:16:17 ispc saslauthd[1758720]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:16:17 ispc saslauthd[1758720]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:16:30 ispc saslauthd[1758725]: pam_mysql - SELECT returned no result. Dec 16 13:16:30 ispc saslauthd[1758725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:16:30 ispc saslauthd[1758725]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:16:33 ispc CRON[1756380]: pam_unix(cron:session): session closed for user root Dec 16 13:16:54 ispc saslauthd[1758731]: pam_mysql - SELECT returned no result. Dec 16 13:16:54 ispc saslauthd[1758731]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:16:54 ispc saslauthd[1758731]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:16:59 ispc saslauthd[1758732]: pam_mysql - SELECT returned no result. Dec 16 13:16:59 ispc saslauthd[1758732]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:16:59 ispc saslauthd[1758732]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:17:01 ispc CRON[1758733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:17:02 ispc CRON[1758733]: pam_unix(cron:session): session closed for user root Dec 16 13:17:33 ispc saslauthd[1758752]: pam_mysql - SELECT returned no result. Dec 16 13:17:33 ispc saslauthd[1758752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:17:33 ispc saslauthd[1758752]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:18:01 ispc CRON[1758764]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 16 13:18:01 ispc CRON[1758765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:18:02 ispc CRON[1758765]: pam_unix(cron:session): session closed for user root Dec 16 13:18:03 ispc CRON[1758764]: pam_unix(cron:session): session closed for user web324 Dec 16 13:18:37 ispc saslauthd[1758783]: pam_mysql - SELECT returned no result. Dec 16 13:18:37 ispc saslauthd[1758783]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:18:37 ispc saslauthd[1758783]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:18:43 ispc sshd[1758784]: Invalid user Can't open edapass from 34.91.58.35 Dec 16 13:19:01 ispc CRON[1758790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:19:01 ispc CRON[1758790]: pam_unix(cron:session): session closed for user root Dec 16 13:19:17 ispc sshd[1758803]: Invalid user martof from 173.212.237.203 Dec 16 13:20:01 ispc CRON[1758815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:20:01 ispc CRON[1758816]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:20:01 ispc CRON[1758813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:20:01 ispc CRON[1758812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:20:01 ispc CRON[1758814]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:20:01 ispc CRON[1758814]: pam_unix(cron:session): session closed for user www-data Dec 16 13:20:01 ispc CRON[1758813]: pam_unix(cron:session): session closed for user root Dec 16 13:20:01 ispc CRON[1758816]: pam_unix(cron:session): session closed for user getmail Dec 16 13:20:02 ispc CRON[1758812]: pam_unix(cron:session): session closed for user root Dec 16 13:20:23 ispc saslauthd[1758925]: pam_mysql - SELECT returned no result. Dec 16 13:20:23 ispc saslauthd[1758925]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:20:23 ispc saslauthd[1758925]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:20:39 ispc sshd[1758931]: Invalid user Can't open edapass from 195.15.215.34 Dec 16 13:20:40 ispc CRON[1758815]: pam_unix(cron:session): session closed for user root Dec 16 13:20:48 ispc saslauthd[1758937]: pam_mysql - SELECT returned no result. Dec 16 13:20:48 ispc saslauthd[1758937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:20:48 ispc saslauthd[1758937]: do_auth : auth failure: [user=digi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:20:50 ispc sshd[1758938]: Invalid user Can't open edapass from 194.163.169.185 Dec 16 13:21:01 ispc CRON[1758942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:21:01 ispc CRON[1758943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:21:01 ispc CRON[1758942]: pam_unix(cron:session): session closed for user root Dec 16 13:21:37 ispc sshd[1758971]: Invalid user Can't open edapass from 5.129.195.224 Dec 16 13:22:01 ispc CRON[1758982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:22:02 ispc CRON[1758982]: pam_unix(cron:session): session closed for user root Dec 16 13:22:38 ispc sshd[1759012]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:22:38 ispc sshd[1759012]: Invalid user Can't open edapass from 209.250.236.35 Dec 16 13:23:01 ispc CRON[1759031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:23:02 ispc CRON[1759031]: pam_unix(cron:session): session closed for user root Dec 16 13:23:24 ispc sshd[1759056]: Invalid user klape from 70.37.89.177 Dec 16 13:23:25 ispc sshd[1759058]: Invalid user ubuntu from 70.37.89.177 Dec 16 13:24:01 ispc CRON[1759082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:24:02 ispc CRON[1759082]: pam_unix(cron:session): session closed for user root Dec 16 13:24:52 ispc sshd[1759117]: reverse mapping checking getaddrinfo for 202.118.150.203.sta.inet.co.th [203.150.118.202] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:25:01 ispc CRON[1759128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:25:01 ispc CRON[1759126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:25:01 ispc CRON[1759127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:25:01 ispc CRON[1759129]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:25:01 ispc CRON[1759129]: pam_unix(cron:session): session closed for user getmail Dec 16 13:25:01 ispc CRON[1759127]: pam_unix(cron:session): session closed for user root Dec 16 13:25:01 ispc CRON[1759128]: pam_unix(cron:session): session closed for user root Dec 16 13:25:01 ispc sshd[1759124]: Invalid user martof from 165.227.38.205 Dec 16 13:25:03 ispc CRON[1759126]: pam_unix(cron:session): session closed for user root Dec 16 13:25:24 ispc postfix/smtpd[1759216]: sql auxprop plugin using mysql engine Dec 16 13:25:25 ispc saslauthd[1759219]: pam_mysql - SELECT returned no result. Dec 16 13:25:25 ispc saslauthd[1759219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:25:25 ispc saslauthd[1759219]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:25:54 ispc sshd[1759238]: Invalid user Can't open edapass from 102.209.119.74 Dec 16 13:26:01 ispc CRON[1759244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:26:01 ispc CRON[1759244]: pam_unix(cron:session): session closed for user root Dec 16 13:27:01 ispc CRON[1759287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:27:02 ispc CRON[1759287]: pam_unix(cron:session): session closed for user root Dec 16 13:28:01 ispc CRON[1759341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:28:02 ispc CRON[1759341]: pam_unix(cron:session): session closed for user root Dec 16 13:28:13 ispc sshd[1759356]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:28:18 ispc sshd[1759368]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:28:18 ispc sshd[1759368]: Invalid user Can't open edapass from 209.250.236.35 Dec 16 13:28:46 ispc postfix/smtpd[1759380]: sql auxprop plugin using mysql engine Dec 16 13:28:47 ispc postfix/smtpd[1759382]: sql auxprop plugin using mysql engine Dec 16 13:28:51 ispc sshd[1759388]: Invalid user ziplines from 5.133.121.104 Dec 16 13:29:01 ispc CRON[1759394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:29:01 ispc CRON[1759394]: pam_unix(cron:session): session closed for user root Dec 16 13:29:54 ispc sshd[1759432]: Invalid user blceu from 5.133.121.104 Dec 16 13:30:01 ispc CRON[1759441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:30:01 ispc CRON[1759442]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:30:01 ispc CRON[1759440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:30:01 ispc CRON[1759443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:30:01 ispc CRON[1759444]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:30:01 ispc CRON[1759442]: pam_unix(cron:session): session closed for user www-data Dec 16 13:30:01 ispc CRON[1759441]: pam_unix(cron:session): session closed for user root Dec 16 13:30:01 ispc CRON[1759444]: pam_unix(cron:session): session closed for user getmail Dec 16 13:30:02 ispc CRON[1759443]: pam_unix(cron:session): session closed for user root Dec 16 13:30:02 ispc CRON[1759440]: pam_unix(cron:session): session closed for user root Dec 16 13:30:31 ispc sshd[1759533]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:31:00 ispc sshd[1759552]: Did not receive identification string from 45.140.17.97 Dec 16 13:31:00 ispc postfix/smtpd[1759553]: sql auxprop plugin using mysql engine Dec 16 13:31:01 ispc CRON[1759555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:31:02 ispc CRON[1759555]: pam_unix(cron:session): session closed for user root Dec 16 13:32:01 ispc CRON[1759596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:32:01 ispc CRON[1759596]: pam_unix(cron:session): session closed for user root Dec 16 13:32:08 ispc saslauthd[1759611]: pam_mysql - SELECT returned no result. Dec 16 13:32:08 ispc saslauthd[1759611]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:32:08 ispc saslauthd[1759611]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:32:39 ispc postfix/smtpd[1759626]: sql auxprop plugin using mysql engine Dec 16 13:32:56 ispc sshd[1759642]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:33:01 ispc CRON[1759646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:33:02 ispc CRON[1759646]: pam_unix(cron:session): session closed for user root Dec 16 13:33:43 ispc sshd[1759685]: Invalid user Can't open edapass from 84.247.187.112 Dec 16 13:34:01 ispc CRON[1759693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:34:02 ispc CRON[1759693]: pam_unix(cron:session): session closed for user root Dec 16 13:34:17 ispc sshd[1759717]: Invalid user Can't open edapass from 168.119.239.48 Dec 16 13:34:23 ispc sshd[1759720]: Invalid user ziplines from 167.99.241.111 Dec 16 13:35:01 ispc CRON[1759756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:35:01 ispc CRON[1759755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:35:01 ispc CRON[1759757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:35:01 ispc CRON[1759758]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:35:01 ispc CRON[1759756]: pam_unix(cron:session): session closed for user root Dec 16 13:35:01 ispc CRON[1759758]: pam_unix(cron:session): session closed for user getmail Dec 16 13:35:01 ispc CRON[1759757]: pam_unix(cron:session): session closed for user root Dec 16 13:35:02 ispc CRON[1759755]: pam_unix(cron:session): session closed for user root Dec 16 13:35:14 ispc postfix/smtpd[1759836]: sql auxprop plugin using mysql engine Dec 16 13:35:16 ispc saslauthd[1759838]: pam_mysql - SELECT returned no result. Dec 16 13:35:16 ispc saslauthd[1759838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:35:16 ispc saslauthd[1759838]: do_auth : auth failure: [user=demos] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:35:21 ispc sshd[1759845]: Invalid user Can't open edapass from 137.184.5.75 Dec 16 13:35:54 ispc sshd[1759866]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:36:01 ispc CRON[1759872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:36:01 ispc CRON[1759872]: pam_unix(cron:session): session closed for user root Dec 16 13:36:24 ispc sshd[1759900]: Address 77.68.25.23 maps to exchange-out-45.livemail.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:37:00 ispc sshd[1759921]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:37:01 ispc CRON[1759923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:37:01 ispc CRON[1759923]: pam_unix(cron:session): session closed for user root Dec 16 13:37:51 ispc sshd[1759969]: reverse mapping checking getaddrinfo for static.120.253.208.85.clients.irandns.com [85.208.253.120] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:37:54 ispc sshd[1759971]: reverse mapping checking getaddrinfo for 81.31.154.66.hostvps.it [81.31.154.66] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:37:54 ispc sshd[1759971]: Invalid user Can't open edapass from 81.31.154.66 Dec 16 13:38:02 ispc CRON[1759981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:38:02 ispc CRON[1759981]: pam_unix(cron:session): session closed for user root Dec 16 13:38:53 ispc sshd[1760027]: Invalid user Can't open edapass from 185.225.22.110 Dec 16 13:39:01 ispc CRON[1760034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:39:01 ispc CRON[1760035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:39:02 ispc CRON[1760034]: pam_unix(cron:session): session closed for user root Dec 16 13:39:02 ispc CRON[1760035]: pam_unix(cron:session): session closed for user root Dec 16 13:39:06 ispc sshd[1760056]: Invalid user ziplines from 5.129.195.224 Dec 16 13:39:25 ispc sshd[1760068]: Invalid user Can't open edapass from 5.129.195.224 Dec 16 13:39:39 ispc sshd[1760077]: Invalid user klape from 103.164.20.29 Dec 16 13:39:41 ispc sshd[1760079]: Invalid user ubuntu from 103.164.20.29 Dec 16 13:40:01 ispc CRON[1760091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:40:01 ispc CRON[1760092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:40:01 ispc CRON[1760093]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:40:01 ispc CRON[1760094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:40:01 ispc CRON[1760095]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:40:01 ispc CRON[1760093]: pam_unix(cron:session): session closed for user www-data Dec 16 13:40:01 ispc CRON[1760092]: pam_unix(cron:session): session closed for user root Dec 16 13:40:01 ispc CRON[1760095]: pam_unix(cron:session): session closed for user getmail Dec 16 13:40:02 ispc CRON[1760094]: pam_unix(cron:session): session closed for user root Dec 16 13:40:03 ispc CRON[1760091]: pam_unix(cron:session): session closed for user root Dec 16 13:40:08 ispc postfix/smtpd[1760175]: sql auxprop plugin using mysql engine Dec 16 13:40:09 ispc saslauthd[1760178]: pam_mysql - SELECT returned no result. Dec 16 13:40:09 ispc saslauthd[1760178]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:40:09 ispc saslauthd[1760178]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:40:47 ispc sshd[1760199]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:41:01 ispc CRON[1760206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:41:02 ispc CRON[1760206]: pam_unix(cron:session): session closed for user root Dec 16 13:41:06 ispc saslauthd[1760221]: pam_mysql - SELECT returned no result. Dec 16 13:41:06 ispc saslauthd[1760221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:41:06 ispc saslauthd[1760221]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:41:26 ispc CRON[1758943]: pam_unix(cron:session): session closed for user root Dec 16 13:42:01 ispc CRON[1760233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:42:04 ispc CRON[1760233]: pam_unix(cron:session): session closed for user root Dec 16 13:43:01 ispc CRON[1760257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:43:02 ispc CRON[1760257]: pam_unix(cron:session): session closed for user root Dec 16 13:44:01 ispc CRON[1760272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:44:02 ispc CRON[1760272]: pam_unix(cron:session): session closed for user root Dec 16 13:44:32 ispc sshd[1760290]: Invalid user ziplines from 185.208.181.153 Dec 16 13:44:32 ispc saslauthd[1760292]: pam_mysql - SELECT returned no result. Dec 16 13:44:32 ispc saslauthd[1760292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:44:32 ispc saslauthd[1760292]: do_auth : auth failure: [user=user@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 13:44:39 ispc sshd[1760293]: Invalid user Can't open edapass from 185.111.156.83 Dec 16 13:45:01 ispc CRON[1760296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:45:01 ispc CRON[1760297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:45:01 ispc CRON[1760299]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:45:01 ispc CRON[1760298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:45:01 ispc CRON[1760297]: pam_unix(cron:session): session closed for user root Dec 16 13:45:01 ispc CRON[1760299]: pam_unix(cron:session): session closed for user getmail Dec 16 13:45:03 ispc CRON[1760296]: pam_unix(cron:session): session closed for user root Dec 16 13:45:08 ispc sshd[1760428]: Invalid user blceu from 152.53.239.119 Dec 16 13:45:49 ispc CRON[1760298]: pam_unix(cron:session): session closed for user root Dec 16 13:45:50 ispc sshd[1760493]: Invalid user blceu from 49.247.24.89 Dec 16 13:46:01 ispc CRON[1760496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:46:23 ispc sshd[1760520]: Invalid user martof from 49.247.24.89 Dec 16 13:46:40 ispc saslauthd[1760526]: pam_mysql - SELECT returned no result. Dec 16 13:46:40 ispc saslauthd[1760526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:46:40 ispc saslauthd[1760526]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:47:01 ispc CRON[1760538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:47:02 ispc CRON[1760538]: pam_unix(cron:session): session closed for user root Dec 16 13:47:58 ispc saslauthd[1760592]: pam_mysql - SELECT returned no result. Dec 16 13:47:58 ispc saslauthd[1760592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:47:58 ispc saslauthd[1760592]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:48:01 ispc CRON[1760595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:48:01 ispc CRON[1760595]: pam_unix(cron:session): session closed for user root Dec 16 13:48:24 ispc sshd[1760621]: Invalid user ziplines from 165.227.38.205 Dec 16 13:48:25 ispc sshd[1760623]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:49:01 ispc CRON[1760642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:49:03 ispc CRON[1760642]: pam_unix(cron:session): session closed for user root Dec 16 13:49:37 ispc sshd[1760679]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:50:01 ispc CRON[1760689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:50:01 ispc CRON[1760690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:50:01 ispc CRON[1760691]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 13:50:01 ispc CRON[1760692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:50:01 ispc CRON[1760693]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:50:01 ispc CRON[1760691]: pam_unix(cron:session): session closed for user www-data Dec 16 13:50:01 ispc CRON[1760690]: pam_unix(cron:session): session closed for user root Dec 16 13:50:01 ispc CRON[1760693]: pam_unix(cron:session): session closed for user getmail Dec 16 13:50:02 ispc CRON[1760692]: pam_unix(cron:session): session closed for user root Dec 16 13:50:02 ispc CRON[1760689]: pam_unix(cron:session): session closed for user root Dec 16 13:50:42 ispc postfix/smtpd[1760788]: sql auxprop plugin using mysql engine Dec 16 13:50:43 ispc saslauthd[1760792]: pam_mysql - SELECT returned no result. Dec 16 13:50:43 ispc saslauthd[1760792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:50:43 ispc saslauthd[1760792]: do_auth : auth failure: [user=deskalt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:50:45 ispc saslauthd[1760793]: pam_mysql - SELECT returned no result. Dec 16 13:50:45 ispc saslauthd[1760793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:50:45 ispc saslauthd[1760793]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:50:47 ispc saslauthd[1760798]: pam_mysql - SELECT returned no result. Dec 16 13:50:47 ispc saslauthd[1760798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:50:47 ispc saslauthd[1760798]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:51:01 ispc CRON[1760804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:51:02 ispc CRON[1760804]: pam_unix(cron:session): session closed for user root Dec 16 13:51:09 ispc saslauthd[1760821]: pam_mysql - SELECT returned no result. Dec 16 13:51:09 ispc saslauthd[1760821]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:51:09 ispc saslauthd[1760821]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:51:10 ispc saslauthd[1760823]: pam_mysql - SELECT returned no result. Dec 16 13:51:10 ispc saslauthd[1760823]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:51:10 ispc saslauthd[1760823]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:51:19 ispc sshd[1760828]: Invalid user Can't open edapass from 137.184.5.75 Dec 16 13:51:53 ispc postfix/smtpd[1760850]: sql auxprop plugin using mysql engine Dec 16 13:52:01 ispc CRON[1760858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:52:01 ispc CRON[1760858]: pam_unix(cron:session): session closed for user root Dec 16 13:52:09 ispc sshd[1760874]: Invalid user Can't open edapass from 185.225.22.110 Dec 16 13:52:16 ispc sshd[1760880]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 13:53:01 ispc CRON[1760920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:53:02 ispc CRON[1760920]: pam_unix(cron:session): session closed for user root Dec 16 13:53:06 ispc sshd[1760931]: Invalid user Can't open edapass from 185.208.181.152 Dec 16 13:53:40 ispc postfix/smtpd[1760951]: sql auxprop plugin using mysql engine Dec 16 13:53:41 ispc saslauthd[1760957]: pam_mysql - SELECT returned no result. Dec 16 13:53:41 ispc saslauthd[1760957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:53:41 ispc saslauthd[1760957]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:54:01 ispc CRON[1760972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:54:02 ispc CRON[1760972]: pam_unix(cron:session): session closed for user root Dec 16 13:54:20 ispc postfix/smtpd[1760991]: sql auxprop plugin using mysql engine Dec 16 13:55:01 ispc CRON[1761014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:55:01 ispc CRON[1761015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:55:01 ispc CRON[1761016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:55:01 ispc CRON[1761017]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 13:55:01 ispc CRON[1761015]: pam_unix(cron:session): session closed for user root Dec 16 13:55:01 ispc CRON[1761017]: pam_unix(cron:session): session closed for user getmail Dec 16 13:55:02 ispc saslauthd[1761039]: pam_mysql - SELECT returned no result. Dec 16 13:55:02 ispc saslauthd[1761039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:55:02 ispc saslauthd[1761039]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:55:02 ispc CRON[1761016]: pam_unix(cron:session): session closed for user root Dec 16 13:55:03 ispc CRON[1761014]: pam_unix(cron:session): session closed for user root Dec 16 13:55:40 ispc sshd[1761113]: Invalid user ziplines from 141.94.71.131 Dec 16 13:56:01 ispc CRON[1761130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:56:01 ispc CRON[1761130]: pam_unix(cron:session): session closed for user root Dec 16 13:56:13 ispc saslauthd[1761146]: pam_mysql - SELECT returned no result. Dec 16 13:56:13 ispc saslauthd[1761146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:56:13 ispc saslauthd[1761146]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:56:59 ispc sshd[1761173]: Invalid user blceu from 167.99.241.111 Dec 16 13:57:01 ispc CRON[1761175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:57:02 ispc CRON[1761175]: pam_unix(cron:session): session closed for user root Dec 16 13:57:34 ispc saslauthd[1761203]: pam_mysql - SELECT returned no result. Dec 16 13:57:34 ispc saslauthd[1761203]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 13:57:34 ispc saslauthd[1761203]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 13:58:01 ispc CRON[1761229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:58:02 ispc CRON[1761229]: pam_unix(cron:session): session closed for user root Dec 16 13:58:02 ispc sshd[1761223]: Did not receive identification string from 161.35.218.223 Dec 16 13:58:56 ispc sshd[1761280]: Invalid user Can't open edapass from 65.21.108.255 Dec 16 13:59:01 ispc CRON[1761290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 13:59:02 ispc CRON[1761290]: pam_unix(cron:session): session closed for user root Dec 16 13:59:39 ispc sshd[1761353]: Invalid user matlbula from 35.239.77.168 Dec 16 14:00:01 ispc CRON[1761412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:00:01 ispc CRON[1761413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:00:01 ispc CRON[1761414]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:00:01 ispc CRON[1761415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:00:01 ispc CRON[1761416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:00:01 ispc CRON[1761417]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:00:01 ispc CRON[1761413]: pam_unix(cron:session): session closed for user root Dec 16 14:00:01 ispc CRON[1761414]: pam_unix(cron:session): session closed for user www-data Dec 16 14:00:01 ispc CRON[1761417]: pam_unix(cron:session): session closed for user getmail Dec 16 14:00:02 ispc CRON[1761416]: pam_unix(cron:session): session closed for user root Dec 16 14:00:02 ispc CRON[1761415]: pam_unix(cron:session): session closed for user root Dec 16 14:00:03 ispc CRON[1761412]: pam_unix(cron:session): session closed for user root Dec 16 14:00:39 ispc sshd[1761652]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:00:51 ispc sshd[1761666]: Invalid user Can't open edapass from 135.181.107.123 Dec 16 14:01:01 ispc CRON[1761676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:01:01 ispc CRON[1761676]: pam_unix(cron:session): session closed for user root Dec 16 14:01:50 ispc sshd[1761706]: Invalid user matlbula from 117.50.70.169 Dec 16 14:02:01 ispc CRON[1761715]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 14:02:01 ispc CRON[1761716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:02:02 ispc CRON[1761716]: pam_unix(cron:session): session closed for user root Dec 16 14:02:46 ispc sshd[1762379]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:03:01 ispc CRON[1762524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:03:02 ispc CRON[1762524]: pam_unix(cron:session): session closed for user root Dec 16 14:03:09 ispc sshd[1762575]: Invalid user martof from 5.133.121.104 Dec 16 14:03:32 ispc postfix/smtpd[1762647]: sql auxprop plugin using mysql engine Dec 16 14:03:32 ispc saslauthd[1762653]: pam_mysql - SELECT returned no result. Dec 16 14:03:32 ispc saslauthd[1762653]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:03:32 ispc saslauthd[1762653]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:03:57 ispc CRON[1761715]: pam_unix(cron:session): session closed for user logcheck Dec 16 14:04:01 ispc CRON[1762829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:04:02 ispc CRON[1762829]: pam_unix(cron:session): session closed for user root Dec 16 14:04:09 ispc postfix/smtpd[1762847]: sql auxprop plugin using mysql engine Dec 16 14:04:40 ispc sshd[1762864]: Invalid user martof from 109.73.196.37 Dec 16 14:05:01 ispc CRON[1762887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:05:01 ispc CRON[1762888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:05:01 ispc CRON[1762889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:05:01 ispc CRON[1762890]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:05:01 ispc CRON[1762888]: pam_unix(cron:session): session closed for user root Dec 16 14:05:01 ispc CRON[1762890]: pam_unix(cron:session): session closed for user getmail Dec 16 14:05:02 ispc CRON[1762889]: pam_unix(cron:session): session closed for user root Dec 16 14:05:03 ispc CRON[1762887]: pam_unix(cron:session): session closed for user root Dec 16 14:06:01 ispc CRON[1763002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:06:01 ispc postfix/smtpd[1763013]: sql auxprop plugin using mysql engine Dec 16 14:06:02 ispc CRON[1763002]: pam_unix(cron:session): session closed for user root Dec 16 14:06:03 ispc saslauthd[1763015]: pam_mysql - SELECT returned no result. Dec 16 14:06:03 ispc saslauthd[1763015]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:06:03 ispc saslauthd[1763015]: do_auth : auth failure: [user=deskman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:06:27 ispc CRON[1760496]: pam_unix(cron:session): session closed for user root Dec 16 14:07:01 ispc CRON[1763033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:07:02 ispc CRON[1763033]: pam_unix(cron:session): session closed for user root Dec 16 14:08:01 ispc CRON[1763063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:08:02 ispc CRON[1763063]: pam_unix(cron:session): session closed for user root Dec 16 14:08:19 ispc sshd[1763075]: reverse mapping checking getaddrinfo for abts-kk-static-233.56.166.122.airtelbroadband.in [122.166.56.233] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:08:51 ispc sshd[1763085]: Did not receive identification string from 192.227.134.84 Dec 16 14:09:01 ispc CRON[1763087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:09:01 ispc CRON[1763088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:09:01 ispc CRON[1763087]: pam_unix(cron:session): session closed for user root Dec 16 14:09:02 ispc CRON[1763088]: pam_unix(cron:session): session closed for user root Dec 16 14:09:52 ispc sshd[1763111]: reverse mapping checking getaddrinfo for 104-129-23-171-host.colocrossing.com [104.129.23.171] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:09:52 ispc sshd[1763111]: Invalid user Can't open edapass from 104.129.23.171 Dec 16 14:09:59 ispc sshd[1763115]: Invalid user Can't open edapass from 157.173.117.181 Dec 16 14:10:01 ispc CRON[1763119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:10:01 ispc CRON[1763120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:10:01 ispc CRON[1763121]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:10:01 ispc CRON[1763122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:10:01 ispc CRON[1763123]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:10:01 ispc CRON[1763120]: pam_unix(cron:session): session closed for user root Dec 16 14:10:01 ispc CRON[1763121]: pam_unix(cron:session): session closed for user www-data Dec 16 14:10:01 ispc CRON[1763123]: pam_unix(cron:session): session closed for user getmail Dec 16 14:10:03 ispc CRON[1763119]: pam_unix(cron:session): session closed for user root Dec 16 14:10:22 ispc saslauthd[1763241]: pam_mysql - SELECT returned no result. Dec 16 14:10:22 ispc saslauthd[1763241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:10:22 ispc saslauthd[1763241]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:10:26 ispc sshd[1763239]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 14:10:42 ispc CRON[1763122]: pam_unix(cron:session): session closed for user root Dec 16 14:10:50 ispc postfix/smtpd[1763244]: sql auxprop plugin using mysql engine Dec 16 14:10:51 ispc sshd[1763242]: Invalid user blceu from 222.236.46.74 Dec 16 14:11:01 ispc CRON[1763247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:11:47 ispc sshd[1763280]: Did not receive identification string from 188.166.121.96 Dec 16 14:11:50 ispc saslauthd[1763281]: pam_mysql - SELECT returned no result. Dec 16 14:11:50 ispc saslauthd[1763281]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:11:50 ispc saslauthd[1763281]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:12:01 ispc CRON[1763290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:12:02 ispc CRON[1763290]: pam_unix(cron:session): session closed for user root Dec 16 14:12:05 ispc sshd[1763311]: Invalid user Can't open edapass from 185.111.156.83 Dec 16 14:12:51 ispc sshd[1763355]: Invalid user Can't open edapass from 34.91.58.35 Dec 16 14:13:01 ispc CRON[1763362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:13:01 ispc CRON[1763362]: pam_unix(cron:session): session closed for user root Dec 16 14:13:37 ispc sshd[1763392]: Invalid user klape from 36.50.177.171 Dec 16 14:13:40 ispc sshd[1763394]: Invalid user ubuntu from 36.50.177.171 Dec 16 14:14:01 ispc CRON[1763413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:14:03 ispc CRON[1763413]: pam_unix(cron:session): session closed for user root Dec 16 14:14:20 ispc postfix/smtpd[1763435]: sql auxprop plugin using mysql engine Dec 16 14:14:20 ispc saslauthd[1763437]: pam_mysql - SELECT returned no result. Dec 16 14:14:20 ispc saslauthd[1763437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:14:20 ispc saslauthd[1763437]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:14:23 ispc saslauthd[1763438]: pam_mysql - SELECT returned no result. Dec 16 14:14:23 ispc saslauthd[1763438]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:14:23 ispc saslauthd[1763438]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:14:31 ispc saslauthd[1763447]: pam_mysql - SELECT returned no result. Dec 16 14:14:31 ispc saslauthd[1763447]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:14:31 ispc saslauthd[1763447]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:14:41 ispc saslauthd[1763452]: pam_mysql - SELECT returned no result. Dec 16 14:14:41 ispc saslauthd[1763452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:14:41 ispc saslauthd[1763452]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:15:01 ispc CRON[1763466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:15:01 ispc CRON[1763467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:15:01 ispc CRON[1763468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:15:01 ispc CRON[1763469]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:15:01 ispc CRON[1763467]: pam_unix(cron:session): session closed for user root Dec 16 14:15:01 ispc CRON[1763469]: pam_unix(cron:session): session closed for user getmail Dec 16 14:15:02 ispc CRON[1763468]: pam_unix(cron:session): session closed for user root Dec 16 14:15:03 ispc CRON[1763466]: pam_unix(cron:session): session closed for user root Dec 16 14:15:13 ispc sshd[1763547]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:15:29 ispc sshd[1763561]: reverse mapping checking getaddrinfo for static.145.164.213.185.clients.irandns.com [185.213.164.145] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:15:45 ispc saslauthd[1763577]: pam_mysql - SELECT returned no result. Dec 16 14:15:45 ispc saslauthd[1763577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:15:45 ispc saslauthd[1763577]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:16:01 ispc CRON[1763587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:16:02 ispc CRON[1763587]: pam_unix(cron:session): session closed for user root Dec 16 14:16:26 ispc saslauthd[1763612]: pam_mysql - SELECT returned no result. Dec 16 14:16:26 ispc saslauthd[1763612]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:16:26 ispc saslauthd[1763612]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:17:01 ispc CRON[1763632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:17:01 ispc CRON[1763632]: pam_unix(cron:session): session closed for user root Dec 16 14:17:48 ispc saslauthd[1763675]: pam_mysql - SELECT returned no result. Dec 16 14:17:48 ispc saslauthd[1763675]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:17:48 ispc saslauthd[1763675]: do_auth : auth failure: [user=it] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:18:01 ispc CRON[1763688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:18:02 ispc CRON[1763688]: pam_unix(cron:session): session closed for user root Dec 16 14:19:01 ispc CRON[1763740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:19:02 ispc CRON[1763740]: pam_unix(cron:session): session closed for user root Dec 16 14:19:45 ispc sshd[1763785]: Invalid user martof from 5.129.195.224 Dec 16 14:20:01 ispc CRON[1763800]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:20:01 ispc CRON[1763797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:20:01 ispc CRON[1763799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:20:01 ispc CRON[1763796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:20:01 ispc CRON[1763798]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:20:01 ispc CRON[1763797]: pam_unix(cron:session): session closed for user root Dec 16 14:20:01 ispc CRON[1763798]: pam_unix(cron:session): session closed for user www-data Dec 16 14:20:01 ispc CRON[1763800]: pam_unix(cron:session): session closed for user getmail Dec 16 14:20:01 ispc CRON[1763799]: pam_unix(cron:session): session closed for user root Dec 16 14:20:02 ispc CRON[1763796]: pam_unix(cron:session): session closed for user root Dec 16 14:20:29 ispc postfix/smtpd[1763890]: sql auxprop plugin using mysql engine Dec 16 14:20:30 ispc saslauthd[1763892]: pam_mysql - SELECT returned no result. Dec 16 14:20:30 ispc saslauthd[1763892]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:20:30 ispc saslauthd[1763892]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:20:53 ispc sshd[1763905]: Invalid user Can't open edapass from 161.97.103.99 Dec 16 14:20:54 ispc sshd[1763907]: Did not receive identification string from 80.94.92.186 Dec 16 14:21:01 ispc CRON[1763912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:21:01 ispc CRON[1763913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:21:01 ispc CRON[1763912]: pam_unix(cron:session): session closed for user root Dec 16 14:21:01 ispc CRON[1763913]: pam_unix(cron:session): session closed for user root Dec 16 14:21:27 ispc saslauthd[1763938]: pam_mysql - SELECT returned no result. Dec 16 14:21:27 ispc saslauthd[1763938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:21:27 ispc saslauthd[1763938]: do_auth : auth failure: [user=desknorm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:22:01 ispc CRON[1763965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:22:02 ispc CRON[1763965]: pam_unix(cron:session): session closed for user root Dec 16 14:22:35 ispc sshd[1763996]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:23:01 ispc CRON[1764023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:23:01 ispc CRON[1764023]: pam_unix(cron:session): session closed for user root Dec 16 14:23:29 ispc sshd[1764044]: Invalid user blceu from 178.156.132.245 Dec 16 14:24:01 ispc CRON[1764062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:24:02 ispc CRON[1764062]: pam_unix(cron:session): session closed for user root Dec 16 14:24:50 ispc sshd[1764105]: Invalid user klape from 2.57.217.229 Dec 16 14:24:51 ispc sshd[1764108]: Invalid user ubuntu from 2.57.217.229 Dec 16 14:24:55 ispc postfix/smtpd[1764116]: sql auxprop plugin using mysql engine Dec 16 14:25:01 ispc CRON[1764118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:25:01 ispc CRON[1764119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:25:01 ispc CRON[1764120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:25:01 ispc CRON[1764121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:25:01 ispc CRON[1764119]: pam_unix(cron:session): session closed for user root Dec 16 14:25:01 ispc CRON[1764121]: pam_unix(cron:session): session closed for user getmail Dec 16 14:25:02 ispc CRON[1764120]: pam_unix(cron:session): session closed for user root Dec 16 14:25:02 ispc CRON[1764118]: pam_unix(cron:session): session closed for user root Dec 16 14:25:45 ispc sshd[1764220]: Invalid user Can't open edapass from 51.38.188.27 Dec 16 14:26:02 ispc CRON[1764232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:26:02 ispc CRON[1764232]: pam_unix(cron:session): session closed for user root Dec 16 14:27:01 ispc CRON[1764277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:27:02 ispc CRON[1764277]: pam_unix(cron:session): session closed for user root Dec 16 14:27:06 ispc sshd[1764288]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:28:01 ispc CRON[1764333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:28:02 ispc CRON[1764333]: pam_unix(cron:session): session closed for user root Dec 16 14:28:15 ispc sshd[1764350]: Invalid user sol from 80.94.92.186 Dec 16 14:28:18 ispc sshd[1764352]: Invalid user ziplines from 57.131.22.60 Dec 16 14:28:37 ispc postfix/smtpd[1764362]: sql auxprop plugin using mysql engine Dec 16 14:28:38 ispc saslauthd[1764365]: pam_mysql - SELECT returned no result. Dec 16 14:28:38 ispc saslauthd[1764365]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:28:38 ispc saslauthd[1764365]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:29:01 ispc CRON[1764382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:29:01 ispc CRON[1764382]: pam_unix(cron:session): session closed for user root Dec 16 14:29:19 ispc sshd[1764400]: reverse mapping checking getaddrinfo for 191-97-49-137.internexa.net [191.97.49.137] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:29:19 ispc sshd[1764400]: Invalid user from 191.97.49.137 Dec 16 14:29:35 ispc saslauthd[1764414]: pam_mysql - SELECT returned no result. Dec 16 14:29:35 ispc saslauthd[1764414]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:29:35 ispc saslauthd[1764414]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:30:01 ispc CRON[1764435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:30:01 ispc CRON[1764436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:30:01 ispc CRON[1764439]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:30:01 ispc CRON[1764437]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:30:01 ispc CRON[1764438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:30:01 ispc CRON[1764436]: pam_unix(cron:session): session closed for user root Dec 16 14:30:01 ispc CRON[1764437]: pam_unix(cron:session): session closed for user www-data Dec 16 14:30:01 ispc CRON[1764439]: pam_unix(cron:session): session closed for user getmail Dec 16 14:30:01 ispc CRON[1764438]: pam_unix(cron:session): session closed for user root Dec 16 14:30:03 ispc CRON[1764435]: pam_unix(cron:session): session closed for user root Dec 16 14:30:22 ispc sshd[1764529]: Invalid user Can't open edapass from 65.21.108.255 Dec 16 14:30:22 ispc sshd[1764527]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:31:01 ispc CRON[1764554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:31:01 ispc CRON[1764554]: pam_unix(cron:session): session closed for user root Dec 16 14:31:31 ispc postfix/smtpd[1764580]: sql auxprop plugin using mysql engine Dec 16 14:31:31 ispc CRON[1763247]: pam_unix(cron:session): session closed for user root Dec 16 14:32:01 ispc CRON[1764587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:32:01 ispc CRON[1764587]: pam_unix(cron:session): session closed for user root Dec 16 14:32:37 ispc sshd[1764603]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:33:01 ispc CRON[1764615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:33:02 ispc CRON[1764615]: pam_unix(cron:session): session closed for user root Dec 16 14:33:23 ispc sshd[1764630]: Invalid user Can't open edapass from 195.15.215.34 Dec 16 14:34:01 ispc CRON[1764645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:34:02 ispc CRON[1764645]: pam_unix(cron:session): session closed for user root Dec 16 14:34:33 ispc sshd[1764661]: Invalid user Can't open edapass from 135.181.107.123 Dec 16 14:35:01 ispc CRON[1764670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:35:01 ispc CRON[1764672]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:35:01 ispc CRON[1764669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:35:01 ispc CRON[1764671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:35:01 ispc CRON[1764670]: pam_unix(cron:session): session closed for user root Dec 16 14:35:01 ispc CRON[1764672]: pam_unix(cron:session): session closed for user getmail Dec 16 14:35:01 ispc CRON[1764669]: pam_unix(cron:session): session closed for user root Dec 16 14:35:05 ispc sshd[1764777]: Invalid user solana from 80.94.92.186 Dec 16 14:35:39 ispc sshd[1764792]: Invalid user ziplines from 31.40.198.92 Dec 16 14:35:47 ispc CRON[1764671]: pam_unix(cron:session): session closed for user root Dec 16 14:36:01 ispc CRON[1764803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:36:01 ispc sshd[1764800]: Invalid user blceu from 154.38.163.130 Dec 16 14:36:49 ispc postfix/smtpd[1764847]: sql auxprop plugin using mysql engine Dec 16 14:36:50 ispc saslauthd[1764850]: pam_mysql - SELECT returned no result. Dec 16 14:36:50 ispc saslauthd[1764850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:36:50 ispc saslauthd[1764850]: do_auth : auth failure: [user=deskres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:37:01 ispc CRON[1764859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:37:01 ispc CRON[1764859]: pam_unix(cron:session): session closed for user root Dec 16 14:37:22 ispc saslauthd[1764881]: pam_mysql - SELECT returned no result. Dec 16 14:37:22 ispc saslauthd[1764881]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:37:22 ispc saslauthd[1764881]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:37:30 ispc saslauthd[1764889]: pam_mysql - SELECT returned no result. Dec 16 14:37:30 ispc saslauthd[1764889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:37:30 ispc saslauthd[1764889]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:37:44 ispc sshd[1764896]: reverse mapping checking getaddrinfo for static.cmcti.vn [101.99.32.184] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:37:44 ispc sshd[1764896]: Invalid user blceu from 101.99.32.184 Dec 16 14:38:01 ispc CRON[1764922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:38:02 ispc CRON[1764922]: pam_unix(cron:session): session closed for user root Dec 16 14:38:19 ispc sshd[1764944]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:39:01 ispc CRON[1764975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:39:01 ispc CRON[1764976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:39:01 ispc CRON[1764975]: pam_unix(cron:session): session closed for user root Dec 16 14:39:02 ispc CRON[1764976]: pam_unix(cron:session): session closed for user root Dec 16 14:40:01 ispc CRON[1765036]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:40:01 ispc CRON[1765035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:40:01 ispc CRON[1765034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:40:01 ispc CRON[1765037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:40:01 ispc CRON[1765038]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:40:01 ispc CRON[1765035]: pam_unix(cron:session): session closed for user root Dec 16 14:40:01 ispc CRON[1765036]: pam_unix(cron:session): session closed for user www-data Dec 16 14:40:01 ispc CRON[1765038]: pam_unix(cron:session): session closed for user getmail Dec 16 14:40:02 ispc CRON[1765034]: pam_unix(cron:session): session closed for user root Dec 16 14:40:02 ispc CRON[1765037]: pam_unix(cron:session): session closed for user root Dec 16 14:40:55 ispc postfix/smtpd[1765143]: sql auxprop plugin using mysql engine Dec 16 14:40:55 ispc saslauthd[1765146]: pam_mysql - SELECT returned no result. Dec 16 14:40:55 ispc saslauthd[1765146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:40:55 ispc saslauthd[1765146]: do_auth : auth failure: [user=sales@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 14:41:01 ispc CRON[1765157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:41:02 ispc CRON[1765157]: pam_unix(cron:session): session closed for user root Dec 16 14:41:38 ispc sshd[1765186]: Invalid user Can't open edapass from 34.91.58.35 Dec 16 14:42:01 ispc CRON[1765207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:42:02 ispc CRON[1765207]: pam_unix(cron:session): session closed for user root Dec 16 14:42:25 ispc postfix/smtpd[1765230]: sql auxprop plugin using mysql engine Dec 16 14:43:01 ispc CRON[1765262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:43:01 ispc CRON[1765262]: pam_unix(cron:session): session closed for user root Dec 16 14:44:01 ispc CRON[1765310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:44:02 ispc CRON[1765310]: pam_unix(cron:session): session closed for user root Dec 16 14:44:16 ispc sshd[1765328]: Invalid user Can't open edapass from 83.229.124.21 Dec 16 14:44:37 ispc postfix/smtpd[1765343]: sql auxprop plugin using mysql engine Dec 16 14:44:37 ispc saslauthd[1765345]: pam_mysql - SELECT returned no result. Dec 16 14:44:37 ispc saslauthd[1765345]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:44:37 ispc saslauthd[1765345]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:45:01 ispc CRON[1765356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:45:01 ispc CRON[1765357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:45:01 ispc CRON[1765359]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:45:01 ispc CRON[1765358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:45:01 ispc CRON[1765357]: pam_unix(cron:session): session closed for user root Dec 16 14:45:01 ispc CRON[1765359]: pam_unix(cron:session): session closed for user getmail Dec 16 14:45:01 ispc CRON[1765358]: pam_unix(cron:session): session closed for user root Dec 16 14:45:01 ispc CRON[1765356]: pam_unix(cron:session): session closed for user root Dec 16 14:45:11 ispc sshd[1765436]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:45:11 ispc sshd[1765436]: Invalid user Can't open edapass from 209.250.236.35 Dec 16 14:46:01 ispc CRON[1765467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:46:02 ispc CRON[1765467]: pam_unix(cron:session): session closed for user root Dec 16 14:46:18 ispc postfix/smtpd[1765491]: sql auxprop plugin using mysql engine Dec 16 14:46:19 ispc saslauthd[1765493]: pam_mysql - SELECT returned no result. Dec 16 14:46:19 ispc saslauthd[1765493]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:46:19 ispc saslauthd[1765493]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:47:01 ispc CRON[1765517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:47:02 ispc CRON[1765517]: pam_unix(cron:session): session closed for user root Dec 16 14:47:16 ispc sshd[1765536]: Invalid user admin from 188.166.121.96 Dec 16 14:47:20 ispc postfix/smtpd[1765538]: sql auxprop plugin using mysql engine Dec 16 14:47:23 ispc saslauthd[1765544]: pam_mysql - SELECT returned no result. Dec 16 14:47:23 ispc saslauthd[1765544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:47:23 ispc saslauthd[1765544]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:47:25 ispc saslauthd[1765545]: pam_mysql - SELECT returned no result. Dec 16 14:47:25 ispc saslauthd[1765545]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:47:25 ispc saslauthd[1765545]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:47:48 ispc saslauthd[1765559]: pam_mysql - SELECT returned no result. Dec 16 14:47:48 ispc saslauthd[1765559]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:47:48 ispc saslauthd[1765559]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:47:50 ispc saslauthd[1765563]: pam_mysql - SELECT returned no result. Dec 16 14:47:50 ispc saslauthd[1765563]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:47:50 ispc saslauthd[1765563]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:47:51 ispc sshd[1765564]: Invalid user admin from 188.166.121.96 Dec 16 14:48:01 ispc CRON[1765576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:48:01 ispc CRON[1765576]: pam_unix(cron:session): session closed for user root Dec 16 14:48:03 ispc sshd[1765582]: Invalid user ziplines from 222.236.46.74 Dec 16 14:48:04 ispc sshd[1765593]: Address 77.68.25.23 maps to exchange-out-45.livemail.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:48:24 ispc sshd[1765606]: Invalid user Can't open edapass from 65.21.245.10 Dec 16 14:48:27 ispc sshd[1765609]: Invalid user admin from 188.166.121.96 Dec 16 14:48:35 ispc sshd[1765617]: Invalid user ubuntu from 80.94.92.186 Dec 16 14:49:01 ispc CRON[1765641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:49:02 ispc CRON[1765641]: pam_unix(cron:session): session closed for user root Dec 16 14:49:03 ispc sshd[1765652]: Invalid user admin from 188.166.121.96 Dec 16 14:49:37 ispc sshd[1765673]: Invalid user admin from 188.166.121.96 Dec 16 14:49:45 ispc sshd[1765675]: Invalid user klape from 77.241.18.2 Dec 16 14:49:45 ispc sshd[1765677]: Invalid user ubuntu from 77.241.18.2 Dec 16 14:50:01 ispc CRON[1765687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:50:01 ispc CRON[1765688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:50:01 ispc CRON[1765689]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 14:50:01 ispc CRON[1765690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:50:01 ispc CRON[1765691]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:50:01 ispc CRON[1765688]: pam_unix(cron:session): session closed for user root Dec 16 14:50:01 ispc CRON[1765689]: pam_unix(cron:session): session closed for user www-data Dec 16 14:50:01 ispc CRON[1765691]: pam_unix(cron:session): session closed for user getmail Dec 16 14:50:02 ispc CRON[1765687]: pam_unix(cron:session): session closed for user root Dec 16 14:50:02 ispc CRON[1765690]: pam_unix(cron:session): session closed for user root Dec 16 14:50:09 ispc sshd[1765770]: Invalid user Can't open edapass from 84.247.187.112 Dec 16 14:50:12 ispc sshd[1765772]: Invalid user admin from 188.166.121.96 Dec 16 14:50:15 ispc sshd[1765780]: Invalid user perl from 51.195.100.96 Dec 16 14:50:54 ispc sshd[1765802]: reverse mapping checking getaddrinfo for hosted-by.webdade.cloud [193.24.120.136] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:50:56 ispc postfix/smtpd[1765806]: sql auxprop plugin using mysql engine Dec 16 14:50:57 ispc saslauthd[1765808]: pam_mysql - SELECT returned no result. Dec 16 14:50:57 ispc saslauthd[1765808]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:50:57 ispc saslauthd[1765808]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:51:01 ispc CRON[1765813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:51:01 ispc CRON[1765813]: pam_unix(cron:session): session closed for user root Dec 16 14:51:46 ispc sshd[1765796]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:51:46 ispc sshd[1765796]: Invalid user blceu from 185.149.234.57 Dec 16 14:52:01 ispc CRON[1765859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:52:02 ispc CRON[1765859]: pam_unix(cron:session): session closed for user root Dec 16 14:52:23 ispc saslauthd[1765879]: pam_mysql - SELECT returned no result. Dec 16 14:52:23 ispc saslauthd[1765879]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:52:23 ispc saslauthd[1765879]: do_auth : auth failure: [user=dev] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:53:01 ispc CRON[1765908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:53:01 ispc CRON[1765908]: pam_unix(cron:session): session closed for user root Dec 16 14:53:33 ispc sshd[1765933]: Invalid user ziplines from 154.38.163.130 Dec 16 14:53:41 ispc sshd[1765940]: Invalid user Can't open edapass from 137.184.5.75 Dec 16 14:54:01 ispc CRON[1765954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:54:02 ispc CRON[1765954]: pam_unix(cron:session): session closed for user root Dec 16 14:54:47 ispc sshd[1765983]: Address 77.68.25.23 maps to exchange-out-45.livemail.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:55:01 ispc CRON[1765995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:55:01 ispc CRON[1765996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:55:01 ispc CRON[1765997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:55:01 ispc CRON[1765998]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 14:55:01 ispc CRON[1765996]: pam_unix(cron:session): session closed for user root Dec 16 14:55:01 ispc CRON[1765998]: pam_unix(cron:session): session closed for user getmail Dec 16 14:55:02 ispc CRON[1765997]: pam_unix(cron:session): session closed for user root Dec 16 14:55:02 ispc CRON[1765995]: pam_unix(cron:session): session closed for user root Dec 16 14:55:18 ispc postfix/smtpd[1766079]: sql auxprop plugin using mysql engine Dec 16 14:55:18 ispc saslauthd[1766081]: pam_mysql - SELECT returned no result. Dec 16 14:55:18 ispc saslauthd[1766081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 14:55:18 ispc saslauthd[1766081]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 14:56:01 ispc CRON[1766107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:56:02 ispc CRON[1766107]: pam_unix(cron:session): session closed for user root Dec 16 14:56:06 ispc sshd[1766118]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 14:56:06 ispc sshd[1766118]: Invalid user martof from 193.110.157.47 Dec 16 14:56:21 ispc CRON[1764803]: pam_unix(cron:session): session closed for user root Dec 16 14:56:58 ispc sshd[1766141]: Invalid user Can't open edapass from 185.208.181.152 Dec 16 14:57:01 ispc CRON[1766143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:57:02 ispc CRON[1766143]: pam_unix(cron:session): session closed for user root Dec 16 14:58:01 ispc CRON[1766172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:58:01 ispc CRON[1766172]: pam_unix(cron:session): session closed for user root Dec 16 14:59:01 ispc CRON[1766193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 14:59:02 ispc CRON[1766193]: pam_unix(cron:session): session closed for user root Dec 16 14:59:17 ispc sshd[1766209]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:00:01 ispc CRON[1766219]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:00:01 ispc CRON[1766221]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:00:01 ispc CRON[1766217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:00:01 ispc CRON[1766218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:00:01 ispc CRON[1766222]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:00:01 ispc CRON[1766220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:00:01 ispc CRON[1766219]: pam_unix(cron:session): session closed for user www-data Dec 16 15:00:01 ispc CRON[1766218]: pam_unix(cron:session): session closed for user root Dec 16 15:00:01 ispc CRON[1766222]: pam_unix(cron:session): session closed for user getmail Dec 16 15:00:02 ispc CRON[1766220]: pam_unix(cron:session): session closed for user root Dec 16 15:00:02 ispc CRON[1766217]: pam_unix(cron:session): session closed for user root Dec 16 15:00:12 ispc sshd[1766480]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:00:46 ispc CRON[1766221]: pam_unix(cron:session): session closed for user root Dec 16 15:01:01 ispc CRON[1766495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:01:35 ispc sshd[1766525]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:01:43 ispc sshd[1766533]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:02:01 ispc CRON[1766544]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 15:02:01 ispc CRON[1766545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:02:01 ispc CRON[1766545]: pam_unix(cron:session): session closed for user root Dec 16 15:02:06 ispc sshd[1766626]: Invalid user validator from 80.94.92.186 Dec 16 15:02:07 ispc sshd[1766643]: Invalid user Can't open edapass from 157.173.117.181 Dec 16 15:02:46 ispc sshd[1767226]: Did not receive identification string from 192.227.134.84 Dec 16 15:02:55 ispc sshd[1767279]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:03:01 ispc CRON[1767355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:03:02 ispc CRON[1767355]: pam_unix(cron:session): session closed for user root Dec 16 15:03:22 ispc postfix/smtpd[1767457]: sql auxprop plugin using mysql engine Dec 16 15:03:22 ispc saslauthd[1767460]: pam_mysql - SELECT returned no result. Dec 16 15:03:22 ispc saslauthd[1767460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:03:22 ispc saslauthd[1767460]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:03:32 ispc postfix/smtpd[1767581]: sql auxprop plugin using mysql engine Dec 16 15:03:36 ispc CRON[1766544]: pam_unix(cron:session): session closed for user logcheck Dec 16 15:03:42 ispc postfix/smtpd[1767658]: sql auxprop plugin using mysql engine Dec 16 15:03:49 ispc saslauthd[1767668]: pam_mysql - SELECT returned no result. Dec 16 15:03:49 ispc saslauthd[1767668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:03:49 ispc saslauthd[1767668]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:04:01 ispc CRON[1767677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:04:01 ispc CRON[1767677]: pam_unix(cron:session): session closed for user root Dec 16 15:04:20 ispc sshd[1767699]: Invalid user Can't open edapass from 109.73.196.37 Dec 16 15:04:49 ispc sshd[1767718]: Invalid user Can't open edapass from 168.119.239.48 Dec 16 15:05:01 ispc CRON[1767725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:05:01 ispc CRON[1767726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:05:01 ispc CRON[1767727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:05:01 ispc CRON[1767728]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:05:01 ispc CRON[1767726]: pam_unix(cron:session): session closed for user root Dec 16 15:05:01 ispc CRON[1767728]: pam_unix(cron:session): session closed for user getmail Dec 16 15:05:02 ispc CRON[1767727]: pam_unix(cron:session): session closed for user root Dec 16 15:05:02 ispc CRON[1767725]: pam_unix(cron:session): session closed for user root Dec 16 15:06:01 ispc CRON[1767830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:06:01 ispc CRON[1767830]: pam_unix(cron:session): session closed for user root Dec 16 15:06:10 ispc sshd[1767847]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:06:20 ispc postfix/smtpd[1767854]: sql auxprop plugin using mysql engine Dec 16 15:06:20 ispc saslauthd[1767856]: pam_mysql - SELECT returned no result. Dec 16 15:06:20 ispc saslauthd[1767856]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:06:20 ispc saslauthd[1767856]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:06:24 ispc sshd[1767857]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:07:01 ispc CRON[1767880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:07:02 ispc CRON[1767880]: pam_unix(cron:session): session closed for user root Dec 16 15:07:45 ispc saslauthd[1767912]: pam_mysql - SELECT returned no result. Dec 16 15:07:45 ispc saslauthd[1767912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:07:45 ispc saslauthd[1767912]: do_auth : auth failure: [user=device] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:08:01 ispc CRON[1767926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:08:02 ispc CRON[1767926]: pam_unix(cron:session): session closed for user root Dec 16 15:08:33 ispc sshd[1767951]: Invalid user eth from 80.94.92.186 Dec 16 15:09:00 ispc sshd[1767963]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:09:01 ispc CRON[1767969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:09:01 ispc CRON[1767970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:09:01 ispc CRON[1767969]: pam_unix(cron:session): session closed for user root Dec 16 15:09:01 ispc CRON[1767970]: pam_unix(cron:session): session closed for user root Dec 16 15:09:15 ispc sshd[1767995]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:09:18 ispc sshd[1767997]: reverse mapping checking getaddrinfo for abts-kk-static-233.56.166.122.airtelbroadband.in [122.166.56.233] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:10:01 ispc CRON[1768026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:10:01 ispc CRON[1768025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:10:01 ispc CRON[1768027]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:10:01 ispc CRON[1768028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:10:01 ispc CRON[1768029]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:10:01 ispc CRON[1768026]: pam_unix(cron:session): session closed for user root Dec 16 15:10:01 ispc CRON[1768027]: pam_unix(cron:session): session closed for user www-data Dec 16 15:10:02 ispc CRON[1768029]: pam_unix(cron:session): session closed for user getmail Dec 16 15:10:02 ispc CRON[1768028]: pam_unix(cron:session): session closed for user root Dec 16 15:10:02 ispc CRON[1768025]: pam_unix(cron:session): session closed for user root Dec 16 15:11:01 ispc CRON[1768133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:11:02 ispc CRON[1768133]: pam_unix(cron:session): session closed for user root Dec 16 15:11:26 ispc postfix/smtpd[1768158]: sql auxprop plugin using mysql engine Dec 16 15:11:26 ispc postfix/smtpd[1768161]: sql auxprop plugin using mysql engine Dec 16 15:11:27 ispc saslauthd[1768162]: pam_mysql - SELECT returned no result. Dec 16 15:11:27 ispc saslauthd[1768162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:11:27 ispc saslauthd[1768162]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:11:27 ispc saslauthd[1768163]: pam_mysql - SELECT returned no result. Dec 16 15:11:27 ispc saslauthd[1768163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:11:27 ispc saslauthd[1768163]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:11:40 ispc sshd[1768168]: Invalid user martof from 31.40.198.92 Dec 16 15:11:51 ispc sshd[1768176]: Invalid user ziplines from 5.133.121.104 Dec 16 15:12:01 ispc CRON[1768185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:12:02 ispc CRON[1768185]: pam_unix(cron:session): session closed for user root Dec 16 15:12:04 ispc saslauthd[1768200]: pam_mysql - SELECT returned no result. Dec 16 15:12:04 ispc saslauthd[1768200]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:12:04 ispc saslauthd[1768200]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:12:57 ispc sshd[1768231]: Invalid user blceu from 5.133.121.104 Dec 16 15:13:01 ispc CRON[1768242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:13:01 ispc CRON[1768242]: pam_unix(cron:session): session closed for user root Dec 16 15:14:01 ispc CRON[1768289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:14:02 ispc CRON[1768289]: pam_unix(cron:session): session closed for user root Dec 16 15:14:48 ispc sshd[1768322]: Invalid user ethereum from 80.94.92.186 Dec 16 15:14:53 ispc sshd[1768330]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:15:01 ispc CRON[1768336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:15:01 ispc CRON[1768337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:15:01 ispc CRON[1768338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:15:01 ispc CRON[1768339]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:15:01 ispc CRON[1768337]: pam_unix(cron:session): session closed for user root Dec 16 15:15:01 ispc CRON[1768339]: pam_unix(cron:session): session closed for user getmail Dec 16 15:15:01 ispc CRON[1768338]: pam_unix(cron:session): session closed for user root Dec 16 15:15:02 ispc CRON[1768336]: pam_unix(cron:session): session closed for user root Dec 16 15:15:12 ispc postfix/smtpd[1768417]: sql auxprop plugin using mysql engine Dec 16 15:15:16 ispc postfix/smtpd[1768426]: sql auxprop plugin using mysql engine Dec 16 15:15:17 ispc saslauthd[1768427]: pam_mysql - SELECT returned no result. Dec 16 15:15:17 ispc saslauthd[1768427]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:15:17 ispc saslauthd[1768427]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:15:24 ispc postfix/smtpd[1768434]: sql auxprop plugin using mysql engine Dec 16 15:15:38 ispc saslauthd[1768450]: pam_mysql - SELECT returned no result. Dec 16 15:15:38 ispc saslauthd[1768450]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:15:38 ispc saslauthd[1768450]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:15:52 ispc saslauthd[1768455]: pam_mysql - SELECT returned no result. Dec 16 15:15:52 ispc saslauthd[1768455]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:15:52 ispc saslauthd[1768455]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:16:01 ispc CRON[1768460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:16:01 ispc CRON[1768460]: pam_unix(cron:session): session closed for user root Dec 16 15:17:01 ispc CRON[1768502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:17:02 ispc CRON[1768502]: pam_unix(cron:session): session closed for user root Dec 16 15:17:40 ispc sshd[1768533]: Invalid user blceu from 45.119.213.109 Dec 16 15:18:01 ispc sshd[1768557]: Invalid user martof from 57.131.22.60 Dec 16 15:18:01 ispc CRON[1768559]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 15:18:01 ispc CRON[1768561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:18:01 ispc CRON[1768561]: pam_unix(cron:session): session closed for user root Dec 16 15:18:05 ispc CRON[1768559]: pam_unix(cron:session): session closed for user amavis Dec 16 15:18:06 ispc postfix/smtpd[1768583]: sql auxprop plugin using mysql engine Dec 16 15:18:09 ispc sshd[1768589]: Invalid user matlbula from 35.239.77.168 Dec 16 15:18:25 ispc postfix/smtpd[1768595]: sql auxprop plugin using mysql engine Dec 16 15:19:01 ispc CRON[1768619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:19:02 ispc CRON[1768619]: pam_unix(cron:session): session closed for user root Dec 16 15:20:01 ispc CRON[1768662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:20:01 ispc CRON[1768666]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:20:01 ispc CRON[1768665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:20:01 ispc CRON[1768663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:20:01 ispc CRON[1768664]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:20:01 ispc CRON[1768663]: pam_unix(cron:session): session closed for user root Dec 16 15:20:01 ispc CRON[1768666]: pam_unix(cron:session): session closed for user getmail Dec 16 15:20:01 ispc CRON[1768664]: pam_unix(cron:session): session closed for user www-data Dec 16 15:20:01 ispc CRON[1768665]: pam_unix(cron:session): session closed for user root Dec 16 15:20:01 ispc CRON[1768662]: pam_unix(cron:session): session closed for user root Dec 16 15:20:29 ispc sshd[1768755]: Invalid user Can't open edapass from 102.209.119.74 Dec 16 15:20:34 ispc postfix/smtpd[1768762]: sql auxprop plugin using mysql engine Dec 16 15:20:35 ispc saslauthd[1768764]: pam_mysql - SELECT returned no result. Dec 16 15:20:35 ispc saslauthd[1768764]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:20:35 ispc saslauthd[1768764]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:20:47 ispc postfix/smtpd[1768772]: sql auxprop plugin using mysql engine Dec 16 15:20:48 ispc sshd[1768770]: Invalid user blceu from 220.196.191.58 Dec 16 15:21:01 ispc CRON[1768784]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:21:01 ispc CRON[1768783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:21:01 ispc CRON[1768783]: pam_unix(cron:session): session closed for user root Dec 16 15:21:02 ispc CRON[1768784]: pam_unix(cron:session): session closed for user root Dec 16 15:21:21 ispc CRON[1766495]: pam_unix(cron:session): session closed for user root Dec 16 15:21:39 ispc sshd[1768809]: Did not receive identification string from 45.140.17.97 Dec 16 15:22:01 ispc CRON[1768811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:22:02 ispc CRON[1768811]: pam_unix(cron:session): session closed for user root Dec 16 15:23:01 ispc CRON[1768841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:23:02 ispc CRON[1768841]: pam_unix(cron:session): session closed for user root Dec 16 15:23:11 ispc saslauthd[1768853]: pam_mysql - SELECT returned no result. Dec 16 15:23:11 ispc saslauthd[1768853]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:23:11 ispc saslauthd[1768853]: do_auth : auth failure: [user=dhs3mt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:24:01 ispc CRON[1768860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:24:01 ispc CRON[1768860]: pam_unix(cron:session): session closed for user root Dec 16 15:24:40 ispc sshd[1768879]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:25:01 ispc CRON[1768881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:25:01 ispc CRON[1768882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:25:01 ispc CRON[1768883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:25:01 ispc CRON[1768884]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:25:01 ispc CRON[1768882]: pam_unix(cron:session): session closed for user root Dec 16 15:25:01 ispc CRON[1768884]: pam_unix(cron:session): session closed for user getmail Dec 16 15:25:01 ispc CRON[1768881]: pam_unix(cron:session): session closed for user root Dec 16 15:25:15 ispc sshd[1768989]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:25:29 ispc CRON[1768883]: pam_unix(cron:session): session closed for user root Dec 16 15:26:01 ispc CRON[1768994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:27:01 ispc CRON[1769031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:27:02 ispc sshd[1769029]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:27:02 ispc CRON[1769031]: pam_unix(cron:session): session closed for user root Dec 16 15:27:36 ispc sshd[1769060]: Invalid user Can't open edapass from 188.137.240.63 Dec 16 15:27:54 ispc postfix/smtpd[1769079]: sql auxprop plugin using mysql engine Dec 16 15:28:01 ispc CRON[1769082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:28:02 ispc CRON[1769082]: pam_unix(cron:session): session closed for user root Dec 16 15:29:01 ispc CRON[1769121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:29:01 ispc CRON[1769121]: pam_unix(cron:session): session closed for user root Dec 16 15:29:03 ispc postfix/smtpd[1769136]: sql auxprop plugin using mysql engine Dec 16 15:29:04 ispc saslauthd[1769138]: pam_mysql - SELECT returned no result. Dec 16 15:29:04 ispc saslauthd[1769138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:29:04 ispc saslauthd[1769138]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:29:12 ispc sshd[1769141]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:29:35 ispc sshd[1769153]: Invalid user from 113.141.70.64 Dec 16 15:30:01 ispc CRON[1769170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:30:01 ispc CRON[1769171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:30:01 ispc CRON[1769172]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:30:01 ispc CRON[1769173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:30:01 ispc CRON[1769174]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:30:01 ispc CRON[1769171]: pam_unix(cron:session): session closed for user root Dec 16 15:30:01 ispc CRON[1769172]: pam_unix(cron:session): session closed for user www-data Dec 16 15:30:01 ispc CRON[1769174]: pam_unix(cron:session): session closed for user getmail Dec 16 15:30:02 ispc CRON[1769173]: pam_unix(cron:session): session closed for user root Dec 16 15:30:02 ispc CRON[1769170]: pam_unix(cron:session): session closed for user root Dec 16 15:30:53 ispc sshd[1769270]: Invalid user martof from 116.120.58.228 Dec 16 15:31:01 ispc CRON[1769279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:31:01 ispc CRON[1769279]: pam_unix(cron:session): session closed for user root Dec 16 15:31:02 ispc postfix/smtpd[1769290]: sql auxprop plugin using mysql engine Dec 16 15:31:03 ispc postfix/smtpd[1769292]: sql auxprop plugin using mysql engine Dec 16 15:31:03 ispc saslauthd[1769293]: pam_mysql - SELECT returned no result. Dec 16 15:31:03 ispc saslauthd[1769293]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:31:03 ispc saslauthd[1769293]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:31:10 ispc sshd[1769298]: Invalid user admin from 120.48.125.223 Dec 16 15:31:57 ispc sshd[1769323]: Invalid user Can't open edapass from 173.212.237.203 Dec 16 15:31:58 ispc sshd[1769325]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:32:01 ispc sshd[1769327]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:32:01 ispc sshd[1769327]: Invalid user klape from 189.89.20.45 Dec 16 15:32:01 ispc CRON[1769332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:32:02 ispc CRON[1769332]: pam_unix(cron:session): session closed for user root Dec 16 15:32:02 ispc sshd[1769331]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:32:02 ispc sshd[1769331]: Invalid user ubuntu from 189.89.20.45 Dec 16 15:32:57 ispc sshd[1769378]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:32:57 ispc sshd[1769378]: Invalid user ziplines from 185.149.234.57 Dec 16 15:33:01 ispc CRON[1769384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:33:01 ispc CRON[1769384]: pam_unix(cron:session): session closed for user root Dec 16 15:33:43 ispc sshd[1769418]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:34:01 ispc CRON[1769430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:34:01 ispc CRON[1769430]: pam_unix(cron:session): session closed for user root Dec 16 15:34:20 ispc postfix/smtpd[1769452]: sql auxprop plugin using mysql engine Dec 16 15:34:20 ispc saslauthd[1769454]: pam_mysql - SELECT returned no result. Dec 16 15:34:20 ispc saslauthd[1769454]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:34:20 ispc saslauthd[1769454]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:35:02 ispc CRON[1769482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:35:02 ispc CRON[1769483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:35:02 ispc CRON[1769484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:35:02 ispc CRON[1769485]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:35:02 ispc CRON[1769483]: pam_unix(cron:session): session closed for user root Dec 16 15:35:02 ispc CRON[1769485]: pam_unix(cron:session): session closed for user getmail Dec 16 15:35:02 ispc CRON[1769482]: pam_unix(cron:session): session closed for user root Dec 16 15:35:02 ispc CRON[1769484]: pam_unix(cron:session): session closed for user root Dec 16 15:35:08 ispc postfix/smtpd[1769561]: sql auxprop plugin using mysql engine Dec 16 15:35:17 ispc sshd[1769579]: Invalid user klape from 187.190.35.163 Dec 16 15:35:18 ispc sshd[1769581]: Invalid user ubuntu from 187.190.35.163 Dec 16 15:36:01 ispc CRON[1769612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:36:02 ispc CRON[1769612]: pam_unix(cron:session): session closed for user root Dec 16 15:36:20 ispc sshd[1769629]: Invalid user klape from 51.77.222.24 Dec 16 15:36:20 ispc sshd[1769631]: Invalid user ubuntu from 51.77.222.24 Dec 16 15:37:01 ispc CRON[1769650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:37:01 ispc CRON[1769650]: pam_unix(cron:session): session closed for user root Dec 16 15:37:23 ispc postfix/smtpd[1769673]: sql auxprop plugin using mysql engine Dec 16 15:37:24 ispc saslauthd[1769683]: pam_mysql - SELECT returned no result. Dec 16 15:37:24 ispc saslauthd[1769683]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:37:24 ispc saslauthd[1769683]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:37:41 ispc saslauthd[1769700]: pam_mysql - SELECT returned no result. Dec 16 15:37:41 ispc saslauthd[1769700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:37:41 ispc saslauthd[1769700]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:38:01 ispc CRON[1769725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:38:02 ispc CRON[1769725]: pam_unix(cron:session): session closed for user root Dec 16 15:38:05 ispc saslauthd[1769740]: pam_mysql - SELECT returned no result. Dec 16 15:38:05 ispc saslauthd[1769740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:38:05 ispc saslauthd[1769740]: do_auth : auth failure: [user=scan@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 15:38:06 ispc sshd[1769741]: reverse mapping checking getaddrinfo for hosted-by.webdade.cloud [193.24.120.136] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:38:38 ispc saslauthd[1769756]: pam_mysql - SELECT returned no result. Dec 16 15:38:38 ispc saslauthd[1769756]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:38:38 ispc saslauthd[1769756]: do_auth : auth failure: [user=dhs3pms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:38:59 ispc sshd[1769765]: Invalid user blceu from 185.208.181.153 Dec 16 15:39:01 ispc CRON[1769768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:39:01 ispc CRON[1769769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:39:01 ispc CRON[1769768]: pam_unix(cron:session): session closed for user root Dec 16 15:39:01 ispc CRON[1769769]: pam_unix(cron:session): session closed for user root Dec 16 15:39:08 ispc sshd[1769795]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:39:35 ispc sshd[1769808]: reverse mapping checking getaddrinfo for static.213.164.213.185.clients.irandns.com [185.213.164.213] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:40:01 ispc CRON[1769824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:40:01 ispc CRON[1769826]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:40:01 ispc CRON[1769825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:40:01 ispc CRON[1769827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:40:01 ispc CRON[1769828]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:40:01 ispc CRON[1769825]: pam_unix(cron:session): session closed for user root Dec 16 15:40:01 ispc CRON[1769826]: pam_unix(cron:session): session closed for user www-data Dec 16 15:40:01 ispc CRON[1769828]: pam_unix(cron:session): session closed for user getmail Dec 16 15:40:02 ispc CRON[1769827]: pam_unix(cron:session): session closed for user root Dec 16 15:40:02 ispc CRON[1769824]: pam_unix(cron:session): session closed for user root Dec 16 15:41:01 ispc CRON[1769932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:41:01 ispc CRON[1769932]: pam_unix(cron:session): session closed for user root Dec 16 15:41:12 ispc postfix/smtpd[1769949]: sql auxprop plugin using mysql engine Dec 16 15:41:12 ispc saslauthd[1769951]: pam_mysql - SELECT returned no result. Dec 16 15:41:12 ispc saslauthd[1769951]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:41:12 ispc saslauthd[1769951]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:42:01 ispc CRON[1769979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:42:02 ispc CRON[1769979]: pam_unix(cron:session): session closed for user root Dec 16 15:42:15 ispc sshd[1769998]: Address 209.250.236.35 maps to 209.250.236.35.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:42:31 ispc sshd[1769972]: Invalid user martof from 161.35.218.223 Dec 16 15:43:01 ispc CRON[1770035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:43:01 ispc CRON[1770035]: pam_unix(cron:session): session closed for user root Dec 16 15:43:59 ispc postfix/smtpd[1770072]: sql auxprop plugin using mysql engine Dec 16 15:44:00 ispc saslauthd[1770076]: pam_mysql - SELECT returned no result. Dec 16 15:44:00 ispc saslauthd[1770076]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:44:00 ispc saslauthd[1770076]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:44:01 ispc CRON[1770078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:44:02 ispc CRON[1770078]: pam_unix(cron:session): session closed for user root Dec 16 15:44:03 ispc postfix/smtpd[1770089]: sql auxprop plugin using mysql engine Dec 16 15:44:05 ispc saslauthd[1770090]: pam_mysql - SELECT returned no result. Dec 16 15:44:05 ispc saslauthd[1770090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:44:05 ispc saslauthd[1770090]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:44:25 ispc postfix/smtpd[1770100]: sql auxprop plugin using mysql engine Dec 16 15:44:25 ispc saslauthd[1770102]: pam_mysql - SELECT returned no result. Dec 16 15:44:25 ispc saslauthd[1770102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:44:25 ispc saslauthd[1770102]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:44:25 ispc saslauthd[1770103]: pam_mysql - SELECT returned no result. Dec 16 15:44:25 ispc saslauthd[1770103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:44:25 ispc saslauthd[1770103]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:44:46 ispc sshd[1770115]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:44:46 ispc sshd[1770115]: Invalid user ziplines from 193.110.157.47 Dec 16 15:45:01 ispc CRON[1770130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:45:01 ispc CRON[1770133]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:45:01 ispc CRON[1770131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:45:01 ispc CRON[1770132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:45:01 ispc CRON[1770133]: pam_unix(cron:session): session closed for user getmail Dec 16 15:45:01 ispc CRON[1770131]: pam_unix(cron:session): session closed for user root Dec 16 15:45:02 ispc CRON[1770130]: pam_unix(cron:session): session closed for user root Dec 16 15:45:02 ispc CRON[1770132]: pam_unix(cron:session): session closed for user root Dec 16 15:46:01 ispc CRON[1770245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:46:01 ispc CRON[1770245]: pam_unix(cron:session): session closed for user root Dec 16 15:46:22 ispc postfix/smtpd[1770270]: sql auxprop plugin using mysql engine Dec 16 15:46:22 ispc CRON[1768994]: pam_unix(cron:session): session closed for user root Dec 16 15:46:23 ispc sshd[1770274]: reverse mapping checking getaddrinfo for static.145.164.213.185.clients.irandns.com [185.213.164.145] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:46:35 ispc saslauthd[1770276]: pam_mysql - SELECT returned no result. Dec 16 15:46:35 ispc saslauthd[1770276]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:46:35 ispc saslauthd[1770276]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:47:01 ispc CRON[1770280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:47:01 ispc CRON[1770280]: pam_unix(cron:session): session closed for user root Dec 16 15:48:01 ispc CRON[1770304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:48:02 ispc CRON[1770304]: pam_unix(cron:session): session closed for user root Dec 16 15:48:08 ispc saslauthd[1770318]: pam_mysql - SELECT returned no result. Dec 16 15:48:08 ispc saslauthd[1770318]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:48:08 ispc saslauthd[1770318]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:49:01 ispc CRON[1770323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:49:02 ispc CRON[1770323]: pam_unix(cron:session): session closed for user root Dec 16 15:50:01 ispc CRON[1770350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:50:01 ispc CRON[1770349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:50:01 ispc CRON[1770351]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 15:50:01 ispc CRON[1770352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:50:01 ispc CRON[1770353]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:50:01 ispc CRON[1770351]: pam_unix(cron:session): session closed for user www-data Dec 16 15:50:01 ispc CRON[1770350]: pam_unix(cron:session): session closed for user root Dec 16 15:50:01 ispc CRON[1770353]: pam_unix(cron:session): session closed for user getmail Dec 16 15:50:01 ispc CRON[1770349]: pam_unix(cron:session): session closed for user root Dec 16 15:50:34 ispc sshd[1770464]: Invalid user ziplines from 62.84.181.22 Dec 16 15:50:40 ispc CRON[1770352]: pam_unix(cron:session): session closed for user root Dec 16 15:51:01 ispc CRON[1770470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:51:04 ispc postfix/smtpd[1770482]: sql auxprop plugin using mysql engine Dec 16 15:51:10 ispc postfix/smtpd[1770494]: sql auxprop plugin using mysql engine Dec 16 15:52:01 ispc CRON[1770529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:52:01 ispc CRON[1770530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:52:01 ispc CRON[1770530]: pam_unix(cron:session): session closed for user root Dec 16 15:52:51 ispc sshd[1770578]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:53:02 ispc CRON[1770587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:53:02 ispc CRON[1770587]: pam_unix(cron:session): session closed for user root Dec 16 15:53:32 ispc sshd[1770613]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:54:01 ispc CRON[1770631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:54:02 ispc CRON[1770631]: pam_unix(cron:session): session closed for user root Dec 16 15:54:07 ispc postfix/smtpd[1770646]: sql auxprop plugin using mysql engine Dec 16 15:54:08 ispc saslauthd[1770648]: pam_mysql - SELECT returned no result. Dec 16 15:54:08 ispc saslauthd[1770648]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:54:08 ispc saslauthd[1770648]: do_auth : auth failure: [user=diag] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:54:13 ispc sshd[1770649]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 15:55:01 ispc CRON[1770678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:55:01 ispc CRON[1770679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:55:01 ispc CRON[1770680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:55:01 ispc CRON[1770681]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 15:55:01 ispc CRON[1770679]: pam_unix(cron:session): session closed for user root Dec 16 15:55:01 ispc CRON[1770681]: pam_unix(cron:session): session closed for user getmail Dec 16 15:55:01 ispc CRON[1770678]: pam_unix(cron:session): session closed for user root Dec 16 15:55:01 ispc CRON[1770680]: pam_unix(cron:session): session closed for user root Dec 16 15:55:15 ispc saslauthd[1770759]: pam_mysql - SELECT returned no result. Dec 16 15:55:15 ispc saslauthd[1770759]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 15:55:15 ispc saslauthd[1770759]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 15:55:18 ispc CRON[1770529]: pam_unix(cron:session): session closed for user root Dec 16 15:55:22 ispc sshd[1770766]: Did not receive identification string from 192.227.134.84 Dec 16 15:56:01 ispc CRON[1770790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:56:02 ispc CRON[1770790]: pam_unix(cron:session): session closed for user root Dec 16 15:57:01 ispc CRON[1770834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:57:02 ispc CRON[1770834]: pam_unix(cron:session): session closed for user root Dec 16 15:57:21 ispc sshd[1770850]: Invalid user ziplines from 116.120.58.228 Dec 16 15:58:01 ispc CRON[1770887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:58:02 ispc CRON[1770887]: pam_unix(cron:session): session closed for user root Dec 16 15:59:01 ispc CRON[1770928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 15:59:02 ispc CRON[1770928]: pam_unix(cron:session): session closed for user root Dec 16 15:59:36 ispc sshd[1770952]: Invalid user Can't open edapass from 157.173.117.181 Dec 16 16:00:01 ispc CRON[1770974]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:00:01 ispc CRON[1770971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:00:01 ispc CRON[1770968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:00:01 ispc CRON[1770972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:00:01 ispc CRON[1770969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:00:01 ispc CRON[1770973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:00:01 ispc CRON[1770970]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:00:01 ispc CRON[1770970]: pam_unix(cron:session): session closed for user www-data Dec 16 16:00:01 ispc CRON[1770969]: pam_unix(cron:session): session closed for user root Dec 16 16:00:01 ispc CRON[1770972]: pam_unix(cron:session): session closed for user root Dec 16 16:00:01 ispc CRON[1770974]: pam_unix(cron:session): session closed for user getmail Dec 16 16:00:01 ispc CRON[1770973]: pam_unix(cron:session): session closed for user root Dec 16 16:00:01 ispc CRON[1770971]: pam_unix(cron:session): session closed for user root Dec 16 16:00:02 ispc CRON[1770968]: pam_unix(cron:session): session closed for user root Dec 16 16:01:01 ispc CRON[1771156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:01:02 ispc CRON[1771156]: pam_unix(cron:session): session closed for user root Dec 16 16:02:01 ispc CRON[1771194]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 16:02:01 ispc CRON[1771195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:02:02 ispc CRON[1771195]: pam_unix(cron:session): session closed for user root Dec 16 16:02:18 ispc postfix/smtpd[1771601]: sql auxprop plugin using mysql engine Dec 16 16:02:18 ispc saslauthd[1771609]: pam_mysql - SELECT returned no result. Dec 16 16:02:18 ispc saslauthd[1771609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:02:18 ispc saslauthd[1771609]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:03:01 ispc CRON[1772149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:03:02 ispc CRON[1772149]: pam_unix(cron:session): session closed for user root Dec 16 16:03:11 ispc CRON[1771194]: pam_unix(cron:session): session closed for user logcheck Dec 16 16:03:22 ispc postfix/smtpd[1772295]: sql auxprop plugin using mysql engine Dec 16 16:03:43 ispc postfix/smtpd[1772315]: sql auxprop plugin using mysql engine Dec 16 16:03:52 ispc saslauthd[1772321]: pam_mysql - SELECT returned no result. Dec 16 16:03:52 ispc saslauthd[1772321]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:03:52 ispc saslauthd[1772321]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:04:01 ispc CRON[1772326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:04:01 ispc CRON[1772326]: pam_unix(cron:session): session closed for user root Dec 16 16:04:17 ispc sshd[1772346]: reverse mapping checking getaddrinfo for 84-234-29-234.dc4-a.pub2.etik-cloud.com [84.234.29.234] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:04:42 ispc sshd[1772361]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:04:42 ispc sshd[1772361]: Invalid user martof from 203.205.27.100 Dec 16 16:04:46 ispc sshd[1772367]: Invalid user martof from 154.38.163.130 Dec 16 16:04:56 ispc sshd[1772375]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:05:01 ispc CRON[1772379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:05:01 ispc CRON[1772380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:05:01 ispc CRON[1772381]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:05:01 ispc CRON[1772378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:05:01 ispc CRON[1772379]: pam_unix(cron:session): session closed for user root Dec 16 16:05:01 ispc CRON[1772381]: pam_unix(cron:session): session closed for user getmail Dec 16 16:05:02 ispc CRON[1772380]: pam_unix(cron:session): session closed for user root Dec 16 16:05:02 ispc CRON[1772378]: pam_unix(cron:session): session closed for user root Dec 16 16:06:01 ispc CRON[1772492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:06:02 ispc CRON[1772492]: pam_unix(cron:session): session closed for user root Dec 16 16:06:36 ispc postfix/smtpd[1772528]: sql auxprop plugin using mysql engine Dec 16 16:07:01 ispc CRON[1772538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:07:01 ispc CRON[1772538]: pam_unix(cron:session): session closed for user root Dec 16 16:08:01 ispc CRON[1772589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:08:02 ispc CRON[1772589]: pam_unix(cron:session): session closed for user root Dec 16 16:08:35 ispc postfix/smtpd[1772618]: sql auxprop plugin using mysql engine Dec 16 16:08:36 ispc saslauthd[1772620]: pam_mysql - SELECT returned no result. Dec 16 16:08:36 ispc saslauthd[1772620]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:08:36 ispc saslauthd[1772620]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:08:41 ispc saslauthd[1772626]: pam_mysql - SELECT returned no result. Dec 16 16:08:41 ispc saslauthd[1772626]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:08:41 ispc saslauthd[1772626]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:08:42 ispc sshd[1772627]: Invalid user Can't open edapass from 188.137.240.63 Dec 16 16:09:01 ispc sshd[1772637]: Invalid user blceu from 8.133.194.64 Dec 16 16:09:01 ispc CRON[1772640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:09:01 ispc CRON[1772639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:09:01 ispc CRON[1772639]: pam_unix(cron:session): session closed for user root Dec 16 16:09:02 ispc CRON[1772640]: pam_unix(cron:session): session closed for user root Dec 16 16:09:07 ispc sshd[1772666]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:09:24 ispc saslauthd[1772672]: pam_mysql - SELECT returned no result. Dec 16 16:09:24 ispc saslauthd[1772672]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:09:24 ispc saslauthd[1772672]: do_auth : auth failure: [user=distrib] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:09:33 ispc sshd[1772677]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:09:45 ispc postfix/smtpd[1772687]: sql auxprop plugin using mysql engine Dec 16 16:10:01 ispc CRON[1772698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:10:01 ispc CRON[1772699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:10:01 ispc CRON[1772700]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:10:01 ispc CRON[1772701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:10:01 ispc CRON[1772702]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:10:01 ispc CRON[1772699]: pam_unix(cron:session): session closed for user root Dec 16 16:10:01 ispc CRON[1772700]: pam_unix(cron:session): session closed for user www-data Dec 16 16:10:01 ispc CRON[1772702]: pam_unix(cron:session): session closed for user getmail Dec 16 16:10:01 ispc CRON[1772701]: pam_unix(cron:session): session closed for user root Dec 16 16:10:02 ispc CRON[1772698]: pam_unix(cron:session): session closed for user root Dec 16 16:11:01 ispc CRON[1772810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:11:01 ispc CRON[1772810]: pam_unix(cron:session): session closed for user root Dec 16 16:11:18 ispc CRON[1770470]: pam_unix(cron:session): session closed for user root Dec 16 16:11:18 ispc postfix/smtpd[1772831]: sql auxprop plugin using mysql engine Dec 16 16:11:22 ispc saslauthd[1772835]: pam_mysql - SELECT returned no result. Dec 16 16:11:22 ispc saslauthd[1772835]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:11:22 ispc saslauthd[1772835]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:11:56 ispc saslauthd[1772841]: pam_mysql - SELECT returned no result. Dec 16 16:11:56 ispc saslauthd[1772841]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:11:56 ispc saslauthd[1772841]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:12:01 ispc CRON[1772842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:12:01 ispc CRON[1772842]: pam_unix(cron:session): session closed for user root Dec 16 16:13:01 ispc CRON[1772868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:13:02 ispc CRON[1772868]: pam_unix(cron:session): session closed for user root Dec 16 16:13:50 ispc sshd[1772880]: Invalid user martof from 51.91.76.213 Dec 16 16:13:52 ispc sshd[1772883]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:13:54 ispc sshd[1772885]: reverse mapping checking getaddrinfo for vds1507797.hosted-by-itldc.com [46.28.71.92] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:14:01 ispc CRON[1772889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:14:02 ispc CRON[1772889]: pam_unix(cron:session): session closed for user root Dec 16 16:14:07 ispc sshd[1772901]: reverse mapping checking getaddrinfo for abts-kk-static-233.56.166.122.airtelbroadband.in [122.166.56.233] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:14:34 ispc sshd[1772905]: Invalid user pronajemplosin from 36.50.176.13 Dec 16 16:15:01 ispc CRON[1772917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:15:01 ispc CRON[1772918]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:15:01 ispc CRON[1772916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:15:01 ispc CRON[1772915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:15:01 ispc CRON[1772916]: pam_unix(cron:session): session closed for user root Dec 16 16:15:01 ispc CRON[1772918]: pam_unix(cron:session): session closed for user getmail Dec 16 16:15:01 ispc CRON[1772915]: pam_unix(cron:session): session closed for user root Dec 16 16:15:15 ispc saslauthd[1773103]: pam_mysql - SELECT returned no result. Dec 16 16:15:15 ispc saslauthd[1773103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:15:15 ispc saslauthd[1773103]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:15:37 ispc saslauthd[1773104]: pam_mysql - SELECT returned no result. Dec 16 16:15:37 ispc saslauthd[1773104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:15:37 ispc saslauthd[1773104]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:15:40 ispc CRON[1772917]: pam_unix(cron:session): session closed for user root Dec 16 16:15:49 ispc saslauthd[1773107]: pam_mysql - SELECT returned no result. Dec 16 16:15:49 ispc saslauthd[1773107]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:15:49 ispc saslauthd[1773107]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:16:01 ispc CRON[1773108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:16:44 ispc sshd[1773145]: Invalid user klape from 103.164.20.29 Dec 16 16:16:45 ispc sshd[1773147]: Invalid user ubuntu from 103.164.20.29 Dec 16 16:17:01 ispc CRON[1773153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:17:01 ispc CRON[1773153]: pam_unix(cron:session): session closed for user root Dec 16 16:17:27 ispc sshd[1773174]: reverse mapping checking getaddrinfo for smtp11.shbgura.xyz [45.61.184.133] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:18:01 ispc CRON[1773209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:18:02 ispc CRON[1773209]: pam_unix(cron:session): session closed for user root Dec 16 16:18:08 ispc sshd[1773224]: Invalid user martof from 141.94.71.131 Dec 16 16:19:01 ispc CRON[1773249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:19:02 ispc CRON[1773249]: pam_unix(cron:session): session closed for user root Dec 16 16:19:22 ispc postfix/smtpd[1773268]: sql auxprop plugin using mysql engine Dec 16 16:19:52 ispc sshd[1773285]: Invalid user blceu from 165.227.38.205 Dec 16 16:20:01 ispc CRON[1773292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:20:01 ispc CRON[1773293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:20:01 ispc CRON[1773294]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:20:01 ispc CRON[1773295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:20:01 ispc CRON[1773296]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:20:01 ispc CRON[1773293]: pam_unix(cron:session): session closed for user root Dec 16 16:20:01 ispc CRON[1773294]: pam_unix(cron:session): session closed for user www-data Dec 16 16:20:01 ispc CRON[1773296]: pam_unix(cron:session): session closed for user getmail Dec 16 16:20:01 ispc CRON[1773295]: pam_unix(cron:session): session closed for user root Dec 16 16:20:02 ispc postfix/smtpd[1773327]: sql auxprop plugin using mysql engine Dec 16 16:20:02 ispc saslauthd[1773359]: pam_mysql - SELECT returned no result. Dec 16 16:20:02 ispc saslauthd[1773359]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:20:02 ispc saslauthd[1773359]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:20:03 ispc CRON[1773292]: pam_unix(cron:session): session closed for user root Dec 16 16:21:01 ispc CRON[1773405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:21:01 ispc CRON[1773406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:21:02 ispc CRON[1773405]: pam_unix(cron:session): session closed for user root Dec 16 16:21:03 ispc CRON[1773406]: pam_unix(cron:session): session closed for user root Dec 16 16:22:02 ispc CRON[1773447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:22:03 ispc CRON[1773447]: pam_unix(cron:session): session closed for user root Dec 16 16:22:12 ispc postfix/smtpd[1773464]: sql auxprop plugin using mysql engine Dec 16 16:22:13 ispc postfix/smtpd[1773466]: sql auxprop plugin using mysql engine Dec 16 16:23:01 ispc CRON[1773507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:23:01 ispc CRON[1773507]: pam_unix(cron:session): session closed for user root Dec 16 16:24:01 ispc CRON[1773548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:24:01 ispc CRON[1773548]: pam_unix(cron:session): session closed for user root Dec 16 16:24:47 ispc postfix/smtpd[1773579]: sql auxprop plugin using mysql engine Dec 16 16:24:48 ispc sshd[1773577]: Invalid user martof from 175.125.92.77 Dec 16 16:24:49 ispc saslauthd[1773587]: pam_mysql - SELECT returned no result. Dec 16 16:24:49 ispc saslauthd[1773587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:24:49 ispc saslauthd[1773587]: do_auth : auth failure: [user=disttech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:25:01 ispc CRON[1773603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:25:01 ispc CRON[1773605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:25:01 ispc CRON[1773604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:25:01 ispc CRON[1773606]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:25:01 ispc CRON[1773604]: pam_unix(cron:session): session closed for user root Dec 16 16:25:01 ispc CRON[1773606]: pam_unix(cron:session): session closed for user getmail Dec 16 16:25:02 ispc CRON[1773605]: pam_unix(cron:session): session closed for user root Dec 16 16:25:02 ispc CRON[1773603]: pam_unix(cron:session): session closed for user root Dec 16 16:26:01 ispc CRON[1773708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:26:01 ispc CRON[1773708]: pam_unix(cron:session): session closed for user root Dec 16 16:26:26 ispc sshd[1773728]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:27:01 ispc CRON[1773748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:27:02 ispc CRON[1773748]: pam_unix(cron:session): session closed for user root Dec 16 16:28:01 ispc CRON[1773797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:28:01 ispc CRON[1773797]: pam_unix(cron:session): session closed for user root Dec 16 16:28:02 ispc postfix/smtpd[1773808]: sql auxprop plugin using mysql engine Dec 16 16:28:03 ispc saslauthd[1773810]: pam_mysql - SELECT returned no result. Dec 16 16:28:03 ispc saslauthd[1773810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:28:03 ispc saslauthd[1773810]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:29:01 ispc CRON[1773836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:29:02 ispc CRON[1773836]: pam_unix(cron:session): session closed for user root Dec 16 16:29:33 ispc postfix/smtpd[1773864]: sql auxprop plugin using mysql engine Dec 16 16:29:36 ispc sshd[1773866]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:30:01 ispc CRON[1773887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:30:01 ispc CRON[1773884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:30:01 ispc CRON[1773885]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:30:01 ispc CRON[1773886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:30:01 ispc CRON[1773883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:30:01 ispc CRON[1773884]: pam_unix(cron:session): session closed for user root Dec 16 16:30:01 ispc CRON[1773885]: pam_unix(cron:session): session closed for user www-data Dec 16 16:30:01 ispc CRON[1773887]: pam_unix(cron:session): session closed for user getmail Dec 16 16:30:01 ispc CRON[1773883]: pam_unix(cron:session): session closed for user root Dec 16 16:30:01 ispc CRON[1773886]: pam_unix(cron:session): session closed for user root Dec 16 16:30:48 ispc postfix/smtpd[1773979]: sql auxprop plugin using mysql engine Dec 16 16:30:49 ispc saslauthd[1773981]: pam_mysql - SELECT returned no result. Dec 16 16:30:49 ispc saslauthd[1773981]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:30:49 ispc saslauthd[1773981]: do_auth : auth failure: [user=scanner@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 16:31:01 ispc CRON[1773991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:31:02 ispc CRON[1773991]: pam_unix(cron:session): session closed for user root Dec 16 16:31:29 ispc sshd[1774019]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:31:31 ispc saslauthd[1774025]: pam_mysql - SELECT returned no result. Dec 16 16:31:31 ispc saslauthd[1774025]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:31:31 ispc saslauthd[1774025]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:32:01 ispc CRON[1774039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:32:02 ispc CRON[1774039]: pam_unix(cron:session): session closed for user root Dec 16 16:32:29 ispc sshd[1774061]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:33:01 ispc CRON[1774090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:33:02 ispc CRON[1774090]: pam_unix(cron:session): session closed for user root Dec 16 16:33:08 ispc sshd[1774102]: Invalid user blceu from 5.129.195.224 Dec 16 16:34:01 ispc CRON[1774126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:34:02 ispc CRON[1774126]: pam_unix(cron:session): session closed for user root Dec 16 16:34:23 ispc postfix/smtpd[1774146]: sql auxprop plugin using mysql engine Dec 16 16:35:01 ispc CRON[1774173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:35:01 ispc CRON[1774174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:35:01 ispc CRON[1774175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:35:01 ispc CRON[1774176]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:35:01 ispc CRON[1774174]: pam_unix(cron:session): session closed for user root Dec 16 16:35:01 ispc CRON[1774176]: pam_unix(cron:session): session closed for user getmail Dec 16 16:35:02 ispc CRON[1774175]: pam_unix(cron:session): session closed for user root Dec 16 16:35:02 ispc CRON[1774173]: pam_unix(cron:session): session closed for user root Dec 16 16:36:01 ispc CRON[1774285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:36:01 ispc CRON[1774285]: pam_unix(cron:session): session closed for user root Dec 16 16:36:08 ispc saslauthd[1774302]: pam_mysql - SELECT returned no result. Dec 16 16:36:08 ispc saslauthd[1774302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:36:08 ispc saslauthd[1774302]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:36:18 ispc CRON[1773108]: pam_unix(cron:session): session closed for user root Dec 16 16:36:25 ispc postfix/smtpd[1774311]: sql auxprop plugin using mysql engine Dec 16 16:37:01 ispc CRON[1774316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:37:01 ispc CRON[1774316]: pam_unix(cron:session): session closed for user root Dec 16 16:37:55 ispc saslauthd[1774339]: pam_mysql - SELECT returned no result. Dec 16 16:37:55 ispc saslauthd[1774339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:37:55 ispc saslauthd[1774339]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:38:01 ispc CRON[1774340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:38:03 ispc CRON[1774340]: pam_unix(cron:session): session closed for user root Dec 16 16:38:55 ispc sshd[1774361]: Invalid user Can't open edapass from 185.208.181.152 Dec 16 16:39:02 ispc CRON[1774364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:39:02 ispc CRON[1774365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:39:02 ispc CRON[1774364]: pam_unix(cron:session): session closed for user root Dec 16 16:39:02 ispc CRON[1774365]: pam_unix(cron:session): session closed for user root Dec 16 16:40:01 ispc CRON[1774395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:40:01 ispc CRON[1774394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:40:01 ispc CRON[1774397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:40:01 ispc CRON[1774396]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:40:01 ispc CRON[1774398]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:40:01 ispc CRON[1774395]: pam_unix(cron:session): session closed for user root Dec 16 16:40:01 ispc CRON[1774396]: pam_unix(cron:session): session closed for user www-data Dec 16 16:40:01 ispc CRON[1774398]: pam_unix(cron:session): session closed for user getmail Dec 16 16:40:02 ispc CRON[1774394]: pam_unix(cron:session): session closed for user root Dec 16 16:40:05 ispc saslauthd[1774503]: pam_mysql - SELECT returned no result. Dec 16 16:40:05 ispc saslauthd[1774503]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:40:05 ispc saslauthd[1774503]: do_auth : auth failure: [user=dni] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:40:38 ispc CRON[1774397]: pam_unix(cron:session): session closed for user root Dec 16 16:40:42 ispc saslauthd[1774509]: pam_mysql - SELECT returned no result. Dec 16 16:40:42 ispc saslauthd[1774509]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:40:42 ispc saslauthd[1774509]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:40:45 ispc saslauthd[1774510]: pam_mysql - SELECT returned no result. Dec 16 16:40:45 ispc saslauthd[1774510]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:40:45 ispc saslauthd[1774510]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:41:01 ispc CRON[1774515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:41:06 ispc saslauthd[1774527]: pam_mysql - SELECT returned no result. Dec 16 16:41:06 ispc saslauthd[1774527]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:41:06 ispc saslauthd[1774527]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:41:06 ispc postfix/smtpd[1774528]: sql auxprop plugin using mysql engine Dec 16 16:41:06 ispc saslauthd[1774530]: pam_mysql - SELECT returned no result. Dec 16 16:41:06 ispc saslauthd[1774530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:41:06 ispc saslauthd[1774530]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:41:56 ispc sshd[1774553]: Invalid user Can't open edapass from 168.119.239.48 Dec 16 16:42:01 ispc CRON[1774556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:42:02 ispc CRON[1774556]: pam_unix(cron:session): session closed for user root Dec 16 16:43:01 ispc CRON[1774606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:43:02 ispc CRON[1774606]: pam_unix(cron:session): session closed for user root Dec 16 16:44:01 ispc CRON[1774664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:44:01 ispc CRON[1774664]: pam_unix(cron:session): session closed for user root Dec 16 16:44:36 ispc postfix/smtpd[1774696]: sql auxprop plugin using mysql engine Dec 16 16:44:37 ispc saslauthd[1774698]: pam_mysql - SELECT returned no result. Dec 16 16:44:37 ispc saslauthd[1774698]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:44:37 ispc saslauthd[1774698]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:44:56 ispc saslauthd[1774707]: pam_mysql - SELECT returned no result. Dec 16 16:44:56 ispc saslauthd[1774707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:44:56 ispc saslauthd[1774707]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:45:01 ispc CRON[1774709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:45:01 ispc CRON[1774711]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:45:01 ispc CRON[1774708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:45:01 ispc CRON[1774710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:45:01 ispc CRON[1774709]: pam_unix(cron:session): session closed for user root Dec 16 16:45:01 ispc CRON[1774711]: pam_unix(cron:session): session closed for user getmail Dec 16 16:45:01 ispc CRON[1774710]: pam_unix(cron:session): session closed for user root Dec 16 16:45:02 ispc CRON[1774708]: pam_unix(cron:session): session closed for user root Dec 16 16:45:22 ispc saslauthd[1774794]: pam_mysql - SELECT returned no result. Dec 16 16:45:22 ispc saslauthd[1774794]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:45:22 ispc saslauthd[1774794]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:46:01 ispc CRON[1774816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:46:02 ispc CRON[1774816]: pam_unix(cron:session): session closed for user root Dec 16 16:46:18 ispc saslauthd[1774836]: pam_mysql - SELECT returned no result. Dec 16 16:46:18 ispc saslauthd[1774836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:46:18 ispc saslauthd[1774836]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:46:29 ispc sshd[1774843]: Did not receive identification string from 192.227.134.84 Dec 16 16:47:01 ispc CRON[1774866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:47:02 ispc CRON[1774866]: pam_unix(cron:session): session closed for user root Dec 16 16:47:12 ispc sshd[1774845]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:47:45 ispc sshd[1774909]: Invalid user blceu from 141.94.71.131 Dec 16 16:48:01 ispc CRON[1774924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:48:02 ispc CRON[1774924]: pam_unix(cron:session): session closed for user root Dec 16 16:49:01 ispc CRON[1774965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:49:01 ispc CRON[1774965]: pam_unix(cron:session): session closed for user root Dec 16 16:49:36 ispc sshd[1774998]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:49:48 ispc sshd[1775005]: Invalid user blceu from 175.125.92.77 Dec 16 16:50:01 ispc CRON[1775014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:50:01 ispc CRON[1775015]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:50:01 ispc CRON[1775013]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 16:50:01 ispc CRON[1775011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:50:01 ispc CRON[1775013]: pam_unix(cron:session): session closed for user www-data Dec 16 16:50:01 ispc CRON[1775012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:50:01 ispc CRON[1775012]: pam_unix(cron:session): session closed for user root Dec 16 16:50:01 ispc CRON[1775015]: pam_unix(cron:session): session closed for user getmail Dec 16 16:50:02 ispc CRON[1775014]: pam_unix(cron:session): session closed for user root Dec 16 16:50:02 ispc CRON[1775011]: pam_unix(cron:session): session closed for user root Dec 16 16:50:16 ispc postfix/smtpd[1775100]: sql auxprop plugin using mysql engine Dec 16 16:50:47 ispc sshd[1775122]: Invalid user ziplines from 175.125.92.77 Dec 16 16:51:01 ispc CRON[1775130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:51:02 ispc CRON[1775130]: pam_unix(cron:session): session closed for user root Dec 16 16:52:01 ispc CRON[1775168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:52:01 ispc CRON[1775168]: pam_unix(cron:session): session closed for user root Dec 16 16:52:46 ispc postfix/smtpd[1775212]: sql auxprop plugin using mysql engine Dec 16 16:52:47 ispc saslauthd[1775217]: pam_mysql - SELECT returned no result. Dec 16 16:52:47 ispc saslauthd[1775217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:52:47 ispc saslauthd[1775217]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:53:01 ispc CRON[1775226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:53:02 ispc CRON[1775226]: pam_unix(cron:session): session closed for user root Dec 16 16:54:01 ispc CRON[1775268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:54:01 ispc CRON[1775268]: pam_unix(cron:session): session closed for user root Dec 16 16:55:01 ispc CRON[1775310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:55:01 ispc CRON[1775311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:55:01 ispc CRON[1775312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:55:01 ispc CRON[1775313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 16:55:01 ispc CRON[1775311]: pam_unix(cron:session): session closed for user root Dec 16 16:55:01 ispc CRON[1775313]: pam_unix(cron:session): session closed for user getmail Dec 16 16:55:02 ispc CRON[1775312]: pam_unix(cron:session): session closed for user root Dec 16 16:55:02 ispc CRON[1775310]: pam_unix(cron:session): session closed for user root Dec 16 16:55:24 ispc postfix/smtpd[1775398]: sql auxprop plugin using mysql engine Dec 16 16:55:25 ispc saslauthd[1775400]: pam_mysql - SELECT returned no result. Dec 16 16:55:25 ispc saslauthd[1775400]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:55:25 ispc saslauthd[1775400]: do_auth : auth failure: [user=dos] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:55:48 ispc sshd[1775411]: reverse mapping checking getaddrinfo for hosted-by.webdade.cloud [193.24.120.136] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:56:01 ispc CRON[1775429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:56:02 ispc CRON[1775429]: pam_unix(cron:session): session closed for user root Dec 16 16:57:01 ispc CRON[1775473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:57:02 ispc CRON[1775473]: pam_unix(cron:session): session closed for user root Dec 16 16:57:16 ispc postfix/smtpd[1775495]: sql auxprop plugin using mysql engine Dec 16 16:57:25 ispc postfix/smtpd[1775509]: sql auxprop plugin using mysql engine Dec 16 16:57:35 ispc sshd[1775523]: Invalid user guadalupe from 62.60.131.157 Dec 16 16:57:48 ispc saslauthd[1775535]: pam_mysql - SELECT returned no result. Dec 16 16:57:48 ispc saslauthd[1775535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 16:57:48 ispc saslauthd[1775535]: do_auth : auth failure: [user=prueba] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 16:58:01 ispc CRON[1775549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:58:02 ispc CRON[1775549]: pam_unix(cron:session): session closed for user root Dec 16 16:58:28 ispc sshd[1775570]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 16:59:01 ispc CRON[1775592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 16:59:01 ispc CRON[1775592]: pam_unix(cron:session): session closed for user root Dec 16 16:59:23 ispc sshd[1775608]: Invalid user ziplines from 178.156.132.245 Dec 16 17:00:01 ispc CRON[1775636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:00:01 ispc CRON[1775637]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:00:01 ispc CRON[1775635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:00:01 ispc CRON[1775638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:00:01 ispc CRON[1775639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:00:01 ispc CRON[1775640]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:00:01 ispc CRON[1775637]: pam_unix(cron:session): session closed for user www-data Dec 16 17:00:02 ispc CRON[1775636]: pam_unix(cron:session): session closed for user root Dec 16 17:00:02 ispc CRON[1775640]: pam_unix(cron:session): session closed for user getmail Dec 16 17:00:02 ispc CRON[1775638]: pam_unix(cron:session): session closed for user root Dec 16 17:00:02 ispc CRON[1775635]: pam_unix(cron:session): session closed for user root Dec 16 17:00:02 ispc CRON[1775639]: pam_unix(cron:session): session closed for user root Dec 16 17:00:04 ispc sshd[1775633]: Address 115.77.111.118 maps to adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:00:04 ispc sshd[1775633]: Invalid user ziplines from 115.77.111.118 Dec 16 17:00:51 ispc postfix/smtpd[1775819]: sql auxprop plugin using mysql engine Dec 16 17:00:52 ispc saslauthd[1775821]: pam_mysql - SELECT returned no result. Dec 16 17:00:52 ispc saslauthd[1775821]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:00:52 ispc saslauthd[1775821]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:01:02 ispc CRON[1775827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:01:02 ispc CRON[1775827]: pam_unix(cron:session): session closed for user root Dec 16 17:01:23 ispc CRON[1774515]: pam_unix(cron:session): session closed for user root Dec 16 17:02:01 ispc CRON[1775860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:02:01 ispc CRON[1775859]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 17:02:02 ispc CRON[1775860]: pam_unix(cron:session): session closed for user root Dec 16 17:03:01 ispc CRON[1776669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:03:07 ispc CRON[1776669]: pam_unix(cron:session): session closed for user root Dec 16 17:03:32 ispc CRON[1775859]: pam_unix(cron:session): session closed for user logcheck Dec 16 17:03:41 ispc postfix/smtpd[1776915]: sql auxprop plugin using mysql engine Dec 16 17:04:01 ispc CRON[1776920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:04:07 ispc CRON[1776920]: pam_unix(cron:session): session closed for user root Dec 16 17:04:20 ispc sshd[1776937]: Invalid user Can't open edapass from 51.158.253.248 Dec 16 17:05:01 ispc CRON[1776944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:05:01 ispc CRON[1776942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:05:01 ispc CRON[1776943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:05:01 ispc CRON[1776945]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:05:01 ispc CRON[1776943]: pam_unix(cron:session): session closed for user root Dec 16 17:05:01 ispc CRON[1776945]: pam_unix(cron:session): session closed for user getmail Dec 16 17:05:01 ispc CRON[1776942]: pam_unix(cron:session): session closed for user root Dec 16 17:05:13 ispc sshd[1777025]: reverse mapping checking getaddrinfo for static.145.164.213.185.clients.irandns.com [185.213.164.145] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:05:47 ispc sshd[1777046]: Invalid user ubuntu from 200.32.52.150 Dec 16 17:05:48 ispc postfix/smtpd[1777048]: sql auxprop plugin using mysql engine Dec 16 17:05:48 ispc sshd[1777044]: Invalid user klape from 200.32.52.150 Dec 16 17:05:48 ispc saslauthd[1777050]: pam_mysql - SELECT returned no result. Dec 16 17:05:48 ispc saslauthd[1777050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:05:48 ispc saslauthd[1777050]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:05:54 ispc saslauthd[1777056]: pam_mysql - SELECT returned no result. Dec 16 17:05:54 ispc saslauthd[1777056]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:05:54 ispc saslauthd[1777056]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:06:01 ispc CRON[1777058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:06:02 ispc CRON[1777058]: pam_unix(cron:session): session closed for user root Dec 16 17:06:26 ispc postfix/smtpd[1777091]: sql auxprop plugin using mysql engine Dec 16 17:06:47 ispc postfix/smtpd[1777109]: sql auxprop plugin using mysql engine Dec 16 17:07:01 ispc CRON[1777115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:07:01 ispc CRON[1777115]: pam_unix(cron:session): session closed for user root Dec 16 17:08:01 ispc CRON[1777165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:08:02 ispc CRON[1777165]: pam_unix(cron:session): session closed for user root Dec 16 17:09:01 ispc CRON[1777208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:09:01 ispc CRON[1777209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:09:01 ispc CRON[1777208]: pam_unix(cron:session): session closed for user root Dec 16 17:09:01 ispc postfix/smtpd[1777226]: sql auxprop plugin using mysql engine Dec 16 17:09:01 ispc CRON[1777209]: pam_unix(cron:session): session closed for user root Dec 16 17:09:01 ispc saslauthd[1777232]: pam_mysql - SELECT returned no result. Dec 16 17:09:01 ispc saslauthd[1777232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:09:01 ispc saslauthd[1777232]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:09:34 ispc sshd[1777252]: Invalid user inspur from 193.32.162.157 Dec 16 17:10:01 ispc CRON[1777270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:10:01 ispc CRON[1777271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:10:01 ispc CRON[1777272]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:10:01 ispc CRON[1777273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:10:01 ispc CRON[1777274]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:10:01 ispc CRON[1777271]: pam_unix(cron:session): session closed for user root Dec 16 17:10:01 ispc CRON[1777272]: pam_unix(cron:session): session closed for user www-data Dec 16 17:10:01 ispc CRON[1777274]: pam_unix(cron:session): session closed for user getmail Dec 16 17:10:02 ispc CRON[1777270]: pam_unix(cron:session): session closed for user root Dec 16 17:10:02 ispc CRON[1777273]: pam_unix(cron:session): session closed for user root Dec 16 17:10:30 ispc saslauthd[1777364]: pam_mysql - SELECT returned no result. Dec 16 17:10:30 ispc saslauthd[1777364]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:10:30 ispc saslauthd[1777364]: do_auth : auth failure: [user=dpn] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:10:34 ispc sshd[1777265]: Invalid user es from 193.32.162.157 Dec 16 17:10:50 ispc sshd[1777376]: Invalid user klape from 36.50.177.171 Dec 16 17:10:52 ispc sshd[1777378]: Invalid user ubuntu from 36.50.177.171 Dec 16 17:11:01 ispc CRON[1777389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:11:01 ispc CRON[1777389]: pam_unix(cron:session): session closed for user root Dec 16 17:11:19 ispc sshd[1777406]: Invalid user pedro from 193.32.162.157 Dec 16 17:11:52 ispc sshd[1777431]: Did not receive identification string from 45.140.17.97 Dec 16 17:11:55 ispc sshd[1777437]: Invalid user klape from 70.37.89.177 Dec 16 17:11:56 ispc sshd[1777439]: Invalid user ubuntu from 70.37.89.177 Dec 16 17:12:01 ispc CRON[1777445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:12:02 ispc CRON[1777445]: pam_unix(cron:session): session closed for user root Dec 16 17:13:01 ispc CRON[1777494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:13:01 ispc CRON[1777494]: pam_unix(cron:session): session closed for user root Dec 16 17:13:34 ispc sshd[1777520]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:14:01 ispc CRON[1777536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:14:02 ispc CRON[1777536]: pam_unix(cron:session): session closed for user root Dec 16 17:15:01 ispc CRON[1777572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:15:01 ispc CRON[1777571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:15:01 ispc CRON[1777574]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:15:01 ispc CRON[1777573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:15:01 ispc CRON[1777572]: pam_unix(cron:session): session closed for user root Dec 16 17:15:01 ispc CRON[1777574]: pam_unix(cron:session): session closed for user getmail Dec 16 17:15:01 ispc CRON[1777573]: pam_unix(cron:session): session closed for user root Dec 16 17:15:02 ispc CRON[1777571]: pam_unix(cron:session): session closed for user root Dec 16 17:16:01 ispc CRON[1777676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:16:02 ispc CRON[1777676]: pam_unix(cron:session): session closed for user root Dec 16 17:16:05 ispc postfix/smtpd[1777688]: sql auxprop plugin using mysql engine Dec 16 17:16:05 ispc postfix/smtpd[1777691]: sql auxprop plugin using mysql engine Dec 16 17:17:01 ispc CRON[1777724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:17:01 ispc CRON[1777724]: pam_unix(cron:session): session closed for user root Dec 16 17:17:19 ispc saslauthd[1777744]: pam_mysql - SELECT returned no result. Dec 16 17:17:19 ispc saslauthd[1777744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:17:19 ispc saslauthd[1777744]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:18:01 ispc CRON[1777774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:18:02 ispc CRON[1777774]: pam_unix(cron:session): session closed for user root Dec 16 17:18:33 ispc saslauthd[1777801]: pam_mysql - SELECT returned no result. Dec 16 17:18:33 ispc saslauthd[1777801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:18:33 ispc saslauthd[1777801]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:19:01 ispc CRON[1777819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:19:01 ispc CRON[1777819]: pam_unix(cron:session): session closed for user root Dec 16 17:19:27 ispc saslauthd[1777843]: pam_mysql - SELECT returned no result. Dec 16 17:19:27 ispc saslauthd[1777843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:19:27 ispc saslauthd[1777843]: do_auth : auth failure: [user=backup@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 17:20:01 ispc CRON[1777863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:20:01 ispc CRON[1777866]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:20:01 ispc CRON[1777862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:20:01 ispc CRON[1777864]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:20:01 ispc CRON[1777865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:20:01 ispc CRON[1777864]: pam_unix(cron:session): session closed for user www-data Dec 16 17:20:01 ispc CRON[1777863]: pam_unix(cron:session): session closed for user root Dec 16 17:20:01 ispc CRON[1777866]: pam_unix(cron:session): session closed for user getmail Dec 16 17:20:02 ispc CRON[1777865]: pam_unix(cron:session): session closed for user root Dec 16 17:20:02 ispc CRON[1777862]: pam_unix(cron:session): session closed for user root Dec 16 17:20:25 ispc sshd[1777950]: Invalid user ziplines from 51.91.76.213 Dec 16 17:20:55 ispc sshd[1777969]: Invalid user ftp from 185.208.181.141 Dec 16 17:21:01 ispc CRON[1777976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:21:01 ispc CRON[1777975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:21:01 ispc CRON[1777975]: pam_unix(cron:session): session closed for user root Dec 16 17:21:02 ispc CRON[1777976]: pam_unix(cron:session): session closed for user root Dec 16 17:21:40 ispc postfix/smtpd[1778010]: sql auxprop plugin using mysql engine Dec 16 17:21:46 ispc postfix/smtpd[1778017]: sql auxprop plugin using mysql engine Dec 16 17:22:01 ispc CRON[1778036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:22:01 ispc CRON[1778036]: pam_unix(cron:session): session closed for user root Dec 16 17:23:01 ispc CRON[1778079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:23:02 ispc CRON[1778079]: pam_unix(cron:session): session closed for user root Dec 16 17:24:01 ispc CRON[1778121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:24:02 ispc CRON[1778121]: pam_unix(cron:session): session closed for user root Dec 16 17:24:14 ispc postfix/smtpd[1778136]: sql auxprop plugin using mysql engine Dec 16 17:24:57 ispc postfix/smtpd[1778161]: sql auxprop plugin using mysql engine Dec 16 17:24:57 ispc saslauthd[1778163]: pam_mysql - SELECT returned no result. Dec 16 17:24:57 ispc saslauthd[1778163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:24:57 ispc saslauthd[1778163]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:25:01 ispc CRON[1778168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:25:01 ispc CRON[1778169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:25:01 ispc CRON[1778171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:25:01 ispc CRON[1778170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:25:01 ispc CRON[1778169]: pam_unix(cron:session): session closed for user root Dec 16 17:25:01 ispc CRON[1778171]: pam_unix(cron:session): session closed for user getmail Dec 16 17:25:01 ispc CRON[1778170]: pam_unix(cron:session): session closed for user root Dec 16 17:25:01 ispc CRON[1778168]: pam_unix(cron:session): session closed for user root Dec 16 17:25:12 ispc saslauthd[1778250]: pam_mysql - SELECT returned no result. Dec 16 17:25:12 ispc saslauthd[1778250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:25:12 ispc saslauthd[1778250]: do_auth : auth failure: [user=dvstation] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:25:54 ispc CRON[1776944]: pam_unix(cron:session): session closed for user root Dec 16 17:26:01 ispc CRON[1778291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:27:01 ispc CRON[1778327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:27:02 ispc CRON[1778327]: pam_unix(cron:session): session closed for user root Dec 16 17:27:17 ispc sshd[1778347]: Invalid user martof from 185.208.181.152 Dec 16 17:27:47 ispc sshd[1778366]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:28:01 ispc CRON[1778377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:28:01 ispc CRON[1778377]: pam_unix(cron:session): session closed for user root Dec 16 17:28:23 ispc sshd[1778396]: Invalid user ziplines from 95.216.43.126 Dec 16 17:28:33 ispc postfix/smtpd[1778402]: sql auxprop plugin using mysql engine Dec 16 17:28:33 ispc saslauthd[1778404]: pam_mysql - SELECT returned no result. Dec 16 17:28:33 ispc saslauthd[1778404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:28:33 ispc saslauthd[1778404]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:29:01 ispc CRON[1778419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:29:01 ispc CRON[1778419]: pam_unix(cron:session): session closed for user root Dec 16 17:30:01 ispc CRON[1778470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:30:01 ispc CRON[1778471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:30:01 ispc CRON[1778472]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:30:01 ispc CRON[1778473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:30:01 ispc CRON[1778474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:30:01 ispc CRON[1778472]: pam_unix(cron:session): session closed for user www-data Dec 16 17:30:01 ispc CRON[1778471]: pam_unix(cron:session): session closed for user root Dec 16 17:30:02 ispc CRON[1778474]: pam_unix(cron:session): session closed for user getmail Dec 16 17:30:02 ispc CRON[1778473]: pam_unix(cron:session): session closed for user root Dec 16 17:30:02 ispc CRON[1778470]: pam_unix(cron:session): session closed for user root Dec 16 17:30:08 ispc sshd[1778549]: Invalid user ziplines from 45.119.213.109 Dec 16 17:30:44 ispc sshd[1778572]: Invalid user blceu from 117.50.70.169 Dec 16 17:31:01 ispc CRON[1778583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:31:01 ispc CRON[1778583]: pam_unix(cron:session): session closed for user root Dec 16 17:31:10 ispc sshd[1778594]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 17:32:00 ispc sshd[1778623]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:32:01 ispc CRON[1778625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:32:01 ispc CRON[1778625]: pam_unix(cron:session): session closed for user root Dec 16 17:32:11 ispc sshd[1778642]: Invalid user martof from 178.156.132.245 Dec 16 17:32:21 ispc postfix/smtpd[1778648]: sql auxprop plugin using mysql engine Dec 16 17:32:37 ispc postfix/smtpd[1778662]: sql auxprop plugin using mysql engine Dec 16 17:32:37 ispc saslauthd[1778664]: pam_mysql - SELECT returned no result. Dec 16 17:32:37 ispc saslauthd[1778664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:32:37 ispc saslauthd[1778664]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:33:01 ispc CRON[1778681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:33:02 ispc CRON[1778681]: pam_unix(cron:session): session closed for user root Dec 16 17:33:17 ispc sshd[1778701]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:33:17 ispc sshd[1778701]: Invalid user blceu from 193.110.157.47 Dec 16 17:33:20 ispc sshd[1778704]: Invalid user martof from 45.119.213.109 Dec 16 17:34:01 ispc CRON[1778732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:34:01 ispc CRON[1778732]: pam_unix(cron:session): session closed for user root Dec 16 17:34:02 ispc sshd[1778743]: Invalid user martof from 51.91.247.10 Dec 16 17:34:16 ispc sshd[1778710]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:35:01 ispc CRON[1778776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:35:01 ispc CRON[1778775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:35:01 ispc CRON[1778777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:35:01 ispc CRON[1778778]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:35:01 ispc CRON[1778776]: pam_unix(cron:session): session closed for user root Dec 16 17:35:01 ispc CRON[1778778]: pam_unix(cron:session): session closed for user getmail Dec 16 17:35:02 ispc CRON[1778777]: pam_unix(cron:session): session closed for user root Dec 16 17:35:02 ispc CRON[1778775]: pam_unix(cron:session): session closed for user root Dec 16 17:35:24 ispc sshd[1778860]: Invalid user blceu from 51.91.76.213 Dec 16 17:35:31 ispc sshd[1778871]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:35:57 ispc sshd[1778883]: Invalid user test from 27.254.144.183 Dec 16 17:36:01 ispc CRON[1778891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:36:02 ispc CRON[1778891]: pam_unix(cron:session): session closed for user root Dec 16 17:36:54 ispc sshd[1778928]: reverse mapping checking getaddrinfo for mail.gig-facility.com [146.19.212.19] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:37:01 ispc CRON[1778934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:37:02 ispc CRON[1778934]: pam_unix(cron:session): session closed for user root Dec 16 17:38:01 ispc CRON[1778980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:38:01 ispc CRON[1778980]: pam_unix(cron:session): session closed for user root Dec 16 17:38:22 ispc sshd[1778996]: Did not receive identification string from 192.227.134.84 Dec 16 17:39:01 ispc CRON[1779020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:39:01 ispc CRON[1779021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:39:01 ispc CRON[1779020]: pam_unix(cron:session): session closed for user root Dec 16 17:39:02 ispc CRON[1779021]: pam_unix(cron:session): session closed for user root Dec 16 17:39:28 ispc sshd[1779057]: Invalid user martof from 95.216.43.126 Dec 16 17:40:01 ispc CRON[1779077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:40:01 ispc CRON[1779079]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:40:01 ispc CRON[1779080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:40:01 ispc CRON[1779081]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:40:01 ispc CRON[1779078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:40:01 ispc CRON[1779079]: pam_unix(cron:session): session closed for user www-data Dec 16 17:40:01 ispc CRON[1779078]: pam_unix(cron:session): session closed for user root Dec 16 17:40:01 ispc CRON[1779081]: pam_unix(cron:session): session closed for user getmail Dec 16 17:40:01 ispc CRON[1779077]: pam_unix(cron:session): session closed for user root Dec 16 17:40:01 ispc CRON[1779080]: pam_unix(cron:session): session closed for user root Dec 16 17:40:20 ispc postfix/smtpd[1779164]: sql auxprop plugin using mysql engine Dec 16 17:40:26 ispc saslauthd[1779174]: pam_mysql - SELECT returned no result. Dec 16 17:40:26 ispc saslauthd[1779174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:40:26 ispc saslauthd[1779174]: do_auth : auth failure: [user=eagle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:40:31 ispc saslauthd[1779175]: pam_mysql - SELECT returned no result. Dec 16 17:40:31 ispc saslauthd[1779175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:40:31 ispc saslauthd[1779175]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:41:01 ispc CRON[1779190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:41:02 ispc CRON[1779190]: pam_unix(cron:session): session closed for user root Dec 16 17:42:01 ispc CRON[1779233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:42:02 ispc CRON[1779233]: pam_unix(cron:session): session closed for user root Dec 16 17:42:23 ispc sshd[1779255]: Invalid user Can't open edapass from 217.154.227.39 Dec 16 17:42:31 ispc postfix/smtpd[1779263]: sql auxprop plugin using mysql engine Dec 16 17:42:36 ispc saslauthd[1779267]: pam_mysql - SELECT returned no result. Dec 16 17:42:36 ispc saslauthd[1779267]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:42:36 ispc saslauthd[1779267]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:43:01 ispc CRON[1779292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:43:02 ispc CRON[1779292]: pam_unix(cron:session): session closed for user root Dec 16 17:43:34 ispc sshd[1779315]: Invalid user martof from 165.227.38.205 Dec 16 17:44:01 ispc CRON[1779330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:44:01 ispc CRON[1779330]: pam_unix(cron:session): session closed for user root Dec 16 17:45:01 ispc CRON[1779371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:45:01 ispc CRON[1779372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:45:01 ispc CRON[1779373]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:45:01 ispc CRON[1779370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:45:01 ispc CRON[1779371]: pam_unix(cron:session): session closed for user root Dec 16 17:45:01 ispc CRON[1779373]: pam_unix(cron:session): session closed for user getmail Dec 16 17:45:02 ispc CRON[1779372]: pam_unix(cron:session): session closed for user root Dec 16 17:45:03 ispc CRON[1779370]: pam_unix(cron:session): session closed for user root Dec 16 17:45:44 ispc sshd[1779465]: Did not receive identification string from 14.103.111.109 Dec 16 17:46:01 ispc CRON[1779478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:46:02 ispc CRON[1779478]: pam_unix(cron:session): session closed for user root Dec 16 17:46:36 ispc CRON[1778291]: pam_unix(cron:session): session closed for user root Dec 16 17:46:36 ispc postfix/smtpd[1779505]: sql auxprop plugin using mysql engine Dec 16 17:47:01 ispc CRON[1779515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:47:05 ispc postfix/smtpd[1779523]: sql auxprop plugin using mysql engine Dec 16 17:47:07 ispc CRON[1779515]: pam_unix(cron:session): session closed for user root Dec 16 17:47:56 ispc sshd[1779545]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:48:01 ispc CRON[1779552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:48:04 ispc saslauthd[1779564]: pam_mysql - SELECT returned no result. Dec 16 17:48:04 ispc saslauthd[1779564]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:48:04 ispc saslauthd[1779564]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:49:01 ispc CRON[1779591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:49:01 ispc CRON[1779591]: pam_unix(cron:session): session closed for user root Dec 16 17:50:01 ispc CRON[1779634]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 17:50:01 ispc CRON[1779632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:50:01 ispc CRON[1779633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:50:01 ispc CRON[1779635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:50:01 ispc CRON[1779636]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:50:01 ispc CRON[1779634]: pam_unix(cron:session): session closed for user www-data Dec 16 17:50:01 ispc CRON[1779633]: pam_unix(cron:session): session closed for user root Dec 16 17:50:01 ispc CRON[1779636]: pam_unix(cron:session): session closed for user getmail Dec 16 17:50:01 ispc CRON[1779635]: pam_unix(cron:session): session closed for user root Dec 16 17:50:02 ispc CRON[1779632]: pam_unix(cron:session): session closed for user root Dec 16 17:50:17 ispc sshd[1779720]: Invalid user ftp from 185.208.181.141 Dec 16 17:50:50 ispc sshd[1779734]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:51:01 ispc CRON[1779742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:51:01 ispc CRON[1779742]: pam_unix(cron:session): session closed for user root Dec 16 17:52:01 ispc postfix/smtpd[1779782]: sql auxprop plugin using mysql engine Dec 16 17:52:01 ispc CRON[1779785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:52:01 ispc saslauthd[1779793]: pam_mysql - SELECT returned no result. Dec 16 17:52:01 ispc saslauthd[1779793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:52:01 ispc saslauthd[1779793]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:52:02 ispc postfix/smtpd[1779792]: sql auxprop plugin using mysql engine Dec 16 17:52:02 ispc CRON[1779785]: pam_unix(cron:session): session closed for user root Dec 16 17:52:02 ispc saslauthd[1779798]: pam_mysql - SELECT returned no result. Dec 16 17:52:02 ispc saslauthd[1779798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:52:02 ispc saslauthd[1779798]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:52:08 ispc sshd[1779803]: reverse mapping checking getaddrinfo for 709138-rcsinfo.in [198.38.87.182] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:52:50 ispc sshd[1779831]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:53:01 ispc CRON[1779838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:53:01 ispc CRON[1779838]: pam_unix(cron:session): session closed for user root Dec 16 17:53:29 ispc postfix/smtpd[1779862]: sql auxprop plugin using mysql engine Dec 16 17:53:38 ispc sshd[1779867]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:54:01 ispc CRON[1779879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:54:02 ispc CRON[1779879]: pam_unix(cron:session): session closed for user root Dec 16 17:54:12 ispc postfix/smtpd[1779894]: sql auxprop plugin using mysql engine Dec 16 17:54:26 ispc sshd[1779900]: Invalid user ziplines from 185.181.182.252 Dec 16 17:54:35 ispc sshd[1779908]: Invalid user perl from 51.195.100.96 Dec 16 17:54:37 ispc sshd[1779914]: Invalid user blceu from 185.208.181.152 Dec 16 17:54:52 ispc sshd[1779921]: Invalid user blceu from 116.120.58.228 Dec 16 17:55:01 ispc CRON[1779927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:55:01 ispc CRON[1779928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:55:01 ispc CRON[1779929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:55:01 ispc CRON[1779930]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 17:55:01 ispc CRON[1779928]: pam_unix(cron:session): session closed for user root Dec 16 17:55:01 ispc CRON[1779930]: pam_unix(cron:session): session closed for user getmail Dec 16 17:55:01 ispc CRON[1779929]: pam_unix(cron:session): session closed for user root Dec 16 17:55:01 ispc CRON[1779927]: pam_unix(cron:session): session closed for user root Dec 16 17:55:34 ispc postfix/smtpd[1780021]: sql auxprop plugin using mysql engine Dec 16 17:55:35 ispc saslauthd[1780023]: pam_mysql - SELECT returned no result. Dec 16 17:55:35 ispc saslauthd[1780023]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:55:35 ispc saslauthd[1780023]: do_auth : auth failure: [user=echo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:55:44 ispc sshd[1780028]: reverse mapping checking getaddrinfo for 203-151-66-147.inet.co.th [203.151.66.147] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:55:59 ispc sshd[1780040]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:56:01 ispc CRON[1780042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:56:02 ispc CRON[1780042]: pam_unix(cron:session): session closed for user root Dec 16 17:56:08 ispc saslauthd[1780058]: pam_mysql - SELECT returned no result. Dec 16 17:56:08 ispc saslauthd[1780058]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 17:56:08 ispc saslauthd[1780058]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 17:56:42 ispc sshd[1780074]: Invalid user test from 27.254.144.183 Dec 16 17:56:43 ispc sshd[1780076]: Invalid user Can't open edapass from 102.209.119.74 Dec 16 17:57:01 ispc CRON[1780093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:57:02 ispc CRON[1780093]: pam_unix(cron:session): session closed for user root Dec 16 17:57:42 ispc sshd[1780121]: reverse mapping checking getaddrinfo for static.213.164.213.185.clients.irandns.com [185.213.164.213] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 17:58:01 ispc CRON[1780141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:58:02 ispc CRON[1780141]: pam_unix(cron:session): session closed for user root Dec 16 17:58:27 ispc sshd[1780163]: Invalid user blceu from 95.216.43.126 Dec 16 17:58:41 ispc postfix/smtpd[1780174]: sql auxprop plugin using mysql engine Dec 16 17:59:01 ispc CRON[1780184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 17:59:01 ispc CRON[1780184]: pam_unix(cron:session): session closed for user root Dec 16 17:59:05 ispc sshd[1780195]: Invalid user Can't open edapass from 217.154.227.39 Dec 16 17:59:06 ispc sshd[1780197]: Invalid user martof from 185.142.159.122 Dec 16 18:00:01 ispc CRON[1780228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:00:01 ispc CRON[1780229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:00:01 ispc CRON[1780230]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:00:01 ispc CRON[1780231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:00:01 ispc CRON[1780232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:00:01 ispc CRON[1780233]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:00:02 ispc CRON[1780229]: pam_unix(cron:session): session closed for user root Dec 16 18:00:02 ispc CRON[1780230]: pam_unix(cron:session): session closed for user www-data Dec 16 18:00:02 ispc CRON[1780233]: pam_unix(cron:session): session closed for user getmail Dec 16 18:00:02 ispc CRON[1780232]: pam_unix(cron:session): session closed for user root Dec 16 18:00:02 ispc CRON[1780231]: pam_unix(cron:session): session closed for user root Dec 16 18:00:03 ispc CRON[1780228]: pam_unix(cron:session): session closed for user root Dec 16 18:00:08 ispc sshd[1780387]: Invalid user klape from 2.57.217.229 Dec 16 18:00:09 ispc sshd[1780389]: Invalid user ubuntu from 2.57.217.229 Dec 16 18:01:00 ispc postfix/smtpd[1780415]: sql auxprop plugin using mysql engine Dec 16 18:01:00 ispc saslauthd[1780417]: pam_mysql - SELECT returned no result. Dec 16 18:01:00 ispc saslauthd[1780417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:01:00 ispc saslauthd[1780417]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:01:01 ispc CRON[1780424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:01:02 ispc CRON[1780424]: pam_unix(cron:session): session closed for user root Dec 16 18:02:01 ispc CRON[1780461]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 18:02:01 ispc CRON[1780462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:02:01 ispc CRON[1780462]: pam_unix(cron:session): session closed for user root Dec 16 18:02:52 ispc CRON[1780461]: pam_unix(cron:session): session closed for user logcheck Dec 16 18:03:01 ispc CRON[1781523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:03:01 ispc postfix/smtpd[1781522]: sql auxprop plugin using mysql engine Dec 16 18:03:02 ispc CRON[1781523]: pam_unix(cron:session): session closed for user root Dec 16 18:03:03 ispc postfix/smtpd[1781538]: sql auxprop plugin using mysql engine Dec 16 18:03:04 ispc saslauthd[1781539]: pam_mysql - SELECT returned no result. Dec 16 18:03:04 ispc saslauthd[1781539]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:03:04 ispc saslauthd[1781539]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:03:09 ispc saslauthd[1781544]: pam_mysql - SELECT returned no result. Dec 16 18:03:09 ispc saslauthd[1781544]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:03:09 ispc saslauthd[1781544]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:04:00 ispc saslauthd[1781568]: pam_mysql - SELECT returned no result. Dec 16 18:04:00 ispc saslauthd[1781568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:04:00 ispc saslauthd[1781568]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:04:01 ispc CRON[1781569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:04:03 ispc CRON[1781569]: pam_unix(cron:session): session closed for user root Dec 16 18:04:40 ispc postfix/smtpd[1781597]: sql auxprop plugin using mysql engine Dec 16 18:05:01 ispc CRON[1781608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:05:01 ispc CRON[1781609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:05:01 ispc CRON[1781610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:05:01 ispc CRON[1781611]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:05:01 ispc CRON[1781611]: pam_unix(cron:session): session closed for user getmail Dec 16 18:05:01 ispc CRON[1781609]: pam_unix(cron:session): session closed for user root Dec 16 18:05:01 ispc CRON[1781610]: pam_unix(cron:session): session closed for user root Dec 16 18:05:01 ispc CRON[1781608]: pam_unix(cron:session): session closed for user root Dec 16 18:06:01 ispc CRON[1781716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:06:02 ispc CRON[1781716]: pam_unix(cron:session): session closed for user root Dec 16 18:07:01 ispc CRON[1781755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:07:02 ispc CRON[1781755]: pam_unix(cron:session): session closed for user root Dec 16 18:08:01 ispc CRON[1781806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:08:02 ispc CRON[1781806]: pam_unix(cron:session): session closed for user root Dec 16 18:08:19 ispc postfix/smtpd[1781823]: sql auxprop plugin using mysql engine Dec 16 18:08:19 ispc CRON[1779552]: pam_unix(cron:session): session closed for user root Dec 16 18:08:50 ispc saslauthd[1781830]: pam_mysql - SELECT returned no result. Dec 16 18:08:50 ispc saslauthd[1781830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:08:50 ispc saslauthd[1781830]: do_auth : auth failure: [user=testuser@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 18:09:02 ispc CRON[1781831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:09:02 ispc CRON[1781832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:09:02 ispc CRON[1781831]: pam_unix(cron:session): session closed for user root Dec 16 18:09:04 ispc CRON[1781832]: pam_unix(cron:session): session closed for user root Dec 16 18:10:01 ispc CRON[1781857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:10:01 ispc CRON[1781858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:10:01 ispc CRON[1781859]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:10:01 ispc CRON[1781860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:10:01 ispc CRON[1781861]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:10:01 ispc CRON[1781859]: pam_unix(cron:session): session closed for user www-data Dec 16 18:10:01 ispc CRON[1781858]: pam_unix(cron:session): session closed for user root Dec 16 18:10:01 ispc CRON[1781861]: pam_unix(cron:session): session closed for user getmail Dec 16 18:10:02 ispc CRON[1781857]: pam_unix(cron:session): session closed for user root Dec 16 18:10:44 ispc postfix/smtpd[1781957]: sql auxprop plugin using mysql engine Dec 16 18:10:46 ispc saslauthd[1781959]: pam_mysql - SELECT returned no result. Dec 16 18:10:46 ispc saslauthd[1781959]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:10:46 ispc saslauthd[1781959]: do_auth : auth failure: [user=enable] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:11:01 ispc CRON[1781964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:11:02 ispc CRON[1781964]: pam_unix(cron:session): session closed for user root Dec 16 18:11:58 ispc saslauthd[1782002]: pam_mysql - SELECT returned no result. Dec 16 18:11:58 ispc saslauthd[1782002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:11:58 ispc saslauthd[1782002]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:12:01 ispc CRON[1782003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:12:02 ispc CRON[1782003]: pam_unix(cron:session): session closed for user root Dec 16 18:12:10 ispc sshd[1782019]: Invalid user blceu from 203.146.21.153 Dec 16 18:12:19 ispc sshd[1782027]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:13:01 ispc CRON[1782053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:13:02 ispc CRON[1782053]: pam_unix(cron:session): session closed for user root Dec 16 18:13:36 ispc sshd[1782077]: Invalid user pronajemplosin from 183.215.179.154 Dec 16 18:14:01 ispc CRON[1782095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:14:02 ispc CRON[1782095]: pam_unix(cron:session): session closed for user root Dec 16 18:14:34 ispc sshd[1782124]: Invalid user blceu from 51.91.247.10 Dec 16 18:15:01 ispc CRON[1782136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:15:01 ispc CRON[1782137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:15:01 ispc CRON[1782138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:15:01 ispc CRON[1782139]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:15:01 ispc CRON[1782137]: pam_unix(cron:session): session closed for user root Dec 16 18:15:01 ispc CRON[1782139]: pam_unix(cron:session): session closed for user getmail Dec 16 18:15:01 ispc CRON[1782138]: pam_unix(cron:session): session closed for user root Dec 16 18:15:03 ispc CRON[1782136]: pam_unix(cron:session): session closed for user root Dec 16 18:15:22 ispc sshd[1782219]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:16:01 ispc CRON[1782241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:16:02 ispc CRON[1782241]: pam_unix(cron:session): session closed for user root Dec 16 18:17:01 ispc CRON[1782287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:17:01 ispc CRON[1782287]: pam_unix(cron:session): session closed for user root Dec 16 18:17:19 ispc sshd[1782306]: reverse mapping checking getaddrinfo for mail.gig-facility.com [146.19.212.19] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:18:01 ispc CRON[1782334]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 18:18:01 ispc CRON[1782335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:18:02 ispc CRON[1782335]: pam_unix(cron:session): session closed for user root Dec 16 18:18:08 ispc CRON[1782334]: pam_unix(cron:session): session closed for user amavis Dec 16 18:18:10 ispc postfix/smtpd[1782362]: sql auxprop plugin using mysql engine Dec 16 18:19:01 ispc CRON[1782396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:19:03 ispc CRON[1782396]: pam_unix(cron:session): session closed for user root Dec 16 18:19:38 ispc postfix/smtpd[1782424]: sql auxprop plugin using mysql engine Dec 16 18:19:38 ispc saslauthd[1782427]: pam_mysql - SELECT returned no result. Dec 16 18:19:38 ispc saslauthd[1782427]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:19:38 ispc saslauthd[1782427]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:20:01 ispc CRON[1782437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:20:01 ispc CRON[1782438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:20:01 ispc CRON[1782439]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:20:01 ispc CRON[1782440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:20:01 ispc CRON[1782441]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:20:01 ispc CRON[1782439]: pam_unix(cron:session): session closed for user www-data Dec 16 18:20:01 ispc CRON[1782438]: pam_unix(cron:session): session closed for user root Dec 16 18:20:01 ispc CRON[1782441]: pam_unix(cron:session): session closed for user getmail Dec 16 18:20:01 ispc CRON[1782440]: pam_unix(cron:session): session closed for user root Dec 16 18:20:02 ispc CRON[1782437]: pam_unix(cron:session): session closed for user root Dec 16 18:21:01 ispc CRON[1782546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:21:01 ispc CRON[1782547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:21:01 ispc CRON[1782546]: pam_unix(cron:session): session closed for user root Dec 16 18:21:02 ispc CRON[1782547]: pam_unix(cron:session): session closed for user root Dec 16 18:22:01 ispc CRON[1782590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:22:02 ispc CRON[1782590]: pam_unix(cron:session): session closed for user root Dec 16 18:22:48 ispc postfix/smtpd[1782636]: sql auxprop plugin using mysql engine Dec 16 18:23:01 ispc CRON[1782643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:23:02 ispc CRON[1782643]: pam_unix(cron:session): session closed for user root Dec 16 18:23:15 ispc sshd[1782664]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:23:30 ispc sshd[1782676]: Invalid user ftp from 185.208.181.141 Dec 16 18:24:01 ispc CRON[1782698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:24:02 ispc CRON[1782698]: pam_unix(cron:session): session closed for user root Dec 16 18:24:31 ispc sshd[1782722]: Invalid user martof from 203.146.21.153 Dec 16 18:25:01 ispc CRON[1782741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:25:01 ispc CRON[1782742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:25:01 ispc CRON[1782743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:25:01 ispc CRON[1782744]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:25:01 ispc CRON[1782742]: pam_unix(cron:session): session closed for user root Dec 16 18:25:01 ispc CRON[1782744]: pam_unix(cron:session): session closed for user getmail Dec 16 18:25:01 ispc CRON[1782743]: pam_unix(cron:session): session closed for user root Dec 16 18:25:03 ispc CRON[1782741]: pam_unix(cron:session): session closed for user root Dec 16 18:25:06 ispc sshd[1782818]: Invalid user ziplines from 31.40.198.92 Dec 16 18:25:26 ispc postfix/smtpd[1782830]: sql auxprop plugin using mysql engine Dec 16 18:25:27 ispc saslauthd[1782832]: pam_mysql - SELECT returned no result. Dec 16 18:25:27 ispc saslauthd[1782832]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:25:27 ispc saslauthd[1782832]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:25:56 ispc saslauthd[1782847]: pam_mysql - SELECT returned no result. Dec 16 18:25:56 ispc saslauthd[1782847]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:25:56 ispc saslauthd[1782847]: do_auth : auth failure: [user=eng] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:25:59 ispc saslauthd[1782850]: pam_mysql - SELECT returned no result. Dec 16 18:25:59 ispc saslauthd[1782850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:25:59 ispc saslauthd[1782850]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:26:01 ispc CRON[1782855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:26:02 ispc CRON[1782855]: pam_unix(cron:session): session closed for user root Dec 16 18:26:17 ispc sshd[1782870]: Address 139.84.135.224 maps to 139.84.135.224.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:27:01 ispc CRON[1782895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:27:01 ispc CRON[1782895]: pam_unix(cron:session): session closed for user root Dec 16 18:27:26 ispc saslauthd[1782919]: pam_mysql - SELECT returned no result. Dec 16 18:27:26 ispc saslauthd[1782919]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:27:26 ispc saslauthd[1782919]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:28:01 ispc CRON[1782944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:28:02 ispc CRON[1782944]: pam_unix(cron:session): session closed for user root Dec 16 18:28:50 ispc sshd[1782976]: Did not receive identification string from 192.227.134.84 Dec 16 18:28:59 ispc sshd[1782983]: Address 77.68.25.23 maps to exchange-out-45.livemail.co.uk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:29:01 ispc CRON[1782987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:29:01 ispc CRON[1782987]: pam_unix(cron:session): session closed for user root Dec 16 18:29:03 ispc sshd[1782981]: Invalid user ubuntu from 13.70.185.98 Dec 16 18:29:58 ispc sshd[1783029]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:29:58 ispc sshd[1783029]: Invalid user martof from 185.149.234.57 Dec 16 18:30:01 ispc CRON[1783031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:30:01 ispc CRON[1783032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:30:01 ispc CRON[1783033]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:30:01 ispc CRON[1783035]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:30:01 ispc CRON[1783034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:30:01 ispc CRON[1783032]: pam_unix(cron:session): session closed for user root Dec 16 18:30:01 ispc CRON[1783033]: pam_unix(cron:session): session closed for user www-data Dec 16 18:30:02 ispc CRON[1783035]: pam_unix(cron:session): session closed for user getmail Dec 16 18:30:02 ispc CRON[1783031]: pam_unix(cron:session): session closed for user root Dec 16 18:30:02 ispc CRON[1783034]: pam_unix(cron:session): session closed for user root Dec 16 18:30:39 ispc postfix/smtpd[1783125]: sql auxprop plugin using mysql engine Dec 16 18:31:01 ispc CRON[1783236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:31:02 ispc CRON[1783236]: pam_unix(cron:session): session closed for user root Dec 16 18:31:30 ispc CRON[1781860]: pam_unix(cron:session): session closed for user root Dec 16 18:31:30 ispc sshd[1783248]: Invalid user blceu from 45.137.194.85 Dec 16 18:32:01 ispc CRON[1783250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:33:01 ispc CRON[1783300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:33:02 ispc CRON[1783300]: pam_unix(cron:session): session closed for user root Dec 16 18:34:01 ispc CRON[1783337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:34:03 ispc CRON[1783337]: pam_unix(cron:session): session closed for user root Dec 16 18:34:42 ispc sshd[1783367]: Invalid user klape from 77.241.18.2 Dec 16 18:34:43 ispc sshd[1783369]: Invalid user ubuntu from 77.241.18.2 Dec 16 18:35:01 ispc CRON[1783381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:35:01 ispc CRON[1783382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:35:01 ispc CRON[1783383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:35:01 ispc CRON[1783384]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:35:01 ispc CRON[1783382]: pam_unix(cron:session): session closed for user root Dec 16 18:35:01 ispc CRON[1783384]: pam_unix(cron:session): session closed for user getmail Dec 16 18:35:02 ispc CRON[1783383]: pam_unix(cron:session): session closed for user root Dec 16 18:35:04 ispc CRON[1783381]: pam_unix(cron:session): session closed for user root Dec 16 18:35:19 ispc sshd[1783465]: reverse mapping checking getaddrinfo for no-dns-yet.veloxserv.net [83.97.19.170] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:35:41 ispc postfix/smtpd[1783476]: sql auxprop plugin using mysql engine Dec 16 18:35:41 ispc saslauthd[1783479]: pam_mysql - SELECT returned no result. Dec 16 18:35:41 ispc saslauthd[1783479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:35:41 ispc saslauthd[1783479]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:36:01 ispc CRON[1783489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:36:02 ispc CRON[1783489]: pam_unix(cron:session): session closed for user root Dec 16 18:37:01 ispc CRON[1783530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:37:02 ispc CRON[1783530]: pam_unix(cron:session): session closed for user root Dec 16 18:37:55 ispc sshd[1783567]: Invalid user ziplines from 203.146.21.153 Dec 16 18:38:01 ispc CRON[1783588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:38:03 ispc CRON[1783588]: pam_unix(cron:session): session closed for user root Dec 16 18:39:01 ispc CRON[1783627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:39:01 ispc CRON[1783628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:39:01 ispc CRON[1783627]: pam_unix(cron:session): session closed for user root Dec 16 18:39:01 ispc CRON[1783628]: pam_unix(cron:session): session closed for user root Dec 16 18:39:27 ispc postfix/smtpd[1783663]: sql auxprop plugin using mysql engine Dec 16 18:39:57 ispc sshd[1783678]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:40:01 ispc CRON[1783682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:40:01 ispc CRON[1783683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:40:01 ispc CRON[1783684]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:40:01 ispc CRON[1783685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:40:01 ispc CRON[1783686]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:40:01 ispc CRON[1783684]: pam_unix(cron:session): session closed for user www-data Dec 16 18:40:01 ispc CRON[1783683]: pam_unix(cron:session): session closed for user root Dec 16 18:40:01 ispc CRON[1783686]: pam_unix(cron:session): session closed for user getmail Dec 16 18:40:02 ispc CRON[1783685]: pam_unix(cron:session): session closed for user root Dec 16 18:40:03 ispc sshd[1783680]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:40:04 ispc CRON[1783682]: pam_unix(cron:session): session closed for user root Dec 16 18:40:06 ispc sshd[1783763]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:40:06 ispc sshd[1783763]: Invalid user klape from 189.89.20.45 Dec 16 18:40:08 ispc sshd[1783765]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:40:08 ispc sshd[1783765]: Invalid user ubuntu from 189.89.20.45 Dec 16 18:41:01 ispc CRON[1783801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:41:02 ispc CRON[1783801]: pam_unix(cron:session): session closed for user root Dec 16 18:41:04 ispc postfix/smtpd[1783812]: sql auxprop plugin using mysql engine Dec 16 18:41:05 ispc saslauthd[1783814]: pam_mysql - SELECT returned no result. Dec 16 18:41:05 ispc saslauthd[1783814]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:41:05 ispc saslauthd[1783814]: do_auth : auth failure: [user=enquiry] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:42:01 ispc CRON[1783847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:42:02 ispc CRON[1783847]: pam_unix(cron:session): session closed for user root Dec 16 18:43:01 ispc CRON[1783896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:43:01 ispc CRON[1783896]: pam_unix(cron:session): session closed for user root Dec 16 18:43:46 ispc postfix/smtpd[1783923]: sql auxprop plugin using mysql engine Dec 16 18:43:46 ispc saslauthd[1783925]: pam_mysql - SELECT returned no result. Dec 16 18:43:46 ispc saslauthd[1783925]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:43:46 ispc saslauthd[1783925]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:44:01 ispc CRON[1783934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:44:03 ispc CRON[1783934]: pam_unix(cron:session): session closed for user root Dec 16 18:45:01 ispc CRON[1783974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:45:01 ispc CRON[1783975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:45:01 ispc CRON[1783976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:45:01 ispc CRON[1783977]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:45:01 ispc CRON[1783975]: pam_unix(cron:session): session closed for user root Dec 16 18:45:01 ispc CRON[1783977]: pam_unix(cron:session): session closed for user getmail Dec 16 18:45:01 ispc CRON[1783974]: pam_unix(cron:session): session closed for user root Dec 16 18:45:01 ispc CRON[1783976]: pam_unix(cron:session): session closed for user root Dec 16 18:45:29 ispc sshd[1784058]: reverse mapping checking getaddrinfo for 202-80-231-51.ais-idc.com [202.80.231.51] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:45:49 ispc sshd[1784071]: Invalid user matlbulamanipulacnitechnika from 8.218.126.161 Dec 16 18:46:01 ispc CRON[1784080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:46:02 ispc CRON[1784080]: pam_unix(cron:session): session closed for user root Dec 16 18:46:18 ispc sshd[1784099]: Invalid user anoraksro from 117.50.70.169 Dec 16 18:46:54 ispc sshd[1784118]: Address 223.254.130.129 maps to spk.cloudie.hk, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:47:01 ispc CRON[1784121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:47:01 ispc CRON[1784121]: pam_unix(cron:session): session closed for user root Dec 16 18:48:01 ispc CRON[1784171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:48:02 ispc CRON[1784171]: pam_unix(cron:session): session closed for user root Dec 16 18:49:01 ispc CRON[1784206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:49:01 ispc CRON[1784206]: pam_unix(cron:session): session closed for user root Dec 16 18:49:37 ispc sshd[1784239]: Invalid user perl from 51.195.100.96 Dec 16 18:50:02 ispc CRON[1784249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:50:02 ispc CRON[1784250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:50:02 ispc CRON[1784251]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 18:50:02 ispc CRON[1784252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:50:02 ispc CRON[1784253]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:50:02 ispc CRON[1784251]: pam_unix(cron:session): session closed for user www-data Dec 16 18:50:02 ispc CRON[1784250]: pam_unix(cron:session): session closed for user root Dec 16 18:50:02 ispc CRON[1784253]: pam_unix(cron:session): session closed for user getmail Dec 16 18:50:03 ispc CRON[1784252]: pam_unix(cron:session): session closed for user root Dec 16 18:50:04 ispc CRON[1784249]: pam_unix(cron:session): session closed for user root Dec 16 18:51:01 ispc CRON[1784354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:51:02 ispc CRON[1784354]: pam_unix(cron:session): session closed for user root Dec 16 18:51:30 ispc postfix/smtpd[1784380]: sql auxprop plugin using mysql engine Dec 16 18:51:31 ispc saslauthd[1784385]: pam_mysql - SELECT returned no result. Dec 16 18:51:31 ispc saslauthd[1784385]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:51:31 ispc saslauthd[1784385]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:51:36 ispc sshd[1784388]: Invalid user ubuntu from 103.164.20.29 Dec 16 18:51:40 ispc sshd[1784386]: Invalid user klape from 103.164.20.29 Dec 16 18:51:48 ispc sshd[1784399]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:52:01 ispc CRON[1784409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:52:01 ispc CRON[1784410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:52:02 ispc CRON[1784410]: pam_unix(cron:session): session closed for user root Dec 16 18:52:23 ispc CRON[1783250]: pam_unix(cron:session): session closed for user root Dec 16 18:53:01 ispc CRON[1784445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:53:03 ispc CRON[1784445]: pam_unix(cron:session): session closed for user root Dec 16 18:53:26 ispc sshd[1784458]: reverse mapping checking getaddrinfo for co81283.tmweb.ru [188.225.80.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:54:01 ispc CRON[1784462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:54:15 ispc sshd[1784480]: reverse mapping checking getaddrinfo for ptr.abcom.al [217.73.131.131] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 18:55:01 ispc CRON[1784502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:55:01 ispc CRON[1784503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:55:01 ispc CRON[1784504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:55:01 ispc CRON[1784505]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 18:55:01 ispc CRON[1784503]: pam_unix(cron:session): session closed for user root Dec 16 18:55:01 ispc CRON[1784505]: pam_unix(cron:session): session closed for user getmail Dec 16 18:55:02 ispc CRON[1784504]: pam_unix(cron:session): session closed for user root Dec 16 18:55:02 ispc CRON[1784502]: pam_unix(cron:session): session closed for user root Dec 16 18:55:09 ispc sshd[1784584]: Did not receive identification string from 45.140.17.97 Dec 16 18:55:09 ispc postfix/smtpd[1784585]: sql auxprop plugin using mysql engine Dec 16 18:55:19 ispc CRON[1784409]: pam_unix(cron:session): session closed for user root Dec 16 18:56:01 ispc CRON[1784614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:56:02 ispc CRON[1784614]: pam_unix(cron:session): session closed for user root Dec 16 18:56:07 ispc saslauthd[1784630]: pam_mysql - SELECT returned no result. Dec 16 18:56:07 ispc saslauthd[1784630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:56:07 ispc saslauthd[1784630]: do_auth : auth failure: [user=epiq_api] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:56:11 ispc postfix/smtpd[1784631]: sql auxprop plugin using mysql engine Dec 16 18:57:01 ispc CRON[1784654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:57:02 ispc CRON[1784654]: pam_unix(cron:session): session closed for user root Dec 16 18:58:00 ispc postfix/smtpd[1784702]: sql auxprop plugin using mysql engine Dec 16 18:58:01 ispc CRON[1784704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:58:02 ispc CRON[1784704]: pam_unix(cron:session): session closed for user root Dec 16 18:58:02 ispc saslauthd[1784715]: pam_mysql - SELECT returned no result. Dec 16 18:58:02 ispc saslauthd[1784715]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:58:02 ispc saslauthd[1784715]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:58:06 ispc saslauthd[1784718]: pam_mysql - SELECT returned no result. Dec 16 18:58:06 ispc saslauthd[1784718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:58:06 ispc saslauthd[1784718]: do_auth : auth failure: [user=postmaster@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 16 18:58:36 ispc sshd[1784737]: Invalid user klape from 51.77.222.24 Dec 16 18:58:36 ispc sshd[1784739]: Invalid user ubuntu from 51.77.222.24 Dec 16 18:58:44 ispc saslauthd[1784745]: pam_mysql - SELECT returned no result. Dec 16 18:58:44 ispc saslauthd[1784745]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:58:44 ispc saslauthd[1784745]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 18:59:01 ispc CRON[1784756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 18:59:02 ispc CRON[1784756]: pam_unix(cron:session): session closed for user root Dec 16 18:59:06 ispc saslauthd[1784767]: pam_mysql - SELECT returned no result. Dec 16 18:59:06 ispc saslauthd[1784767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 18:59:06 ispc saslauthd[1784767]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 18:59:45 ispc sshd[1784787]: Invalid user martof from 31.40.198.92 Dec 16 19:00:01 ispc CRON[1784798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:00:01 ispc CRON[1784799]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:00:01 ispc CRON[1784800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:00:01 ispc CRON[1784801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:00:01 ispc CRON[1784802]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:00:01 ispc CRON[1784797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:00:01 ispc CRON[1784799]: pam_unix(cron:session): session closed for user www-data Dec 16 19:00:01 ispc CRON[1784798]: pam_unix(cron:session): session closed for user root Dec 16 19:00:01 ispc CRON[1784802]: pam_unix(cron:session): session closed for user getmail Dec 16 19:00:01 ispc CRON[1784797]: pam_unix(cron:session): session closed for user root Dec 16 19:00:02 ispc CRON[1784801]: pam_unix(cron:session): session closed for user root Dec 16 19:00:02 ispc CRON[1784800]: pam_unix(cron:session): session closed for user root Dec 16 19:00:15 ispc sshd[1784958]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:00:27 ispc saslauthd[1784964]: pam_mysql - SELECT returned no result. Dec 16 19:00:27 ispc saslauthd[1784964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:00:27 ispc saslauthd[1784964]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:01:01 ispc CRON[1784979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:01:02 ispc CRON[1784979]: pam_unix(cron:session): session closed for user root Dec 16 19:02:01 ispc CRON[1785015]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 19:02:01 ispc CRON[1785016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:02:02 ispc CRON[1785016]: pam_unix(cron:session): session closed for user root Dec 16 19:02:20 ispc sshd[1785662]: reverse mapping checking getaddrinfo for static.213.164.213.185.clients.irandns.com [185.213.164.213] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:02:56 ispc CRON[1785015]: pam_unix(cron:session): session closed for user logcheck Dec 16 19:03:01 ispc CRON[1786074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:03:01 ispc CRON[1786074]: pam_unix(cron:session): session closed for user root Dec 16 19:03:04 ispc postfix/smtpd[1786086]: sql auxprop plugin using mysql engine Dec 16 19:03:19 ispc sshd[1786095]: reverse mapping checking getaddrinfo for box.sshjunkie.com [170.205.37.134] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:04:01 ispc CRON[1786125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:04:02 ispc CRON[1786125]: pam_unix(cron:session): session closed for user root Dec 16 19:05:01 ispc CRON[1786163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:05:01 ispc CRON[1786164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:05:01 ispc CRON[1786165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:05:01 ispc CRON[1786166]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:05:01 ispc CRON[1786164]: pam_unix(cron:session): session closed for user root Dec 16 19:05:02 ispc CRON[1786166]: pam_unix(cron:session): session closed for user getmail Dec 16 19:05:02 ispc CRON[1786165]: pam_unix(cron:session): session closed for user root Dec 16 19:05:03 ispc CRON[1786163]: pam_unix(cron:session): session closed for user root Dec 16 19:06:01 ispc CRON[1786270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:06:01 ispc CRON[1786270]: pam_unix(cron:session): session closed for user root Dec 16 19:06:54 ispc sshd[1786308]: Invalid user test from 27.254.144.183 Dec 16 19:07:01 ispc CRON[1786314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:07:02 ispc CRON[1786314]: pam_unix(cron:session): session closed for user root Dec 16 19:08:01 ispc CRON[1786359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:08:02 ispc CRON[1786359]: pam_unix(cron:session): session closed for user root Dec 16 19:08:42 ispc postfix/smtpd[1786391]: sql auxprop plugin using mysql engine Dec 16 19:08:43 ispc saslauthd[1786394]: pam_mysql - SELECT returned no result. Dec 16 19:08:43 ispc saslauthd[1786394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:08:43 ispc saslauthd[1786394]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:09:01 ispc CRON[1786401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:09:01 ispc CRON[1786402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:09:01 ispc CRON[1786401]: pam_unix(cron:session): session closed for user root Dec 16 19:09:02 ispc CRON[1786402]: pam_unix(cron:session): session closed for user root Dec 16 19:09:02 ispc sshd[1786427]: Invalid user blceu from 185.142.159.122 Dec 16 19:10:01 ispc CRON[1786451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:10:01 ispc CRON[1786452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:10:01 ispc CRON[1786453]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:10:01 ispc CRON[1786454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:10:01 ispc CRON[1786455]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:10:01 ispc CRON[1786453]: pam_unix(cron:session): session closed for user www-data Dec 16 19:10:01 ispc CRON[1786452]: pam_unix(cron:session): session closed for user root Dec 16 19:10:01 ispc CRON[1786455]: pam_unix(cron:session): session closed for user getmail Dec 16 19:10:01 ispc CRON[1786454]: pam_unix(cron:session): session closed for user root Dec 16 19:10:02 ispc CRON[1786451]: pam_unix(cron:session): session closed for user root Dec 16 19:11:01 ispc CRON[1786558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:11:03 ispc CRON[1786558]: pam_unix(cron:session): session closed for user root Dec 16 19:11:09 ispc postfix/smtpd[1786575]: sql auxprop plugin using mysql engine Dec 16 19:11:10 ispc saslauthd[1786577]: pam_mysql - SELECT returned no result. Dec 16 19:11:10 ispc saslauthd[1786577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:11:10 ispc saslauthd[1786577]: do_auth : auth failure: [user=factory] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:11:20 ispc sshd[1786583]: reverse mapping checking getaddrinfo for vps3230965.trouble-free.net [104.218.48.3] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:12:01 ispc CRON[1786604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:12:03 ispc CRON[1786604]: pam_unix(cron:session): session closed for user root Dec 16 19:13:01 ispc CRON[1786653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:13:01 ispc CRON[1786653]: pam_unix(cron:session): session closed for user root Dec 16 19:14:01 ispc CRON[1786697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:14:02 ispc CRON[1786697]: pam_unix(cron:session): session closed for user root Dec 16 19:14:30 ispc postfix/smtpd[1786725]: sql auxprop plugin using mysql engine Dec 16 19:14:30 ispc CRON[1784462]: pam_unix(cron:session): session closed for user root Dec 16 19:14:33 ispc sshd[1786721]: Invalid user pronajemplosin from 115.71.237.176 Dec 16 19:14:35 ispc saslauthd[1786733]: pam_mysql - SELECT returned no result. Dec 16 19:14:35 ispc saslauthd[1786733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:14:35 ispc saslauthd[1786733]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:15:01 ispc CRON[1786735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:15:01 ispc CRON[1786736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:15:01 ispc CRON[1786737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:15:01 ispc CRON[1786738]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:15:01 ispc CRON[1786736]: pam_unix(cron:session): session closed for user root Dec 16 19:15:01 ispc CRON[1786738]: pam_unix(cron:session): session closed for user getmail Dec 16 19:15:03 ispc CRON[1786735]: pam_unix(cron:session): session closed for user root Dec 16 19:15:04 ispc saslauthd[1786810]: pam_mysql - SELECT returned no result. Dec 16 19:15:04 ispc saslauthd[1786810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:15:04 ispc saslauthd[1786810]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:15:08 ispc CRON[1786737]: pam_unix(cron:session): session closed for user root Dec 16 19:15:18 ispc saslauthd[1786815]: pam_mysql - SELECT returned no result. Dec 16 19:15:18 ispc saslauthd[1786815]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:15:18 ispc saslauthd[1786815]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:15:22 ispc saslauthd[1786818]: pam_mysql - SELECT returned no result. Dec 16 19:15:22 ispc saslauthd[1786818]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:15:22 ispc saslauthd[1786818]: do_auth : auth failure: [user=shop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:16:01 ispc CRON[1786820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:16:26 ispc saslauthd[1786848]: pam_mysql - SELECT returned no result. Dec 16 19:16:26 ispc saslauthd[1786848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:16:26 ispc saslauthd[1786848]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:16:39 ispc sshd[1786858]: Invalid user martof from 52.232.19.79 Dec 16 19:17:01 ispc CRON[1786871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:17:01 ispc CRON[1786871]: pam_unix(cron:session): session closed for user root Dec 16 19:17:08 ispc sshd[1786890]: Invalid user ubuntu from 187.190.35.163 Dec 16 19:17:10 ispc sshd[1786888]: Invalid user klape from 187.190.35.163 Dec 16 19:17:17 ispc sshd[1786896]: Invalid user ziplines from 51.91.247.10 Dec 16 19:17:41 ispc postfix/smtpd[1786906]: sql auxprop plugin using mysql engine Dec 16 19:18:01 ispc CRON[1786924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:18:03 ispc CRON[1786924]: pam_unix(cron:session): session closed for user root Dec 16 19:19:01 ispc CRON[1786963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:19:02 ispc CRON[1786963]: pam_unix(cron:session): session closed for user root Dec 16 19:19:37 ispc sshd[1786990]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:20:01 ispc CRON[1787001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:20:01 ispc CRON[1787002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:20:01 ispc CRON[1787003]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:20:01 ispc CRON[1787004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:20:01 ispc CRON[1787005]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:20:01 ispc CRON[1787002]: pam_unix(cron:session): session closed for user root Dec 16 19:20:02 ispc CRON[1787003]: pam_unix(cron:session): session closed for user www-data Dec 16 19:20:02 ispc CRON[1787005]: pam_unix(cron:session): session closed for user getmail Dec 16 19:20:03 ispc CRON[1787004]: pam_unix(cron:session): session closed for user root Dec 16 19:20:04 ispc CRON[1787001]: pam_unix(cron:session): session closed for user root Dec 16 19:20:18 ispc sshd[1787089]: reverse mapping checking getaddrinfo for saturnine.supportloud.com [185.56.238.58] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:21:01 ispc CRON[1787108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:21:01 ispc CRON[1787109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:21:01 ispc CRON[1787108]: pam_unix(cron:session): session closed for user root Dec 16 19:21:01 ispc CRON[1787109]: pam_unix(cron:session): session closed for user root Dec 16 19:21:19 ispc sshd[1787133]: Did not receive identification string from 192.227.134.84 Dec 16 19:22:01 ispc CRON[1787155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:22:02 ispc CRON[1787155]: pam_unix(cron:session): session closed for user root Dec 16 19:23:01 ispc CRON[1787201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:23:02 ispc CRON[1787201]: pam_unix(cron:session): session closed for user root Dec 16 19:24:01 ispc CRON[1787244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:24:03 ispc CRON[1787244]: pam_unix(cron:session): session closed for user root Dec 16 19:24:08 ispc postfix/smtpd[1787259]: sql auxprop plugin using mysql engine Dec 16 19:24:08 ispc saslauthd[1787262]: pam_mysql - SELECT returned no result. Dec 16 19:24:08 ispc saslauthd[1787262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:24:08 ispc saslauthd[1787262]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:24:21 ispc sshd[1787267]: Invalid user ziplines from 52.232.19.79 Dec 16 19:25:01 ispc CRON[1787287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:25:01 ispc CRON[1787288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:25:01 ispc CRON[1787289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:25:01 ispc CRON[1787290]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:25:01 ispc CRON[1787288]: pam_unix(cron:session): session closed for user root Dec 16 19:25:01 ispc CRON[1787290]: pam_unix(cron:session): session closed for user getmail Dec 16 19:25:02 ispc CRON[1787289]: pam_unix(cron:session): session closed for user root Dec 16 19:25:03 ispc CRON[1787287]: pam_unix(cron:session): session closed for user root Dec 16 19:26:01 ispc CRON[1787390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:26:02 ispc CRON[1787390]: pam_unix(cron:session): session closed for user root Dec 16 19:26:11 ispc postfix/smtpd[1787405]: sql auxprop plugin using mysql engine Dec 16 19:26:12 ispc saslauthd[1787407]: pam_mysql - SELECT returned no result. Dec 16 19:26:12 ispc saslauthd[1787407]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:26:12 ispc saslauthd[1787407]: do_auth : auth failure: [user=fal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:27:01 ispc CRON[1787431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:27:01 ispc CRON[1787431]: pam_unix(cron:session): session closed for user root Dec 16 19:27:39 ispc postfix/smtpd[1787466]: sql auxprop plugin using mysql engine Dec 16 19:27:40 ispc sshd[1787467]: Invalid user winston from 62.60.131.157 Dec 16 19:28:01 ispc CRON[1787489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:28:02 ispc CRON[1787489]: pam_unix(cron:session): session closed for user root Dec 16 19:29:01 ispc CRON[1787526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:29:02 ispc CRON[1787526]: pam_unix(cron:session): session closed for user root Dec 16 19:30:01 ispc CRON[1787561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:30:01 ispc CRON[1787562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:30:01 ispc CRON[1787563]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:30:01 ispc CRON[1787564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:30:01 ispc CRON[1787565]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:30:01 ispc CRON[1787563]: pam_unix(cron:session): session closed for user www-data Dec 16 19:30:01 ispc CRON[1787562]: pam_unix(cron:session): session closed for user root Dec 16 19:30:01 ispc CRON[1787565]: pam_unix(cron:session): session closed for user getmail Dec 16 19:30:02 ispc CRON[1787564]: pam_unix(cron:session): session closed for user root Dec 16 19:30:02 ispc CRON[1787561]: pam_unix(cron:session): session closed for user root Dec 16 19:31:01 ispc CRON[1787666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:31:02 ispc CRON[1787666]: pam_unix(cron:session): session closed for user root Dec 16 19:31:48 ispc postfix/smtpd[1787704]: sql auxprop plugin using mysql engine Dec 16 19:31:48 ispc saslauthd[1787707]: pam_mysql - SELECT returned no result. Dec 16 19:31:48 ispc saslauthd[1787707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:31:48 ispc saslauthd[1787707]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:31:58 ispc saslauthd[1787712]: pam_mysql - SELECT returned no result. Dec 16 19:31:58 ispc saslauthd[1787712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:31:58 ispc saslauthd[1787712]: do_auth : auth failure: [user=shop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:32:01 ispc CRON[1787713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:32:03 ispc CRON[1787713]: pam_unix(cron:session): session closed for user root Dec 16 19:32:34 ispc postfix/smtpd[1787744]: sql auxprop plugin using mysql engine Dec 16 19:33:01 ispc CRON[1787772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:33:01 ispc CRON[1787772]: pam_unix(cron:session): session closed for user root Dec 16 19:34:01 ispc CRON[1787814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:34:03 ispc CRON[1787814]: pam_unix(cron:session): session closed for user root Dec 16 19:34:55 ispc sshd[1787847]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:35:01 ispc CRON[1787855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:35:01 ispc CRON[1787856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:35:01 ispc CRON[1787857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:35:01 ispc CRON[1787858]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:35:01 ispc CRON[1787856]: pam_unix(cron:session): session closed for user root Dec 16 19:35:01 ispc CRON[1787858]: pam_unix(cron:session): session closed for user getmail Dec 16 19:35:02 ispc CRON[1787857]: pam_unix(cron:session): session closed for user root Dec 16 19:35:03 ispc CRON[1787855]: pam_unix(cron:session): session closed for user root Dec 16 19:35:39 ispc sshd[1787948]: Invalid user ubuntu from 115.190.171.196 Dec 16 19:35:44 ispc sshd[1787954]: Invalid user ziplines from 221.156.137.103 Dec 16 19:36:01 ispc CRON[1787969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:36:03 ispc CRON[1787969]: pam_unix(cron:session): session closed for user root Dec 16 19:36:26 ispc postfix/smtpd[1787986]: sql auxprop plugin using mysql engine Dec 16 19:36:26 ispc CRON[1786820]: pam_unix(cron:session): session closed for user root Dec 16 19:36:42 ispc sshd[1787997]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:37:01 ispc CRON[1787999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:37:08 ispc CRON[1787999]: pam_unix(cron:session): session closed for user root Dec 16 19:37:26 ispc postfix/smtpd[1788020]: sql auxprop plugin using mysql engine Dec 16 19:37:28 ispc sshd[1788018]: reverse mapping checking getaddrinfo for 107-174-2-155-host.colocrossing.com [107.174.2.155] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:37:36 ispc sshd[1788024]: Address 45.77.54.54 maps to 45.77.54.54.vultrusercontent.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 19:38:01 ispc CRON[1788038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:38:44 ispc sshd[1788075]: Invalid user blceu from 221.156.137.103 Dec 16 19:39:01 ispc CRON[1788087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:39:01 ispc CRON[1788088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:39:01 ispc CRON[1788087]: pam_unix(cron:session): session closed for user root Dec 16 19:39:01 ispc CRON[1788088]: pam_unix(cron:session): session closed for user root Dec 16 19:39:44 ispc postfix/smtpd[1788127]: sql auxprop plugin using mysql engine Dec 16 19:39:45 ispc saslauthd[1788133]: pam_mysql - SELECT returned no result. Dec 16 19:39:45 ispc saslauthd[1788133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:39:45 ispc saslauthd[1788133]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:40:01 ispc CRON[1788139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:40:01 ispc CRON[1788140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:40:01 ispc CRON[1788141]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:40:01 ispc CRON[1788142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:40:01 ispc CRON[1788143]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:40:01 ispc CRON[1788141]: pam_unix(cron:session): session closed for user www-data Dec 16 19:40:01 ispc CRON[1788140]: pam_unix(cron:session): session closed for user root Dec 16 19:40:02 ispc CRON[1788143]: pam_unix(cron:session): session closed for user getmail Dec 16 19:40:02 ispc CRON[1788139]: pam_unix(cron:session): session closed for user root Dec 16 19:40:02 ispc CRON[1788142]: pam_unix(cron:session): session closed for user root Dec 16 19:41:01 ispc CRON[1788241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:41:02 ispc CRON[1788241]: pam_unix(cron:session): session closed for user root Dec 16 19:41:11 ispc saslauthd[1788256]: pam_mysql - SELECT returned no result. Dec 16 19:41:11 ispc saslauthd[1788256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:41:11 ispc saslauthd[1788256]: do_auth : auth failure: [user=fam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:41:31 ispc sshd[1788266]: Invalid user blceu from 35.239.77.168 Dec 16 19:42:01 ispc CRON[1788282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:42:01 ispc CRON[1788282]: pam_unix(cron:session): session closed for user root Dec 16 19:43:01 ispc CRON[1788329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:43:02 ispc CRON[1788329]: pam_unix(cron:session): session closed for user root Dec 16 19:44:01 ispc CRON[1788366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:44:03 ispc CRON[1788366]: pam_unix(cron:session): session closed for user root Dec 16 19:44:07 ispc postfix/smtpd[1788377]: sql auxprop plugin using mysql engine Dec 16 19:45:01 ispc CRON[1788403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:45:01 ispc CRON[1788404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:45:01 ispc CRON[1788405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:45:01 ispc CRON[1788406]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:45:01 ispc CRON[1788404]: pam_unix(cron:session): session closed for user root Dec 16 19:45:01 ispc CRON[1788406]: pam_unix(cron:session): session closed for user getmail Dec 16 19:45:01 ispc CRON[1788405]: pam_unix(cron:session): session closed for user root Dec 16 19:45:02 ispc CRON[1788403]: pam_unix(cron:session): session closed for user root Dec 16 19:46:01 ispc CRON[1788501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:46:02 ispc CRON[1788501]: pam_unix(cron:session): session closed for user root Dec 16 19:47:01 ispc CRON[1788542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:47:02 ispc CRON[1788542]: pam_unix(cron:session): session closed for user root Dec 16 19:47:30 ispc postfix/smtpd[1788565]: sql auxprop plugin using mysql engine Dec 16 19:47:30 ispc saslauthd[1788567]: pam_mysql - SELECT returned no result. Dec 16 19:47:30 ispc saslauthd[1788567]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:47:30 ispc saslauthd[1788567]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:48:01 ispc CRON[1788588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:48:02 ispc CRON[1788588]: pam_unix(cron:session): session closed for user root Dec 16 19:48:48 ispc saslauthd[1788623]: pam_mysql - SELECT returned no result. Dec 16 19:48:48 ispc saslauthd[1788623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:48:48 ispc saslauthd[1788623]: do_auth : auth failure: [user=oracle@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 19:49:01 ispc CRON[1788628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:49:02 ispc CRON[1788628]: pam_unix(cron:session): session closed for user root Dec 16 19:49:54 ispc sshd[1788660]: Invalid user from 64.62.197.179 Dec 16 19:50:01 ispc CRON[1788666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:50:01 ispc CRON[1788667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:50:01 ispc CRON[1788668]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 19:50:01 ispc CRON[1788669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:50:01 ispc CRON[1788670]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:50:01 ispc CRON[1788667]: pam_unix(cron:session): session closed for user root Dec 16 19:50:01 ispc CRON[1788668]: pam_unix(cron:session): session closed for user www-data Dec 16 19:50:01 ispc CRON[1788670]: pam_unix(cron:session): session closed for user getmail Dec 16 19:50:02 ispc CRON[1788669]: pam_unix(cron:session): session closed for user root Dec 16 19:50:02 ispc CRON[1788666]: pam_unix(cron:session): session closed for user root Dec 16 19:50:11 ispc sshd[1788749]: Invalid user martof from 45.137.194.85 Dec 16 19:51:01 ispc CRON[1788772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:51:03 ispc CRON[1788772]: pam_unix(cron:session): session closed for user root Dec 16 19:52:01 ispc CRON[1788810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:52:02 ispc CRON[1788810]: pam_unix(cron:session): session closed for user root Dec 16 19:53:01 ispc CRON[1788856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:53:03 ispc CRON[1788856]: pam_unix(cron:session): session closed for user root Dec 16 19:53:19 ispc postfix/smtpd[1788871]: sql auxprop plugin using mysql engine Dec 16 19:54:01 ispc CRON[1788895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:54:01 ispc CRON[1788895]: pam_unix(cron:session): session closed for user root Dec 16 19:55:01 ispc CRON[1788926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:55:01 ispc CRON[1788927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:55:01 ispc CRON[1788928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:55:01 ispc CRON[1788929]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 19:55:01 ispc CRON[1788929]: pam_unix(cron:session): session closed for user getmail Dec 16 19:55:01 ispc CRON[1788927]: pam_unix(cron:session): session closed for user root Dec 16 19:55:02 ispc CRON[1788928]: pam_unix(cron:session): session closed for user root Dec 16 19:55:02 ispc CRON[1788926]: pam_unix(cron:session): session closed for user root Dec 16 19:55:20 ispc postfix/smtpd[1789012]: sql auxprop plugin using mysql engine Dec 16 19:55:21 ispc saslauthd[1789014]: pam_mysql - SELECT returned no result. Dec 16 19:55:21 ispc saslauthd[1789014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:55:21 ispc saslauthd[1789014]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:56:01 ispc CRON[1789031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:56:02 ispc CRON[1789031]: pam_unix(cron:session): session closed for user root Dec 16 19:56:14 ispc saslauthd[1789050]: pam_mysql - SELECT returned no result. Dec 16 19:56:14 ispc saslauthd[1789050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 19:56:14 ispc saslauthd[1789050]: do_auth : auth failure: [user=fastwire] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 19:57:01 ispc CRON[1789069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:57:01 ispc CRON[1789069]: pam_unix(cron:session): session closed for user root Dec 16 19:58:01 ispc CRON[1789115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:58:02 ispc CRON[1789115]: pam_unix(cron:session): session closed for user root Dec 16 19:58:31 ispc postfix/smtpd[1789139]: sql auxprop plugin using mysql engine Dec 16 19:58:31 ispc CRON[1788038]: pam_unix(cron:session): session closed for user root Dec 16 19:59:01 ispc CRON[1789145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 19:59:08 ispc CRON[1789145]: pam_unix(cron:session): session closed for user root Dec 16 20:00:01 ispc CRON[1789157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:00:01 ispc CRON[1789158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:00:01 ispc CRON[1789162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:00:01 ispc CRON[1789159]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:00:01 ispc CRON[1789160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:00:01 ispc CRON[1789161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:00:01 ispc CRON[1789163]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:00:01 ispc CRON[1789159]: pam_unix(cron:session): session closed for user www-data Dec 16 20:00:01 ispc CRON[1789163]: pam_unix(cron:session): session closed for user getmail Dec 16 20:00:01 ispc CRON[1789161]: pam_unix(cron:session): session closed for user root Dec 16 20:00:01 ispc CRON[1789158]: pam_unix(cron:session): session closed for user root Dec 16 20:00:01 ispc CRON[1789157]: pam_unix(cron:session): session closed for user root Dec 16 20:00:01 ispc CRON[1789160]: pam_unix(cron:session): session closed for user root Dec 16 20:01:01 ispc CRON[1789339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:01:02 ispc CRON[1789339]: pam_unix(cron:session): session closed for user root Dec 16 20:01:30 ispc sshd[1789363]: Invalid user lanovacentra from 35.239.77.168 Dec 16 20:01:43 ispc sshd[1789370]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 20:02:01 ispc CRON[1789380]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 20:02:01 ispc CRON[1789381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:02:03 ispc CRON[1789381]: pam_unix(cron:session): session closed for user root Dec 16 20:02:54 ispc postfix/smtpd[1790131]: sql auxprop plugin using mysql engine Dec 16 20:02:55 ispc saslauthd[1790150]: pam_mysql - SELECT returned no result. Dec 16 20:02:55 ispc saslauthd[1790150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:02:55 ispc saslauthd[1790150]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:03:01 ispc CRON[1790248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:03:01 ispc sshd[1790240]: Invalid user blceu from 220.196.191.58 Dec 16 20:03:02 ispc CRON[1790248]: pam_unix(cron:session): session closed for user root Dec 16 20:03:15 ispc CRON[1789380]: pam_unix(cron:session): session closed for user logcheck Dec 16 20:03:21 ispc postfix/smtpd[1790462]: sql auxprop plugin using mysql engine Dec 16 20:04:01 ispc CRON[1790486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:04:03 ispc CRON[1790486]: pam_unix(cron:session): session closed for user root Dec 16 20:05:01 ispc CRON[1790524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:05:01 ispc CRON[1790525]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:05:01 ispc CRON[1790526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:05:01 ispc CRON[1790527]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:05:01 ispc CRON[1790525]: pam_unix(cron:session): session closed for user root Dec 16 20:05:01 ispc CRON[1790527]: pam_unix(cron:session): session closed for user getmail Dec 16 20:05:01 ispc CRON[1790526]: pam_unix(cron:session): session closed for user root Dec 16 20:05:03 ispc CRON[1790524]: pam_unix(cron:session): session closed for user root Dec 16 20:05:12 ispc postfix/smtpd[1790604]: sql auxprop plugin using mysql engine Dec 16 20:05:13 ispc saslauthd[1790606]: pam_mysql - SELECT returned no result. Dec 16 20:05:13 ispc saslauthd[1790606]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:05:13 ispc saslauthd[1790606]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:06:01 ispc CRON[1790629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:06:02 ispc CRON[1790629]: pam_unix(cron:session): session closed for user root Dec 16 20:07:01 ispc CRON[1790664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:07:01 ispc CRON[1790664]: pam_unix(cron:session): session closed for user root Dec 16 20:08:01 ispc CRON[1790712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:08:02 ispc CRON[1790712]: pam_unix(cron:session): session closed for user root Dec 16 20:09:01 ispc CRON[1790750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:09:01 ispc CRON[1790751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:09:01 ispc CRON[1790750]: pam_unix(cron:session): session closed for user root Dec 16 20:09:02 ispc CRON[1790751]: pam_unix(cron:session): session closed for user root Dec 16 20:09:12 ispc sshd[1790778]: Invalid user blceu from 52.232.19.79 Dec 16 20:09:46 ispc sshd[1790793]: Invalid user ziplines from 185.142.159.122 Dec 16 20:10:01 ispc CRON[1790801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:10:01 ispc CRON[1790802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:10:01 ispc CRON[1790803]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:10:01 ispc CRON[1790804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:10:01 ispc CRON[1790805]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:10:01 ispc CRON[1790802]: pam_unix(cron:session): session closed for user root Dec 16 20:10:01 ispc CRON[1790803]: pam_unix(cron:session): session closed for user www-data Dec 16 20:10:01 ispc CRON[1790805]: pam_unix(cron:session): session closed for user getmail Dec 16 20:10:02 ispc CRON[1790804]: pam_unix(cron:session): session closed for user root Dec 16 20:10:03 ispc CRON[1790801]: pam_unix(cron:session): session closed for user root Dec 16 20:10:28 ispc postfix/smtpd[1790892]: sql auxprop plugin using mysql engine Dec 16 20:10:28 ispc saslauthd[1790895]: pam_mysql - SELECT returned no result. Dec 16 20:10:28 ispc saslauthd[1790895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:10:28 ispc saslauthd[1790895]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:11:01 ispc CRON[1790910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:11:02 ispc CRON[1790910]: pam_unix(cron:session): session closed for user root Dec 16 20:11:17 ispc saslauthd[1790930]: pam_mysql - SELECT returned no result. Dec 16 20:11:17 ispc saslauthd[1790930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:11:17 ispc saslauthd[1790930]: do_auth : auth failure: [user=fax] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:12:01 ispc CRON[1790948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:12:02 ispc CRON[1790948]: pam_unix(cron:session): session closed for user root Dec 16 20:12:18 ispc postfix/smtpd[1790967]: sql auxprop plugin using mysql engine Dec 16 20:13:01 ispc CRON[1790993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:13:02 ispc CRON[1790993]: pam_unix(cron:session): session closed for user root Dec 16 20:13:55 ispc sshd[1791027]: Invalid user klape from 36.50.177.171 Dec 16 20:13:58 ispc sshd[1791029]: Invalid user ubuntu from 36.50.177.171 Dec 16 20:14:01 ispc CRON[1791038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:14:01 ispc postfix/smtpd[1791045]: sql auxprop plugin using mysql engine Dec 16 20:14:02 ispc CRON[1791038]: pam_unix(cron:session): session closed for user root Dec 16 20:14:16 ispc postfix/smtpd[1791055]: sql auxprop plugin using mysql engine Dec 16 20:14:16 ispc saslauthd[1791057]: pam_mysql - SELECT returned no result. Dec 16 20:14:16 ispc saslauthd[1791057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:14:16 ispc saslauthd[1791057]: do_auth : auth failure: [user=teste] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:15:01 ispc CRON[1791080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:15:01 ispc CRON[1791081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:15:01 ispc CRON[1791082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:15:01 ispc CRON[1791083]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:15:01 ispc CRON[1791083]: pam_unix(cron:session): session closed for user getmail Dec 16 20:15:01 ispc CRON[1791081]: pam_unix(cron:session): session closed for user root Dec 16 20:15:02 ispc CRON[1791082]: pam_unix(cron:session): session closed for user root Dec 16 20:15:02 ispc CRON[1791080]: pam_unix(cron:session): session closed for user root Dec 16 20:15:05 ispc saslauthd[1791156]: pam_mysql - SELECT returned no result. Dec 16 20:15:05 ispc saslauthd[1791156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:15:05 ispc saslauthd[1791156]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:15:34 ispc saslauthd[1791172]: pam_mysql - SELECT returned no result. Dec 16 20:15:34 ispc saslauthd[1791172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:15:34 ispc saslauthd[1791172]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:15:48 ispc saslauthd[1791180]: pam_mysql - SELECT returned no result. Dec 16 20:15:48 ispc saslauthd[1791180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:15:48 ispc saslauthd[1791180]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:16:01 ispc CRON[1791189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:16:03 ispc CRON[1791189]: pam_unix(cron:session): session closed for user root Dec 16 20:16:58 ispc sshd[1791222]: Did not receive identification string from 192.227.134.84 Dec 16 20:17:01 ispc CRON[1791227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:17:02 ispc CRON[1791227]: pam_unix(cron:session): session closed for user root Dec 16 20:18:01 ispc CRON[1791274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:18:02 ispc CRON[1791274]: pam_unix(cron:session): session closed for user root Dec 16 20:18:29 ispc postfix/smtpd[1791293]: sql auxprop plugin using mysql engine Dec 16 20:18:30 ispc saslauthd[1791295]: pam_mysql - SELECT returned no result. Dec 16 20:18:30 ispc saslauthd[1791295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:18:30 ispc saslauthd[1791295]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:19:01 ispc CRON[1791311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:19:02 ispc CRON[1791311]: pam_unix(cron:session): session closed for user root Dec 16 20:20:01 ispc CRON[1791349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:20:01 ispc CRON[1791350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:20:01 ispc CRON[1791351]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:20:01 ispc CRON[1791352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:20:01 ispc CRON[1791353]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:20:01 ispc CRON[1791351]: pam_unix(cron:session): session closed for user www-data Dec 16 20:20:01 ispc CRON[1791350]: pam_unix(cron:session): session closed for user root Dec 16 20:20:01 ispc CRON[1791353]: pam_unix(cron:session): session closed for user getmail Dec 16 20:20:01 ispc CRON[1791352]: pam_unix(cron:session): session closed for user root Dec 16 20:20:01 ispc CRON[1791349]: pam_unix(cron:session): session closed for user root Dec 16 20:20:26 ispc postfix/smtpd[1791435]: sql auxprop plugin using mysql engine Dec 16 20:20:28 ispc postfix/smtpd[1791440]: sql auxprop plugin using mysql engine Dec 16 20:20:28 ispc saslauthd[1791454]: pam_mysql - SELECT returned no result. Dec 16 20:20:28 ispc saslauthd[1791454]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:20:28 ispc saslauthd[1791454]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:20:31 ispc saslauthd[1791460]: pam_mysql - SELECT returned no result. Dec 16 20:20:31 ispc saslauthd[1791460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:20:31 ispc saslauthd[1791460]: do_auth : auth failure: [user=info@matl-bula.info] [service=smtp] [realm=matl-bula.info] [mech=pam] [reason=PAM auth error] Dec 16 20:21:01 ispc CRON[1791476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:21:01 ispc CRON[1791477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:21:01 ispc CRON[1791476]: pam_unix(cron:session): session closed for user root Dec 16 20:21:02 ispc CRON[1791477]: pam_unix(cron:session): session closed for user root Dec 16 20:21:04 ispc CRON[1789162]: pam_unix(cron:session): session closed for user root Dec 16 20:22:01 ispc CRON[1791496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:23:01 ispc CRON[1791539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:23:01 ispc CRON[1791539]: pam_unix(cron:session): session closed for user root Dec 16 20:23:37 ispc sshd[1791562]: Did not receive identification string from 36.137.132.178 Dec 16 20:24:01 ispc CRON[1791583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:24:03 ispc CRON[1791583]: pam_unix(cron:session): session closed for user root Dec 16 20:25:01 ispc CRON[1791621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:25:01 ispc CRON[1791622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:25:01 ispc CRON[1791623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:25:01 ispc CRON[1791624]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:25:01 ispc CRON[1791622]: pam_unix(cron:session): session closed for user root Dec 16 20:25:01 ispc CRON[1791624]: pam_unix(cron:session): session closed for user getmail Dec 16 20:25:02 ispc CRON[1791623]: pam_unix(cron:session): session closed for user root Dec 16 20:25:03 ispc CRON[1791621]: pam_unix(cron:session): session closed for user root Dec 16 20:26:01 ispc CRON[1791722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:26:02 ispc CRON[1791722]: pam_unix(cron:session): session closed for user root Dec 16 20:26:08 ispc postfix/smtpd[1791733]: sql auxprop plugin using mysql engine Dec 16 20:26:09 ispc saslauthd[1791740]: pam_mysql - SELECT returned no result. Dec 16 20:26:09 ispc saslauthd[1791740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:26:09 ispc saslauthd[1791740]: do_auth : auth failure: [user=fg_sysadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:26:18 ispc saslauthd[1791741]: pam_mysql - SELECT returned no result. Dec 16 20:26:18 ispc saslauthd[1791741]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:26:18 ispc saslauthd[1791741]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:27:01 ispc CRON[1791762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:27:02 ispc CRON[1791762]: pam_unix(cron:session): session closed for user root Dec 16 20:28:01 ispc CRON[1791805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:28:02 ispc CRON[1791805]: pam_unix(cron:session): session closed for user root Dec 16 20:29:01 ispc CRON[1791842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:29:03 ispc CRON[1791842]: pam_unix(cron:session): session closed for user root Dec 16 20:29:04 ispc sshd[1791849]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 20:29:37 ispc postfix/smtpd[1791871]: sql auxprop plugin using mysql engine Dec 16 20:29:37 ispc saslauthd[1791873]: pam_mysql - SELECT returned no result. Dec 16 20:29:37 ispc saslauthd[1791873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:29:37 ispc saslauthd[1791873]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:30:01 ispc CRON[1791885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:30:01 ispc CRON[1791886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:30:01 ispc CRON[1791887]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:30:01 ispc CRON[1791888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:30:01 ispc CRON[1791889]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:30:01 ispc CRON[1791886]: pam_unix(cron:session): session closed for user root Dec 16 20:30:01 ispc CRON[1791887]: pam_unix(cron:session): session closed for user www-data Dec 16 20:30:01 ispc CRON[1791889]: pam_unix(cron:session): session closed for user getmail Dec 16 20:30:01 ispc CRON[1791885]: pam_unix(cron:session): session closed for user root Dec 16 20:30:01 ispc CRON[1791888]: pam_unix(cron:session): session closed for user root Dec 16 20:31:01 ispc CRON[1791988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:31:02 ispc CRON[1791988]: pam_unix(cron:session): session closed for user root Dec 16 20:32:01 ispc CRON[1792025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:32:02 ispc CRON[1792025]: pam_unix(cron:session): session closed for user root Dec 16 20:32:25 ispc postfix/smtpd[1792044]: sql auxprop plugin using mysql engine Dec 16 20:32:50 ispc sshd[1792066]: Did not receive identification string from 68.183.2.204 Dec 16 20:33:01 ispc CRON[1792071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:33:01 ispc CRON[1792071]: pam_unix(cron:session): session closed for user root Dec 16 20:34:01 ispc CRON[1792110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:34:02 ispc CRON[1792110]: pam_unix(cron:session): session closed for user root Dec 16 20:34:14 ispc sshd[1792126]: Did not receive identification string from 142.93.233.148 Dec 16 20:34:20 ispc postfix/smtpd[1792131]: sql auxprop plugin using mysql engine Dec 16 20:34:20 ispc saslauthd[1792133]: pam_mysql - SELECT returned no result. Dec 16 20:34:20 ispc saslauthd[1792133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:34:20 ispc saslauthd[1792133]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:35:01 ispc CRON[1792154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:35:01 ispc CRON[1792155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:35:01 ispc CRON[1792156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:35:01 ispc CRON[1792157]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:35:01 ispc CRON[1792155]: pam_unix(cron:session): session closed for user root Dec 16 20:35:01 ispc CRON[1792157]: pam_unix(cron:session): session closed for user getmail Dec 16 20:35:01 ispc CRON[1792156]: pam_unix(cron:session): session closed for user root Dec 16 20:35:02 ispc CRON[1792154]: pam_unix(cron:session): session closed for user root Dec 16 20:36:01 ispc CRON[1792261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:36:01 ispc CRON[1792261]: pam_unix(cron:session): session closed for user root Dec 16 20:37:01 ispc CRON[1792308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:37:02 ispc CRON[1792308]: pam_unix(cron:session): session closed for user root Dec 16 20:37:24 ispc postfix/smtpd[1792328]: sql auxprop plugin using mysql engine Dec 16 20:37:25 ispc saslauthd[1792330]: pam_mysql - SELECT returned no result. Dec 16 20:37:25 ispc saslauthd[1792330]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:37:25 ispc saslauthd[1792330]: do_auth : auth failure: [user=support@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 20:38:01 ispc CRON[1792361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:38:01 ispc CRON[1792361]: pam_unix(cron:session): session closed for user root Dec 16 20:38:24 ispc saslauthd[1792384]: pam_mysql - SELECT returned no result. Dec 16 20:38:24 ispc saslauthd[1792384]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:38:24 ispc saslauthd[1792384]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:38:57 ispc sshd[1792401]: Invalid user matlbula from 221.156.137.103 Dec 16 20:39:01 ispc CRON[1792411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:39:01 ispc CRON[1792410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:39:01 ispc CRON[1792410]: pam_unix(cron:session): session closed for user root Dec 16 20:39:02 ispc CRON[1792411]: pam_unix(cron:session): session closed for user root Dec 16 20:39:59 ispc sshd[1792463]: Invalid user tshombeknife from 175.125.95.234 Dec 16 20:40:01 ispc CRON[1792465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:40:01 ispc CRON[1792466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:40:01 ispc CRON[1792467]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:40:01 ispc CRON[1792468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:40:01 ispc CRON[1792469]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:40:01 ispc CRON[1792467]: pam_unix(cron:session): session closed for user www-data Dec 16 20:40:01 ispc CRON[1792466]: pam_unix(cron:session): session closed for user root Dec 16 20:40:01 ispc CRON[1792469]: pam_unix(cron:session): session closed for user getmail Dec 16 20:40:01 ispc CRON[1792468]: pam_unix(cron:session): session closed for user root Dec 16 20:40:02 ispc CRON[1792465]: pam_unix(cron:session): session closed for user root Dec 16 20:41:01 ispc CRON[1792578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:41:01 ispc CRON[1792578]: pam_unix(cron:session): session closed for user root Dec 16 20:41:02 ispc sshd[1792576]: Invalid user blceu from 45.119.213.109 Dec 16 20:41:13 ispc postfix/smtpd[1792598]: sql auxprop plugin using mysql engine Dec 16 20:41:14 ispc saslauthd[1792601]: pam_mysql - SELECT returned no result. Dec 16 20:41:14 ispc saslauthd[1792601]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:41:14 ispc saslauthd[1792601]: do_auth : auth failure: [user=field] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:42:01 ispc CRON[1792624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:42:01 ispc CRON[1792624]: pam_unix(cron:session): session closed for user root Dec 16 20:42:07 ispc saslauthd[1792641]: pam_mysql - SELECT returned no result. Dec 16 20:42:07 ispc saslauthd[1792641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:42:07 ispc saslauthd[1792641]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:42:25 ispc CRON[1791496]: pam_unix(cron:session): session closed for user root Dec 16 20:43:01 ispc CRON[1792667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:43:06 ispc CRON[1792667]: pam_unix(cron:session): session closed for user root Dec 16 20:44:01 ispc CRON[1792693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:45:01 ispc CRON[1792739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:45:01 ispc CRON[1792740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:45:01 ispc CRON[1792741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:45:01 ispc CRON[1792742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:45:01 ispc CRON[1792742]: pam_unix(cron:session): session closed for user getmail Dec 16 20:45:02 ispc CRON[1792740]: pam_unix(cron:session): session closed for user root Dec 16 20:45:02 ispc CRON[1792741]: pam_unix(cron:session): session closed for user root Dec 16 20:45:02 ispc CRON[1792739]: pam_unix(cron:session): session closed for user root Dec 16 20:45:57 ispc sshd[1792850]: Did not receive identification string from 45.140.17.97 Dec 16 20:45:57 ispc postfix/smtpd[1792851]: sql auxprop plugin using mysql engine Dec 16 20:45:58 ispc sshd[1792847]: Invalid user admin from 68.183.2.204 Dec 16 20:46:01 ispc CRON[1792853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:46:01 ispc CRON[1792853]: pam_unix(cron:session): session closed for user root Dec 16 20:46:09 ispc sshd[1792870]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 20:46:30 ispc sshd[1792882]: Invalid user admin from 68.183.2.204 Dec 16 20:46:57 ispc postfix/smtpd[1792902]: sql auxprop plugin using mysql engine Dec 16 20:47:01 ispc sshd[1792910]: Invalid user admin from 68.183.2.204 Dec 16 20:47:02 ispc CRON[1792912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:47:02 ispc CRON[1792912]: pam_unix(cron:session): session closed for user root Dec 16 20:47:33 ispc sshd[1792937]: Invalid user admin from 68.183.2.204 Dec 16 20:48:01 ispc CRON[1792962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:48:02 ispc CRON[1792962]: pam_unix(cron:session): session closed for user root Dec 16 20:48:06 ispc sshd[1792973]: Invalid user admin from 68.183.2.204 Dec 16 20:48:35 ispc sshd[1792990]: Invalid user martof from 148.216.54.17 Dec 16 20:48:38 ispc sshd[1792996]: Invalid user admin from 68.183.2.204 Dec 16 20:49:01 ispc CRON[1793015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:49:01 ispc CRON[1793015]: pam_unix(cron:session): session closed for user root Dec 16 20:50:01 ispc CRON[1793059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:50:01 ispc CRON[1793060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:50:01 ispc CRON[1793061]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 20:50:01 ispc CRON[1793062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:50:01 ispc CRON[1793063]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:50:01 ispc CRON[1793061]: pam_unix(cron:session): session closed for user www-data Dec 16 20:50:01 ispc CRON[1793060]: pam_unix(cron:session): session closed for user root Dec 16 20:50:01 ispc CRON[1793063]: pam_unix(cron:session): session closed for user getmail Dec 16 20:50:02 ispc CRON[1793062]: pam_unix(cron:session): session closed for user root Dec 16 20:50:02 ispc CRON[1793059]: pam_unix(cron:session): session closed for user root Dec 16 20:51:01 ispc CRON[1793169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:51:02 ispc CRON[1793169]: pam_unix(cron:session): session closed for user root Dec 16 20:52:01 ispc CRON[1793217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:52:02 ispc CRON[1793217]: pam_unix(cron:session): session closed for user root Dec 16 20:52:22 ispc sshd[1793238]: Invalid user chantel from 62.60.131.157 Dec 16 20:52:48 ispc postfix/smtpd[1793257]: sql auxprop plugin using mysql engine Dec 16 20:52:49 ispc saslauthd[1793263]: pam_mysql - SELECT returned no result. Dec 16 20:52:49 ispc saslauthd[1793263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:52:49 ispc saslauthd[1793263]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:53:01 ispc CRON[1793269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:53:02 ispc CRON[1793269]: pam_unix(cron:session): session closed for user root Dec 16 20:54:01 ispc CRON[1793311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:54:02 ispc CRON[1793311]: pam_unix(cron:session): session closed for user root Dec 16 20:54:13 ispc sshd[1793326]: Invalid user diamantdi from 35.239.77.168 Dec 16 20:55:01 ispc CRON[1793357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:55:01 ispc CRON[1793358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:55:01 ispc CRON[1793359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:55:01 ispc CRON[1793360]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 20:55:01 ispc CRON[1793358]: pam_unix(cron:session): session closed for user root Dec 16 20:55:01 ispc CRON[1793360]: pam_unix(cron:session): session closed for user getmail Dec 16 20:55:02 ispc CRON[1793359]: pam_unix(cron:session): session closed for user root Dec 16 20:55:02 ispc CRON[1793357]: pam_unix(cron:session): session closed for user root Dec 16 20:56:01 ispc CRON[1793460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:56:02 ispc CRON[1793460]: pam_unix(cron:session): session closed for user root Dec 16 20:56:11 ispc sshd[1793477]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 20:56:21 ispc postfix/smtpd[1793485]: sql auxprop plugin using mysql engine Dec 16 20:56:22 ispc saslauthd[1793492]: pam_mysql - SELECT returned no result. Dec 16 20:56:22 ispc saslauthd[1793492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 20:56:22 ispc saslauthd[1793492]: do_auth : auth failure: [user=firstsite] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 20:57:01 ispc CRON[1793510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:57:01 ispc CRON[1793510]: pam_unix(cron:session): session closed for user root Dec 16 20:58:01 ispc CRON[1793558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:58:02 ispc CRON[1793558]: pam_unix(cron:session): session closed for user root Dec 16 20:59:01 ispc CRON[1793602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 20:59:01 ispc CRON[1793602]: pam_unix(cron:session): session closed for user root Dec 16 20:59:54 ispc postfix/smtpd[1793638]: sql auxprop plugin using mysql engine Dec 16 20:59:57 ispc sshd[1793640]: Invalid user admin from 142.93.233.148 Dec 16 21:00:01 ispc CRON[1793647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:00:01 ispc CRON[1793648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:00:01 ispc CRON[1793649]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:00:01 ispc CRON[1793650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:00:01 ispc CRON[1793651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:00:01 ispc CRON[1793652]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:00:01 ispc CRON[1793649]: pam_unix(cron:session): session closed for user www-data Dec 16 21:00:01 ispc CRON[1793648]: pam_unix(cron:session): session closed for user root Dec 16 21:00:01 ispc CRON[1793652]: pam_unix(cron:session): session closed for user getmail Dec 16 21:00:02 ispc CRON[1793651]: pam_unix(cron:session): session closed for user root Dec 16 21:00:03 ispc CRON[1793650]: pam_unix(cron:session): session closed for user root Dec 16 21:00:03 ispc CRON[1793647]: pam_unix(cron:session): session closed for user root Dec 16 21:00:23 ispc sshd[1793812]: Invalid user admin from 142.93.233.148 Dec 16 21:00:35 ispc sshd[1793822]: Invalid user klape from 70.37.89.177 Dec 16 21:00:36 ispc sshd[1793824]: Invalid user ubuntu from 70.37.89.177 Dec 16 21:00:49 ispc sshd[1793836]: Invalid user admin from 142.93.233.148 Dec 16 21:01:01 ispc CRON[1793844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:01:02 ispc CRON[1793844]: pam_unix(cron:session): session closed for user root Dec 16 21:01:20 ispc sshd[1793859]: Invalid user admin from 142.93.233.148 Dec 16 21:01:35 ispc postfix/smtpd[1793871]: sql auxprop plugin using mysql engine Dec 16 21:01:35 ispc saslauthd[1793873]: pam_mysql - SELECT returned no result. Dec 16 21:01:35 ispc saslauthd[1793873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:01:35 ispc saslauthd[1793873]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:01:40 ispc sshd[1793878]: Invalid user admin from 142.93.233.148 Dec 16 21:02:01 ispc CRON[1793888]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 21:02:01 ispc CRON[1793889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:02:02 ispc CRON[1793889]: pam_unix(cron:session): session closed for user root Dec 16 21:02:05 ispc sshd[1793983]: Invalid user admin from 142.93.233.148 Dec 16 21:03:01 ispc CRON[1794771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:03:02 ispc CRON[1794771]: pam_unix(cron:session): session closed for user root Dec 16 21:03:11 ispc sshd[1794901]: Did not receive identification string from 111.47.65.219 Dec 16 21:03:19 ispc CRON[1793888]: pam_unix(cron:session): session closed for user logcheck Dec 16 21:03:25 ispc postfix/smtpd[1794973]: sql auxprop plugin using mysql engine Dec 16 21:04:01 ispc CRON[1794994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:04:01 ispc CRON[1794994]: pam_unix(cron:session): session closed for user root Dec 16 21:04:26 ispc postfix/smtpd[1795012]: sql auxprop plugin using mysql engine Dec 16 21:04:26 ispc CRON[1792693]: pam_unix(cron:session): session closed for user root Dec 16 21:05:01 ispc CRON[1795017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:05:01 ispc CRON[1795018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:05:01 ispc CRON[1795019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:05:01 ispc CRON[1795020]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:05:02 ispc CRON[1795018]: pam_unix(cron:session): session closed for user root Dec 16 21:05:02 ispc CRON[1795020]: pam_unix(cron:session): session closed for user getmail Dec 16 21:05:04 ispc CRON[1795017]: pam_unix(cron:session): session closed for user root Dec 16 21:05:08 ispc CRON[1795019]: pam_unix(cron:session): session closed for user root Dec 16 21:06:01 ispc CRON[1795100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:07:01 ispc CRON[1795135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:07:01 ispc CRON[1795135]: pam_unix(cron:session): session closed for user root Dec 16 21:08:01 ispc CRON[1795181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:08:02 ispc CRON[1795181]: pam_unix(cron:session): session closed for user root Dec 16 21:08:12 ispc postfix/smtpd[1795196]: sql auxprop plugin using mysql engine Dec 16 21:09:01 ispc CRON[1795227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:09:01 ispc CRON[1795228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:09:02 ispc CRON[1795227]: pam_unix(cron:session): session closed for user root Dec 16 21:09:02 ispc CRON[1795228]: pam_unix(cron:session): session closed for user root Dec 16 21:10:01 ispc CRON[1795273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:10:01 ispc CRON[1795274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:10:01 ispc CRON[1795275]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:10:01 ispc CRON[1795276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:10:01 ispc CRON[1795277]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:10:01 ispc CRON[1795275]: pam_unix(cron:session): session closed for user www-data Dec 16 21:10:01 ispc CRON[1795274]: pam_unix(cron:session): session closed for user root Dec 16 21:10:01 ispc CRON[1795277]: pam_unix(cron:session): session closed for user getmail Dec 16 21:10:02 ispc CRON[1795276]: pam_unix(cron:session): session closed for user root Dec 16 21:10:02 ispc CRON[1795273]: pam_unix(cron:session): session closed for user root Dec 16 21:10:05 ispc postfix/smtpd[1795356]: sql auxprop plugin using mysql engine Dec 16 21:10:06 ispc saslauthd[1795358]: pam_mysql - SELECT returned no result. Dec 16 21:10:06 ispc saslauthd[1795358]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:10:06 ispc saslauthd[1795358]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:10:15 ispc postfix/smtpd[1795363]: sql auxprop plugin using mysql engine Dec 16 21:10:17 ispc sshd[1795365]: Did not receive identification string from 192.227.134.84 Dec 16 21:10:55 ispc saslauthd[1795386]: pam_mysql - SELECT returned no result. Dec 16 21:10:55 ispc saslauthd[1795386]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:10:55 ispc saslauthd[1795386]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:11:01 ispc CRON[1795387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:11:02 ispc CRON[1795387]: pam_unix(cron:session): session closed for user root Dec 16 21:11:38 ispc saslauthd[1795416]: pam_mysql - SELECT returned no result. Dec 16 21:11:38 ispc saslauthd[1795416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:11:38 ispc saslauthd[1795416]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:11:45 ispc sshd[1795420]: Invalid user klape from 200.32.52.150 Dec 16 21:11:46 ispc sshd[1795422]: Invalid user ubuntu from 200.32.52.150 Dec 16 21:12:01 ispc CRON[1795432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:12:02 ispc CRON[1795432]: pam_unix(cron:session): session closed for user root Dec 16 21:13:00 ispc sshd[1795479]: Bad protocol version identification 'GET / HTTP/1.1' from 3.143.33.63 Dec 16 21:13:00 ispc sshd[1795480]: Bad protocol version identification 'GET / HTTP/1.1' from 3.143.33.63 Dec 16 21:13:01 ispc sshd[1795481]: Bad protocol version identification '\026\003\001' from 3.143.33.63 Dec 16 21:13:01 ispc CRON[1795482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:13:02 ispc sshd[1795493]: Bad protocol version identification '' from 3.143.33.63 Dec 16 21:13:02 ispc CRON[1795482]: pam_unix(cron:session): session closed for user root Dec 16 21:13:17 ispc sshd[1795500]: Invalid user ziplines from 173.212.237.203 Dec 16 21:14:01 ispc CRON[1795524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:14:03 ispc CRON[1795524]: pam_unix(cron:session): session closed for user root Dec 16 21:14:32 ispc sshd[1795554]: Did not receive identification string from 45.13.227.157 Dec 16 21:14:55 ispc postfix/smtpd[1795566]: sql auxprop plugin using mysql engine Dec 16 21:14:55 ispc saslauthd[1795568]: pam_mysql - SELECT returned no result. Dec 16 21:14:55 ispc saslauthd[1795568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:14:55 ispc saslauthd[1795568]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:15:01 ispc CRON[1795573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:15:01 ispc CRON[1795574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:15:01 ispc CRON[1795575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:15:01 ispc CRON[1795576]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:15:01 ispc CRON[1795574]: pam_unix(cron:session): session closed for user root Dec 16 21:15:01 ispc CRON[1795576]: pam_unix(cron:session): session closed for user getmail Dec 16 21:15:02 ispc CRON[1795575]: pam_unix(cron:session): session closed for user root Dec 16 21:15:02 ispc CRON[1795573]: pam_unix(cron:session): session closed for user root Dec 16 21:15:08 ispc sshd[1795649]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:08 ispc sshd[1795655]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:09 ispc sshd[1795657]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:10 ispc sshd[1795659]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:11 ispc sshd[1795661]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:11 ispc sshd[1795663]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:12 ispc sshd[1795665]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:13 ispc sshd[1795667]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:13 ispc sshd[1795669]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:14 ispc sshd[1795671]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:14 ispc sshd[1795673]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:15 ispc sshd[1795676]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:15 ispc sshd[1795678]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:16 ispc sshd[1795680]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:17 ispc sshd[1795682]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:18 ispc sshd[1795684]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:18 ispc sshd[1795690]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:19 ispc sshd[1795692]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:19 ispc sshd[1795694]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:20 ispc sshd[1795696]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:21 ispc sshd[1795698]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:21 ispc sshd[1795700]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:22 ispc sshd[1795702]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:23 ispc sshd[1795704]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:24 ispc sshd[1795706]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:24 ispc saslauthd[1795709]: pam_mysql - SELECT returned no result. Dec 16 21:15:24 ispc saslauthd[1795709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:15:24 ispc saslauthd[1795709]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:15:25 ispc sshd[1795708]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:25 ispc sshd[1795711]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:26 ispc sshd[1795713]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:27 ispc sshd[1795715]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:28 ispc sshd[1795717]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:29 ispc sshd[1795723]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:29 ispc sshd[1795725]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:30 ispc sshd[1795727]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:31 ispc sshd[1795729]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:31 ispc sshd[1795731]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:32 ispc sshd[1795733]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:33 ispc sshd[1795735]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:33 ispc sshd[1795737]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:34 ispc sshd[1795739]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:35 ispc sshd[1795741]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:36 ispc sshd[1795743]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:38 ispc sshd[1795747]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:38 ispc sshd[1795749]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:40 ispc saslauthd[1795757]: pam_mysql - SELECT returned no result. Dec 16 21:15:40 ispc saslauthd[1795757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:15:40 ispc saslauthd[1795757]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:15:40 ispc sshd[1795755]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:41 ispc sshd[1795758]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:41 ispc sshd[1795760]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:42 ispc sshd[1795762]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:43 ispc sshd[1795764]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:44 ispc sshd[1795766]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:44 ispc sshd[1795768]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:45 ispc sshd[1795770]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:46 ispc sshd[1795774]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:46 ispc sshd[1795776]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:47 ispc sshd[1795778]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:47 ispc sshd[1795780]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:47 ispc sshd[1795780]: Invalid user r00t from 45.13.227.157 Dec 16 21:15:48 ispc sshd[1795782]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:48 ispc sshd[1795784]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:49 ispc sshd[1795790]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:50 ispc sshd[1795792]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:51 ispc sshd[1795794]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:51 ispc sshd[1795796]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:52 ispc sshd[1795798]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:53 ispc sshd[1795800]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:54 ispc sshd[1795802]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:54 ispc sshd[1795804]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:55 ispc sshd[1795806]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:56 ispc sshd[1795808]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:56 ispc sshd[1795810]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:57 ispc sshd[1795812]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:57 ispc sshd[1795814]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:58 ispc sshd[1795816]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:58 ispc sshd[1795818]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:15:59 ispc sshd[1795824]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:00 ispc sshd[1795826]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:01 ispc sshd[1795828]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:01 ispc CRON[1795832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:16:02 ispc CRON[1795832]: pam_unix(cron:session): session closed for user root Dec 16 21:16:02 ispc sshd[1795830]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:02 ispc sshd[1795843]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:03 ispc sshd[1795845]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:03 ispc sshd[1795847]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:04 ispc sshd[1795849]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:04 ispc sshd[1795853]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:06 ispc sshd[1795851]: Invalid user diamantdi from 221.156.137.103 Dec 16 21:16:06 ispc sshd[1795855]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:08 ispc sshd[1795857]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:08 ispc sshd[1795859]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:09 ispc sshd[1795865]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:10 ispc sshd[1795867]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:11 ispc sshd[1795869]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:11 ispc sshd[1795871]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:12 ispc sshd[1795873]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:14 ispc sshd[1795875]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:15 ispc sshd[1795877]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:15 ispc sshd[1795879]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:16 ispc sshd[1795881]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:16 ispc sshd[1795883]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:18 ispc sshd[1795885]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:19 ispc sshd[1795887]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:19 ispc sshd[1795893]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:20 ispc sshd[1795895]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:21 ispc sshd[1795897]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:21 ispc sshd[1795899]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:22 ispc sshd[1795901]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:23 ispc sshd[1795903]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:24 ispc sshd[1795905]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:25 ispc sshd[1795907]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:25 ispc sshd[1795909]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:26 ispc sshd[1795911]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:26 ispc sshd[1795913]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:27 ispc sshd[1795915]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:27 ispc sshd[1795918]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:28 ispc sshd[1795920]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:29 ispc sshd[1795922]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:29 ispc sshd[1795928]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:30 ispc sshd[1795930]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:31 ispc sshd[1795932]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:31 ispc sshd[1795934]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:32 ispc sshd[1795936]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:32 ispc sshd[1795938]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:33 ispc sshd[1795940]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:39 ispc sshd[1795942]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:40 ispc sshd[1795948]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:40 ispc sshd[1795950]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:41 ispc sshd[1795952]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:42 ispc sshd[1795954]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:43 ispc sshd[1795956]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:43 ispc sshd[1795958]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:45 ispc sshd[1795960]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:45 ispc sshd[1795962]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:46 ispc sshd[1795965]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:47 ispc sshd[1795967]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:47 ispc sshd[1795969]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:48 ispc sshd[1795971]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:48 ispc sshd[1795973]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:49 ispc sshd[1795975]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:50 ispc sshd[1795981]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:51 ispc sshd[1795983]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:52 ispc sshd[1795985]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:52 ispc sshd[1795987]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:53 ispc sshd[1795989]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:54 ispc sshd[1795991]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:54 ispc sshd[1795993]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:55 ispc sshd[1795995]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:56 ispc sshd[1795997]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:56 ispc sshd[1795999]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:57 ispc sshd[1796001]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:58 ispc sshd[1796003]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:58 ispc sshd[1796005]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:16:59 ispc sshd[1796007]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:00 ispc sshd[1796013]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:00 ispc sshd[1796015]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:01 ispc CRON[1796019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:17:01 ispc sshd[1796017]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:02 ispc sshd[1796025]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:02 ispc CRON[1796019]: pam_unix(cron:session): session closed for user root Dec 16 21:17:02 ispc sshd[1796032]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:03 ispc sshd[1796034]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:04 ispc sshd[1796036]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:04 ispc sshd[1796038]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:05 ispc sshd[1796040]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:06 ispc sshd[1796042]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:07 ispc sshd[1796044]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:07 ispc sshd[1796044]: Invalid user r00t from 45.13.227.157 Dec 16 21:17:07 ispc sshd[1796046]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:07 ispc sshd[1796046]: Invalid user ubuntu from 45.13.227.157 Dec 16 21:17:08 ispc sshd[1796048]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:09 ispc sshd[1796050]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:10 ispc sshd[1796056]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:11 ispc sshd[1796058]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:11 ispc sshd[1796060]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:12 ispc sshd[1796062]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:14 ispc sshd[1796064]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:14 ispc sshd[1796066]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:15 ispc sshd[1796068]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:16 ispc sshd[1796070]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:17 ispc sshd[1796072]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:17 ispc sshd[1796074]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:18 ispc sshd[1796076]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:19 ispc sshd[1796078]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:19 ispc sshd[1796080]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:20 ispc sshd[1796086]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:20 ispc sshd[1796088]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:21 ispc sshd[1796090]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:21 ispc sshd[1796092]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:22 ispc sshd[1796094]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:23 ispc sshd[1796096]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:23 ispc sshd[1796098]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:23 ispc sshd[1796100]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:24 ispc sshd[1796102]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:24 ispc sshd[1796104]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:25 ispc sshd[1796106]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:25 ispc sshd[1796108]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:26 ispc sshd[1796110]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:26 ispc sshd[1796112]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:27 ispc sshd[1796114]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:27 ispc sshd[1796116]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:28 ispc sshd[1796118]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:29 ispc sshd[1796120]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:29 ispc sshd[1796122]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:30 ispc sshd[1796128]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:30 ispc sshd[1796130]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:17:31 ispc sshd[1796132]: Address 45.13.227.157 maps to tube-server.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:18:01 ispc CRON[1796151]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 16 21:18:01 ispc CRON[1796152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:18:01 ispc CRON[1796152]: pam_unix(cron:session): session closed for user root Dec 16 21:18:06 ispc CRON[1796151]: pam_unix(cron:session): session closed for user amavis Dec 16 21:18:09 ispc postfix/smtpd[1796179]: sql auxprop plugin using mysql engine Dec 16 21:18:28 ispc postfix/smtpd[1796192]: sql auxprop plugin using mysql engine Dec 16 21:18:28 ispc saslauthd[1796194]: pam_mysql - SELECT returned no result. Dec 16 21:18:28 ispc saslauthd[1796194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:18:28 ispc saslauthd[1796194]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:19:01 ispc CRON[1796212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:19:02 ispc CRON[1796212]: pam_unix(cron:session): session closed for user root Dec 16 21:20:01 ispc CRON[1796251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:20:01 ispc CRON[1796252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:20:01 ispc CRON[1796253]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:20:01 ispc CRON[1796254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:20:01 ispc CRON[1796255]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:20:01 ispc CRON[1796253]: pam_unix(cron:session): session closed for user www-data Dec 16 21:20:02 ispc CRON[1796255]: pam_unix(cron:session): session closed for user getmail Dec 16 21:20:02 ispc CRON[1796252]: pam_unix(cron:session): session closed for user root Dec 16 21:20:02 ispc CRON[1796254]: pam_unix(cron:session): session closed for user root Dec 16 21:20:02 ispc CRON[1796251]: pam_unix(cron:session): session closed for user root Dec 16 21:21:01 ispc CRON[1796353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:21:01 ispc CRON[1796354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:21:01 ispc CRON[1796353]: pam_unix(cron:session): session closed for user root Dec 16 21:21:02 ispc CRON[1796354]: pam_unix(cron:session): session closed for user root Dec 16 21:22:01 ispc CRON[1796395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:22:02 ispc CRON[1796395]: pam_unix(cron:session): session closed for user root Dec 16 21:22:25 ispc sshd[1796414]: Did not receive identification string from 161.35.218.223 Dec 16 21:23:01 ispc CRON[1796443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:23:02 ispc CRON[1796443]: pam_unix(cron:session): session closed for user root Dec 16 21:24:01 ispc CRON[1796480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:24:02 ispc CRON[1796480]: pam_unix(cron:session): session closed for user root Dec 16 21:25:01 ispc CRON[1796517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:25:01 ispc CRON[1796519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:25:01 ispc CRON[1796520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:25:01 ispc CRON[1796521]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:25:01 ispc CRON[1796519]: pam_unix(cron:session): session closed for user root Dec 16 21:25:01 ispc CRON[1796521]: pam_unix(cron:session): session closed for user getmail Dec 16 21:25:01 ispc CRON[1796520]: pam_unix(cron:session): session closed for user root Dec 16 21:25:02 ispc CRON[1796517]: pam_unix(cron:session): session closed for user root Dec 16 21:25:07 ispc postfix/smtpd[1796597]: sql auxprop plugin using mysql engine Dec 16 21:25:08 ispc saslauthd[1796600]: pam_mysql - SELECT returned no result. Dec 16 21:25:08 ispc saslauthd[1796600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:25:08 ispc saslauthd[1796600]: do_auth : auth failure: [user=fwadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:25:30 ispc sshd[1796611]: Invalid user klape from 103.164.20.29 Dec 16 21:25:31 ispc sshd[1796613]: Invalid user ubuntu from 103.164.20.29 Dec 16 21:25:52 ispc postfix/smtpd[1796623]: sql auxprop plugin using mysql engine Dec 16 21:26:01 ispc CRON[1796630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:26:02 ispc CRON[1796630]: pam_unix(cron:session): session closed for user root Dec 16 21:26:19 ispc CRON[1795100]: pam_unix(cron:session): session closed for user root Dec 16 21:26:30 ispc saslauthd[1796651]: pam_mysql - SELECT returned no result. Dec 16 21:26:30 ispc saslauthd[1796651]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:26:30 ispc saslauthd[1796651]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:27:01 ispc CRON[1796653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:27:07 ispc CRON[1796653]: pam_unix(cron:session): session closed for user root Dec 16 21:28:01 ispc CRON[1796678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:29:01 ispc CRON[1796713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:29:01 ispc CRON[1796713]: pam_unix(cron:session): session closed for user root Dec 16 21:30:01 ispc CRON[1796753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:30:01 ispc CRON[1796754]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:30:01 ispc CRON[1796755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:30:01 ispc CRON[1796756]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:30:01 ispc CRON[1796752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:30:01 ispc CRON[1796753]: pam_unix(cron:session): session closed for user root Dec 16 21:30:01 ispc CRON[1796754]: pam_unix(cron:session): session closed for user www-data Dec 16 21:30:01 ispc CRON[1796756]: pam_unix(cron:session): session closed for user getmail Dec 16 21:30:01 ispc CRON[1796755]: pam_unix(cron:session): session closed for user root Dec 16 21:30:01 ispc CRON[1796752]: pam_unix(cron:session): session closed for user root Dec 16 21:31:01 ispc CRON[1796867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:31:02 ispc CRON[1796867]: pam_unix(cron:session): session closed for user root Dec 16 21:32:01 ispc CRON[1796906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:32:01 ispc CRON[1796906]: pam_unix(cron:session): session closed for user root Dec 16 21:32:47 ispc postfix/smtpd[1796944]: sql auxprop plugin using mysql engine Dec 16 21:32:48 ispc saslauthd[1796947]: pam_mysql - SELECT returned no result. Dec 16 21:32:48 ispc saslauthd[1796947]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:32:48 ispc saslauthd[1796947]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 21:33:01 ispc CRON[1796954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:33:02 ispc CRON[1796954]: pam_unix(cron:session): session closed for user root Dec 16 21:34:01 ispc CRON[1796994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:34:02 ispc CRON[1796994]: pam_unix(cron:session): session closed for user root Dec 16 21:34:08 ispc sshd[1797009]: Invalid user ziplines from 185.208.181.152 Dec 16 21:34:33 ispc postfix/smtpd[1797019]: sql auxprop plugin using mysql engine Dec 16 21:34:34 ispc saslauthd[1797021]: pam_mysql - SELECT returned no result. Dec 16 21:34:34 ispc saslauthd[1797021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:34:34 ispc saslauthd[1797021]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:35:01 ispc CRON[1797036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:35:01 ispc CRON[1797037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:35:01 ispc CRON[1797038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:35:01 ispc CRON[1797039]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:35:01 ispc CRON[1797037]: pam_unix(cron:session): session closed for user root Dec 16 21:35:01 ispc CRON[1797039]: pam_unix(cron:session): session closed for user getmail Dec 16 21:35:01 ispc CRON[1797038]: pam_unix(cron:session): session closed for user root Dec 16 21:35:02 ispc CRON[1797036]: pam_unix(cron:session): session closed for user root Dec 16 21:36:01 ispc CRON[1797137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:36:01 ispc CRON[1797137]: pam_unix(cron:session): session closed for user root Dec 16 21:36:22 ispc sshd[1797159]: Invalid user klape from 2.57.217.229 Dec 16 21:36:23 ispc sshd[1797161]: Invalid user ubuntu from 2.57.217.229 Dec 16 21:37:01 ispc CRON[1797181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:37:01 ispc CRON[1797181]: pam_unix(cron:session): session closed for user root Dec 16 21:38:01 ispc CRON[1797233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:38:02 ispc CRON[1797233]: pam_unix(cron:session): session closed for user root Dec 16 21:39:01 ispc CRON[1797281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:39:01 ispc CRON[1797282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:39:01 ispc CRON[1797281]: pam_unix(cron:session): session closed for user root Dec 16 21:39:02 ispc CRON[1797282]: pam_unix(cron:session): session closed for user root Dec 16 21:40:01 ispc CRON[1797328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:40:01 ispc CRON[1797329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:40:01 ispc CRON[1797330]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:40:01 ispc CRON[1797331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:40:01 ispc CRON[1797332]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:40:01 ispc CRON[1797329]: pam_unix(cron:session): session closed for user root Dec 16 21:40:01 ispc CRON[1797330]: pam_unix(cron:session): session closed for user www-data Dec 16 21:40:01 ispc CRON[1797332]: pam_unix(cron:session): session closed for user getmail Dec 16 21:40:01 ispc CRON[1797328]: pam_unix(cron:session): session closed for user root Dec 16 21:40:02 ispc CRON[1797331]: pam_unix(cron:session): session closed for user root Dec 16 21:40:02 ispc postfix/smtpd[1797406]: sql auxprop plugin using mysql engine Dec 16 21:40:04 ispc saslauthd[1797410]: pam_mysql - SELECT returned no result. Dec 16 21:40:04 ispc saslauthd[1797410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:40:04 ispc saslauthd[1797410]: do_auth : auth failure: [user=games] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:40:20 ispc sshd[1797415]: Invalid user blceu from 106.12.215.233 Dec 16 21:41:01 ispc CRON[1797441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:41:01 ispc CRON[1797441]: pam_unix(cron:session): session closed for user root Dec 16 21:42:01 ispc CRON[1797477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:42:01 ispc CRON[1797477]: pam_unix(cron:session): session closed for user root Dec 16 21:42:11 ispc sshd[1797492]: Invalid user martof from 175.125.92.77 Dec 16 21:42:41 ispc postfix/smtpd[1797508]: sql auxprop plugin using mysql engine Dec 16 21:42:41 ispc saslauthd[1797510]: pam_mysql - SELECT returned no result. Dec 16 21:42:41 ispc saslauthd[1797510]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:42:41 ispc saslauthd[1797510]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:42:48 ispc sshd[1797516]: Invalid user tshombeknife from 185.12.204.239 Dec 16 21:43:01 ispc CRON[1797526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:43:02 ispc CRON[1797526]: pam_unix(cron:session): session closed for user root Dec 16 21:43:22 ispc postfix/smtpd[1797547]: sql auxprop plugin using mysql engine Dec 16 21:44:01 ispc CRON[1797569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:44:01 ispc CRON[1797569]: pam_unix(cron:session): session closed for user root Dec 16 21:44:05 ispc saslauthd[1797580]: pam_mysql - SELECT returned no result. Dec 16 21:44:05 ispc saslauthd[1797580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:44:05 ispc saslauthd[1797580]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:44:46 ispc saslauthd[1797599]: pam_mysql - SELECT returned no result. Dec 16 21:44:46 ispc saslauthd[1797599]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:44:46 ispc saslauthd[1797599]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:45:01 ispc CRON[1797608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:45:01 ispc CRON[1797609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:45:01 ispc CRON[1797610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:45:01 ispc CRON[1797611]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:45:01 ispc CRON[1797609]: pam_unix(cron:session): session closed for user root Dec 16 21:45:01 ispc CRON[1797611]: pam_unix(cron:session): session closed for user getmail Dec 16 21:45:01 ispc CRON[1797610]: pam_unix(cron:session): session closed for user root Dec 16 21:45:01 ispc CRON[1797608]: pam_unix(cron:session): session closed for user root Dec 16 21:46:01 ispc CRON[1797708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:46:02 ispc CRON[1797708]: pam_unix(cron:session): session closed for user root Dec 16 21:46:08 ispc postfix/smtpd[1797723]: sql auxprop plugin using mysql engine Dec 16 21:47:01 ispc CRON[1797746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:47:01 ispc CRON[1797746]: pam_unix(cron:session): session closed for user root Dec 16 21:48:01 ispc CRON[1797791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:48:02 ispc CRON[1797791]: pam_unix(cron:session): session closed for user root Dec 16 21:48:18 ispc postfix/smtpd[1797814]: sql auxprop plugin using mysql engine Dec 16 21:48:18 ispc CRON[1796678]: pam_unix(cron:session): session closed for user root Dec 16 21:49:01 ispc CRON[1797818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:49:06 ispc CRON[1797818]: pam_unix(cron:session): session closed for user root Dec 16 21:49:37 ispc sshd[1797830]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:49:39 ispc sshd[1797832]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:49:39 ispc sshd[1797832]: Invalid user klape from 189.89.20.45 Dec 16 21:49:41 ispc sshd[1797834]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 21:49:41 ispc sshd[1797834]: Invalid user ubuntu from 189.89.20.45 Dec 16 21:50:01 ispc CRON[1797837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:50:01 ispc CRON[1797838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:50:01 ispc CRON[1797839]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 21:50:01 ispc CRON[1797840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:50:01 ispc CRON[1797841]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:50:01 ispc CRON[1797839]: pam_unix(cron:session): session closed for user www-data Dec 16 21:50:01 ispc CRON[1797838]: pam_unix(cron:session): session closed for user root Dec 16 21:50:01 ispc CRON[1797841]: pam_unix(cron:session): session closed for user getmail Dec 16 21:50:02 ispc CRON[1797837]: pam_unix(cron:session): session closed for user root Dec 16 21:50:42 ispc saslauthd[1797934]: pam_mysql - SELECT returned no result. Dec 16 21:50:42 ispc saslauthd[1797934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:50:42 ispc saslauthd[1797934]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:51:01 ispc CRON[1797941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:51:02 ispc CRON[1797941]: pam_unix(cron:session): session closed for user root Dec 16 21:52:01 ispc CRON[1797980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:52:01 ispc CRON[1797979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:52:01 ispc CRON[1797980]: pam_unix(cron:session): session closed for user root Dec 16 21:53:01 ispc CRON[1798028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:53:02 ispc CRON[1798028]: pam_unix(cron:session): session closed for user root Dec 16 21:54:01 ispc CRON[1798067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:54:02 ispc CRON[1798067]: pam_unix(cron:session): session closed for user root Dec 16 21:55:01 ispc CRON[1798103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:55:01 ispc CRON[1798105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:55:01 ispc CRON[1798104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:55:01 ispc CRON[1798106]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 21:55:01 ispc CRON[1798104]: pam_unix(cron:session): session closed for user root Dec 16 21:55:01 ispc CRON[1798106]: pam_unix(cron:session): session closed for user getmail Dec 16 21:55:01 ispc CRON[1798105]: pam_unix(cron:session): session closed for user root Dec 16 21:55:02 ispc CRON[1798103]: pam_unix(cron:session): session closed for user root Dec 16 21:55:10 ispc postfix/smtpd[1798183]: sql auxprop plugin using mysql engine Dec 16 21:55:11 ispc saslauthd[1798186]: pam_mysql - SELECT returned no result. Dec 16 21:55:11 ispc saslauthd[1798186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:55:11 ispc saslauthd[1798186]: do_auth : auth failure: [user=glftpd] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:55:17 ispc CRON[1797979]: pam_unix(cron:session): session closed for user root Dec 16 21:56:01 ispc CRON[1798207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:56:02 ispc CRON[1798207]: pam_unix(cron:session): session closed for user root Dec 16 21:57:01 ispc CRON[1798242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:57:01 ispc CRON[1798242]: pam_unix(cron:session): session closed for user root Dec 16 21:58:01 ispc CRON[1798289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:58:01 ispc CRON[1798289]: pam_unix(cron:session): session closed for user root Dec 16 21:58:49 ispc postfix/smtpd[1798318]: sql auxprop plugin using mysql engine Dec 16 21:58:49 ispc saslauthd[1798321]: pam_mysql - SELECT returned no result. Dec 16 21:58:49 ispc saslauthd[1798321]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 21:58:49 ispc saslauthd[1798321]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 21:59:01 ispc CRON[1798328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 21:59:02 ispc CRON[1798328]: pam_unix(cron:session): session closed for user root Dec 16 22:00:01 ispc CRON[1798369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:00:01 ispc CRON[1798370]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:00:01 ispc CRON[1798373]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:00:01 ispc CRON[1798368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:00:01 ispc CRON[1798371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:00:01 ispc CRON[1798372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:00:01 ispc CRON[1798369]: pam_unix(cron:session): session closed for user root Dec 16 22:00:01 ispc CRON[1798370]: pam_unix(cron:session): session closed for user www-data Dec 16 22:00:01 ispc CRON[1798373]: pam_unix(cron:session): session closed for user getmail Dec 16 22:00:02 ispc CRON[1798372]: pam_unix(cron:session): session closed for user root Dec 16 22:00:02 ispc CRON[1798371]: pam_unix(cron:session): session closed for user root Dec 16 22:00:02 ispc CRON[1798368]: pam_unix(cron:session): session closed for user root Dec 16 22:00:48 ispc sshd[1798549]: Did not receive identification string from 192.227.134.84 Dec 16 22:01:01 ispc CRON[1798556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:01:02 ispc CRON[1798556]: pam_unix(cron:session): session closed for user root Dec 16 22:02:01 ispc CRON[1798591]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 22:02:01 ispc CRON[1798592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:02:01 ispc CRON[1798592]: pam_unix(cron:session): session closed for user root Dec 16 22:02:10 ispc postfix/smtpd[1798968]: sql auxprop plugin using mysql engine Dec 16 22:03:01 ispc CRON[1799604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:03:01 ispc CRON[1799604]: pam_unix(cron:session): session closed for user root Dec 16 22:03:04 ispc CRON[1798591]: pam_unix(cron:session): session closed for user logcheck Dec 16 22:03:10 ispc postfix/smtpd[1799672]: sql auxprop plugin using mysql engine Dec 16 22:03:43 ispc sshd[1799689]: Invalid user blceu from 185.12.204.239 Dec 16 22:04:01 ispc CRON[1799699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:04:01 ispc CRON[1799699]: pam_unix(cron:session): session closed for user root Dec 16 22:05:01 ispc CRON[1799734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:05:01 ispc CRON[1799735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:05:01 ispc CRON[1799736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:05:01 ispc CRON[1799737]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:05:01 ispc CRON[1799735]: pam_unix(cron:session): session closed for user root Dec 16 22:05:01 ispc CRON[1799737]: pam_unix(cron:session): session closed for user getmail Dec 16 22:05:01 ispc CRON[1799736]: pam_unix(cron:session): session closed for user root Dec 16 22:05:02 ispc CRON[1799734]: pam_unix(cron:session): session closed for user root Dec 16 22:05:16 ispc sshd[1799815]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:05:42 ispc sshd[1799828]: Invalid user blceu from 175.125.92.77 Dec 16 22:06:01 ispc CRON[1799849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:06:01 ispc CRON[1799849]: pam_unix(cron:session): session closed for user root Dec 16 22:06:39 ispc sshd[1799872]: Invalid user ziplines from 175.125.92.77 Dec 16 22:07:01 ispc CRON[1799889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:07:01 ispc CRON[1799889]: pam_unix(cron:session): session closed for user root Dec 16 22:07:09 ispc postfix/smtpd[1799900]: sql auxprop plugin using mysql engine Dec 16 22:07:09 ispc saslauthd[1799903]: pam_mysql - SELECT returned no result. Dec 16 22:07:09 ispc saslauthd[1799903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:07:09 ispc saslauthd[1799903]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:07:47 ispc sshd[1799926]: Invalid user ziplines from 165.227.38.205 Dec 16 22:08:01 ispc CRON[1799937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:08:02 ispc CRON[1799937]: pam_unix(cron:session): session closed for user root Dec 16 22:09:01 ispc CRON[1799974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:09:01 ispc CRON[1799975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:09:01 ispc CRON[1799974]: pam_unix(cron:session): session closed for user root Dec 16 22:09:01 ispc CRON[1799975]: pam_unix(cron:session): session closed for user root Dec 16 22:10:01 ispc CRON[1800030]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:10:01 ispc CRON[1800028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:10:01 ispc CRON[1800029]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:10:01 ispc CRON[1800027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:10:01 ispc CRON[1800031]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:10:01 ispc CRON[1800029]: pam_unix(cron:session): session closed for user www-data Dec 16 22:10:01 ispc CRON[1800028]: pam_unix(cron:session): session closed for user root Dec 16 22:10:01 ispc CRON[1800031]: pam_unix(cron:session): session closed for user getmail Dec 16 22:10:02 ispc CRON[1800027]: pam_unix(cron:session): session closed for user root Dec 16 22:10:02 ispc CRON[1800030]: pam_unix(cron:session): session closed for user root Dec 16 22:10:28 ispc postfix/smtpd[1800116]: sql auxprop plugin using mysql engine Dec 16 22:11:01 ispc CRON[1800153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:11:01 ispc CRON[1800153]: pam_unix(cron:session): session closed for user root Dec 16 22:11:08 ispc CRON[1797840]: pam_unix(cron:session): session closed for user root Dec 16 22:12:01 ispc CRON[1800167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:12:08 ispc saslauthd[1800180]: pam_mysql - SELECT returned no result. Dec 16 22:12:08 ispc saslauthd[1800180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:12:08 ispc saslauthd[1800180]: do_auth : auth failure: [user=god1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:12:18 ispc sshd[1800186]: Invalid user reese from 62.60.131.157 Dec 16 22:13:01 ispc CRON[1800213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:13:02 ispc CRON[1800213]: pam_unix(cron:session): session closed for user root Dec 16 22:13:10 ispc sshd[1800231]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:13:17 ispc sshd[1800239]: Invalid user klape from 77.241.18.2 Dec 16 22:13:18 ispc sshd[1800241]: Invalid user ubuntu from 77.241.18.2 Dec 16 22:13:23 ispc sshd[1800247]: Invalid user matlbula from 185.12.204.239 Dec 16 22:14:01 ispc CRON[1800263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:14:01 ispc CRON[1800263]: pam_unix(cron:session): session closed for user root Dec 16 22:14:50 ispc postfix/smtpd[1800300]: sql auxprop plugin using mysql engine Dec 16 22:14:51 ispc saslauthd[1800302]: pam_mysql - SELECT returned no result. Dec 16 22:14:51 ispc saslauthd[1800302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:14:51 ispc saslauthd[1800302]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:15:01 ispc CRON[1800308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:15:01 ispc CRON[1800310]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:15:01 ispc CRON[1800309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:15:01 ispc CRON[1800307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:15:01 ispc CRON[1800308]: pam_unix(cron:session): session closed for user root Dec 16 22:15:01 ispc CRON[1800310]: pam_unix(cron:session): session closed for user getmail Dec 16 22:15:01 ispc CRON[1800309]: pam_unix(cron:session): session closed for user root Dec 16 22:15:01 ispc CRON[1800307]: pam_unix(cron:session): session closed for user root Dec 16 22:15:03 ispc saslauthd[1800383]: pam_mysql - SELECT returned no result. Dec 16 22:15:03 ispc saslauthd[1800383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:15:03 ispc saslauthd[1800383]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:15:20 ispc saslauthd[1800392]: pam_mysql - SELECT returned no result. Dec 16 22:15:20 ispc saslauthd[1800392]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:15:20 ispc saslauthd[1800392]: do_auth : auth failure: [user=meeting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:15:33 ispc saslauthd[1800397]: pam_mysql - SELECT returned no result. Dec 16 22:15:33 ispc saslauthd[1800397]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:15:33 ispc saslauthd[1800397]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:16:01 ispc CRON[1800411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:16:02 ispc CRON[1800411]: pam_unix(cron:session): session closed for user root Dec 16 22:17:01 ispc CRON[1800450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:17:02 ispc CRON[1800450]: pam_unix(cron:session): session closed for user root Dec 16 22:18:01 ispc CRON[1800496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:18:01 ispc CRON[1800496]: pam_unix(cron:session): session closed for user root Dec 16 22:18:02 ispc postfix/smtpd[1800507]: sql auxprop plugin using mysql engine Dec 16 22:18:02 ispc saslauthd[1800509]: pam_mysql - SELECT returned no result. Dec 16 22:18:02 ispc saslauthd[1800509]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:18:02 ispc saslauthd[1800509]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:19:01 ispc CRON[1800537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:19:02 ispc CRON[1800537]: pam_unix(cron:session): session closed for user root Dec 16 22:20:01 ispc CRON[1800572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:20:01 ispc CRON[1800573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:20:01 ispc CRON[1800574]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:20:01 ispc CRON[1800575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:20:01 ispc CRON[1800576]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:20:01 ispc CRON[1800574]: pam_unix(cron:session): session closed for user www-data Dec 16 22:20:01 ispc CRON[1800573]: pam_unix(cron:session): session closed for user root Dec 16 22:20:01 ispc CRON[1800576]: pam_unix(cron:session): session closed for user getmail Dec 16 22:20:01 ispc CRON[1800575]: pam_unix(cron:session): session closed for user root Dec 16 22:20:01 ispc CRON[1800572]: pam_unix(cron:session): session closed for user root Dec 16 22:20:43 ispc sshd[1800671]: Invalid user klape from 51.77.222.24 Dec 16 22:20:44 ispc sshd[1800673]: Invalid user ubuntu from 51.77.222.24 Dec 16 22:20:48 ispc postfix/smtpd[1800679]: sql auxprop plugin using mysql engine Dec 16 22:21:01 ispc CRON[1800687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:21:01 ispc CRON[1800688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:21:01 ispc CRON[1800687]: pam_unix(cron:session): session closed for user root Dec 16 22:21:01 ispc CRON[1800688]: pam_unix(cron:session): session closed for user root Dec 16 22:22:01 ispc CRON[1800728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:22:02 ispc CRON[1800728]: pam_unix(cron:session): session closed for user root Dec 16 22:22:03 ispc sshd[1800726]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:22:50 ispc postfix/smtpd[1800766]: sql auxprop plugin using mysql engine Dec 16 22:22:50 ispc saslauthd[1800767]: pam_mysql - SELECT returned no result. Dec 16 22:22:50 ispc saslauthd[1800767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:22:50 ispc saslauthd[1800767]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:23:01 ispc CRON[1800773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:23:02 ispc CRON[1800773]: pam_unix(cron:session): session closed for user root Dec 16 22:23:21 ispc sshd[1800792]: Invalid user racingkennel from 185.12.204.239 Dec 16 22:24:01 ispc CRON[1800810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:24:02 ispc CRON[1800810]: pam_unix(cron:session): session closed for user root Dec 16 22:24:36 ispc postfix/smtpd[1800838]: sql auxprop plugin using mysql engine Dec 16 22:24:36 ispc saslauthd[1800840]: pam_mysql - SELECT returned no result. Dec 16 22:24:36 ispc saslauthd[1800840]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:24:36 ispc saslauthd[1800840]: do_auth : auth failure: [user=data@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 22:25:01 ispc CRON[1800851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:25:01 ispc CRON[1800853]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:25:01 ispc CRON[1800850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:25:01 ispc CRON[1800852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:25:01 ispc CRON[1800851]: pam_unix(cron:session): session closed for user root Dec 16 22:25:01 ispc CRON[1800853]: pam_unix(cron:session): session closed for user getmail Dec 16 22:25:02 ispc CRON[1800852]: pam_unix(cron:session): session closed for user root Dec 16 22:25:02 ispc CRON[1800850]: pam_unix(cron:session): session closed for user root Dec 16 22:26:01 ispc CRON[1800952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:26:02 ispc CRON[1800952]: pam_unix(cron:session): session closed for user root Dec 16 22:27:01 ispc CRON[1800987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:27:01 ispc CRON[1800987]: pam_unix(cron:session): session closed for user root Dec 16 22:28:01 ispc CRON[1801032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:28:03 ispc CRON[1801032]: pam_unix(cron:session): session closed for user root Dec 16 22:28:32 ispc sshd[1801055]: Did not receive identification string from 146.190.23.193 Dec 16 22:28:32 ispc postfix/smtpd[1801056]: sql auxprop plugin using mysql engine Dec 16 22:28:33 ispc saslauthd[1801059]: pam_mysql - SELECT returned no result. Dec 16 22:28:33 ispc saslauthd[1801059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:28:33 ispc saslauthd[1801059]: do_auth : auth failure: [user=god2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:29:01 ispc CRON[1801072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:29:01 ispc CRON[1801072]: pam_unix(cron:session): session closed for user root Dec 16 22:29:17 ispc sshd[1801087]: Invalid user admin from 146.190.23.193 Dec 16 22:29:17 ispc sshd[1801089]: Did not receive identification string from 51.158.205.203 Dec 16 22:29:42 ispc sshd[1801099]: Invalid user diamantdi from 8.133.194.64 Dec 16 22:29:46 ispc sshd[1801106]: Invalid user ziplines from 213.199.57.249 Dec 16 22:29:49 ispc sshd[1801108]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:30:01 ispc sshd[1801114]: Invalid user admin from 146.190.23.193 Dec 16 22:30:01 ispc CRON[1801120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:30:01 ispc CRON[1801122]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:30:01 ispc CRON[1801123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:30:01 ispc CRON[1801121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:30:01 ispc CRON[1801124]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:30:01 ispc CRON[1801122]: pam_unix(cron:session): session closed for user www-data Dec 16 22:30:01 ispc CRON[1801124]: pam_unix(cron:session): session closed for user getmail Dec 16 22:30:01 ispc CRON[1801121]: pam_unix(cron:session): session closed for user root Dec 16 22:30:02 ispc CRON[1801123]: pam_unix(cron:session): session closed for user root Dec 16 22:30:02 ispc CRON[1801120]: pam_unix(cron:session): session closed for user root Dec 16 22:30:12 ispc sshd[1801198]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:30:12 ispc sshd[1801198]: Invalid user blceu from 203.205.27.100 Dec 16 22:30:16 ispc sshd[1801204]: Did not receive identification string from 64.227.64.110 Dec 16 22:30:36 ispc sshd[1801213]: Invalid user admin from 146.190.23.193 Dec 16 22:30:54 ispc postfix/smtpd[1801224]: sql auxprop plugin using mysql engine Dec 16 22:30:54 ispc saslauthd[1801226]: pam_mysql - SELECT returned no result. Dec 16 22:30:54 ispc saslauthd[1801226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:30:54 ispc saslauthd[1801226]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:31:01 ispc CRON[1801227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:31:01 ispc CRON[1801227]: pam_unix(cron:session): session closed for user root Dec 16 22:31:16 ispc sshd[1801248]: Invalid user admin from 146.190.23.193 Dec 16 22:31:51 ispc sshd[1801262]: Invalid user admin from 146.190.23.193 Dec 16 22:32:01 ispc CRON[1801268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:32:02 ispc CRON[1801268]: pam_unix(cron:session): session closed for user root Dec 16 22:32:07 ispc postfix/smtpd[1801286]: sql auxprop plugin using mysql engine Dec 16 22:32:26 ispc sshd[1801293]: Invalid user admin from 146.190.23.193 Dec 16 22:32:28 ispc CRON[1800167]: pam_unix(cron:session): session closed for user root Dec 16 22:33:01 ispc CRON[1801338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:33:07 ispc CRON[1801338]: pam_unix(cron:session): session closed for user root Dec 16 22:33:49 ispc sshd[1801359]: Did not receive identification string from 45.140.17.97 Dec 16 22:34:01 ispc CRON[1801360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:35:01 ispc CRON[1801396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:35:01 ispc CRON[1801397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:35:01 ispc CRON[1801398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:35:01 ispc CRON[1801399]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:35:01 ispc CRON[1801397]: pam_unix(cron:session): session closed for user root Dec 16 22:35:01 ispc CRON[1801399]: pam_unix(cron:session): session closed for user getmail Dec 16 22:35:01 ispc CRON[1801398]: pam_unix(cron:session): session closed for user root Dec 16 22:35:02 ispc CRON[1801396]: pam_unix(cron:session): session closed for user root Dec 16 22:36:01 ispc CRON[1801511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:36:02 ispc CRON[1801511]: pam_unix(cron:session): session closed for user root Dec 16 22:37:01 ispc CRON[1801555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:37:01 ispc CRON[1801555]: pam_unix(cron:session): session closed for user root Dec 16 22:38:01 ispc CRON[1801606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:38:02 ispc CRON[1801606]: pam_unix(cron:session): session closed for user root Dec 16 22:39:01 ispc CRON[1801645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:39:01 ispc CRON[1801646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:39:01 ispc CRON[1801645]: pam_unix(cron:session): session closed for user root Dec 16 22:39:02 ispc CRON[1801646]: pam_unix(cron:session): session closed for user root Dec 16 22:39:06 ispc postfix/smtpd[1801671]: sql auxprop plugin using mysql engine Dec 16 22:39:07 ispc saslauthd[1801674]: pam_mysql - SELECT returned no result. Dec 16 22:39:07 ispc saslauthd[1801674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:39:07 ispc saslauthd[1801674]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:39:09 ispc sshd[1801675]: Invalid user martof from 213.199.57.249 Dec 16 22:39:22 ispc postfix/smtpd[1801683]: sql auxprop plugin using mysql engine Dec 16 22:40:01 ispc CRON[1801704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:40:01 ispc CRON[1801706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:40:01 ispc CRON[1801703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:40:01 ispc CRON[1801707]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:40:01 ispc CRON[1801705]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:40:01 ispc CRON[1801705]: pam_unix(cron:session): session closed for user www-data Dec 16 22:40:01 ispc CRON[1801704]: pam_unix(cron:session): session closed for user root Dec 16 22:40:01 ispc CRON[1801707]: pam_unix(cron:session): session closed for user getmail Dec 16 22:40:01 ispc CRON[1801706]: pam_unix(cron:session): session closed for user root Dec 16 22:40:01 ispc CRON[1801703]: pam_unix(cron:session): session closed for user root Dec 16 22:41:01 ispc CRON[1801809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:41:02 ispc CRON[1801809]: pam_unix(cron:session): session closed for user root Dec 16 22:42:01 ispc CRON[1801847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:42:01 ispc CRON[1801847]: pam_unix(cron:session): session closed for user root Dec 16 22:43:00 ispc sshd[1801896]: Did not receive identification string from 194.0.234.20 Dec 16 22:43:01 ispc CRON[1801897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:43:02 ispc CRON[1801897]: pam_unix(cron:session): session closed for user root Dec 16 22:44:01 ispc CRON[1801940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:44:01 ispc CRON[1801940]: pam_unix(cron:session): session closed for user root Dec 16 22:44:41 ispc postfix/smtpd[1801971]: sql auxprop plugin using mysql engine Dec 16 22:44:42 ispc saslauthd[1801974]: pam_mysql - SELECT returned no result. Dec 16 22:44:42 ispc saslauthd[1801974]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:44:42 ispc saslauthd[1801974]: do_auth : auth failure: [user=gonzo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:44:55 ispc sshd[1801981]: Invalid user ziplines from 152.53.239.119 Dec 16 22:45:01 ispc CRON[1801990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:45:01 ispc CRON[1801989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:45:01 ispc CRON[1801991]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:45:01 ispc CRON[1801988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:45:01 ispc CRON[1801989]: pam_unix(cron:session): session closed for user root Dec 16 22:45:01 ispc CRON[1801991]: pam_unix(cron:session): session closed for user getmail Dec 16 22:45:01 ispc CRON[1801990]: pam_unix(cron:session): session closed for user root Dec 16 22:45:02 ispc CRON[1801988]: pam_unix(cron:session): session closed for user root Dec 16 22:46:00 ispc sshd[1802086]: Invalid user admin from 64.227.64.110 Dec 16 22:46:01 ispc CRON[1802092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:46:01 ispc CRON[1802092]: pam_unix(cron:session): session closed for user root Dec 16 22:46:37 ispc sshd[1802116]: Invalid user admin from 64.227.64.110 Dec 16 22:46:44 ispc postfix/smtpd[1802122]: sql auxprop plugin using mysql engine Dec 16 22:46:45 ispc saslauthd[1802124]: pam_mysql - SELECT returned no result. Dec 16 22:46:45 ispc saslauthd[1802124]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:46:45 ispc saslauthd[1802124]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:47:01 ispc CRON[1802133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:47:02 ispc CRON[1802133]: pam_unix(cron:session): session closed for user root Dec 16 22:47:11 ispc sshd[1802144]: Invalid user blceu from 148.216.54.17 Dec 16 22:47:14 ispc sshd[1802150]: Invalid user admin from 64.227.64.110 Dec 16 22:47:50 ispc sshd[1802168]: Invalid user admin from 64.227.64.110 Dec 16 22:48:01 ispc CRON[1802179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:48:02 ispc CRON[1802179]: pam_unix(cron:session): session closed for user root Dec 16 22:48:23 ispc sshd[1802198]: Invalid user admin from 64.227.64.110 Dec 16 22:48:52 ispc sshd[1802212]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 22:48:52 ispc sshd[1802212]: Invalid user blceu from 103.28.37.227 Dec 16 22:48:56 ispc sshd[1802218]: Invalid user admin from 64.227.64.110 Dec 16 22:49:01 ispc CRON[1802227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:49:02 ispc CRON[1802227]: pam_unix(cron:session): session closed for user root Dec 16 22:50:01 ispc CRON[1802263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:50:01 ispc CRON[1802264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:50:01 ispc CRON[1802265]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 22:50:01 ispc CRON[1802266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:50:01 ispc CRON[1802267]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:50:01 ispc CRON[1802264]: pam_unix(cron:session): session closed for user root Dec 16 22:50:01 ispc CRON[1802265]: pam_unix(cron:session): session closed for user www-data Dec 16 22:50:01 ispc CRON[1802267]: pam_unix(cron:session): session closed for user getmail Dec 16 22:50:02 ispc CRON[1802263]: pam_unix(cron:session): session closed for user root Dec 16 22:50:02 ispc CRON[1802266]: pam_unix(cron:session): session closed for user root Dec 16 22:51:01 ispc CRON[1802369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:51:02 ispc CRON[1802369]: pam_unix(cron:session): session closed for user root Dec 16 22:51:17 ispc postfix/smtpd[1802388]: sql auxprop plugin using mysql engine Dec 16 22:51:22 ispc saslauthd[1802391]: pam_mysql - SELECT returned no result. Dec 16 22:51:22 ispc saslauthd[1802391]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:51:22 ispc saslauthd[1802391]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:52:01 ispc CRON[1802408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:52:01 ispc CRON[1802408]: pam_unix(cron:session): session closed for user root Dec 16 22:53:01 ispc CRON[1802452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:53:02 ispc CRON[1802452]: pam_unix(cron:session): session closed for user root Dec 16 22:53:10 ispc sshd[1802467]: Did not receive identification string from 192.227.134.84 Dec 16 22:54:01 ispc CRON[1802493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:54:02 ispc CRON[1802493]: pam_unix(cron:session): session closed for user root Dec 16 22:54:16 ispc postfix/smtpd[1802508]: sql auxprop plugin using mysql engine Dec 16 22:54:22 ispc CRON[1801360]: pam_unix(cron:session): session closed for user root Dec 16 22:54:43 ispc saslauthd[1802516]: pam_mysql - SELECT returned no result. Dec 16 22:54:43 ispc saslauthd[1802516]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:54:43 ispc saslauthd[1802516]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:55:01 ispc CRON[1802517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:55:01 ispc CRON[1802518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:55:01 ispc CRON[1802519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:55:01 ispc CRON[1802520]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 22:55:01 ispc CRON[1802518]: pam_unix(cron:session): session closed for user root Dec 16 22:55:01 ispc CRON[1802520]: pam_unix(cron:session): session closed for user getmail Dec 16 22:55:02 ispc CRON[1802517]: pam_unix(cron:session): session closed for user root Dec 16 22:55:07 ispc CRON[1802519]: pam_unix(cron:session): session closed for user root Dec 16 22:56:01 ispc CRON[1802600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:56:39 ispc sshd[1802630]: Invalid user admin from 45.119.213.109 Dec 16 22:57:02 ispc CRON[1802643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:57:02 ispc CRON[1802643]: pam_unix(cron:session): session closed for user root Dec 16 22:57:13 ispc postfix/smtpd[1802663]: sql auxprop plugin using mysql engine Dec 16 22:57:15 ispc postfix/smtpd[1802665]: sql auxprop plugin using mysql engine Dec 16 22:58:01 ispc CRON[1802692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:58:02 ispc sshd[1802690]: Invalid user diamantdi from 185.12.204.239 Dec 16 22:58:02 ispc CRON[1802692]: pam_unix(cron:session): session closed for user root Dec 16 22:58:26 ispc saslauthd[1802719]: pam_mysql - SELECT returned no result. Dec 16 22:58:26 ispc saslauthd[1802719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 22:58:26 ispc saslauthd[1802719]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 22:59:00 ispc sshd[1802734]: Invalid user anoraksro from 185.12.204.239 Dec 16 22:59:01 ispc CRON[1802736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 22:59:02 ispc CRON[1802736]: pam_unix(cron:session): session closed for user root Dec 16 23:00:01 ispc CRON[1802777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:00:01 ispc CRON[1802778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:00:01 ispc CRON[1802779]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:00:01 ispc CRON[1802780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:00:01 ispc CRON[1802781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:00:01 ispc CRON[1802782]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:00:02 ispc CRON[1802779]: pam_unix(cron:session): session closed for user www-data Dec 16 23:00:02 ispc CRON[1802778]: pam_unix(cron:session): session closed for user root Dec 16 23:00:02 ispc CRON[1802782]: pam_unix(cron:session): session closed for user getmail Dec 16 23:00:02 ispc CRON[1802781]: pam_unix(cron:session): session closed for user root Dec 16 23:00:02 ispc CRON[1802780]: pam_unix(cron:session): session closed for user root Dec 16 23:00:03 ispc CRON[1802777]: pam_unix(cron:session): session closed for user root Dec 16 23:00:27 ispc postfix/smtpd[1802946]: sql auxprop plugin using mysql engine Dec 16 23:00:28 ispc saslauthd[1802948]: pam_mysql - SELECT returned no result. Dec 16 23:00:28 ispc saslauthd[1802948]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:00:28 ispc saslauthd[1802948]: do_auth : auth failure: [user=gopher] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:00:52 ispc sshd[1802957]: Invalid user admin from 45.119.213.109 Dec 16 23:01:01 ispc CRON[1802963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:01:01 ispc CRON[1802963]: pam_unix(cron:session): session closed for user root Dec 16 23:01:40 ispc sshd[1802978]: Did not receive identification string from 111.7.172.14 Dec 16 23:01:44 ispc sshd[1802993]: Invalid user klape from 187.190.35.163 Dec 16 23:01:45 ispc sshd[1802995]: Invalid user ubuntu from 187.190.35.163 Dec 16 23:02:01 ispc CRON[1803006]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 16 23:02:01 ispc CRON[1803007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:02:02 ispc CRON[1803007]: pam_unix(cron:session): session closed for user root Dec 16 23:02:32 ispc CRON[1803006]: pam_unix(cron:session): session closed for user logcheck Dec 16 23:02:35 ispc postfix/smtpd[1804048]: sql auxprop plugin using mysql engine Dec 16 23:02:39 ispc postfix/smtpd[1804050]: sql auxprop plugin using mysql engine Dec 16 23:02:39 ispc saslauthd[1804051]: pam_mysql - SELECT returned no result. Dec 16 23:02:39 ispc saslauthd[1804051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:02:39 ispc saslauthd[1804051]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:02:51 ispc postfix/smtpd[1804063]: sql auxprop plugin using mysql engine Dec 16 23:03:01 ispc CRON[1804068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:03:02 ispc CRON[1804068]: pam_unix(cron:session): session closed for user root Dec 16 23:04:01 ispc CRON[1804107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:04:02 ispc CRON[1804107]: pam_unix(cron:session): session closed for user root Dec 16 23:05:01 ispc CRON[1804142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:05:01 ispc CRON[1804143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:05:01 ispc CRON[1804144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:05:01 ispc CRON[1804145]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:05:01 ispc CRON[1804143]: pam_unix(cron:session): session closed for user root Dec 16 23:05:01 ispc CRON[1804145]: pam_unix(cron:session): session closed for user getmail Dec 16 23:05:02 ispc CRON[1804144]: pam_unix(cron:session): session closed for user root Dec 16 23:05:02 ispc CRON[1804142]: pam_unix(cron:session): session closed for user root Dec 16 23:05:59 ispc sshd[1804242]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 23:06:01 ispc CRON[1804245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:06:02 ispc CRON[1804245]: pam_unix(cron:session): session closed for user root Dec 16 23:07:01 ispc CRON[1804282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:07:01 ispc CRON[1804282]: pam_unix(cron:session): session closed for user root Dec 16 23:07:29 ispc sshd[1804305]: Did not receive identification string from 213.165.71.107 Dec 16 23:07:52 ispc sshd[1804318]: Invalid user martof from 152.53.239.119 Dec 16 23:08:01 ispc CRON[1804330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:08:02 ispc CRON[1804330]: pam_unix(cron:session): session closed for user root Dec 16 23:09:01 ispc CRON[1804369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:09:01 ispc CRON[1804368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:09:01 ispc CRON[1804368]: pam_unix(cron:session): session closed for user root Dec 16 23:09:01 ispc CRON[1804369]: pam_unix(cron:session): session closed for user root Dec 16 23:10:01 ispc CRON[1804424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:10:01 ispc CRON[1804422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:10:01 ispc CRON[1804421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:10:01 ispc CRON[1804423]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:10:01 ispc CRON[1804425]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:10:01 ispc CRON[1804423]: pam_unix(cron:session): session closed for user www-data Dec 16 23:10:01 ispc CRON[1804422]: pam_unix(cron:session): session closed for user root Dec 16 23:10:01 ispc CRON[1804425]: pam_unix(cron:session): session closed for user getmail Dec 16 23:10:01 ispc CRON[1804424]: pam_unix(cron:session): session closed for user root Dec 16 23:10:02 ispc CRON[1804421]: pam_unix(cron:session): session closed for user root Dec 16 23:10:42 ispc postfix/smtpd[1804518]: sql auxprop plugin using mysql engine Dec 16 23:10:42 ispc saslauthd[1804521]: pam_mysql - SELECT returned no result. Dec 16 23:10:42 ispc saslauthd[1804521]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:10:42 ispc saslauthd[1804521]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:11:01 ispc CRON[1804526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:11:01 ispc CRON[1804526]: pam_unix(cron:session): session closed for user root Dec 16 23:12:01 ispc CRON[1804564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:12:02 ispc CRON[1804564]: pam_unix(cron:session): session closed for user root Dec 16 23:12:20 ispc saslauthd[1804584]: pam_mysql - SELECT returned no result. Dec 16 23:12:20 ispc saslauthd[1804584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:12:20 ispc saslauthd[1804584]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:13:01 ispc CRON[1804612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:13:01 ispc CRON[1804612]: pam_unix(cron:session): session closed for user root Dec 16 23:14:01 ispc CRON[1804649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:14:02 ispc CRON[1804649]: pam_unix(cron:session): session closed for user root Dec 16 23:14:45 ispc postfix/smtpd[1804681]: sql auxprop plugin using mysql engine Dec 16 23:14:46 ispc saslauthd[1804683]: pam_mysql - SELECT returned no result. Dec 16 23:14:46 ispc saslauthd[1804683]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:14:46 ispc saslauthd[1804683]: do_auth : auth failure: [user=student] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:15:01 ispc CRON[1804691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:15:01 ispc CRON[1804692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:15:01 ispc CRON[1804693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:15:01 ispc CRON[1804694]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:15:01 ispc CRON[1804692]: pam_unix(cron:session): session closed for user root Dec 16 23:15:01 ispc CRON[1804694]: pam_unix(cron:session): session closed for user getmail Dec 16 23:15:01 ispc CRON[1804693]: pam_unix(cron:session): session closed for user root Dec 16 23:15:01 ispc CRON[1804691]: pam_unix(cron:session): session closed for user root Dec 16 23:15:44 ispc sshd[1804789]: Invalid user klape from 36.50.177.171 Dec 16 23:15:47 ispc sshd[1804791]: Invalid user ubuntu from 36.50.177.171 Dec 16 23:16:01 ispc CRON[1804802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:16:02 ispc CRON[1804802]: pam_unix(cron:session): session closed for user root Dec 16 23:16:07 ispc saslauthd[1804817]: pam_mysql - SELECT returned no result. Dec 16 23:16:07 ispc saslauthd[1804817]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:16:07 ispc saslauthd[1804817]: do_auth : auth failure: [user=gropher] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:16:19 ispc CRON[1802600]: pam_unix(cron:session): session closed for user root Dec 16 23:16:21 ispc sshd[1804818]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 23:17:01 ispc CRON[1804825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:17:07 ispc CRON[1804825]: pam_unix(cron:session): session closed for user root Dec 16 23:17:35 ispc saslauthd[1804838]: pam_mysql - SELECT returned no result. Dec 16 23:17:35 ispc saslauthd[1804838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:17:35 ispc saslauthd[1804838]: do_auth : auth failure: [user=account@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 16 23:18:01 ispc CRON[1804849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:18:06 ispc postfix/smtpd[1804861]: sql auxprop plugin using mysql engine Dec 16 23:19:00 ispc saslauthd[1804887]: pam_mysql - SELECT returned no result. Dec 16 23:19:00 ispc saslauthd[1804887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:19:00 ispc saslauthd[1804887]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:19:01 ispc CRON[1804888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:19:01 ispc CRON[1804888]: pam_unix(cron:session): session closed for user root Dec 16 23:20:01 ispc CRON[1804924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:20:01 ispc CRON[1804925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:20:01 ispc CRON[1804928]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:20:01 ispc CRON[1804927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:20:01 ispc CRON[1804926]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:20:01 ispc CRON[1804925]: pam_unix(cron:session): session closed for user root Dec 16 23:20:01 ispc CRON[1804926]: pam_unix(cron:session): session closed for user www-data Dec 16 23:20:01 ispc CRON[1804928]: pam_unix(cron:session): session closed for user getmail Dec 16 23:20:02 ispc CRON[1804927]: pam_unix(cron:session): session closed for user root Dec 16 23:20:02 ispc CRON[1804924]: pam_unix(cron:session): session closed for user root Dec 16 23:21:01 ispc CRON[1805032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:21:01 ispc CRON[1805031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:21:01 ispc CRON[1805031]: pam_unix(cron:session): session closed for user root Dec 16 23:21:01 ispc CRON[1805032]: pam_unix(cron:session): session closed for user root Dec 16 23:22:01 ispc CRON[1805069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:22:02 ispc CRON[1805069]: pam_unix(cron:session): session closed for user root Dec 16 23:23:01 ispc CRON[1805113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:23:01 ispc CRON[1805113]: pam_unix(cron:session): session closed for user root Dec 16 23:24:01 ispc CRON[1805151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:24:02 ispc CRON[1805151]: pam_unix(cron:session): session closed for user root Dec 16 23:24:27 ispc postfix/smtpd[1805171]: sql auxprop plugin using mysql engine Dec 16 23:24:27 ispc saslauthd[1805174]: pam_mysql - SELECT returned no result. Dec 16 23:24:27 ispc saslauthd[1805174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:24:27 ispc saslauthd[1805174]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:25:01 ispc CRON[1805195]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:25:01 ispc CRON[1805192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:25:01 ispc CRON[1805193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:25:01 ispc CRON[1805194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:25:01 ispc CRON[1805193]: pam_unix(cron:session): session closed for user root Dec 16 23:25:01 ispc CRON[1805195]: pam_unix(cron:session): session closed for user getmail Dec 16 23:25:01 ispc CRON[1805194]: pam_unix(cron:session): session closed for user root Dec 16 23:25:01 ispc CRON[1805192]: pam_unix(cron:session): session closed for user root Dec 16 23:26:01 ispc CRON[1805293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:26:02 ispc CRON[1805293]: pam_unix(cron:session): session closed for user root Dec 16 23:27:01 ispc CRON[1805332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:27:01 ispc CRON[1805332]: pam_unix(cron:session): session closed for user root Dec 16 23:27:10 ispc postfix/smtpd[1805348]: sql auxprop plugin using mysql engine Dec 16 23:27:10 ispc saslauthd[1805350]: pam_mysql - SELECT returned no result. Dec 16 23:27:10 ispc saslauthd[1805350]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:27:10 ispc saslauthd[1805350]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:28:01 ispc CRON[1805386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:28:01 ispc CRON[1805386]: pam_unix(cron:session): session closed for user root Dec 16 23:28:41 ispc postfix/smtpd[1805416]: sql auxprop plugin using mysql engine Dec 16 23:29:01 ispc CRON[1805426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:29:02 ispc CRON[1805426]: pam_unix(cron:session): session closed for user root Dec 16 23:30:01 ispc CRON[1805465]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:30:01 ispc CRON[1805463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:30:01 ispc CRON[1805464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:30:01 ispc CRON[1805466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:30:01 ispc CRON[1805467]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:30:01 ispc CRON[1805465]: pam_unix(cron:session): session closed for user www-data Dec 16 23:30:01 ispc CRON[1805464]: pam_unix(cron:session): session closed for user root Dec 16 23:30:01 ispc CRON[1805467]: pam_unix(cron:session): session closed for user getmail Dec 16 23:30:01 ispc CRON[1805466]: pam_unix(cron:session): session closed for user root Dec 16 23:30:02 ispc CRON[1805463]: pam_unix(cron:session): session closed for user root Dec 16 23:30:07 ispc sshd[1805541]: Invalid user blceu from 173.212.237.203 Dec 16 23:30:32 ispc postfix/smtpd[1805556]: sql auxprop plugin using mysql engine Dec 16 23:30:32 ispc saslauthd[1805558]: pam_mysql - SELECT returned no result. Dec 16 23:30:32 ispc saslauthd[1805558]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:30:32 ispc saslauthd[1805558]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:30:41 ispc sshd[1805559]: Invalid user stefanie from 62.60.131.157 Dec 16 23:31:01 ispc CRON[1805569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:31:01 ispc CRON[1805569]: pam_unix(cron:session): session closed for user root Dec 16 23:31:28 ispc sshd[1805594]: Invalid user martof from 173.212.237.203 Dec 16 23:31:49 ispc saslauthd[1805604]: pam_mysql - SELECT returned no result. Dec 16 23:31:49 ispc saslauthd[1805604]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:31:49 ispc saslauthd[1805604]: do_auth : auth failure: [user=guest] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:32:01 ispc CRON[1805609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:32:01 ispc CRON[1805609]: pam_unix(cron:session): session closed for user root Dec 16 23:33:02 ispc CRON[1805651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:33:02 ispc CRON[1805651]: pam_unix(cron:session): session closed for user root Dec 16 23:33:28 ispc sshd[1805675]: Invalid user matlbula from 8.133.194.64 Dec 16 23:34:01 ispc CRON[1805693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:34:01 ispc CRON[1805693]: pam_unix(cron:session): session closed for user root Dec 16 23:35:01 ispc CRON[1805730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:35:01 ispc CRON[1805728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:35:01 ispc CRON[1805729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:35:01 ispc CRON[1805731]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:35:01 ispc CRON[1805729]: pam_unix(cron:session): session closed for user root Dec 16 23:35:01 ispc CRON[1805731]: pam_unix(cron:session): session closed for user getmail Dec 16 23:35:02 ispc CRON[1805730]: pam_unix(cron:session): session closed for user root Dec 16 23:35:02 ispc CRON[1805728]: pam_unix(cron:session): session closed for user root Dec 16 23:35:08 ispc postfix/smtpd[1805808]: sql auxprop plugin using mysql engine Dec 16 23:35:09 ispc saslauthd[1805810]: pam_mysql - SELECT returned no result. Dec 16 23:35:09 ispc saslauthd[1805810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:35:09 ispc saslauthd[1805810]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:36:01 ispc CRON[1805833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:36:01 ispc CRON[1805833]: pam_unix(cron:session): session closed for user root Dec 16 23:37:01 ispc CRON[1805872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:37:02 ispc CRON[1805872]: pam_unix(cron:session): session closed for user root Dec 16 23:38:01 ispc CRON[1805920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:38:01 ispc CRON[1805920]: pam_unix(cron:session): session closed for user root Dec 16 23:38:17 ispc postfix/smtpd[1805937]: sql auxprop plugin using mysql engine Dec 16 23:38:17 ispc CRON[1804849]: pam_unix(cron:session): session closed for user root Dec 16 23:39:01 ispc CRON[1805944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:39:01 ispc CRON[1805945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:39:01 ispc CRON[1805944]: pam_unix(cron:session): session closed for user root Dec 16 23:39:06 ispc CRON[1805945]: pam_unix(cron:session): session closed for user root Dec 16 23:40:01 ispc CRON[1805968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:40:01 ispc CRON[1805969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:40:01 ispc CRON[1805972]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:40:01 ispc CRON[1805971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:40:01 ispc CRON[1805970]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:40:02 ispc CRON[1805970]: pam_unix(cron:session): session closed for user www-data Dec 16 23:40:02 ispc CRON[1805969]: pam_unix(cron:session): session closed for user root Dec 16 23:40:02 ispc CRON[1805972]: pam_unix(cron:session): session closed for user getmail Dec 16 23:40:02 ispc CRON[1805968]: pam_unix(cron:session): session closed for user root Dec 16 23:40:16 ispc sshd[1806055]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 23:41:01 ispc CRON[1806073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:41:01 ispc CRON[1806073]: pam_unix(cron:session): session closed for user root Dec 16 23:42:01 ispc CRON[1806115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:42:02 ispc CRON[1806115]: pam_unix(cron:session): session closed for user root Dec 16 23:42:08 ispc sshd[1806130]: Invalid user admin from 103.77.207.53 Dec 16 23:43:01 ispc CRON[1806161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:43:02 ispc CRON[1806161]: pam_unix(cron:session): session closed for user root Dec 16 23:43:07 ispc postfix/smtpd[1806176]: sql auxprop plugin using mysql engine Dec 16 23:43:07 ispc saslauthd[1806179]: pam_mysql - SELECT returned no result. Dec 16 23:43:07 ispc saslauthd[1806179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:43:07 ispc saslauthd[1806179]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:44:01 ispc CRON[1806204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:44:01 ispc CRON[1806204]: pam_unix(cron:session): session closed for user root Dec 16 23:45:01 ispc CRON[1806240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:45:01 ispc CRON[1806241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:45:01 ispc CRON[1806242]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:45:01 ispc CRON[1806239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:45:01 ispc CRON[1806240]: pam_unix(cron:session): session closed for user root Dec 16 23:45:01 ispc CRON[1806242]: pam_unix(cron:session): session closed for user getmail Dec 16 23:45:01 ispc CRON[1806239]: pam_unix(cron:session): session closed for user root Dec 16 23:45:02 ispc CRON[1806241]: pam_unix(cron:session): session closed for user root Dec 16 23:46:01 ispc CRON[1806340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:46:01 ispc CRON[1806340]: pam_unix(cron:session): session closed for user root Dec 16 23:46:18 ispc sshd[1806357]: Did not receive identification string from 192.227.134.84 Dec 16 23:47:01 ispc CRON[1806380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:47:02 ispc CRON[1806380]: pam_unix(cron:session): session closed for user root Dec 16 23:47:24 ispc postfix/smtpd[1806400]: sql auxprop plugin using mysql engine Dec 16 23:47:25 ispc saslauthd[1806403]: pam_mysql - SELECT returned no result. Dec 16 23:47:25 ispc saslauthd[1806403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:47:25 ispc saslauthd[1806403]: do_auth : auth failure: [user=guest1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:48:01 ispc CRON[1806429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:48:01 ispc CRON[1806429]: pam_unix(cron:session): session closed for user root Dec 16 23:49:01 ispc CRON[1806466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:49:01 ispc CRON[1806466]: pam_unix(cron:session): session closed for user root Dec 16 23:49:18 ispc sshd[1806481]: Invalid user matlbula from 117.50.70.169 Dec 16 23:50:01 ispc CRON[1806504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:50:01 ispc CRON[1806505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:50:01 ispc CRON[1806506]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 16 23:50:01 ispc CRON[1806508]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:50:01 ispc CRON[1806507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:50:02 ispc CRON[1806506]: pam_unix(cron:session): session closed for user www-data Dec 16 23:50:02 ispc CRON[1806505]: pam_unix(cron:session): session closed for user root Dec 16 23:50:02 ispc CRON[1806508]: pam_unix(cron:session): session closed for user getmail Dec 16 23:50:02 ispc CRON[1806507]: pam_unix(cron:session): session closed for user root Dec 16 23:50:02 ispc CRON[1806504]: pam_unix(cron:session): session closed for user root Dec 16 23:51:01 ispc CRON[1806602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:51:01 ispc CRON[1806602]: pam_unix(cron:session): session closed for user root Dec 16 23:51:08 ispc postfix/smtpd[1806617]: sql auxprop plugin using mysql engine Dec 16 23:51:08 ispc saslauthd[1806620]: pam_mysql - SELECT returned no result. Dec 16 23:51:08 ispc saslauthd[1806620]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:51:08 ispc saslauthd[1806620]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:52:01 ispc CRON[1806642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:52:02 ispc CRON[1806642]: pam_unix(cron:session): session closed for user root Dec 16 23:52:29 ispc sshd[1806665]: Invalid user blceu from 213.199.57.249 Dec 16 23:53:01 ispc CRON[1806689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:53:02 ispc CRON[1806689]: pam_unix(cron:session): session closed for user root Dec 16 23:53:59 ispc postfix/smtpd[1806724]: sql auxprop plugin using mysql engine Dec 16 23:54:01 ispc CRON[1806726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:54:01 ispc CRON[1806726]: pam_unix(cron:session): session closed for user root Dec 16 23:54:02 ispc sshd[1806737]: reverse mapping checking getaddrinfo for hosted-by.vmheaven.io [45.153.34.87] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 16 23:54:02 ispc sshd[1806737]: Invalid user from 45.153.34.87 Dec 16 23:54:08 ispc sshd[1806743]: Invalid user blceu from 175.125.95.234 Dec 16 23:55:01 ispc CRON[1806768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:55:01 ispc CRON[1806769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:55:01 ispc CRON[1806770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:55:01 ispc CRON[1806771]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 16 23:55:01 ispc CRON[1806769]: pam_unix(cron:session): session closed for user root Dec 16 23:55:01 ispc CRON[1806771]: pam_unix(cron:session): session closed for user getmail Dec 16 23:55:01 ispc CRON[1806770]: pam_unix(cron:session): session closed for user root Dec 16 23:55:02 ispc CRON[1806768]: pam_unix(cron:session): session closed for user root Dec 16 23:56:01 ispc CRON[1806876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:56:01 ispc CRON[1806876]: pam_unix(cron:session): session closed for user root Dec 16 23:57:01 ispc CRON[1806917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:57:02 ispc CRON[1806917]: pam_unix(cron:session): session closed for user root Dec 16 23:57:37 ispc postfix/smtpd[1806944]: sql auxprop plugin using mysql engine Dec 16 23:57:38 ispc saslauthd[1806947]: pam_mysql - SELECT returned no result. Dec 16 23:57:38 ispc saslauthd[1806947]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:57:38 ispc saslauthd[1806947]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:58:01 ispc CRON[1806965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:58:02 ispc CRON[1806965]: pam_unix(cron:session): session closed for user root Dec 16 23:58:57 ispc saslauthd[1806998]: pam_mysql - SELECT returned no result. Dec 16 23:58:57 ispc saslauthd[1806998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 16 23:58:57 ispc saslauthd[1806998]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 16 23:59:01 ispc CRON[1807003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 16 23:59:01 ispc CRON[1807003]: pam_unix(cron:session): session closed for user root Dec 16 23:59:09 ispc sshd[1807014]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 16 23:59:09 ispc sshd[1807014]: Invalid user ziplines from 103.28.37.227 Dec 16 23:59:29 ispc sshd[1807027]: Invalid user klape from 103.164.20.29 Dec 16 23:59:30 ispc sshd[1807029]: Invalid user ubuntu from 103.164.20.29 Dec 17 00:00:01 ispc CRON[1807048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:00:01 ispc CRON[1807049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:00:01 ispc CRON[1807050]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:00:01 ispc CRON[1807051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:00:01 ispc CRON[1807052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:00:01 ispc CRON[1807053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:00:01 ispc CRON[1807054]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:00:01 ispc CRON[1807049]: pam_unix(cron:session): session closed for user root Dec 17 00:00:01 ispc CRON[1807050]: pam_unix(cron:session): session closed for user www-data Dec 17 00:00:01 ispc CRON[1807052]: pam_unix(cron:session): session closed for user root Dec 17 00:00:01 ispc CRON[1807054]: pam_unix(cron:session): session closed for user getmail Dec 17 00:00:02 ispc CRON[1807053]: pam_unix(cron:session): session closed for user root Dec 17 00:00:02 ispc CRON[1807048]: pam_unix(cron:session): session closed for user root Dec 17 00:00:02 ispc CRON[1807051]: pam_unix(cron:session): session closed for user root Dec 17 00:01:01 ispc CRON[1807326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:01:02 ispc CRON[1807326]: pam_unix(cron:session): session closed for user root Dec 17 00:01:02 ispc sshd[1807324]: Invalid user martof from 103.89.86.250 Dec 17 00:01:11 ispc CRON[1805971]: pam_unix(cron:session): session closed for user root Dec 17 00:02:01 ispc CRON[1807340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:02:01 ispc CRON[1807339]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 00:02:48 ispc CRON[1807339]: pam_unix(cron:session): session closed for user logcheck Dec 17 00:03:01 ispc CRON[1808395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:03:02 ispc postfix/smtpd[1808406]: sql auxprop plugin using mysql engine Dec 17 00:03:02 ispc CRON[1808395]: pam_unix(cron:session): session closed for user root Dec 17 00:03:14 ispc postfix/smtpd[1808420]: sql auxprop plugin using mysql engine Dec 17 00:03:15 ispc saslauthd[1808422]: pam_mysql - SELECT returned no result. Dec 17 00:03:15 ispc saslauthd[1808422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:03:15 ispc saslauthd[1808422]: do_auth : auth failure: [user=guru] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:03:22 ispc postfix/smtpd[1808427]: sql auxprop plugin using mysql engine Dec 17 00:04:01 ispc CRON[1808446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:04:01 ispc CRON[1808446]: pam_unix(cron:session): session closed for user root Dec 17 00:04:32 ispc sshd[1808470]: Invalid user ziplines from 211.45.175.153 Dec 17 00:05:01 ispc CRON[1808484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:05:01 ispc CRON[1808485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:05:01 ispc CRON[1808486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:05:01 ispc CRON[1808487]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:05:01 ispc CRON[1808485]: pam_unix(cron:session): session closed for user root Dec 17 00:05:01 ispc CRON[1808487]: pam_unix(cron:session): session closed for user getmail Dec 17 00:05:02 ispc CRON[1808484]: pam_unix(cron:session): session closed for user root Dec 17 00:05:02 ispc CRON[1808486]: pam_unix(cron:session): session closed for user root Dec 17 00:06:01 ispc CRON[1808584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:06:02 ispc CRON[1808584]: pam_unix(cron:session): session closed for user root Dec 17 00:07:01 ispc CRON[1808624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:07:01 ispc CRON[1808624]: pam_unix(cron:session): session closed for user root Dec 17 00:07:04 ispc sshd[1808635]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:07:04 ispc sshd[1808635]: Invalid user martof from 103.28.37.227 Dec 17 00:07:11 ispc postfix/smtpd[1808641]: sql auxprop plugin using mysql engine Dec 17 00:07:12 ispc saslauthd[1808644]: pam_mysql - SELECT returned no result. Dec 17 00:07:12 ispc saslauthd[1808644]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:07:12 ispc saslauthd[1808644]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:08:01 ispc CRON[1808675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:08:02 ispc CRON[1808675]: pam_unix(cron:session): session closed for user root Dec 17 00:08:36 ispc sshd[1808702]: Did not receive identification string from 165.232.94.36 Dec 17 00:09:01 ispc CRON[1808713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:09:01 ispc CRON[1808712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:09:01 ispc CRON[1808712]: pam_unix(cron:session): session closed for user root Dec 17 00:09:01 ispc CRON[1808713]: pam_unix(cron:session): session closed for user root Dec 17 00:09:58 ispc sshd[1808755]: Invalid user ziplines from 103.77.207.53 Dec 17 00:09:59 ispc sshd[1808761]: Did not receive identification string from 64.227.70.137 Dec 17 00:10:01 ispc CRON[1808762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:10:01 ispc CRON[1808763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:10:01 ispc CRON[1808765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:10:01 ispc CRON[1808766]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:10:01 ispc CRON[1808764]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:10:02 ispc CRON[1808763]: pam_unix(cron:session): session closed for user root Dec 17 00:10:02 ispc CRON[1808764]: pam_unix(cron:session): session closed for user www-data Dec 17 00:10:02 ispc CRON[1808766]: pam_unix(cron:session): session closed for user getmail Dec 17 00:10:02 ispc CRON[1808765]: pam_unix(cron:session): session closed for user root Dec 17 00:10:02 ispc CRON[1808762]: pam_unix(cron:session): session closed for user root Dec 17 00:10:25 ispc postfix/smtpd[1808849]: sql auxprop plugin using mysql engine Dec 17 00:10:26 ispc saslauthd[1808851]: pam_mysql - SELECT returned no result. Dec 17 00:10:26 ispc saslauthd[1808851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:10:26 ispc saslauthd[1808851]: do_auth : auth failure: [user=access@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 00:11:01 ispc CRON[1808870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:11:02 ispc CRON[1808870]: pam_unix(cron:session): session closed for user root Dec 17 00:12:01 ispc CRON[1808910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:12:02 ispc CRON[1808910]: pam_unix(cron:session): session closed for user root Dec 17 00:12:45 ispc saslauthd[1808943]: pam_mysql - SELECT returned no result. Dec 17 00:12:45 ispc saslauthd[1808943]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:12:45 ispc saslauthd[1808943]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:12:47 ispc saslauthd[1808944]: pam_mysql - SELECT returned no result. Dec 17 00:12:47 ispc saslauthd[1808944]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:12:47 ispc saslauthd[1808944]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:13:01 ispc CRON[1808960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:13:02 ispc CRON[1808960]: pam_unix(cron:session): session closed for user root Dec 17 00:14:01 ispc CRON[1808998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:14:02 ispc CRON[1808998]: pam_unix(cron:session): session closed for user root Dec 17 00:15:01 ispc CRON[1809038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:15:01 ispc CRON[1809039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:15:01 ispc CRON[1809040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:15:01 ispc CRON[1809041]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:15:01 ispc CRON[1809039]: pam_unix(cron:session): session closed for user root Dec 17 00:15:01 ispc CRON[1809041]: pam_unix(cron:session): session closed for user getmail Dec 17 00:15:02 ispc CRON[1809038]: pam_unix(cron:session): session closed for user root Dec 17 00:15:02 ispc CRON[1809040]: pam_unix(cron:session): session closed for user root Dec 17 00:15:13 ispc postfix/smtpd[1809119]: sql auxprop plugin using mysql engine Dec 17 00:15:13 ispc saslauthd[1809124]: pam_mysql - SELECT returned no result. Dec 17 00:15:13 ispc saslauthd[1809124]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:15:13 ispc saslauthd[1809124]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:16:01 ispc CRON[1809147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:16:01 ispc CRON[1809147]: pam_unix(cron:session): session closed for user root Dec 17 00:16:09 ispc sshd[1809162]: Invalid user blceu from 220.196.191.58 Dec 17 00:17:01 ispc CRON[1809194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:17:01 ispc sshd[1809193]: Did not receive identification string from 165.232.94.36 Dec 17 00:17:02 ispc CRON[1809194]: pam_unix(cron:session): session closed for user root Dec 17 00:17:11 ispc sshd[1809211]: Invalid user ziplines from 148.216.54.17 Dec 17 00:18:01 ispc CRON[1809247]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 00:18:01 ispc CRON[1809248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:18:01 ispc sshd[1809245]: Invalid user blceu from 165.227.38.205 Dec 17 00:18:02 ispc CRON[1809248]: pam_unix(cron:session): session closed for user root Dec 17 00:18:07 ispc CRON[1809247]: pam_unix(cron:session): session closed for user amavis Dec 17 00:18:08 ispc postfix/smtpd[1809274]: sql auxprop plugin using mysql engine Dec 17 00:19:01 ispc CRON[1809308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:19:01 ispc CRON[1809308]: pam_unix(cron:session): session closed for user root Dec 17 00:19:03 ispc postfix/smtpd[1809319]: sql auxprop plugin using mysql engine Dec 17 00:19:04 ispc saslauthd[1809322]: pam_mysql - SELECT returned no result. Dec 17 00:19:04 ispc saslauthd[1809322]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:19:04 ispc saslauthd[1809322]: do_auth : auth failure: [user=halt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:20:01 ispc CRON[1809356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:20:01 ispc CRON[1809357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:20:01 ispc CRON[1809359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:20:01 ispc CRON[1809360]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:20:01 ispc CRON[1809358]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:20:01 ispc CRON[1809358]: pam_unix(cron:session): session closed for user www-data Dec 17 00:20:01 ispc CRON[1809357]: pam_unix(cron:session): session closed for user root Dec 17 00:20:02 ispc CRON[1809360]: pam_unix(cron:session): session closed for user getmail Dec 17 00:20:02 ispc CRON[1809359]: pam_unix(cron:session): session closed for user root Dec 17 00:20:04 ispc CRON[1809356]: pam_unix(cron:session): session closed for user root Dec 17 00:21:01 ispc CRON[1809464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:21:01 ispc CRON[1809465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:21:01 ispc CRON[1809464]: pam_unix(cron:session): session closed for user root Dec 17 00:21:02 ispc CRON[1809465]: pam_unix(cron:session): session closed for user root Dec 17 00:22:01 ispc CRON[1809507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:22:01 ispc CRON[1809507]: pam_unix(cron:session): session closed for user root Dec 17 00:22:02 ispc sshd[1809523]: Did not receive identification string from 45.140.17.97 Dec 17 00:22:03 ispc postfix/smtpd[1809524]: sql auxprop plugin using mysql engine Dec 17 00:22:24 ispc CRON[1807340]: pam_unix(cron:session): session closed for user root Dec 17 00:23:01 ispc CRON[1809550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:23:03 ispc saslauthd[1809558]: pam_mysql - SELECT returned no result. Dec 17 00:23:03 ispc saslauthd[1809558]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:23:03 ispc saslauthd[1809558]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:23:07 ispc CRON[1809550]: pam_unix(cron:session): session closed for user root Dec 17 00:24:01 ispc CRON[1809571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:24:07 ispc sshd[1809584]: Invalid user admin from 64.227.70.137 Dec 17 00:24:42 ispc sshd[1809603]: Invalid user admin from 64.227.70.137 Dec 17 00:25:01 ispc CRON[1809613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:25:01 ispc CRON[1809614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:25:01 ispc CRON[1809615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:25:01 ispc CRON[1809616]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:25:01 ispc CRON[1809614]: pam_unix(cron:session): session closed for user root Dec 17 00:25:01 ispc CRON[1809616]: pam_unix(cron:session): session closed for user getmail Dec 17 00:25:01 ispc CRON[1809615]: pam_unix(cron:session): session closed for user root Dec 17 00:25:02 ispc CRON[1809613]: pam_unix(cron:session): session closed for user root Dec 17 00:25:16 ispc sshd[1809697]: Invalid user admin from 64.227.70.137 Dec 17 00:25:38 ispc postfix/smtpd[1809709]: sql auxprop plugin using mysql engine Dec 17 00:25:40 ispc saslauthd[1809711]: pam_mysql - SELECT returned no result. Dec 17 00:25:40 ispc saslauthd[1809711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:25:40 ispc saslauthd[1809711]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:25:43 ispc saslauthd[1809712]: pam_mysql - SELECT returned no result. Dec 17 00:25:43 ispc saslauthd[1809712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:25:43 ispc saslauthd[1809712]: do_auth : auth failure: [user=postmaster@matl-bula.com] [service=smtp] [realm=matl-bula.com] [mech=pam] [reason=PAM auth error] Dec 17 00:25:53 ispc sshd[1809717]: Invalid user admin from 64.227.70.137 Dec 17 00:26:01 ispc CRON[1809724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:26:01 ispc CRON[1809724]: pam_unix(cron:session): session closed for user root Dec 17 00:26:31 ispc sshd[1809749]: Invalid user admin from 64.227.70.137 Dec 17 00:27:01 ispc CRON[1809763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:27:02 ispc CRON[1809763]: pam_unix(cron:session): session closed for user root Dec 17 00:27:09 ispc sshd[1809780]: Invalid user admin from 64.227.70.137 Dec 17 00:27:50 ispc sshd[1809811]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:27:50 ispc sshd[1809811]: Invalid user blceu from 103.28.37.227 Dec 17 00:28:01 ispc CRON[1809824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:28:02 ispc CRON[1809824]: pam_unix(cron:session): session closed for user root Dec 17 00:29:01 ispc CRON[1809865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:29:02 ispc CRON[1809865]: pam_unix(cron:session): session closed for user root Dec 17 00:29:42 ispc sshd[1809898]: Invalid user martof from 211.45.175.153 Dec 17 00:30:01 ispc CRON[1809908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:30:01 ispc CRON[1809909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:30:01 ispc CRON[1809910]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:30:01 ispc CRON[1809911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:30:01 ispc CRON[1809912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:30:01 ispc CRON[1809913]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:30:01 ispc CRON[1809910]: pam_unix(cron:session): session closed for user www-data Dec 17 00:30:01 ispc CRON[1809909]: pam_unix(cron:session): session closed for user root Dec 17 00:30:01 ispc CRON[1809913]: pam_unix(cron:session): session closed for user getmail Dec 17 00:30:02 ispc CRON[1809912]: pam_unix(cron:session): session closed for user root Dec 17 00:30:02 ispc CRON[1809908]: pam_unix(cron:session): session closed for user root Dec 17 00:30:48 ispc postfix/smtpd[1810132]: sql auxprop plugin using mysql engine Dec 17 00:30:49 ispc saslauthd[1810135]: pam_mysql - SELECT returned no result. Dec 17 00:30:49 ispc saslauthd[1810135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:30:49 ispc saslauthd[1810135]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:31:01 ispc CRON[1810144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:31:02 ispc CRON[1810144]: pam_unix(cron:session): session closed for user root Dec 17 00:31:04 ispc saslauthd[1810155]: pam_mysql - SELECT returned no result. Dec 17 00:31:04 ispc saslauthd[1810155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:31:04 ispc saslauthd[1810155]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:31:23 ispc postfix/smtpd[1810166]: sql auxprop plugin using mysql engine Dec 17 00:32:01 ispc CRON[1810188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:32:02 ispc CRON[1810188]: pam_unix(cron:session): session closed for user root Dec 17 00:33:01 ispc CRON[1810232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:33:01 ispc CRON[1810232]: pam_unix(cron:session): session closed for user root Dec 17 00:33:54 ispc sshd[1810274]: Invalid user blceu from 103.110.84.105 Dec 17 00:34:01 ispc CRON[1810281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:34:02 ispc CRON[1810281]: pam_unix(cron:session): session closed for user root Dec 17 00:34:07 ispc postfix/smtpd[1810296]: sql auxprop plugin using mysql engine Dec 17 00:34:08 ispc saslauthd[1810298]: pam_mysql - SELECT returned no result. Dec 17 00:34:08 ispc saslauthd[1810298]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:34:08 ispc saslauthd[1810298]: do_auth : auth failure: [user=hello] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:34:23 ispc sshd[1810303]: Invalid user admin from 165.232.94.36 Dec 17 00:35:01 ispc CRON[1810327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:35:01 ispc CRON[1810328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:35:01 ispc CRON[1810329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:35:01 ispc CRON[1810330]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:35:01 ispc CRON[1810328]: pam_unix(cron:session): session closed for user root Dec 17 00:35:01 ispc CRON[1810330]: pam_unix(cron:session): session closed for user getmail Dec 17 00:35:02 ispc CRON[1810329]: pam_unix(cron:session): session closed for user root Dec 17 00:35:02 ispc CRON[1810327]: pam_unix(cron:session): session closed for user root Dec 17 00:35:12 ispc sshd[1810407]: Invalid user admin from 165.232.94.36 Dec 17 00:35:58 ispc sshd[1810431]: Invalid user admin from 165.232.94.36 Dec 17 00:36:01 ispc CRON[1810571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:36:02 ispc CRON[1810571]: pam_unix(cron:session): session closed for user root Dec 17 00:36:45 ispc sshd[1810749]: Invalid user admin from 165.232.94.36 Dec 17 00:37:01 ispc CRON[1810759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:37:02 ispc CRON[1810759]: pam_unix(cron:session): session closed for user root Dec 17 00:37:29 ispc sshd[1810783]: Invalid user admin from 165.232.94.36 Dec 17 00:38:01 ispc CRON[1810811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:38:02 ispc CRON[1810811]: pam_unix(cron:session): session closed for user root Dec 17 00:38:14 ispc sshd[1810827]: Invalid user admin from 165.232.94.36 Dec 17 00:39:01 ispc CRON[1810858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:39:01 ispc CRON[1810859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:39:01 ispc CRON[1810858]: pam_unix(cron:session): session closed for user root Dec 17 00:39:01 ispc CRON[1810859]: pam_unix(cron:session): session closed for user root Dec 17 00:39:22 ispc postfix/smtpd[1810889]: sql auxprop plugin using mysql engine Dec 17 00:39:22 ispc saslauthd[1810892]: pam_mysql - SELECT returned no result. Dec 17 00:39:22 ispc saslauthd[1810892]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:39:22 ispc saslauthd[1810892]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:40:01 ispc CRON[1810911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:40:01 ispc CRON[1810912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:40:01 ispc CRON[1810913]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:40:01 ispc CRON[1810914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:40:01 ispc CRON[1810915]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:40:02 ispc CRON[1810912]: pam_unix(cron:session): session closed for user root Dec 17 00:40:02 ispc CRON[1810913]: pam_unix(cron:session): session closed for user www-data Dec 17 00:40:02 ispc CRON[1810915]: pam_unix(cron:session): session closed for user getmail Dec 17 00:40:02 ispc CRON[1810914]: pam_unix(cron:session): session closed for user root Dec 17 00:40:03 ispc CRON[1810911]: pam_unix(cron:session): session closed for user root Dec 17 00:41:01 ispc CRON[1811015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:41:01 ispc CRON[1811015]: pam_unix(cron:session): session closed for user root Dec 17 00:42:01 ispc CRON[1811052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:42:02 ispc CRON[1811052]: pam_unix(cron:session): session closed for user root Dec 17 00:42:45 ispc sshd[1811080]: Invalid user ziplines from 221.156.137.103 Dec 17 00:43:01 ispc CRON[1811094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:43:02 ispc CRON[1811094]: pam_unix(cron:session): session closed for user root Dec 17 00:44:01 ispc CRON[1811129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:44:02 ispc CRON[1811129]: pam_unix(cron:session): session closed for user root Dec 17 00:44:27 ispc postfix/smtpd[1811150]: sql auxprop plugin using mysql engine Dec 17 00:44:27 ispc CRON[1809571]: pam_unix(cron:session): session closed for user root Dec 17 00:44:43 ispc sshd[1811155]: Address 147.124.199.135 maps to sdr-em.mantragroup.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:45:01 ispc CRON[1811158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:45:01 ispc CRON[1811159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:45:01 ispc CRON[1811160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:45:01 ispc CRON[1811161]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:45:01 ispc CRON[1811159]: pam_unix(cron:session): session closed for user root Dec 17 00:45:01 ispc CRON[1811161]: pam_unix(cron:session): session closed for user getmail Dec 17 00:45:02 ispc CRON[1811158]: pam_unix(cron:session): session closed for user root Dec 17 00:45:04 ispc CRON[1811160]: pam_unix(cron:session): session closed for user root Dec 17 00:45:34 ispc sshd[1811238]: Invalid user blceu from 221.156.137.103 Dec 17 00:46:01 ispc CRON[1811241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:47:01 ispc CRON[1811277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:47:02 ispc CRON[1811277]: pam_unix(cron:session): session closed for user root Dec 17 00:47:32 ispc postfix/smtpd[1811304]: sql auxprop plugin using mysql engine Dec 17 00:47:32 ispc saslauthd[1811307]: pam_mysql - SELECT returned no result. Dec 17 00:47:32 ispc saslauthd[1811307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:47:32 ispc saslauthd[1811307]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:47:33 ispc sshd[1811302]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:47:33 ispc sshd[1811302]: Invalid user support from 27.79.3.54 Dec 17 00:47:36 ispc sshd[1811312]: Invalid user test from 116.110.151.60 Dec 17 00:47:47 ispc sshd[1811318]: Invalid user antwan from 62.60.131.157 Dec 17 00:47:51 ispc sshd[1811325]: Invalid user installer from 116.110.151.60 Dec 17 00:47:58 ispc sshd[1811331]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:47:58 ispc sshd[1811331]: Invalid user admin from 27.79.3.54 Dec 17 00:48:01 ispc CRON[1811340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:48:02 ispc CRON[1811340]: pam_unix(cron:session): session closed for user root Dec 17 00:48:03 ispc sshd[1811337]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:48:03 ispc sshd[1811337]: Invalid user admin from 27.79.3.54 Dec 17 00:48:04 ispc sshd[1811339]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:48:04 ispc sshd[1811339]: Invalid user ubnt from 27.79.3.54 Dec 17 00:48:06 ispc sshd[1811356]: Invalid user ftp from 116.110.151.60 Dec 17 00:48:07 ispc sshd[1811358]: Invalid user user from 116.110.151.60 Dec 17 00:48:15 ispc sshd[1811360]: Invalid user user from 116.110.151.60 Dec 17 00:48:27 ispc sshd[1811375]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:48:27 ispc sshd[1811375]: Invalid user admin from 27.79.3.54 Dec 17 00:48:28 ispc sshd[1811377]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:48:28 ispc sshd[1811377]: Invalid user support from 27.79.3.54 Dec 17 00:48:29 ispc sshd[1811380]: Address 27.79.3.54 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:48:29 ispc sshd[1811380]: Invalid user system from 27.79.3.54 Dec 17 00:48:33 ispc sshd[1811372]: Invalid user klape from 40.127.67.83 Dec 17 00:48:35 ispc sshd[1811379]: Invalid user ubuntu from 40.127.67.83 Dec 17 00:48:45 ispc sshd[1811398]: Invalid user 1234 from 116.110.151.60 Dec 17 00:49:01 ispc CRON[1811416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:49:02 ispc CRON[1811416]: pam_unix(cron:session): session closed for user root Dec 17 00:49:05 ispc saslauthd[1811431]: pam_mysql - SELECT returned no result. Dec 17 00:49:05 ispc saslauthd[1811431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:49:05 ispc saslauthd[1811431]: do_auth : auth failure: [user=host] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:49:12 ispc postfix/smtpd[1811432]: sql auxprop plugin using mysql engine Dec 17 00:49:21 ispc sshd[1811438]: Did not receive identification string from 103.114.106.20 Dec 17 00:49:25 ispc sshd[1811445]: Invalid user klape from 70.37.89.177 Dec 17 00:49:26 ispc sshd[1811447]: Invalid user ubuntu from 70.37.89.177 Dec 17 00:49:57 ispc sshd[1811464]: Invalid user blceu from 152.53.239.119 Dec 17 00:50:01 ispc CRON[1811468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:50:01 ispc CRON[1811469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:50:01 ispc CRON[1811470]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 00:50:01 ispc CRON[1811472]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:50:01 ispc CRON[1811471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:50:01 ispc CRON[1811470]: pam_unix(cron:session): session closed for user www-data Dec 17 00:50:01 ispc CRON[1811469]: pam_unix(cron:session): session closed for user root Dec 17 00:50:01 ispc CRON[1811472]: pam_unix(cron:session): session closed for user getmail Dec 17 00:50:01 ispc CRON[1811471]: pam_unix(cron:session): session closed for user root Dec 17 00:50:01 ispc CRON[1811468]: pam_unix(cron:session): session closed for user root Dec 17 00:50:36 ispc sshd[1811563]: Invalid user martof from 185.142.159.122 Dec 17 00:51:01 ispc CRON[1811573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:51:02 ispc CRON[1811573]: pam_unix(cron:session): session closed for user root Dec 17 00:52:01 ispc CRON[1811609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:52:01 ispc CRON[1811610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:52:01 ispc CRON[1811610]: pam_unix(cron:session): session closed for user root Dec 17 00:53:01 ispc CRON[1811661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:53:02 ispc CRON[1811661]: pam_unix(cron:session): session closed for user root Dec 17 00:54:01 ispc CRON[1811700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:54:02 ispc CRON[1811700]: pam_unix(cron:session): session closed for user root Dec 17 00:55:01 ispc CRON[1811739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:55:01 ispc CRON[1811740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:55:01 ispc CRON[1811741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:55:01 ispc CRON[1811742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 00:55:01 ispc CRON[1811740]: pam_unix(cron:session): session closed for user root Dec 17 00:55:01 ispc CRON[1811742]: pam_unix(cron:session): session closed for user getmail Dec 17 00:55:02 ispc CRON[1811741]: pam_unix(cron:session): session closed for user root Dec 17 00:55:03 ispc CRON[1811739]: pam_unix(cron:session): session closed for user root Dec 17 00:55:19 ispc CRON[1811609]: pam_unix(cron:session): session closed for user root Dec 17 00:56:01 ispc CRON[1811839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:56:01 ispc CRON[1811839]: pam_unix(cron:session): session closed for user root Dec 17 00:56:11 ispc postfix/smtpd[1811854]: sql auxprop plugin using mysql engine Dec 17 00:56:11 ispc saslauthd[1811857]: pam_mysql - SELECT returned no result. Dec 17 00:56:11 ispc saslauthd[1811857]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 00:56:11 ispc saslauthd[1811857]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 00:57:01 ispc CRON[1811878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:57:02 ispc CRON[1811878]: pam_unix(cron:session): session closed for user root Dec 17 00:58:01 ispc CRON[1811924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:58:02 ispc CRON[1811924]: pam_unix(cron:session): session closed for user root Dec 17 00:59:01 ispc CRON[1811959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 00:59:02 ispc CRON[1811959]: pam_unix(cron:session): session closed for user root Dec 17 00:59:04 ispc sshd[1811965]: reverse mapping checking getaddrinfo for static.cmcti.vn [101.99.32.184] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 00:59:04 ispc sshd[1811965]: Invalid user ziplines from 101.99.32.184 Dec 17 01:00:02 ispc CRON[1811997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:00:02 ispc CRON[1811998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:00:02 ispc CRON[1811999]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:00:02 ispc CRON[1812000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:00:02 ispc CRON[1812001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:00:02 ispc CRON[1812002]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:00:02 ispc CRON[1811998]: pam_unix(cron:session): session closed for user root Dec 17 01:00:02 ispc CRON[1811999]: pam_unix(cron:session): session closed for user www-data Dec 17 01:00:02 ispc CRON[1812002]: pam_unix(cron:session): session closed for user getmail Dec 17 01:00:02 ispc CRON[1812001]: pam_unix(cron:session): session closed for user root Dec 17 01:00:03 ispc CRON[1812000]: pam_unix(cron:session): session closed for user root Dec 17 01:00:04 ispc CRON[1811997]: pam_unix(cron:session): session closed for user root Dec 17 01:00:11 ispc sshd[1812158]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:00:13 ispc sshd[1812160]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:00:13 ispc sshd[1812160]: Invalid user klape from 189.89.20.45 Dec 17 01:00:14 ispc sshd[1812162]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:00:14 ispc sshd[1812162]: Invalid user ubuntu from 189.89.20.45 Dec 17 01:01:01 ispc CRON[1812185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:01:01 ispc CRON[1812185]: pam_unix(cron:session): session closed for user root Dec 17 01:02:01 ispc CRON[1812224]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 01:02:01 ispc CRON[1812225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:02:02 ispc CRON[1812225]: pam_unix(cron:session): session closed for user root Dec 17 01:02:31 ispc postfix/smtpd[1812790]: sql auxprop plugin using mysql engine Dec 17 01:02:32 ispc saslauthd[1812801]: pam_mysql - SELECT returned no result. Dec 17 01:02:32 ispc saslauthd[1812801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:02:32 ispc saslauthd[1812801]: do_auth : auth failure: [user=demo@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 01:03:00 ispc sshd[1813086]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:03:01 ispc CRON[1813110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:03:02 ispc CRON[1813110]: pam_unix(cron:session): session closed for user root Dec 17 01:03:22 ispc CRON[1812224]: pam_unix(cron:session): session closed for user logcheck Dec 17 01:03:23 ispc postfix/smtpd[1813309]: sql auxprop plugin using mysql engine Dec 17 01:03:55 ispc sshd[1813324]: Invalid user blceu from 211.45.175.153 Dec 17 01:04:01 ispc CRON[1813330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:04:02 ispc CRON[1813330]: pam_unix(cron:session): session closed for user root Dec 17 01:04:02 ispc saslauthd[1813341]: pam_mysql - SELECT returned no result. Dec 17 01:04:02 ispc saslauthd[1813341]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:04:02 ispc saslauthd[1813341]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:04:12 ispc saslauthd[1813346]: pam_mysql - SELECT returned no result. Dec 17 01:04:12 ispc saslauthd[1813346]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:04:12 ispc saslauthd[1813346]: do_auth : auth failure: [user=hqadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:04:41 ispc saslauthd[1813360]: pam_mysql - SELECT returned no result. Dec 17 01:04:41 ispc saslauthd[1813360]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:04:41 ispc saslauthd[1813360]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:05:01 ispc CRON[1813369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:05:01 ispc CRON[1813372]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:05:01 ispc CRON[1813371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:05:01 ispc CRON[1813370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:05:01 ispc CRON[1813370]: pam_unix(cron:session): session closed for user root Dec 17 01:05:01 ispc CRON[1813372]: pam_unix(cron:session): session closed for user getmail Dec 17 01:05:01 ispc CRON[1813371]: pam_unix(cron:session): session closed for user root Dec 17 01:05:02 ispc CRON[1813369]: pam_unix(cron:session): session closed for user root Dec 17 01:05:12 ispc postfix/smtpd[1813454]: sql auxprop plugin using mysql engine Dec 17 01:06:01 ispc CRON[1813482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:06:01 ispc CRON[1813482]: pam_unix(cron:session): session closed for user root Dec 17 01:06:04 ispc postfix/smtpd[1813493]: sql auxprop plugin using mysql engine Dec 17 01:06:26 ispc CRON[1811241]: pam_unix(cron:session): session closed for user root Dec 17 01:07:01 ispc CRON[1813504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:07:07 ispc CRON[1813504]: pam_unix(cron:session): session closed for user root Dec 17 01:07:15 ispc sshd[1813516]: Invalid user blceu from 103.77.207.53 Dec 17 01:08:01 ispc CRON[1813529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:08:04 ispc sshd[1813543]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:09:01 ispc CRON[1813567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:09:01 ispc CRON[1813568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:09:01 ispc CRON[1813567]: pam_unix(cron:session): session closed for user root Dec 17 01:09:01 ispc CRON[1813568]: pam_unix(cron:session): session closed for user root Dec 17 01:10:01 ispc CRON[1813622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:10:01 ispc CRON[1813623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:10:01 ispc CRON[1813624]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:10:01 ispc CRON[1813625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:10:01 ispc CRON[1813626]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:10:01 ispc CRON[1813623]: pam_unix(cron:session): session closed for user root Dec 17 01:10:01 ispc CRON[1813624]: pam_unix(cron:session): session closed for user www-data Dec 17 01:10:02 ispc CRON[1813626]: pam_unix(cron:session): session closed for user getmail Dec 17 01:10:02 ispc CRON[1813625]: pam_unix(cron:session): session closed for user root Dec 17 01:10:02 ispc CRON[1813622]: pam_unix(cron:session): session closed for user root Dec 17 01:11:01 ispc CRON[1813726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:11:02 ispc CRON[1813726]: pam_unix(cron:session): session closed for user root Dec 17 01:11:16 ispc sshd[1813747]: Invalid user klape from 2.57.217.229 Dec 17 01:11:17 ispc sshd[1813749]: Invalid user ubuntu from 2.57.217.229 Dec 17 01:12:01 ispc CRON[1813770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:12:02 ispc CRON[1813770]: pam_unix(cron:session): session closed for user root Dec 17 01:13:01 ispc CRON[1813815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:13:02 ispc CRON[1813815]: pam_unix(cron:session): session closed for user root Dec 17 01:13:16 ispc postfix/smtpd[1813834]: sql auxprop plugin using mysql engine Dec 17 01:13:17 ispc saslauthd[1813837]: pam_mysql - SELECT returned no result. Dec 17 01:13:17 ispc saslauthd[1813837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:13:17 ispc saslauthd[1813837]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:13:41 ispc sshd[1813847]: Invalid user pronajemplosin from 36.50.176.13 Dec 17 01:14:01 ispc CRON[1813860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:14:02 ispc CRON[1813860]: pam_unix(cron:session): session closed for user root Dec 17 01:14:18 ispc sshd[1813875]: Invalid user ziplines from 27.254.144.183 Dec 17 01:15:01 ispc CRON[1813898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:15:01 ispc CRON[1813899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:15:01 ispc CRON[1813900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:15:01 ispc CRON[1813901]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:15:01 ispc CRON[1813899]: pam_unix(cron:session): session closed for user root Dec 17 01:15:01 ispc CRON[1813901]: pam_unix(cron:session): session closed for user getmail Dec 17 01:15:02 ispc CRON[1813900]: pam_unix(cron:session): session closed for user root Dec 17 01:15:02 ispc CRON[1813898]: pam_unix(cron:session): session closed for user root Dec 17 01:16:01 ispc CRON[1814003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:16:02 ispc CRON[1814003]: pam_unix(cron:session): session closed for user root Dec 17 01:17:01 ispc CRON[1814038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:17:01 ispc CRON[1814038]: pam_unix(cron:session): session closed for user root Dec 17 01:18:01 ispc CRON[1814086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:18:02 ispc CRON[1814086]: pam_unix(cron:session): session closed for user root Dec 17 01:18:28 ispc postfix/smtpd[1814105]: sql auxprop plugin using mysql engine Dec 17 01:18:29 ispc saslauthd[1814108]: pam_mysql - SELECT returned no result. Dec 17 01:18:29 ispc saslauthd[1814108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:18:29 ispc saslauthd[1814108]: do_auth : auth failure: [user=hsa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:19:01 ispc CRON[1814121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:19:02 ispc CRON[1814121]: pam_unix(cron:session): session closed for user root Dec 17 01:20:01 ispc CRON[1814160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:20:01 ispc CRON[1814164]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:20:01 ispc CRON[1814162]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:20:01 ispc CRON[1814163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:20:01 ispc CRON[1814161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:20:02 ispc CRON[1814162]: pam_unix(cron:session): session closed for user www-data Dec 17 01:20:02 ispc CRON[1814161]: pam_unix(cron:session): session closed for user root Dec 17 01:20:02 ispc CRON[1814164]: pam_unix(cron:session): session closed for user getmail Dec 17 01:20:02 ispc CRON[1814163]: pam_unix(cron:session): session closed for user root Dec 17 01:20:02 ispc CRON[1814160]: pam_unix(cron:session): session closed for user root Dec 17 01:20:47 ispc sshd[1814260]: Invalid user martof from 211.110.229.128 Dec 17 01:21:01 ispc CRON[1814266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:21:01 ispc CRON[1814267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:21:01 ispc CRON[1814266]: pam_unix(cron:session): session closed for user root Dec 17 01:21:01 ispc CRON[1814267]: pam_unix(cron:session): session closed for user root Dec 17 01:21:39 ispc postfix/smtpd[1814298]: sql auxprop plugin using mysql engine Dec 17 01:21:40 ispc sshd[1814292]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:21:40 ispc saslauthd[1814300]: pam_mysql - SELECT returned no result. Dec 17 01:21:40 ispc saslauthd[1814300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:21:40 ispc saslauthd[1814300]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:22:01 ispc CRON[1814311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:22:03 ispc CRON[1814311]: pam_unix(cron:session): session closed for user root Dec 17 01:23:01 ispc CRON[1814357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:23:01 ispc CRON[1814357]: pam_unix(cron:session): session closed for user root Dec 17 01:24:01 ispc CRON[1814393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:24:02 ispc CRON[1814393]: pam_unix(cron:session): session closed for user root Dec 17 01:24:23 ispc postfix/smtpd[1814412]: sql auxprop plugin using mysql engine Dec 17 01:24:36 ispc CRON[1809911]: pam_unix(cron:session): session closed for user root Dec 17 01:25:01 ispc CRON[1814437]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:25:01 ispc CRON[1814436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:25:01 ispc CRON[1814435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:25:01 ispc CRON[1814434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:25:01 ispc CRON[1814435]: pam_unix(cron:session): session closed for user root Dec 17 01:25:01 ispc CRON[1814437]: pam_unix(cron:session): session closed for user getmail Dec 17 01:25:01 ispc CRON[1814436]: pam_unix(cron:session): session closed for user root Dec 17 01:25:01 ispc CRON[1814434]: pam_unix(cron:session): session closed for user root Dec 17 01:26:01 ispc CRON[1814539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:26:02 ispc CRON[1814539]: pam_unix(cron:session): session closed for user root Dec 17 01:26:27 ispc postfix/smtpd[1814558]: sql auxprop plugin using mysql engine Dec 17 01:26:33 ispc sshd[1814565]: Invalid user blceu from 185.142.159.122 Dec 17 01:26:53 ispc sshd[1814575]: Invalid user martof from 103.77.207.53 Dec 17 01:27:01 ispc CRON[1814583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:27:01 ispc CRON[1814583]: pam_unix(cron:session): session closed for user root Dec 17 01:27:12 ispc postfix/smtpd[1814598]: sql auxprop plugin using mysql engine Dec 17 01:27:12 ispc saslauthd[1814600]: pam_mysql - SELECT returned no result. Dec 17 01:27:12 ispc saslauthd[1814600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:27:12 ispc saslauthd[1814600]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:28:01 ispc CRON[1814632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:28:01 ispc CRON[1814632]: pam_unix(cron:session): session closed for user root Dec 17 01:28:25 ispc CRON[1813529]: pam_unix(cron:session): session closed for user root Dec 17 01:29:01 ispc CRON[1814655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:29:07 ispc CRON[1814655]: pam_unix(cron:session): session closed for user root Dec 17 01:30:01 ispc CRON[1814669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:30:01 ispc CRON[1814671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:30:01 ispc CRON[1814670]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:30:01 ispc CRON[1814672]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:30:01 ispc CRON[1814668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:30:01 ispc CRON[1814670]: pam_unix(cron:session): session closed for user www-data Dec 17 01:30:01 ispc CRON[1814669]: pam_unix(cron:session): session closed for user root Dec 17 01:30:01 ispc CRON[1814672]: pam_unix(cron:session): session closed for user getmail Dec 17 01:30:01 ispc CRON[1814668]: pam_unix(cron:session): session closed for user root Dec 17 01:30:02 ispc saslauthd[1814748]: pam_mysql - SELECT returned no result. Dec 17 01:30:02 ispc saslauthd[1814748]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:30:02 ispc saslauthd[1814748]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:31:01 ispc CRON[1814772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:31:02 ispc CRON[1814772]: pam_unix(cron:session): session closed for user root Dec 17 01:31:17 ispc sshd[1814791]: Invalid user ziplines from 49.247.24.89 Dec 17 01:32:01 ispc CRON[1814811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:32:01 ispc CRON[1814811]: pam_unix(cron:session): session closed for user root Dec 17 01:33:01 ispc CRON[1814854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:33:03 ispc CRON[1814854]: pam_unix(cron:session): session closed for user root Dec 17 01:33:21 ispc postfix/smtpd[1814874]: sql auxprop plugin using mysql engine Dec 17 01:33:22 ispc saslauthd[1814876]: pam_mysql - SELECT returned no result. Dec 17 01:33:22 ispc saslauthd[1814876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:33:22 ispc saslauthd[1814876]: do_auth : auth failure: [user=hscroot] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:34:01 ispc CRON[1814894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:34:02 ispc CRON[1814894]: pam_unix(cron:session): session closed for user root Dec 17 01:34:59 ispc sshd[1814930]: Invalid user martof from 51.91.247.10 Dec 17 01:35:01 ispc CRON[1814936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:35:01 ispc CRON[1814937]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:35:01 ispc CRON[1814934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:35:01 ispc CRON[1814935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:35:01 ispc CRON[1814935]: pam_unix(cron:session): session closed for user root Dec 17 01:35:01 ispc CRON[1814937]: pam_unix(cron:session): session closed for user getmail Dec 17 01:35:02 ispc sshd[1814932]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:35:02 ispc sshd[1814932]: Invalid user ziplines from 103.28.37.227 Dec 17 01:35:03 ispc CRON[1814936]: pam_unix(cron:session): session closed for user root Dec 17 01:35:03 ispc CRON[1814934]: pam_unix(cron:session): session closed for user root Dec 17 01:35:03 ispc postfix/smtpd[1815010]: sql auxprop plugin using mysql engine Dec 17 01:36:01 ispc CRON[1815036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:36:02 ispc CRON[1815036]: pam_unix(cron:session): session closed for user root Dec 17 01:36:31 ispc sshd[1815060]: Invalid user blceu from 27.254.144.183 Dec 17 01:37:01 ispc postfix/smtpd[1815075]: sql auxprop plugin using mysql engine Dec 17 01:37:01 ispc CRON[1815077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:37:03 ispc CRON[1815077]: pam_unix(cron:session): session closed for user root Dec 17 01:37:16 ispc saslauthd[1815092]: pam_mysql - SELECT returned no result. Dec 17 01:37:16 ispc saslauthd[1815092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:37:16 ispc saslauthd[1815092]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:38:01 ispc CRON[1815123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:38:02 ispc CRON[1815123]: pam_unix(cron:session): session closed for user root Dec 17 01:38:17 ispc saslauthd[1815138]: pam_mysql - SELECT returned no result. Dec 17 01:38:17 ispc saslauthd[1815138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:38:17 ispc saslauthd[1815138]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:38:55 ispc sshd[1815156]: Invalid user ziplines from 103.110.84.105 Dec 17 01:39:01 ispc CRON[1815162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:39:01 ispc CRON[1815163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:39:01 ispc CRON[1815162]: pam_unix(cron:session): session closed for user root Dec 17 01:39:03 ispc CRON[1815163]: pam_unix(cron:session): session closed for user root Dec 17 01:39:05 ispc postfix/smtpd[1815185]: sql auxprop plugin using mysql engine Dec 17 01:39:06 ispc postfix/smtpd[1815187]: sql auxprop plugin using mysql engine Dec 17 01:39:17 ispc postfix/smtpd[1815195]: sql auxprop plugin using mysql engine Dec 17 01:40:01 ispc CRON[1815217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:40:01 ispc CRON[1815218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:40:01 ispc CRON[1815219]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:40:01 ispc CRON[1815220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:40:01 ispc CRON[1815221]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:40:01 ispc CRON[1815218]: pam_unix(cron:session): session closed for user root Dec 17 01:40:01 ispc CRON[1815219]: pam_unix(cron:session): session closed for user www-data Dec 17 01:40:01 ispc CRON[1815221]: pam_unix(cron:session): session closed for user getmail Dec 17 01:40:01 ispc CRON[1815220]: pam_unix(cron:session): session closed for user root Dec 17 01:40:01 ispc CRON[1815217]: pam_unix(cron:session): session closed for user root Dec 17 01:41:01 ispc CRON[1815323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:41:03 ispc CRON[1815323]: pam_unix(cron:session): session closed for user root Dec 17 01:42:01 ispc CRON[1815360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:42:02 ispc CRON[1815360]: pam_unix(cron:session): session closed for user root Dec 17 01:42:39 ispc postfix/smtpd[1815387]: sql auxprop plugin using mysql engine Dec 17 01:42:44 ispc saslauthd[1815394]: pam_mysql - SELECT returned no result. Dec 17 01:42:44 ispc saslauthd[1815394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:44 ispc saslauthd[1815394]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:46 ispc saslauthd[1815396]: pam_mysql - SELECT returned no result. Dec 17 01:42:46 ispc saslauthd[1815396]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:46 ispc saslauthd[1815396]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:46 ispc postfix/smtpd[1815397]: sql auxprop plugin using mysql engine Dec 17 01:42:51 ispc saslauthd[1815405]: pam_mysql - SELECT returned no result. Dec 17 01:42:51 ispc saslauthd[1815405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:51 ispc saslauthd[1815405]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:52 ispc saslauthd[1815406]: pam_mysql - SELECT returned no result. Dec 17 01:42:52 ispc saslauthd[1815406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:52 ispc saslauthd[1815406]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:53 ispc saslauthd[1815411]: pam_mysql - SELECT returned no result. Dec 17 01:42:53 ispc saslauthd[1815411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:53 ispc saslauthd[1815411]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:54 ispc saslauthd[1815412]: pam_mysql - SELECT returned no result. Dec 17 01:42:54 ispc saslauthd[1815412]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:54 ispc saslauthd[1815412]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:55 ispc saslauthd[1815413]: pam_mysql - SELECT returned no result. Dec 17 01:42:55 ispc saslauthd[1815413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:55 ispc saslauthd[1815413]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:56 ispc saslauthd[1815416]: pam_mysql - SELECT returned no result. Dec 17 01:42:56 ispc saslauthd[1815416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:56 ispc saslauthd[1815416]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:56 ispc sshd[1815417]: Invalid user klape from 51.77.222.24 Dec 17 01:42:57 ispc sshd[1815420]: Invalid user ubuntu from 51.77.222.24 Dec 17 01:42:57 ispc saslauthd[1815422]: pam_mysql - SELECT returned no result. Dec 17 01:42:57 ispc saslauthd[1815422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:57 ispc saslauthd[1815422]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:58 ispc saslauthd[1815423]: pam_mysql - SELECT returned no result. Dec 17 01:42:58 ispc saslauthd[1815423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:58 ispc saslauthd[1815423]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:42:59 ispc saslauthd[1815424]: pam_mysql - SELECT returned no result. Dec 17 01:42:59 ispc saslauthd[1815424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:42:59 ispc saslauthd[1815424]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:00 ispc saslauthd[1815425]: pam_mysql - SELECT returned no result. Dec 17 01:43:00 ispc saslauthd[1815425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:00 ispc saslauthd[1815425]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:01 ispc saslauthd[1815426]: pam_mysql - SELECT returned no result. Dec 17 01:43:01 ispc saslauthd[1815426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:01 ispc saslauthd[1815426]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:01 ispc CRON[1815427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:43:02 ispc CRON[1815427]: pam_unix(cron:session): session closed for user root Dec 17 01:43:02 ispc saslauthd[1815438]: pam_mysql - SELECT returned no result. Dec 17 01:43:02 ispc saslauthd[1815438]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:02 ispc saslauthd[1815438]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:03 ispc saslauthd[1815439]: pam_mysql - SELECT returned no result. Dec 17 01:43:03 ispc saslauthd[1815439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:03 ispc saslauthd[1815439]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:04 ispc saslauthd[1815444]: pam_mysql - SELECT returned no result. Dec 17 01:43:04 ispc saslauthd[1815444]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:04 ispc saslauthd[1815444]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:05 ispc saslauthd[1815445]: pam_mysql - SELECT returned no result. Dec 17 01:43:05 ispc saslauthd[1815445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:05 ispc saslauthd[1815445]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:06 ispc saslauthd[1815446]: pam_mysql - SELECT returned no result. Dec 17 01:43:06 ispc saslauthd[1815446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:06 ispc saslauthd[1815446]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:07 ispc saslauthd[1815447]: pam_mysql - SELECT returned no result. Dec 17 01:43:07 ispc saslauthd[1815447]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:07 ispc saslauthd[1815447]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:08 ispc saslauthd[1815448]: pam_mysql - SELECT returned no result. Dec 17 01:43:08 ispc saslauthd[1815448]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:08 ispc saslauthd[1815448]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:09 ispc saslauthd[1815449]: pam_mysql - SELECT returned no result. Dec 17 01:43:09 ispc saslauthd[1815449]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:09 ispc saslauthd[1815449]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:43:10 ispc saslauthd[1815450]: pam_mysql - SELECT returned no result. Dec 17 01:43:10 ispc saslauthd[1815450]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:10 ispc saslauthd[1815450]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:11 ispc saslauthd[1815451]: pam_mysql - SELECT returned no result. Dec 17 01:43:11 ispc saslauthd[1815451]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:11 ispc saslauthd[1815451]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:12 ispc saslauthd[1815452]: pam_mysql - SELECT returned no result. Dec 17 01:43:12 ispc saslauthd[1815452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:12 ispc saslauthd[1815452]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:13 ispc saslauthd[1815453]: pam_mysql - SELECT returned no result. Dec 17 01:43:13 ispc saslauthd[1815453]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:13 ispc saslauthd[1815453]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:14 ispc saslauthd[1815458]: pam_mysql - SELECT returned no result. Dec 17 01:43:14 ispc saslauthd[1815458]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:14 ispc saslauthd[1815458]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:15 ispc saslauthd[1815459]: pam_mysql - SELECT returned no result. Dec 17 01:43:15 ispc saslauthd[1815459]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:15 ispc saslauthd[1815459]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:16 ispc saslauthd[1815461]: pam_mysql - SELECT returned no result. Dec 17 01:43:16 ispc saslauthd[1815461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:16 ispc saslauthd[1815461]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:17 ispc saslauthd[1815462]: pam_mysql - SELECT returned no result. Dec 17 01:43:17 ispc saslauthd[1815462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:17 ispc saslauthd[1815462]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:18 ispc saslauthd[1815463]: pam_mysql - SELECT returned no result. Dec 17 01:43:18 ispc saslauthd[1815463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:18 ispc saslauthd[1815463]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:19 ispc saslauthd[1815464]: pam_mysql - SELECT returned no result. Dec 17 01:43:19 ispc saslauthd[1815464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:19 ispc saslauthd[1815464]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:20 ispc saslauthd[1815465]: pam_mysql - SELECT returned no result. Dec 17 01:43:20 ispc saslauthd[1815465]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:20 ispc saslauthd[1815465]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:21 ispc saslauthd[1815466]: pam_mysql - SELECT returned no result. Dec 17 01:43:21 ispc saslauthd[1815466]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:21 ispc saslauthd[1815466]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:22 ispc saslauthd[1815467]: pam_mysql - SELECT returned no result. Dec 17 01:43:22 ispc saslauthd[1815467]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:22 ispc saslauthd[1815467]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:23 ispc saslauthd[1815468]: pam_mysql - SELECT returned no result. Dec 17 01:43:23 ispc saslauthd[1815468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:23 ispc saslauthd[1815468]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:24 ispc saslauthd[1815474]: pam_mysql - SELECT returned no result. Dec 17 01:43:24 ispc saslauthd[1815474]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:24 ispc saslauthd[1815474]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:25 ispc saslauthd[1815475]: pam_mysql - SELECT returned no result. Dec 17 01:43:25 ispc saslauthd[1815475]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:25 ispc saslauthd[1815475]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:26 ispc saslauthd[1815476]: pam_mysql - SELECT returned no result. Dec 17 01:43:26 ispc saslauthd[1815476]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:26 ispc saslauthd[1815476]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:27 ispc saslauthd[1815477]: pam_mysql - SELECT returned no result. Dec 17 01:43:27 ispc saslauthd[1815477]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:27 ispc saslauthd[1815477]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:28 ispc saslauthd[1815478]: pam_mysql - SELECT returned no result. Dec 17 01:43:28 ispc saslauthd[1815478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:28 ispc saslauthd[1815478]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:29 ispc saslauthd[1815479]: pam_mysql - SELECT returned no result. Dec 17 01:43:29 ispc saslauthd[1815479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:29 ispc saslauthd[1815479]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:30 ispc saslauthd[1815480]: pam_mysql - SELECT returned no result. Dec 17 01:43:30 ispc saslauthd[1815480]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:43:30 ispc saslauthd[1815480]: do_auth : auth failure: [user=info@anoraksro.cz] [service=smtp] [realm=anoraksro.cz] [mech=pam] [reason=PAM auth error] Dec 17 01:43:35 ispc sshd[1815481]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:43:35 ispc sshd[1815481]: Invalid user martof from 103.28.37.227 Dec 17 01:44:01 ispc CRON[1815501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:44:02 ispc CRON[1815501]: pam_unix(cron:session): session closed for user root Dec 17 01:45:01 ispc CRON[1815536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:45:01 ispc CRON[1815537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:45:01 ispc CRON[1815538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:45:01 ispc CRON[1815539]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:45:01 ispc CRON[1815537]: pam_unix(cron:session): session closed for user root Dec 17 01:45:01 ispc CRON[1815539]: pam_unix(cron:session): session closed for user getmail Dec 17 01:45:01 ispc CRON[1815536]: pam_unix(cron:session): session closed for user root Dec 17 01:45:02 ispc CRON[1815538]: pam_unix(cron:session): session closed for user root Dec 17 01:46:01 ispc CRON[1815637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:46:01 ispc CRON[1815637]: pam_unix(cron:session): session closed for user root Dec 17 01:46:14 ispc postfix/smtpd[1815654]: sql auxprop plugin using mysql engine Dec 17 01:46:15 ispc saslauthd[1815656]: pam_mysql - SELECT returned no result. Dec 17 01:46:15 ispc saslauthd[1815656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:46:15 ispc saslauthd[1815656]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:47:01 ispc CRON[1815677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:47:02 ispc CRON[1815677]: pam_unix(cron:session): session closed for user root Dec 17 01:48:01 ispc CRON[1815725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:48:02 ispc CRON[1815725]: pam_unix(cron:session): session closed for user root Dec 17 01:48:10 ispc sshd[1815740]: Invalid user martof from 165.227.38.205 Dec 17 01:48:28 ispc postfix/smtpd[1815750]: sql auxprop plugin using mysql engine Dec 17 01:48:30 ispc saslauthd[1815752]: pam_mysql - SELECT returned no result. Dec 17 01:48:30 ispc saslauthd[1815752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:48:30 ispc saslauthd[1815752]: do_auth : auth failure: [user=http] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:49:01 ispc CRON[1815766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:49:02 ispc CRON[1815766]: pam_unix(cron:session): session closed for user root Dec 17 01:50:01 ispc CRON[1815803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:50:01 ispc CRON[1815804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:50:01 ispc CRON[1815805]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 01:50:01 ispc CRON[1815806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:50:01 ispc CRON[1815807]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:50:01 ispc CRON[1815805]: pam_unix(cron:session): session closed for user www-data Dec 17 01:50:01 ispc CRON[1815804]: pam_unix(cron:session): session closed for user root Dec 17 01:50:01 ispc CRON[1815807]: pam_unix(cron:session): session closed for user getmail Dec 17 01:50:02 ispc CRON[1815806]: pam_unix(cron:session): session closed for user root Dec 17 01:50:03 ispc CRON[1815803]: pam_unix(cron:session): session closed for user root Dec 17 01:50:23 ispc sshd[1815887]: Invalid user klape from 77.241.18.2 Dec 17 01:50:24 ispc postfix/smtpd[1815893]: sql auxprop plugin using mysql engine Dec 17 01:50:24 ispc sshd[1815907]: Invalid user ubuntu from 77.241.18.2 Dec 17 01:50:33 ispc CRON[1814671]: pam_unix(cron:session): session closed for user root Dec 17 01:50:57 ispc sshd[1815940]: Invalid user ziplines from 62.84.181.22 Dec 17 01:51:01 ispc CRON[1815942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:51:07 ispc CRON[1815942]: pam_unix(cron:session): session closed for user root Dec 17 01:51:34 ispc sshd[1815954]: Address 147.124.199.126 maps to sdr-em.mantragroup.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 01:52:01 ispc CRON[1815957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:53:01 ispc CRON[1815999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:53:02 ispc CRON[1815999]: pam_unix(cron:session): session closed for user root Dec 17 01:54:01 ispc CRON[1816036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:54:02 ispc CRON[1816036]: pam_unix(cron:session): session closed for user root Dec 17 01:54:23 ispc postfix/smtpd[1816056]: sql auxprop plugin using mysql engine Dec 17 01:54:23 ispc postfix/smtpd[1816058]: sql auxprop plugin using mysql engine Dec 17 01:54:23 ispc saslauthd[1816059]: pam_mysql - SELECT returned no result. Dec 17 01:54:23 ispc saslauthd[1816059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:54:23 ispc saslauthd[1816059]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 01:54:34 ispc saslauthd[1816064]: pam_mysql - SELECT returned no result. Dec 17 01:54:34 ispc saslauthd[1816064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 01:54:34 ispc saslauthd[1816064]: do_auth : auth failure: [user=luck@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 01:54:57 ispc sshd[1816073]: Invalid user ziplines from 185.142.159.122 Dec 17 01:55:00 ispc sshd[1816079]: Invalid user ziplines from 103.77.207.53 Dec 17 01:55:01 ispc CRON[1816081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:55:01 ispc CRON[1816084]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 01:55:01 ispc CRON[1816082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:55:01 ispc CRON[1816083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:55:01 ispc CRON[1816082]: pam_unix(cron:session): session closed for user root Dec 17 01:55:01 ispc CRON[1816084]: pam_unix(cron:session): session closed for user getmail Dec 17 01:55:02 ispc CRON[1816083]: pam_unix(cron:session): session closed for user root Dec 17 01:55:02 ispc CRON[1816081]: pam_unix(cron:session): session closed for user root Dec 17 01:56:01 ispc CRON[1816185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:56:02 ispc CRON[1816185]: pam_unix(cron:session): session closed for user root Dec 17 01:57:01 ispc CRON[1816222]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:57:03 ispc CRON[1816222]: pam_unix(cron:session): session closed for user root Dec 17 01:57:29 ispc postfix/smtpd[1816241]: sql auxprop plugin using mysql engine Dec 17 01:58:01 ispc CRON[1816268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:58:02 ispc CRON[1816268]: pam_unix(cron:session): session closed for user root Dec 17 01:59:01 ispc CRON[1816304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 01:59:02 ispc CRON[1816304]: pam_unix(cron:session): session closed for user root Dec 17 02:00:01 ispc CRON[1816344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:00:01 ispc CRON[1816345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:00:01 ispc CRON[1816346]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:00:01 ispc CRON[1816347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:00:01 ispc CRON[1816348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:00:01 ispc CRON[1816349]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:00:01 ispc CRON[1816345]: pam_unix(cron:session): session closed for user root Dec 17 02:00:01 ispc CRON[1816346]: pam_unix(cron:session): session closed for user www-data Dec 17 02:00:01 ispc CRON[1816349]: pam_unix(cron:session): session closed for user getmail Dec 17 02:00:02 ispc CRON[1816348]: pam_unix(cron:session): session closed for user root Dec 17 02:00:02 ispc su[1816494]: Successful su for root by root Dec 17 02:00:02 ispc su[1816494]: + ??? root:root Dec 17 02:00:02 ispc su[1816494]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:02 ispc su[1816494]: pam_unix(su:session): session closed for user root Dec 17 02:00:02 ispc su[1816505]: Successful su for root by root Dec 17 02:00:02 ispc su[1816505]: + ??? root:root Dec 17 02:00:02 ispc su[1816505]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:02 ispc su[1816505]: pam_unix(su:session): session closed for user root Dec 17 02:00:02 ispc su[1816510]: Successful su for root by root Dec 17 02:00:02 ispc su[1816510]: + ??? root:root Dec 17 02:00:02 ispc su[1816510]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:02 ispc su[1816510]: pam_unix(su:session): session closed for user root Dec 17 02:00:02 ispc su[1816520]: Successful su for root by root Dec 17 02:00:02 ispc su[1816520]: + ??? root:root Dec 17 02:00:02 ispc su[1816520]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:03 ispc su[1816520]: pam_unix(su:session): session closed for user root Dec 17 02:00:03 ispc su[1816527]: Successful su for root by root Dec 17 02:00:03 ispc su[1816527]: + ??? root:root Dec 17 02:00:03 ispc su[1816527]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:03 ispc CRON[1816344]: pam_unix(cron:session): session closed for user root Dec 17 02:00:04 ispc su[1816527]: pam_unix(su:session): session closed for user root Dec 17 02:00:04 ispc su[1816540]: Successful su for root by root Dec 17 02:00:04 ispc su[1816540]: + ??? root:root Dec 17 02:00:04 ispc su[1816540]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:04 ispc su[1816540]: pam_unix(su:session): session closed for user root Dec 17 02:00:04 ispc su[1816543]: Successful su for root by root Dec 17 02:00:04 ispc su[1816543]: + ??? root:root Dec 17 02:00:04 ispc su[1816543]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:12 ispc su[1816543]: pam_unix(su:session): session closed for user root Dec 17 02:00:12 ispc su[1816553]: Successful su for root by root Dec 17 02:00:12 ispc su[1816553]: + ??? root:root Dec 17 02:00:12 ispc su[1816553]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:12 ispc su[1816553]: pam_unix(su:session): session closed for user root Dec 17 02:00:12 ispc su[1816556]: Successful su for root by root Dec 17 02:00:12 ispc su[1816556]: + ??? root:root Dec 17 02:00:12 ispc su[1816556]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:13 ispc su[1816556]: pam_unix(su:session): session closed for user root Dec 17 02:00:13 ispc su[1816562]: Successful su for root by root Dec 17 02:00:13 ispc su[1816562]: + ??? root:root Dec 17 02:00:13 ispc su[1816562]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:13 ispc su[1816562]: pam_unix(su:session): session closed for user root Dec 17 02:00:13 ispc su[1816565]: Successful su for root by root Dec 17 02:00:13 ispc su[1816565]: + ??? root:root Dec 17 02:00:13 ispc su[1816565]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:17 ispc su[1816565]: pam_unix(su:session): session closed for user root Dec 17 02:00:17 ispc su[1816571]: Successful su for root by root Dec 17 02:00:17 ispc su[1816571]: + ??? root:root Dec 17 02:00:17 ispc su[1816571]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:17 ispc su[1816571]: pam_unix(su:session): session closed for user root Dec 17 02:00:17 ispc su[1816574]: Successful su for root by root Dec 17 02:00:17 ispc su[1816574]: + ??? root:root Dec 17 02:00:17 ispc su[1816574]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:18 ispc su[1816574]: pam_unix(su:session): session closed for user root Dec 17 02:00:18 ispc su[1816580]: Successful su for root by root Dec 17 02:00:18 ispc su[1816580]: + ??? root:root Dec 17 02:00:18 ispc su[1816580]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:18 ispc su[1816580]: pam_unix(su:session): session closed for user root Dec 17 02:00:18 ispc su[1816583]: Successful su for root by root Dec 17 02:00:18 ispc su[1816583]: + ??? root:root Dec 17 02:00:18 ispc su[1816583]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:23 ispc su[1816583]: pam_unix(su:session): session closed for user root Dec 17 02:00:23 ispc su[1816593]: Successful su for root by root Dec 17 02:00:23 ispc su[1816593]: + ??? root:root Dec 17 02:00:23 ispc su[1816593]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:23 ispc su[1816593]: pam_unix(su:session): session closed for user root Dec 17 02:00:23 ispc su[1816596]: Successful su for root by root Dec 17 02:00:23 ispc su[1816596]: + ??? root:root Dec 17 02:00:23 ispc su[1816596]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:25 ispc su[1816596]: pam_unix(su:session): session closed for user root Dec 17 02:00:25 ispc su[1816604]: Successful su for root by root Dec 17 02:00:26 ispc su[1816604]: + ??? root:root Dec 17 02:00:26 ispc su[1816604]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:26 ispc su[1816604]: pam_unix(su:session): session closed for user root Dec 17 02:00:26 ispc su[1816607]: Successful su for root by root Dec 17 02:00:26 ispc su[1816607]: + ??? root:root Dec 17 02:00:26 ispc su[1816607]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:27 ispc sshd[1816600]: Invalid user admin from 120.48.125.223 Dec 17 02:00:39 ispc su[1816607]: pam_unix(su:session): session closed for user root Dec 17 02:00:39 ispc su[1816617]: Successful su for root by root Dec 17 02:00:39 ispc su[1816617]: + ??? root:root Dec 17 02:00:39 ispc su[1816617]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:39 ispc su[1816617]: pam_unix(su:session): session closed for user root Dec 17 02:00:39 ispc su[1816620]: Successful su for root by root Dec 17 02:00:39 ispc su[1816620]: + ??? root:root Dec 17 02:00:39 ispc su[1816620]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:40 ispc su[1816620]: pam_unix(su:session): session closed for user root Dec 17 02:00:40 ispc su[1816626]: Successful su for root by root Dec 17 02:00:40 ispc su[1816626]: + ??? root:root Dec 17 02:00:40 ispc su[1816626]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:40 ispc su[1816626]: pam_unix(su:session): session closed for user root Dec 17 02:00:40 ispc su[1816629]: Successful su for root by root Dec 17 02:00:40 ispc su[1816629]: + ??? root:root Dec 17 02:00:40 ispc su[1816629]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:41 ispc su[1816629]: pam_unix(su:session): session closed for user root Dec 17 02:00:41 ispc su[1816639]: Successful su for root by root Dec 17 02:00:41 ispc su[1816639]: + ??? root:root Dec 17 02:00:41 ispc su[1816639]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:00:41 ispc su[1816639]: pam_unix(su:session): session closed for user root Dec 17 02:00:41 ispc su[1816642]: Successful su for root by root Dec 17 02:00:41 ispc su[1816642]: + ??? root:root Dec 17 02:00:41 ispc su[1816642]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:01:01 ispc CRON[1816654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:01:02 ispc CRON[1816654]: pam_unix(cron:session): session closed for user root Dec 17 02:02:01 ispc CRON[1816687]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 02:02:01 ispc CRON[1816688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:02:02 ispc CRON[1816688]: pam_unix(cron:session): session closed for user root Dec 17 02:02:31 ispc postfix/smtpd[1817246]: sql auxprop plugin using mysql engine Dec 17 02:02:31 ispc saslauthd[1817287]: pam_mysql - SELECT returned no result. Dec 17 02:02:31 ispc saslauthd[1817287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:02:31 ispc saslauthd[1817287]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:03:01 ispc CRON[1817586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:03:03 ispc CRON[1817586]: pam_unix(cron:session): session closed for user root Dec 17 02:03:16 ispc CRON[1816687]: pam_unix(cron:session): session closed for user logcheck Dec 17 02:03:21 ispc saslauthd[1817785]: pam_mysql - SELECT returned no result. Dec 17 02:03:21 ispc saslauthd[1817785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:03:21 ispc saslauthd[1817785]: do_auth : auth failure: [user=ibm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:03:23 ispc postfix/smtpd[1817791]: sql auxprop plugin using mysql engine Dec 17 02:03:54 ispc sshd[1817809]: Invalid user austen from 62.60.131.157 Dec 17 02:04:01 ispc CRON[1817817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:04:03 ispc CRON[1817817]: pam_unix(cron:session): session closed for user root Dec 17 02:05:01 ispc CRON[1817855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:05:01 ispc CRON[1817856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:05:01 ispc CRON[1817857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:05:01 ispc CRON[1817858]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:05:01 ispc CRON[1817856]: pam_unix(cron:session): session closed for user root Dec 17 02:05:01 ispc CRON[1817858]: pam_unix(cron:session): session closed for user getmail Dec 17 02:05:01 ispc CRON[1817857]: pam_unix(cron:session): session closed for user root Dec 17 02:05:03 ispc CRON[1817855]: pam_unix(cron:session): session closed for user root Dec 17 02:05:20 ispc sshd[1817939]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 02:06:01 ispc CRON[1817967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:06:02 ispc CRON[1817967]: pam_unix(cron:session): session closed for user root Dec 17 02:06:12 ispc sshd[1817982]: Invalid user martof from 221.156.137.103 Dec 17 02:06:50 ispc su[1816642]: pam_unix(su:session): session closed for user root Dec 17 02:06:50 ispc su[1818004]: Successful su for root by root Dec 17 02:06:50 ispc su[1818004]: + ??? root:root Dec 17 02:06:50 ispc su[1818004]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:50 ispc su[1818004]: pam_unix(su:session): session closed for user root Dec 17 02:06:50 ispc su[1818007]: Successful su for root by root Dec 17 02:06:50 ispc su[1818007]: + ??? root:root Dec 17 02:06:50 ispc su[1818007]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:52 ispc su[1818007]: pam_unix(su:session): session closed for user root Dec 17 02:06:52 ispc su[1818013]: Successful su for root by root Dec 17 02:06:52 ispc su[1818013]: + ??? root:root Dec 17 02:06:52 ispc su[1818013]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:52 ispc su[1818013]: pam_unix(su:session): session closed for user root Dec 17 02:06:52 ispc su[1818016]: Successful su for root by root Dec 17 02:06:52 ispc su[1818016]: + ??? root:root Dec 17 02:06:52 ispc su[1818016]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:55 ispc su[1818016]: pam_unix(su:session): session closed for user root Dec 17 02:06:55 ispc su[1818028]: Successful su for root by root Dec 17 02:06:55 ispc su[1818028]: + ??? root:root Dec 17 02:06:55 ispc su[1818028]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:55 ispc su[1818028]: pam_unix(su:session): session closed for user root Dec 17 02:06:55 ispc su[1818031]: Successful su for root by root Dec 17 02:06:55 ispc su[1818031]: + ??? root:root Dec 17 02:06:55 ispc su[1818031]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:55 ispc su[1818031]: pam_unix(su:session): session closed for user root Dec 17 02:06:55 ispc su[1818037]: Successful su for root by root Dec 17 02:06:55 ispc su[1818037]: + ??? root:root Dec 17 02:06:55 ispc su[1818037]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:55 ispc su[1818037]: pam_unix(su:session): session closed for user root Dec 17 02:06:55 ispc su[1818040]: Successful su for root by root Dec 17 02:06:55 ispc su[1818040]: + ??? root:root Dec 17 02:06:55 ispc su[1818040]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:57 ispc su[1818040]: pam_unix(su:session): session closed for user root Dec 17 02:06:57 ispc su[1818046]: Successful su for root by root Dec 17 02:06:57 ispc su[1818046]: + ??? root:root Dec 17 02:06:57 ispc su[1818046]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:06:57 ispc su[1818046]: pam_unix(su:session): session closed for user root Dec 17 02:06:57 ispc su[1818049]: Successful su for root by root Dec 17 02:06:57 ispc su[1818049]: + ??? root:root Dec 17 02:06:57 ispc su[1818049]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:01 ispc CRON[1818053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:07:02 ispc CRON[1818053]: pam_unix(cron:session): session closed for user root Dec 17 02:07:08 ispc su[1818049]: pam_unix(su:session): session closed for user root Dec 17 02:07:08 ispc su[1818070]: Successful su for root by root Dec 17 02:07:08 ispc su[1818070]: + ??? root:root Dec 17 02:07:08 ispc su[1818070]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:08 ispc su[1818070]: pam_unix(su:session): session closed for user root Dec 17 02:07:08 ispc su[1818073]: Successful su for root by root Dec 17 02:07:08 ispc su[1818073]: + ??? root:root Dec 17 02:07:08 ispc su[1818073]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:37 ispc su[1818073]: pam_unix(su:session): session closed for user root Dec 17 02:07:37 ispc su[1818091]: Successful su for root by root Dec 17 02:07:37 ispc su[1818091]: + ??? root:root Dec 17 02:07:37 ispc su[1818091]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:37 ispc su[1818091]: pam_unix(su:session): session closed for user root Dec 17 02:07:37 ispc su[1818094]: Successful su for root by root Dec 17 02:07:37 ispc su[1818094]: + ??? root:root Dec 17 02:07:37 ispc su[1818094]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:38 ispc su[1818094]: pam_unix(su:session): session closed for user root Dec 17 02:07:38 ispc su[1818100]: Successful su for root by root Dec 17 02:07:38 ispc su[1818100]: + ??? root:root Dec 17 02:07:38 ispc su[1818100]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:07:38 ispc su[1818100]: pam_unix(su:session): session closed for user root Dec 17 02:07:38 ispc su[1818103]: Successful su for root by root Dec 17 02:07:38 ispc su[1818103]: + ??? root:root Dec 17 02:07:38 ispc su[1818103]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:08:01 ispc CRON[1818132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:08:02 ispc CRON[1818132]: pam_unix(cron:session): session closed for user root Dec 17 02:09:01 ispc CRON[1818169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:09:01 ispc CRON[1818170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:09:01 ispc CRON[1818169]: pam_unix(cron:session): session closed for user root Dec 17 02:09:02 ispc CRON[1818170]: pam_unix(cron:session): session closed for user root Dec 17 02:09:48 ispc sshd[1818207]: Invalid user martof from 103.110.84.105 Dec 17 02:10:01 ispc CRON[1818217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:10:01 ispc CRON[1818218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:10:01 ispc CRON[1818219]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:10:01 ispc CRON[1818220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:10:01 ispc CRON[1818221]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:10:01 ispc CRON[1818218]: pam_unix(cron:session): session closed for user root Dec 17 02:10:01 ispc CRON[1818219]: pam_unix(cron:session): session closed for user www-data Dec 17 02:10:01 ispc CRON[1818221]: pam_unix(cron:session): session closed for user getmail Dec 17 02:10:02 ispc CRON[1818220]: pam_unix(cron:session): session closed for user root Dec 17 02:10:02 ispc CRON[1818217]: pam_unix(cron:session): session closed for user root Dec 17 02:10:31 ispc postfix/smtpd[1818307]: sql auxprop plugin using mysql engine Dec 17 02:10:32 ispc saslauthd[1818310]: pam_mysql - SELECT returned no result. Dec 17 02:10:32 ispc saslauthd[1818310]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:10:32 ispc saslauthd[1818310]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:10:38 ispc saslauthd[1818312]: pam_mysql - SELECT returned no result. Dec 17 02:10:38 ispc saslauthd[1818312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:10:38 ispc saslauthd[1818312]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:11:01 ispc CRON[1818326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:11:02 ispc CRON[1818326]: pam_unix(cron:session): session closed for user root Dec 17 02:11:33 ispc postfix/smtpd[1818353]: sql auxprop plugin using mysql engine Dec 17 02:11:47 ispc sshd[1818359]: Invalid user ziplines from 185.181.182.252 Dec 17 02:11:57 ispc su[1818103]: pam_unix(su:session): session closed for user root Dec 17 02:11:57 ispc su[1818367]: Successful su for root by root Dec 17 02:11:57 ispc su[1818367]: + ??? root:root Dec 17 02:11:57 ispc su[1818367]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:11:57 ispc su[1818367]: pam_unix(su:session): session closed for user root Dec 17 02:11:57 ispc su[1818370]: Successful su for root by root Dec 17 02:11:57 ispc su[1818370]: + ??? root:root Dec 17 02:11:57 ispc su[1818370]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:12:01 ispc CRON[1818378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:12:02 ispc CRON[1818378]: pam_unix(cron:session): session closed for user root Dec 17 02:12:28 ispc postfix/smtpd[1818399]: sql auxprop plugin using mysql engine Dec 17 02:12:28 ispc CRON[1815957]: pam_unix(cron:session): session closed for user root Dec 17 02:12:29 ispc sshd[1818402]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 02:12:37 ispc sshd[1818407]: Invalid user klape from 36.50.177.171 Dec 17 02:12:39 ispc sshd[1818409]: Did not receive identification string from 36.50.177.171 Dec 17 02:12:49 ispc sshd[1818418]: Invalid user admin from 45.119.213.109 Dec 17 02:13:01 ispc CRON[1818420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:13:07 ispc CRON[1818420]: pam_unix(cron:session): session closed for user root Dec 17 02:13:16 ispc sshd[1818432]: Invalid user pronajemplosin from 183.215.179.154 Dec 17 02:13:59 ispc su[1818370]: pam_unix(su:session): session closed for user root Dec 17 02:13:59 ispc su[1818438]: Successful su for root by root Dec 17 02:13:59 ispc su[1818438]: + ??? root:root Dec 17 02:13:59 ispc su[1818438]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:13:59 ispc su[1818438]: pam_unix(su:session): session closed for user root Dec 17 02:13:59 ispc su[1818442]: Successful su for root by root Dec 17 02:13:59 ispc su[1818442]: + ??? root:root Dec 17 02:13:59 ispc su[1818442]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:00 ispc su[1818442]: pam_unix(su:session): session closed for user root Dec 17 02:14:00 ispc su[1818448]: Successful su for root by root Dec 17 02:14:00 ispc su[1818448]: + ??? root:root Dec 17 02:14:00 ispc su[1818448]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:00 ispc su[1818448]: pam_unix(su:session): session closed for user root Dec 17 02:14:00 ispc su[1818451]: Successful su for root by root Dec 17 02:14:00 ispc su[1818451]: + ??? root:root Dec 17 02:14:00 ispc su[1818451]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:01 ispc CRON[1818455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:14:16 ispc su[1818451]: pam_unix(su:session): session closed for user root Dec 17 02:14:16 ispc su[1818472]: Successful su for root by root Dec 17 02:14:16 ispc su[1818472]: + ??? root:root Dec 17 02:14:16 ispc su[1818472]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:16 ispc su[1818472]: pam_unix(su:session): session closed for user root Dec 17 02:14:16 ispc su[1818475]: Successful su for root by root Dec 17 02:14:16 ispc su[1818475]: + ??? root:root Dec 17 02:14:16 ispc su[1818475]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:20 ispc su[1818475]: pam_unix(su:session): session closed for user root Dec 17 02:14:20 ispc su[1818481]: Successful su for root by root Dec 17 02:14:20 ispc su[1818481]: + ??? root:root Dec 17 02:14:20 ispc su[1818481]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:20 ispc su[1818481]: pam_unix(su:session): session closed for user root Dec 17 02:14:20 ispc su[1818484]: Successful su for root by root Dec 17 02:14:20 ispc su[1818484]: + ??? root:root Dec 17 02:14:20 ispc su[1818484]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:23 ispc su[1818484]: pam_unix(su:session): session closed for user root Dec 17 02:14:23 ispc su[1818494]: Successful su for root by root Dec 17 02:14:23 ispc su[1818494]: + ??? root:root Dec 17 02:14:23 ispc su[1818494]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:23 ispc su[1818494]: pam_unix(su:session): session closed for user root Dec 17 02:14:23 ispc su[1818497]: Successful su for root by root Dec 17 02:14:23 ispc su[1818497]: + ??? root:root Dec 17 02:14:23 ispc su[1818497]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:28 ispc su[1818497]: pam_unix(su:session): session closed for user root Dec 17 02:14:28 ispc su[1818503]: Successful su for root by root Dec 17 02:14:28 ispc su[1818503]: + ??? root:root Dec 17 02:14:28 ispc su[1818503]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:28 ispc su[1818503]: pam_unix(su:session): session closed for user root Dec 17 02:14:28 ispc su[1818506]: Successful su for root by root Dec 17 02:14:28 ispc su[1818506]: + ??? root:root Dec 17 02:14:28 ispc su[1818506]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:29 ispc su[1818506]: pam_unix(su:session): session closed for user root Dec 17 02:14:29 ispc su[1818512]: Successful su for root by root Dec 17 02:14:29 ispc su[1818512]: + ??? root:root Dec 17 02:14:29 ispc su[1818512]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:30 ispc su[1818512]: pam_unix(su:session): session closed for user root Dec 17 02:14:30 ispc su[1818515]: Successful su for root by root Dec 17 02:14:30 ispc su[1818515]: + ??? root:root Dec 17 02:14:30 ispc su[1818515]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:30 ispc su[1818515]: pam_unix(su:session): session closed for user root Dec 17 02:14:30 ispc su[1818521]: Successful su for root by root Dec 17 02:14:30 ispc su[1818521]: + ??? root:root Dec 17 02:14:30 ispc su[1818521]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:31 ispc su[1818521]: pam_unix(su:session): session closed for user root Dec 17 02:14:31 ispc su[1818524]: Successful su for root by root Dec 17 02:14:31 ispc su[1818524]: + ??? root:root Dec 17 02:14:31 ispc su[1818524]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:31 ispc su[1818524]: pam_unix(su:session): session closed for user root Dec 17 02:14:31 ispc su[1818530]: Successful su for root by root Dec 17 02:14:31 ispc su[1818530]: + ??? root:root Dec 17 02:14:31 ispc su[1818530]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:31 ispc su[1818530]: pam_unix(su:session): session closed for user root Dec 17 02:14:31 ispc su[1818533]: Successful su for root by root Dec 17 02:14:31 ispc su[1818533]: + ??? root:root Dec 17 02:14:31 ispc su[1818533]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:37 ispc su[1818533]: pam_unix(su:session): session closed for user root Dec 17 02:14:37 ispc su[1818543]: Successful su for root by root Dec 17 02:14:37 ispc su[1818543]: + ??? root:root Dec 17 02:14:37 ispc su[1818543]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:37 ispc su[1818543]: pam_unix(su:session): session closed for user root Dec 17 02:14:37 ispc su[1818546]: Successful su for root by root Dec 17 02:14:37 ispc su[1818546]: + ??? root:root Dec 17 02:14:37 ispc su[1818546]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:38 ispc su[1818546]: pam_unix(su:session): session closed for user root Dec 17 02:14:38 ispc su[1818552]: Successful su for root by root Dec 17 02:14:38 ispc su[1818552]: + ??? root:root Dec 17 02:14:38 ispc su[1818552]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:38 ispc su[1818552]: pam_unix(su:session): session closed for user root Dec 17 02:14:38 ispc su[1818555]: Successful su for root by root Dec 17 02:14:38 ispc su[1818555]: + ??? root:root Dec 17 02:14:38 ispc su[1818555]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:44 ispc su[1818555]: pam_unix(su:session): session closed for user root Dec 17 02:14:44 ispc su[1818565]: Successful su for root by root Dec 17 02:14:44 ispc su[1818565]: + ??? root:root Dec 17 02:14:44 ispc su[1818565]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:45 ispc su[1818565]: pam_unix(su:session): session closed for user root Dec 17 02:14:45 ispc su[1818568]: Successful su for root by root Dec 17 02:14:45 ispc su[1818568]: + ??? root:root Dec 17 02:14:45 ispc su[1818568]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:45 ispc su[1818568]: pam_unix(su:session): session closed for user root Dec 17 02:14:45 ispc su[1818574]: Successful su for root by root Dec 17 02:14:45 ispc su[1818574]: + ??? root:root Dec 17 02:14:45 ispc su[1818574]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:45 ispc su[1818574]: pam_unix(su:session): session closed for user root Dec 17 02:14:45 ispc su[1818577]: Successful su for root by root Dec 17 02:14:45 ispc su[1818577]: + ??? root:root Dec 17 02:14:45 ispc su[1818577]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:48 ispc su[1818577]: pam_unix(su:session): session closed for user root Dec 17 02:14:48 ispc su[1818583]: Successful su for root by root Dec 17 02:14:48 ispc su[1818583]: + ??? root:root Dec 17 02:14:48 ispc su[1818583]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:48 ispc su[1818583]: pam_unix(su:session): session closed for user root Dec 17 02:14:48 ispc su[1818586]: Successful su for root by root Dec 17 02:14:48 ispc su[1818586]: + ??? root:root Dec 17 02:14:48 ispc su[1818586]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:49 ispc su[1818586]: pam_unix(su:session): session closed for user root Dec 17 02:14:49 ispc su[1818592]: Successful su for root by root Dec 17 02:14:49 ispc su[1818592]: + ??? root:root Dec 17 02:14:49 ispc su[1818592]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:14:49 ispc su[1818592]: pam_unix(su:session): session closed for user root Dec 17 02:14:49 ispc su[1818595]: Successful su for root by root Dec 17 02:14:49 ispc su[1818595]: + ??? root:root Dec 17 02:14:49 ispc su[1818595]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:15:01 ispc CRON[1818603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:15:01 ispc CRON[1818604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:15:01 ispc CRON[1818605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:15:01 ispc CRON[1818606]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:15:01 ispc CRON[1818604]: pam_unix(cron:session): session closed for user root Dec 17 02:15:01 ispc CRON[1818606]: pam_unix(cron:session): session closed for user getmail Dec 17 02:15:02 ispc CRON[1818603]: pam_unix(cron:session): session closed for user root Dec 17 02:15:02 ispc CRON[1818605]: pam_unix(cron:session): session closed for user root Dec 17 02:15:15 ispc su[1818595]: pam_unix(su:session): session closed for user root Dec 17 02:15:15 ispc su[1818691]: Successful su for root by root Dec 17 02:15:15 ispc su[1818691]: + ??? root:root Dec 17 02:15:15 ispc su[1818691]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:15:15 ispc su[1818691]: pam_unix(su:session): session closed for user root Dec 17 02:15:15 ispc su[1818694]: Successful su for root by root Dec 17 02:15:15 ispc su[1818694]: + ??? root:root Dec 17 02:15:15 ispc su[1818694]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:15:20 ispc sshd[1818698]: Did not receive identification string from 159.223.15.8 Dec 17 02:16:01 ispc CRON[1818716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:16:02 ispc CRON[1818716]: pam_unix(cron:session): session closed for user root Dec 17 02:17:01 ispc CRON[1818755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:17:02 ispc CRON[1818755]: pam_unix(cron:session): session closed for user root Dec 17 02:17:08 ispc sshd[1818770]: Invalid user blceu from 51.91.247.10 Dec 17 02:17:18 ispc su[1818694]: pam_unix(su:session): session closed for user root Dec 17 02:17:18 ispc su[1818778]: Successful su for root by root Dec 17 02:17:18 ispc su[1818778]: + ??? root:root Dec 17 02:17:18 ispc su[1818778]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:18 ispc su[1818778]: pam_unix(su:session): session closed for user root Dec 17 02:17:18 ispc su[1818781]: Successful su for root by root Dec 17 02:17:18 ispc su[1818781]: + ??? root:root Dec 17 02:17:18 ispc su[1818781]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:20 ispc su[1818781]: pam_unix(su:session): session closed for user root Dec 17 02:17:20 ispc su[1818787]: Successful su for root by root Dec 17 02:17:20 ispc su[1818787]: + ??? root:root Dec 17 02:17:20 ispc su[1818787]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:20 ispc su[1818787]: pam_unix(su:session): session closed for user root Dec 17 02:17:20 ispc su[1818790]: Successful su for root by root Dec 17 02:17:20 ispc su[1818790]: + ??? root:root Dec 17 02:17:20 ispc su[1818790]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:42 ispc su[1818790]: pam_unix(su:session): session closed for user root Dec 17 02:17:42 ispc su[1818804]: Successful su for root by root Dec 17 02:17:42 ispc su[1818804]: + ??? root:root Dec 17 02:17:42 ispc su[1818804]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:42 ispc su[1818804]: pam_unix(su:session): session closed for user root Dec 17 02:17:42 ispc su[1818807]: Successful su for root by root Dec 17 02:17:42 ispc su[1818807]: + ??? root:root Dec 17 02:17:42 ispc su[1818807]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:43 ispc su[1818807]: pam_unix(su:session): session closed for user root Dec 17 02:17:43 ispc su[1818813]: Successful su for root by root Dec 17 02:17:43 ispc su[1818813]: + ??? root:root Dec 17 02:17:43 ispc su[1818813]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:43 ispc su[1818813]: pam_unix(su:session): session closed for user root Dec 17 02:17:43 ispc su[1818816]: Successful su for root by root Dec 17 02:17:43 ispc su[1818816]: + ??? root:root Dec 17 02:17:43 ispc su[1818816]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:44 ispc su[1818816]: pam_unix(su:session): session closed for user root Dec 17 02:17:44 ispc su[1818822]: Successful su for root by root Dec 17 02:17:44 ispc su[1818822]: + ??? root:root Dec 17 02:17:44 ispc su[1818822]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:44 ispc su[1818822]: pam_unix(su:session): session closed for user root Dec 17 02:17:44 ispc su[1818829]: Successful su for root by root Dec 17 02:17:44 ispc su[1818829]: + ??? root:root Dec 17 02:17:44 ispc su[1818829]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:45 ispc su[1818829]: pam_unix(su:session): session closed for user root Dec 17 02:17:46 ispc su[1818835]: Successful su for root by root Dec 17 02:17:46 ispc su[1818835]: + ??? root:root Dec 17 02:17:46 ispc su[1818835]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:46 ispc su[1818835]: pam_unix(su:session): session closed for user root Dec 17 02:17:46 ispc su[1818838]: Successful su for root by root Dec 17 02:17:46 ispc su[1818838]: + ??? root:root Dec 17 02:17:46 ispc su[1818838]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:50 ispc su[1818838]: pam_unix(su:session): session closed for user root Dec 17 02:17:50 ispc su[1818848]: Successful su for root by root Dec 17 02:17:50 ispc su[1818848]: + ??? root:root Dec 17 02:17:51 ispc su[1818848]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:51 ispc su[1818848]: pam_unix(su:session): session closed for user root Dec 17 02:17:51 ispc su[1818851]: Successful su for root by root Dec 17 02:17:51 ispc su[1818851]: + ??? root:root Dec 17 02:17:51 ispc su[1818851]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:53 ispc su[1818851]: pam_unix(su:session): session closed for user root Dec 17 02:17:53 ispc su[1818857]: Successful su for root by root Dec 17 02:17:53 ispc su[1818857]: + ??? root:root Dec 17 02:17:53 ispc su[1818857]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:17:53 ispc su[1818857]: pam_unix(su:session): session closed for user root Dec 17 02:17:53 ispc su[1818860]: Successful su for root by root Dec 17 02:17:53 ispc su[1818860]: + ??? root:root Dec 17 02:17:53 ispc su[1818860]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:01 ispc CRON[1818872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:18:02 ispc CRON[1818872]: pam_unix(cron:session): session closed for user root Dec 17 02:18:22 ispc su[1818860]: pam_unix(su:session): session closed for user root Dec 17 02:18:22 ispc su[1818895]: Successful su for root by root Dec 17 02:18:22 ispc su[1818895]: + ??? root:root Dec 17 02:18:22 ispc su[1818895]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:22 ispc postfix/smtpd[1818891]: sql auxprop plugin using mysql engine Dec 17 02:18:22 ispc su[1818895]: pam_unix(su:session): session closed for user root Dec 17 02:18:22 ispc su[1818898]: Successful su for root by root Dec 17 02:18:22 ispc su[1818898]: + ??? root:root Dec 17 02:18:22 ispc su[1818898]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:22 ispc su[1818898]: pam_unix(su:session): session closed for user root Dec 17 02:18:22 ispc su[1818905]: Successful su for root by root Dec 17 02:18:22 ispc su[1818905]: + ??? root:root Dec 17 02:18:22 ispc su[1818905]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:22 ispc su[1818905]: pam_unix(su:session): session closed for user root Dec 17 02:18:22 ispc su[1818908]: Successful su for root by root Dec 17 02:18:22 ispc su[1818908]: + ??? root:root Dec 17 02:18:22 ispc su[1818908]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:23 ispc saslauthd[1818912]: pam_mysql - SELECT returned no result. Dec 17 02:18:23 ispc saslauthd[1818912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:18:23 ispc saslauthd[1818912]: do_auth : auth failure: [user=iceman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:18:30 ispc su[1818908]: pam_unix(su:session): session closed for user root Dec 17 02:18:30 ispc su[1818919]: Successful su for root by root Dec 17 02:18:30 ispc su[1818919]: + ??? root:root Dec 17 02:18:30 ispc su[1818919]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:30 ispc su[1818919]: pam_unix(su:session): session closed for user root Dec 17 02:18:30 ispc su[1818922]: Successful su for root by root Dec 17 02:18:30 ispc su[1818922]: + ??? root:root Dec 17 02:18:30 ispc su[1818922]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:33 ispc su[1818922]: pam_unix(su:session): session closed for user root Dec 17 02:18:33 ispc su[1818928]: Successful su for root by root Dec 17 02:18:33 ispc su[1818928]: + ??? root:root Dec 17 02:18:33 ispc su[1818928]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:33 ispc su[1818928]: pam_unix(su:session): session closed for user root Dec 17 02:18:33 ispc su[1818931]: Successful su for root by root Dec 17 02:18:33 ispc su[1818931]: + ??? root:root Dec 17 02:18:33 ispc su[1818931]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:43 ispc saslauthd[1818939]: pam_mysql - SELECT returned no result. Dec 17 02:18:43 ispc saslauthd[1818939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:18:43 ispc saslauthd[1818939]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:18:44 ispc su[1818931]: pam_unix(su:session): session closed for user root Dec 17 02:18:44 ispc su[1818942]: Successful su for root by root Dec 17 02:18:44 ispc su[1818942]: + ??? root:root Dec 17 02:18:44 ispc su[1818942]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:44 ispc su[1818942]: pam_unix(su:session): session closed for user root Dec 17 02:18:44 ispc su[1818945]: Successful su for root by root Dec 17 02:18:44 ispc su[1818945]: + ??? root:root Dec 17 02:18:44 ispc su[1818945]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:49 ispc su[1818945]: pam_unix(su:session): session closed for user root Dec 17 02:18:49 ispc su[1818955]: Successful su for root by root Dec 17 02:18:49 ispc su[1818955]: + ??? root:root Dec 17 02:18:49 ispc su[1818955]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:18:49 ispc su[1818955]: pam_unix(su:session): session closed for user root Dec 17 02:18:49 ispc su[1818958]: Successful su for root by root Dec 17 02:18:49 ispc su[1818958]: + ??? root:root Dec 17 02:18:49 ispc su[1818958]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:01 ispc CRON[1818966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:19:02 ispc CRON[1818966]: pam_unix(cron:session): session closed for user root Dec 17 02:19:12 ispc su[1818958]: pam_unix(su:session): session closed for user root Dec 17 02:19:12 ispc su[1818984]: Successful su for root by root Dec 17 02:19:12 ispc su[1818984]: + ??? root:root Dec 17 02:19:12 ispc su[1818984]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:12 ispc su[1818984]: pam_unix(su:session): session closed for user root Dec 17 02:19:12 ispc su[1818987]: Successful su for root by root Dec 17 02:19:12 ispc su[1818987]: + ??? root:root Dec 17 02:19:12 ispc su[1818987]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:12 ispc su[1818987]: pam_unix(su:session): session closed for user root Dec 17 02:19:12 ispc su[1818993]: Successful su for root by root Dec 17 02:19:12 ispc su[1818993]: + ??? root:root Dec 17 02:19:12 ispc su[1818993]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:12 ispc su[1818993]: pam_unix(su:session): session closed for user root Dec 17 02:19:12 ispc su[1818996]: Successful su for root by root Dec 17 02:19:12 ispc su[1818996]: + ??? root:root Dec 17 02:19:12 ispc su[1818996]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:13 ispc su[1818996]: pam_unix(su:session): session closed for user root Dec 17 02:19:13 ispc su[1819002]: Successful su for root by root Dec 17 02:19:13 ispc su[1819002]: + ??? root:root Dec 17 02:19:13 ispc su[1819002]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:13 ispc su[1819002]: pam_unix(su:session): session closed for user root Dec 17 02:19:13 ispc su[1819005]: Successful su for root by root Dec 17 02:19:13 ispc su[1819005]: + ??? root:root Dec 17 02:19:13 ispc su[1819005]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:17 ispc su[1819005]: pam_unix(su:session): session closed for user root Dec 17 02:19:17 ispc su[1819015]: Successful su for root by root Dec 17 02:19:17 ispc su[1819015]: + ??? root:root Dec 17 02:19:17 ispc su[1819015]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:17 ispc su[1819015]: pam_unix(su:session): session closed for user root Dec 17 02:19:17 ispc su[1819018]: Successful su for root by root Dec 17 02:19:17 ispc su[1819018]: + ??? root:root Dec 17 02:19:17 ispc su[1819018]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:30 ispc sshd[1819026]: Invalid user blceu from 118.218.219.250 Dec 17 02:19:44 ispc su[1819018]: pam_unix(su:session): session closed for user root Dec 17 02:19:44 ispc su[1819036]: Successful su for root by root Dec 17 02:19:44 ispc su[1819036]: + ??? root:root Dec 17 02:19:44 ispc su[1819036]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:44 ispc su[1819036]: pam_unix(su:session): session closed for user root Dec 17 02:19:44 ispc su[1819039]: Successful su for root by root Dec 17 02:19:44 ispc su[1819039]: + ??? root:root Dec 17 02:19:44 ispc su[1819039]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:46 ispc su[1819039]: pam_unix(su:session): session closed for user root Dec 17 02:19:46 ispc su[1819049]: Successful su for root by root Dec 17 02:19:46 ispc su[1819049]: + ??? root:root Dec 17 02:19:46 ispc su[1819049]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:46 ispc su[1819049]: pam_unix(su:session): session closed for user root Dec 17 02:19:46 ispc su[1819052]: Successful su for root by root Dec 17 02:19:46 ispc su[1819052]: + ??? root:root Dec 17 02:19:46 ispc su[1819052]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:48 ispc su[1819052]: pam_unix(su:session): session closed for user root Dec 17 02:19:48 ispc su[1819059]: Successful su for root by root Dec 17 02:19:48 ispc su[1819059]: + ??? root:root Dec 17 02:19:48 ispc su[1819059]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:49 ispc su[1819059]: pam_unix(su:session): session closed for user root Dec 17 02:19:49 ispc su[1819062]: Successful su for root by root Dec 17 02:19:49 ispc su[1819062]: + ??? root:root Dec 17 02:19:49 ispc su[1819062]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:49 ispc su[1819062]: pam_unix(su:session): session closed for user root Dec 17 02:19:49 ispc su[1819068]: Successful su for root by root Dec 17 02:19:49 ispc su[1819068]: + ??? root:root Dec 17 02:19:49 ispc su[1819068]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:49 ispc su[1819068]: pam_unix(su:session): session closed for user root Dec 17 02:19:49 ispc su[1819071]: Successful su for root by root Dec 17 02:19:49 ispc su[1819071]: + ??? root:root Dec 17 02:19:49 ispc su[1819071]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:49 ispc su[1819071]: pam_unix(su:session): session closed for user root Dec 17 02:19:49 ispc su[1819077]: Successful su for root by root Dec 17 02:19:50 ispc su[1819077]: + ??? root:root Dec 17 02:19:50 ispc su[1819077]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:50 ispc su[1819077]: pam_unix(su:session): session closed for user root Dec 17 02:19:50 ispc su[1819080]: Successful su for root by root Dec 17 02:19:50 ispc su[1819080]: + ??? root:root Dec 17 02:19:50 ispc su[1819080]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:50 ispc su[1819080]: pam_unix(su:session): session closed for user root Dec 17 02:19:50 ispc su[1819086]: Successful su for root by root Dec 17 02:19:50 ispc su[1819086]: + ??? root:root Dec 17 02:19:50 ispc su[1819086]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:50 ispc su[1819086]: pam_unix(su:session): session closed for user root Dec 17 02:19:50 ispc su[1819089]: Successful su for root by root Dec 17 02:19:50 ispc su[1819089]: + ??? root:root Dec 17 02:19:50 ispc su[1819089]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:50 ispc su[1819089]: pam_unix(su:session): session closed for user root Dec 17 02:19:50 ispc su[1819095]: Successful su for root by root Dec 17 02:19:50 ispc su[1819095]: + ??? root:root Dec 17 02:19:50 ispc su[1819095]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:51 ispc su[1819095]: pam_unix(su:session): session closed for user root Dec 17 02:19:51 ispc su[1819098]: Successful su for root by root Dec 17 02:19:51 ispc su[1819098]: + ??? root:root Dec 17 02:19:51 ispc su[1819098]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:52 ispc su[1819098]: pam_unix(su:session): session closed for user root Dec 17 02:19:52 ispc su[1819104]: Successful su for root by root Dec 17 02:19:53 ispc su[1819104]: + ??? root:root Dec 17 02:19:53 ispc su[1819104]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:53 ispc su[1819104]: pam_unix(su:session): session closed for user root Dec 17 02:19:53 ispc su[1819107]: Successful su for root by root Dec 17 02:19:53 ispc su[1819107]: + ??? root:root Dec 17 02:19:53 ispc su[1819107]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:55 ispc su[1819107]: pam_unix(su:session): session closed for user root Dec 17 02:19:55 ispc su[1819113]: Successful su for root by root Dec 17 02:19:55 ispc su[1819113]: + ??? root:root Dec 17 02:19:55 ispc su[1819113]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:55 ispc su[1819113]: pam_unix(su:session): session closed for user root Dec 17 02:19:55 ispc su[1819116]: Successful su for root by root Dec 17 02:19:55 ispc su[1819116]: + ??? root:root Dec 17 02:19:55 ispc su[1819116]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:56 ispc su[1819116]: pam_unix(su:session): session closed for user root Dec 17 02:19:56 ispc su[1819126]: Successful su for root by root Dec 17 02:19:56 ispc su[1819126]: + ??? root:root Dec 17 02:19:56 ispc su[1819126]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:57 ispc su[1819126]: pam_unix(su:session): session closed for user root Dec 17 02:19:57 ispc su[1819129]: Successful su for root by root Dec 17 02:19:57 ispc su[1819129]: + ??? root:root Dec 17 02:19:57 ispc su[1819129]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:57 ispc su[1819129]: pam_unix(su:session): session closed for user root Dec 17 02:19:57 ispc su[1819135]: Successful su for root by root Dec 17 02:19:57 ispc su[1819135]: + ??? root:root Dec 17 02:19:57 ispc su[1819135]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:19:57 ispc su[1819135]: pam_unix(su:session): session closed for user root Dec 17 02:19:57 ispc su[1819138]: Successful su for root by root Dec 17 02:19:57 ispc su[1819138]: + ??? root:root Dec 17 02:19:57 ispc su[1819138]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:01 ispc CRON[1819142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:20:01 ispc CRON[1819143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:20:01 ispc CRON[1819144]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:20:01 ispc CRON[1819145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:20:01 ispc CRON[1819146]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:20:01 ispc CRON[1819143]: pam_unix(cron:session): session closed for user root Dec 17 02:20:01 ispc CRON[1819144]: pam_unix(cron:session): session closed for user www-data Dec 17 02:20:01 ispc CRON[1819146]: pam_unix(cron:session): session closed for user getmail Dec 17 02:20:01 ispc CRON[1819145]: pam_unix(cron:session): session closed for user root Dec 17 02:20:02 ispc su[1819138]: pam_unix(su:session): session closed for user root Dec 17 02:20:02 ispc su[1819215]: Successful su for root by root Dec 17 02:20:02 ispc su[1819215]: + ??? root:root Dec 17 02:20:02 ispc su[1819215]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:02 ispc su[1819215]: pam_unix(su:session): session closed for user root Dec 17 02:20:02 ispc su[1819225]: Successful su for root by root Dec 17 02:20:02 ispc su[1819225]: + ??? root:root Dec 17 02:20:02 ispc su[1819225]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:02 ispc CRON[1819142]: pam_unix(cron:session): session closed for user root Dec 17 02:20:02 ispc su[1819225]: pam_unix(su:session): session closed for user root Dec 17 02:20:02 ispc su[1819231]: Successful su for root by root Dec 17 02:20:02 ispc su[1819231]: + ??? root:root Dec 17 02:20:02 ispc su[1819231]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:02 ispc su[1819231]: pam_unix(su:session): session closed for user root Dec 17 02:20:02 ispc su[1819234]: Successful su for root by root Dec 17 02:20:02 ispc su[1819234]: + ??? root:root Dec 17 02:20:02 ispc su[1819234]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:07 ispc su[1819234]: pam_unix(su:session): session closed for user root Dec 17 02:20:07 ispc su[1819244]: Successful su for root by root Dec 17 02:20:07 ispc su[1819244]: + ??? root:root Dec 17 02:20:07 ispc su[1819244]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:07 ispc su[1819244]: pam_unix(su:session): session closed for user root Dec 17 02:20:07 ispc su[1819247]: Successful su for root by root Dec 17 02:20:07 ispc su[1819247]: + ??? root:root Dec 17 02:20:07 ispc su[1819247]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:25 ispc su[1819247]: pam_unix(su:session): session closed for user root Dec 17 02:20:25 ispc su[1819257]: Successful su for root by root Dec 17 02:20:26 ispc su[1819257]: + ??? root:root Dec 17 02:20:26 ispc su[1819257]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:26 ispc su[1819257]: pam_unix(su:session): session closed for user root Dec 17 02:20:26 ispc su[1819260]: Successful su for root by root Dec 17 02:20:26 ispc su[1819260]: + ??? root:root Dec 17 02:20:26 ispc su[1819260]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:32 ispc su[1819260]: pam_unix(su:session): session closed for user root Dec 17 02:20:32 ispc su[1819271]: Successful su for root by root Dec 17 02:20:32 ispc su[1819271]: + ??? root:root Dec 17 02:20:32 ispc su[1819271]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:32 ispc su[1819271]: pam_unix(su:session): session closed for user root Dec 17 02:20:33 ispc su[1819274]: Successful su for root by root Dec 17 02:20:33 ispc su[1819274]: + ??? root:root Dec 17 02:20:33 ispc su[1819274]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:37 ispc su[1819274]: pam_unix(su:session): session closed for user root Dec 17 02:20:37 ispc su[1819284]: Successful su for root by root Dec 17 02:20:37 ispc su[1819284]: + ??? root:root Dec 17 02:20:37 ispc su[1819284]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:37 ispc su[1819284]: pam_unix(su:session): session closed for user root Dec 17 02:20:37 ispc su[1819287]: Successful su for root by root Dec 17 02:20:37 ispc su[1819287]: + ??? root:root Dec 17 02:20:37 ispc su[1819287]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:37 ispc su[1819287]: pam_unix(su:session): session closed for user root Dec 17 02:20:37 ispc su[1819293]: Successful su for root by root Dec 17 02:20:37 ispc su[1819293]: + ??? root:root Dec 17 02:20:37 ispc su[1819293]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:37 ispc su[1819293]: pam_unix(su:session): session closed for user root Dec 17 02:20:37 ispc su[1819296]: Successful su for root by root Dec 17 02:20:37 ispc su[1819296]: + ??? root:root Dec 17 02:20:37 ispc su[1819296]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:45 ispc sshd[1819300]: Did not receive identification string from 142.93.128.154 Dec 17 02:20:46 ispc su[1819296]: pam_unix(su:session): session closed for user root Dec 17 02:20:46 ispc su[1819307]: Successful su for root by root Dec 17 02:20:47 ispc su[1819307]: + ??? root:root Dec 17 02:20:47 ispc su[1819307]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:47 ispc su[1819307]: pam_unix(su:session): session closed for user root Dec 17 02:20:47 ispc su[1819310]: Successful su for root by root Dec 17 02:20:47 ispc su[1819310]: + ??? root:root Dec 17 02:20:47 ispc su[1819310]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:50 ispc su[1819310]: pam_unix(su:session): session closed for user root Dec 17 02:20:50 ispc su[1819318]: Successful su for root by root Dec 17 02:20:50 ispc su[1819318]: + ??? root:root Dec 17 02:20:50 ispc su[1819318]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:50 ispc su[1819318]: pam_unix(su:session): session closed for user root Dec 17 02:20:50 ispc su[1819321]: Successful su for root by root Dec 17 02:20:50 ispc su[1819321]: + ??? root:root Dec 17 02:20:50 ispc su[1819321]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:51 ispc su[1819321]: pam_unix(su:session): session closed for user root Dec 17 02:20:51 ispc su[1819327]: Successful su for root by root Dec 17 02:20:51 ispc su[1819327]: + ??? root:root Dec 17 02:20:51 ispc su[1819327]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:52 ispc su[1819327]: pam_unix(su:session): session closed for user root Dec 17 02:20:52 ispc su[1819330]: Successful su for root by root Dec 17 02:20:52 ispc su[1819330]: + ??? root:root Dec 17 02:20:52 ispc su[1819330]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:57 ispc su[1819330]: pam_unix(su:session): session closed for user root Dec 17 02:20:57 ispc su[1819340]: Successful su for root by root Dec 17 02:20:57 ispc su[1819340]: + ??? root:root Dec 17 02:20:57 ispc su[1819340]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:57 ispc su[1819340]: pam_unix(su:session): session closed for user root Dec 17 02:20:57 ispc su[1819343]: Successful su for root by root Dec 17 02:20:57 ispc su[1819343]: + ??? root:root Dec 17 02:20:57 ispc su[1819343]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:57 ispc su[1819343]: pam_unix(su:session): session closed for user root Dec 17 02:20:58 ispc su[1819349]: Successful su for root by root Dec 17 02:20:58 ispc su[1819349]: + ??? root:root Dec 17 02:20:58 ispc su[1819349]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:20:58 ispc su[1819349]: pam_unix(su:session): session closed for user root Dec 17 02:20:58 ispc su[1819352]: Successful su for root by root Dec 17 02:20:58 ispc su[1819352]: + ??? root:root Dec 17 02:20:58 ispc su[1819352]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:21:01 ispc CRON[1819356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:21:01 ispc CRON[1819357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:21:01 ispc CRON[1819356]: pam_unix(cron:session): session closed for user root Dec 17 02:21:02 ispc CRON[1819357]: pam_unix(cron:session): session closed for user root Dec 17 02:21:20 ispc postfix/smtpd[1819378]: sql auxprop plugin using mysql engine Dec 17 02:21:41 ispc su[1819352]: pam_unix(su:session): session closed for user root Dec 17 02:21:41 ispc su[1819392]: Successful su for root by root Dec 17 02:21:41 ispc su[1819392]: + ??? root:root Dec 17 02:21:41 ispc su[1819392]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:21:41 ispc su[1819392]: pam_unix(su:session): session closed for user root Dec 17 02:21:41 ispc su[1819395]: Successful su for root by root Dec 17 02:21:41 ispc su[1819395]: + ??? root:root Dec 17 02:21:41 ispc su[1819395]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:21:47 ispc sshd[1819399]: Invalid user admin from 142.93.128.154 Dec 17 02:22:01 ispc CRON[1819409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:22:01 ispc CRON[1819409]: pam_unix(cron:session): session closed for user root Dec 17 02:22:16 ispc su[1819395]: pam_unix(su:session): session closed for user root Dec 17 02:22:16 ispc su[1819427]: Successful su for root by root Dec 17 02:22:16 ispc su[1819427]: + ??? root:root Dec 17 02:22:16 ispc su[1819427]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:16 ispc su[1819427]: pam_unix(su:session): session closed for user root Dec 17 02:22:16 ispc su[1819430]: Successful su for root by root Dec 17 02:22:16 ispc su[1819430]: + ??? root:root Dec 17 02:22:16 ispc su[1819430]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:19 ispc su[1819430]: pam_unix(su:session): session closed for user root Dec 17 02:22:19 ispc su[1819440]: Successful su for root by root Dec 17 02:22:19 ispc su[1819440]: + ??? root:root Dec 17 02:22:19 ispc su[1819440]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:19 ispc su[1819440]: pam_unix(su:session): session closed for user root Dec 17 02:22:19 ispc su[1819443]: Successful su for root by root Dec 17 02:22:19 ispc su[1819443]: + ??? root:root Dec 17 02:22:19 ispc su[1819443]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:20 ispc su[1819443]: pam_unix(su:session): session closed for user root Dec 17 02:22:20 ispc su[1819449]: Successful su for root by root Dec 17 02:22:20 ispc su[1819449]: + ??? root:root Dec 17 02:22:20 ispc su[1819449]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:21 ispc su[1819449]: pam_unix(su:session): session closed for user root Dec 17 02:22:21 ispc su[1819452]: Successful su for root by root Dec 17 02:22:21 ispc su[1819452]: + ??? root:root Dec 17 02:22:21 ispc su[1819452]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:22 ispc su[1819452]: pam_unix(su:session): session closed for user root Dec 17 02:22:22 ispc su[1819458]: Successful su for root by root Dec 17 02:22:22 ispc su[1819458]: + ??? root:root Dec 17 02:22:22 ispc su[1819458]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:22 ispc su[1819458]: pam_unix(su:session): session closed for user root Dec 17 02:22:22 ispc su[1819461]: Successful su for root by root Dec 17 02:22:22 ispc su[1819461]: + ??? root:root Dec 17 02:22:22 ispc su[1819461]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:32 ispc sshd[1819471]: Invalid user admin from 142.93.128.154 Dec 17 02:22:41 ispc su[1819461]: pam_unix(su:session): session closed for user root Dec 17 02:22:41 ispc su[1819481]: Successful su for root by root Dec 17 02:22:41 ispc su[1819481]: + ??? root:root Dec 17 02:22:41 ispc su[1819481]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:41 ispc su[1819481]: pam_unix(su:session): session closed for user root Dec 17 02:22:41 ispc su[1819484]: Successful su for root by root Dec 17 02:22:41 ispc su[1819484]: + ??? root:root Dec 17 02:22:41 ispc su[1819484]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:46 ispc sshd[1819488]: Invalid user ziplines from 211.110.229.128 Dec 17 02:22:48 ispc su[1819484]: pam_unix(su:session): session closed for user root Dec 17 02:22:48 ispc su[1819503]: Successful su for root by root Dec 17 02:22:48 ispc su[1819503]: + ??? root:root Dec 17 02:22:48 ispc su[1819503]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:48 ispc su[1819503]: pam_unix(su:session): session closed for user root Dec 17 02:22:48 ispc su[1819506]: Successful su for root by root Dec 17 02:22:48 ispc su[1819506]: + ??? root:root Dec 17 02:22:48 ispc su[1819506]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:49 ispc su[1819506]: pam_unix(su:session): session closed for user root Dec 17 02:22:49 ispc su[1819512]: Successful su for root by root Dec 17 02:22:49 ispc su[1819512]: + ??? root:root Dec 17 02:22:49 ispc su[1819512]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:49 ispc su[1819512]: pam_unix(su:session): session closed for user root Dec 17 02:22:49 ispc su[1819515]: Successful su for root by root Dec 17 02:22:49 ispc su[1819515]: + ??? root:root Dec 17 02:22:49 ispc su[1819515]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:49 ispc su[1819515]: pam_unix(su:session): session closed for user root Dec 17 02:22:49 ispc su[1819521]: Successful su for root by root Dec 17 02:22:49 ispc su[1819521]: + ??? root:root Dec 17 02:22:49 ispc su[1819521]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:49 ispc su[1819521]: pam_unix(su:session): session closed for user root Dec 17 02:22:49 ispc su[1819524]: Successful su for root by root Dec 17 02:22:49 ispc su[1819524]: + ??? root:root Dec 17 02:22:49 ispc su[1819524]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:51 ispc su[1819524]: pam_unix(su:session): session closed for user root Dec 17 02:22:51 ispc su[1819530]: Successful su for root by root Dec 17 02:22:51 ispc su[1819530]: + ??? root:root Dec 17 02:22:51 ispc su[1819530]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:51 ispc su[1819530]: pam_unix(su:session): session closed for user root Dec 17 02:22:51 ispc su[1819533]: Successful su for root by root Dec 17 02:22:51 ispc su[1819533]: + ??? root:root Dec 17 02:22:51 ispc su[1819533]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:56 ispc su[1819533]: pam_unix(su:session): session closed for user root Dec 17 02:22:56 ispc su[1819539]: Successful su for root by root Dec 17 02:22:56 ispc su[1819539]: + ??? root:root Dec 17 02:22:56 ispc su[1819539]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:56 ispc su[1819539]: pam_unix(su:session): session closed for user root Dec 17 02:22:56 ispc su[1819542]: Successful su for root by root Dec 17 02:22:56 ispc su[1819542]: + ??? root:root Dec 17 02:22:56 ispc su[1819542]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:57 ispc su[1819542]: pam_unix(su:session): session closed for user root Dec 17 02:22:57 ispc su[1819548]: Successful su for root by root Dec 17 02:22:57 ispc su[1819548]: + ??? root:root Dec 17 02:22:57 ispc su[1819548]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:22:57 ispc su[1819548]: pam_unix(su:session): session closed for user root Dec 17 02:22:57 ispc su[1819551]: Successful su for root by root Dec 17 02:22:57 ispc su[1819551]: + ??? root:root Dec 17 02:22:57 ispc su[1819551]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:01 ispc CRON[1819559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:23:02 ispc CRON[1819559]: pam_unix(cron:session): session closed for user root Dec 17 02:23:06 ispc su[1819551]: pam_unix(su:session): session closed for user root Dec 17 02:23:06 ispc su[1819572]: Successful su for root by root Dec 17 02:23:06 ispc su[1819572]: + ??? root:root Dec 17 02:23:06 ispc su[1819572]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:06 ispc su[1819572]: pam_unix(su:session): session closed for user root Dec 17 02:23:06 ispc su[1819575]: Successful su for root by root Dec 17 02:23:06 ispc su[1819575]: + ??? root:root Dec 17 02:23:06 ispc su[1819575]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:16 ispc sshd[1819584]: Invalid user admin from 142.93.128.154 Dec 17 02:23:17 ispc su[1819575]: pam_unix(su:session): session closed for user root Dec 17 02:23:17 ispc su[1819588]: Successful su for root by root Dec 17 02:23:17 ispc su[1819588]: + ??? root:root Dec 17 02:23:17 ispc su[1819588]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:17 ispc su[1819588]: pam_unix(su:session): session closed for user root Dec 17 02:23:17 ispc su[1819591]: Successful su for root by root Dec 17 02:23:17 ispc su[1819591]: + ??? root:root Dec 17 02:23:17 ispc su[1819591]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:42 ispc su[1819591]: pam_unix(su:session): session closed for user root Dec 17 02:23:42 ispc su[1819611]: Successful su for root by root Dec 17 02:23:42 ispc su[1819611]: + ??? root:root Dec 17 02:23:42 ispc su[1819611]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:42 ispc su[1819611]: pam_unix(su:session): session closed for user root Dec 17 02:23:42 ispc su[1819614]: Successful su for root by root Dec 17 02:23:42 ispc su[1819614]: + ??? root:root Dec 17 02:23:42 ispc su[1819614]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:47 ispc su[1819614]: pam_unix(su:session): session closed for user root Dec 17 02:23:47 ispc su[1819621]: Successful su for root by root Dec 17 02:23:47 ispc su[1819621]: + ??? root:root Dec 17 02:23:47 ispc su[1819621]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:47 ispc su[1819621]: pam_unix(su:session): session closed for user root Dec 17 02:23:47 ispc su[1819624]: Successful su for root by root Dec 17 02:23:47 ispc su[1819624]: + ??? root:root Dec 17 02:23:47 ispc su[1819624]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:56 ispc su[1819624]: pam_unix(su:session): session closed for user root Dec 17 02:23:56 ispc su[1819635]: Successful su for root by root Dec 17 02:23:56 ispc su[1819635]: + ??? root:root Dec 17 02:23:56 ispc su[1819635]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:56 ispc su[1819635]: pam_unix(su:session): session closed for user root Dec 17 02:23:56 ispc su[1819638]: Successful su for root by root Dec 17 02:23:56 ispc su[1819638]: + ??? root:root Dec 17 02:23:56 ispc su[1819638]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:56 ispc su[1819638]: pam_unix(su:session): session closed for user root Dec 17 02:23:56 ispc su[1819644]: Successful su for root by root Dec 17 02:23:56 ispc su[1819644]: + ??? root:root Dec 17 02:23:56 ispc su[1819644]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:56 ispc su[1819644]: pam_unix(su:session): session closed for user root Dec 17 02:23:56 ispc su[1819647]: Successful su for root by root Dec 17 02:23:56 ispc su[1819647]: + ??? root:root Dec 17 02:23:56 ispc su[1819647]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:57 ispc su[1819647]: pam_unix(su:session): session closed for user root Dec 17 02:23:57 ispc sshd[1819651]: Invalid user admin from 142.93.128.154 Dec 17 02:23:57 ispc su[1819655]: Successful su for root by root Dec 17 02:23:57 ispc su[1819655]: + ??? root:root Dec 17 02:23:57 ispc su[1819655]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:57 ispc su[1819655]: pam_unix(su:session): session closed for user root Dec 17 02:23:57 ispc su[1819658]: Successful su for root by root Dec 17 02:23:57 ispc su[1819658]: + ??? root:root Dec 17 02:23:57 ispc su[1819658]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:57 ispc su[1819658]: pam_unix(su:session): session closed for user root Dec 17 02:23:57 ispc su[1819664]: Successful su for root by root Dec 17 02:23:57 ispc su[1819664]: + ??? root:root Dec 17 02:23:57 ispc su[1819664]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:23:57 ispc su[1819664]: pam_unix(su:session): session closed for user root Dec 17 02:23:57 ispc su[1819667]: Successful su for root by root Dec 17 02:23:57 ispc su[1819667]: + ??? root:root Dec 17 02:23:57 ispc su[1819667]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:01 ispc CRON[1819675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:24:02 ispc CRON[1819675]: pam_unix(cron:session): session closed for user root Dec 17 02:24:19 ispc su[1819667]: pam_unix(su:session): session closed for user root Dec 17 02:24:19 ispc su[1819697]: Successful su for root by root Dec 17 02:24:19 ispc su[1819697]: + ??? root:root Dec 17 02:24:19 ispc su[1819697]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:20 ispc su[1819697]: pam_unix(su:session): session closed for user root Dec 17 02:24:20 ispc su[1819700]: Successful su for root by root Dec 17 02:24:20 ispc su[1819700]: + ??? root:root Dec 17 02:24:20 ispc su[1819700]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:20 ispc su[1819700]: pam_unix(su:session): session closed for user root Dec 17 02:24:20 ispc su[1819710]: Successful su for root by root Dec 17 02:24:20 ispc su[1819710]: + ??? root:root Dec 17 02:24:20 ispc su[1819710]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:20 ispc su[1819710]: pam_unix(su:session): session closed for user root Dec 17 02:24:20 ispc su[1819713]: Successful su for root by root Dec 17 02:24:20 ispc su[1819713]: + ??? root:root Dec 17 02:24:20 ispc su[1819713]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:23 ispc su[1819713]: pam_unix(su:session): session closed for user root Dec 17 02:24:23 ispc su[1819719]: Successful su for root by root Dec 17 02:24:23 ispc su[1819719]: + ??? root:root Dec 17 02:24:23 ispc su[1819719]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:23 ispc su[1819719]: pam_unix(su:session): session closed for user root Dec 17 02:24:23 ispc su[1819722]: Successful su for root by root Dec 17 02:24:23 ispc su[1819722]: + ??? root:root Dec 17 02:24:23 ispc su[1819722]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:24 ispc su[1819722]: pam_unix(su:session): session closed for user root Dec 17 02:24:24 ispc su[1819728]: Successful su for root by root Dec 17 02:24:24 ispc su[1819728]: + ??? root:root Dec 17 02:24:24 ispc su[1819728]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:24 ispc su[1819728]: pam_unix(su:session): session closed for user root Dec 17 02:24:24 ispc su[1819731]: Successful su for root by root Dec 17 02:24:24 ispc su[1819731]: + ??? root:root Dec 17 02:24:24 ispc su[1819731]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:31 ispc su[1819731]: pam_unix(su:session): session closed for user root Dec 17 02:24:31 ispc su[1819743]: Successful su for root by root Dec 17 02:24:31 ispc su[1819743]: + ??? root:root Dec 17 02:24:31 ispc su[1819743]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:32 ispc su[1819743]: pam_unix(su:session): session closed for user root Dec 17 02:24:32 ispc su[1819746]: Successful su for root by root Dec 17 02:24:32 ispc su[1819746]: + ??? root:root Dec 17 02:24:32 ispc su[1819746]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:35 ispc sshd[1819750]: Invalid user admin from 142.93.128.154 Dec 17 02:24:41 ispc su[1819746]: pam_unix(su:session): session closed for user root Dec 17 02:24:41 ispc su[1819758]: Successful su for root by root Dec 17 02:24:41 ispc su[1819758]: + ??? root:root Dec 17 02:24:41 ispc su[1819758]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:41 ispc su[1819758]: pam_unix(su:session): session closed for user root Dec 17 02:24:41 ispc su[1819761]: Successful su for root by root Dec 17 02:24:41 ispc su[1819761]: + ??? root:root Dec 17 02:24:41 ispc su[1819761]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:24:48 ispc su[1819761]: pam_unix(su:session): session closed for user root Dec 17 02:24:51 ispc su[1819856]: Successful su for root by root Dec 17 02:24:51 ispc su[1819856]: + ??? root:root Dec 17 02:24:51 ispc su[1819856]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:25:01 ispc CRON[1819858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:25:01 ispc CRON[1819860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:25:01 ispc CRON[1819859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:25:01 ispc CRON[1819861]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:25:01 ispc su[1819856]: pam_unix(su:session): session closed for user root Dec 17 02:25:01 ispc CRON[1819859]: pam_unix(cron:session): session closed for user root Dec 17 02:25:01 ispc su[1819870]: Successful su for root by root Dec 17 02:25:01 ispc su[1819870]: + ??? root:root Dec 17 02:25:01 ispc su[1819870]: pam_unix(su:session): session opened for user root by (uid=0) Dec 17 02:25:01 ispc CRON[1819861]: pam_unix(cron:session): session closed for user getmail Dec 17 02:25:02 ispc CRON[1819858]: pam_unix(cron:session): session closed for user root Dec 17 02:25:02 ispc CRON[1819860]: pam_unix(cron:session): session closed for user root Dec 17 02:25:07 ispc sshd[1819941]: Did not receive identification string from 159.223.225.47 Dec 17 02:25:11 ispc sshd[1819942]: Invalid user admin from 142.93.128.154 Dec 17 02:26:01 ispc CRON[1819973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:26:02 ispc CRON[1819973]: pam_unix(cron:session): session closed for user root Dec 17 02:26:31 ispc postfix/smtpd[1820002]: sql auxprop plugin using mysql engine Dec 17 02:26:31 ispc saslauthd[1820005]: pam_mysql - SELECT returned no result. Dec 17 02:26:31 ispc saslauthd[1820005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:26:31 ispc saslauthd[1820005]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:27:01 ispc CRON[1820021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:27:02 ispc CRON[1820021]: pam_unix(cron:session): session closed for user root Dec 17 02:28:01 ispc CRON[1820070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:28:02 ispc CRON[1820070]: pam_unix(cron:session): session closed for user root Dec 17 02:29:01 ispc CRON[1820113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:29:02 ispc CRON[1820113]: pam_unix(cron:session): session closed for user root Dec 17 02:29:48 ispc postfix/smtpd[1820149]: sql auxprop plugin using mysql engine Dec 17 02:30:01 ispc CRON[1820155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:30:01 ispc CRON[1820156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:30:01 ispc CRON[1820157]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:30:01 ispc CRON[1820158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:30:01 ispc CRON[1820159]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:30:01 ispc CRON[1820157]: pam_unix(cron:session): session closed for user www-data Dec 17 02:30:01 ispc CRON[1820156]: pam_unix(cron:session): session closed for user root Dec 17 02:30:01 ispc CRON[1820159]: pam_unix(cron:session): session closed for user getmail Dec 17 02:30:01 ispc CRON[1820158]: pam_unix(cron:session): session closed for user root Dec 17 02:30:02 ispc CRON[1820155]: pam_unix(cron:session): session closed for user root Dec 17 02:31:01 ispc CRON[1820266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:31:02 ispc CRON[1820266]: pam_unix(cron:session): session closed for user root Dec 17 02:31:39 ispc sshd[1820302]: Did not receive identification string from 45.140.17.97 Dec 17 02:31:39 ispc postfix/smtpd[1820303]: sql auxprop plugin using mysql engine Dec 17 02:32:01 ispc CRON[1820315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:32:01 ispc CRON[1820315]: pam_unix(cron:session): session closed for user root Dec 17 02:32:53 ispc sshd[1820360]: Invalid user klape from 103.164.20.29 Dec 17 02:32:54 ispc sshd[1820362]: Invalid user ubuntu from 103.164.20.29 Dec 17 02:33:01 ispc CRON[1820370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:33:02 ispc CRON[1820370]: pam_unix(cron:session): session closed for user root Dec 17 02:33:28 ispc postfix/smtpd[1820391]: sql auxprop plugin using mysql engine Dec 17 02:33:30 ispc saslauthd[1820393]: pam_mysql - SELECT returned no result. Dec 17 02:33:30 ispc saslauthd[1820393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:33:30 ispc saslauthd[1820393]: do_auth : auth failure: [user=iclock] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:34:01 ispc CRON[1820408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:34:01 ispc CRON[1820408]: pam_unix(cron:session): session closed for user root Dec 17 02:34:04 ispc sshd[1820423]: Did not receive identification string from 192.227.134.84 Dec 17 02:34:21 ispc saslauthd[1820430]: pam_mysql - SELECT returned no result. Dec 17 02:34:21 ispc saslauthd[1820430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:34:21 ispc saslauthd[1820430]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:34:27 ispc CRON[1818455]: pam_unix(cron:session): session closed for user root Dec 17 02:35:01 ispc CRON[1820439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:35:01 ispc CRON[1820441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:35:01 ispc CRON[1820442]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:35:01 ispc CRON[1820440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:35:01 ispc CRON[1820442]: pam_unix(cron:session): session closed for user getmail Dec 17 02:35:01 ispc CRON[1820440]: pam_unix(cron:session): session closed for user root Dec 17 02:35:01 ispc CRON[1820439]: pam_unix(cron:session): session closed for user root Dec 17 02:35:06 ispc CRON[1820441]: pam_unix(cron:session): session closed for user root Dec 17 02:35:36 ispc sshd[1820519]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 02:36:01 ispc CRON[1820527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:37:01 ispc CRON[1820562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:37:01 ispc CRON[1820562]: pam_unix(cron:session): session closed for user root Dec 17 02:38:01 ispc CRON[1820607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:38:02 ispc CRON[1820607]: pam_unix(cron:session): session closed for user root Dec 17 02:38:24 ispc postfix/smtpd[1820635]: sql auxprop plugin using mysql engine Dec 17 02:39:01 ispc CRON[1820649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:39:01 ispc CRON[1820650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:39:01 ispc CRON[1820649]: pam_unix(cron:session): session closed for user root Dec 17 02:39:01 ispc CRON[1820650]: pam_unix(cron:session): session closed for user root Dec 17 02:40:01 ispc CRON[1820695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:40:01 ispc CRON[1820696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:40:01 ispc CRON[1820697]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:40:01 ispc CRON[1820698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:40:01 ispc CRON[1820699]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:40:01 ispc CRON[1820696]: pam_unix(cron:session): session closed for user root Dec 17 02:40:01 ispc CRON[1820697]: pam_unix(cron:session): session closed for user www-data Dec 17 02:40:01 ispc CRON[1820699]: pam_unix(cron:session): session closed for user getmail Dec 17 02:40:02 ispc CRON[1820695]: pam_unix(cron:session): session closed for user root Dec 17 02:40:02 ispc CRON[1820698]: pam_unix(cron:session): session closed for user root Dec 17 02:41:01 ispc CRON[1820801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:41:02 ispc CRON[1820801]: pam_unix(cron:session): session closed for user root Dec 17 02:41:43 ispc sshd[1820828]: Invalid user martof from 175.125.92.77 Dec 17 02:42:01 ispc CRON[1820838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:42:02 ispc CRON[1820838]: pam_unix(cron:session): session closed for user root Dec 17 02:42:17 ispc postfix/smtpd[1820853]: sql auxprop plugin using mysql engine Dec 17 02:42:17 ispc saslauthd[1820856]: pam_mysql - SELECT returned no result. Dec 17 02:42:17 ispc saslauthd[1820856]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:42:17 ispc saslauthd[1820856]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:42:25 ispc saslauthd[1820863]: pam_mysql - SELECT returned no result. Dec 17 02:42:25 ispc saslauthd[1820863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:42:25 ispc saslauthd[1820863]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:43:01 ispc CRON[1820887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:43:01 ispc CRON[1820887]: pam_unix(cron:session): session closed for user root Dec 17 02:43:43 ispc sshd[1820916]: Invalid user klape from 187.190.35.163 Dec 17 02:43:45 ispc sshd[1820918]: Invalid user ubuntu from 187.190.35.163 Dec 17 02:43:47 ispc sshd[1820920]: Invalid user blceu from 178.156.132.245 Dec 17 02:44:01 ispc CRON[1820930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:44:02 ispc CRON[1820930]: pam_unix(cron:session): session closed for user root Dec 17 02:45:01 ispc CRON[1820971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:45:01 ispc CRON[1820972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:45:01 ispc CRON[1820973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:45:01 ispc CRON[1820974]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:45:01 ispc CRON[1820972]: pam_unix(cron:session): session closed for user root Dec 17 02:45:01 ispc CRON[1820974]: pam_unix(cron:session): session closed for user getmail Dec 17 02:45:01 ispc CRON[1820973]: pam_unix(cron:session): session closed for user root Dec 17 02:45:01 ispc CRON[1820971]: pam_unix(cron:session): session closed for user root Dec 17 02:45:11 ispc postfix/smtpd[1821051]: sql auxprop plugin using mysql engine Dec 17 02:45:12 ispc saslauthd[1821053]: pam_mysql - SELECT returned no result. Dec 17 02:45:12 ispc saslauthd[1821053]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:45:12 ispc saslauthd[1821053]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:46:01 ispc CRON[1821074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:46:02 ispc CRON[1821074]: pam_unix(cron:session): session closed for user root Dec 17 02:47:01 ispc CRON[1821106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:47:02 ispc CRON[1821106]: pam_unix(cron:session): session closed for user root Dec 17 02:47:40 ispc postfix/smtpd[1821135]: sql auxprop plugin using mysql engine Dec 17 02:47:40 ispc saslauthd[1821137]: pam_mysql - SELECT returned no result. Dec 17 02:47:40 ispc saslauthd[1821137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:47:40 ispc saslauthd[1821137]: do_auth : auth failure: [user=client@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 02:47:56 ispc saslauthd[1821150]: pam_mysql - SELECT returned no result. Dec 17 02:47:56 ispc saslauthd[1821150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:47:56 ispc saslauthd[1821150]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:48:01 ispc CRON[1821156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:48:01 ispc CRON[1821156]: pam_unix(cron:session): session closed for user root Dec 17 02:48:22 ispc saslauthd[1821176]: pam_mysql - SELECT returned no result. Dec 17 02:48:22 ispc saslauthd[1821176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:48:22 ispc saslauthd[1821176]: do_auth : auth failure: [user=ilom-admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:49:01 ispc CRON[1821194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:49:02 ispc CRON[1821194]: pam_unix(cron:session): session closed for user root Dec 17 02:49:08 ispc postfix/smtpd[1821209]: sql auxprop plugin using mysql engine Dec 17 02:50:01 ispc CRON[1821234]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 02:50:01 ispc CRON[1821235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:50:01 ispc CRON[1821232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:50:01 ispc CRON[1821236]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:50:01 ispc CRON[1821233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:50:01 ispc CRON[1821233]: pam_unix(cron:session): session closed for user root Dec 17 02:50:01 ispc CRON[1821234]: pam_unix(cron:session): session closed for user www-data Dec 17 02:50:01 ispc CRON[1821236]: pam_unix(cron:session): session closed for user getmail Dec 17 02:50:01 ispc CRON[1821235]: pam_unix(cron:session): session closed for user root Dec 17 02:50:01 ispc CRON[1821232]: pam_unix(cron:session): session closed for user root Dec 17 02:50:22 ispc postfix/smtpd[1821318]: sql auxprop plugin using mysql engine Dec 17 02:50:23 ispc saslauthd[1821320]: pam_mysql - SELECT returned no result. Dec 17 02:50:23 ispc saslauthd[1821320]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:50:23 ispc saslauthd[1821320]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:51:01 ispc CRON[1821337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:51:02 ispc CRON[1821337]: pam_unix(cron:session): session closed for user root Dec 17 02:52:01 ispc CRON[1821377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:52:02 ispc CRON[1821377]: pam_unix(cron:session): session closed for user root Dec 17 02:52:32 ispc sshd[1821400]: Invalid user martof from 27.254.144.183 Dec 17 02:52:37 ispc sshd[1821402]: reverse mapping checking getaddrinfo for static.cmcti.vn [101.99.32.184] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 02:53:01 ispc CRON[1821423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:53:02 ispc CRON[1821423]: pam_unix(cron:session): session closed for user root Dec 17 02:53:19 ispc sshd[1821438]: Invalid user klape from 40.127.67.83 Dec 17 02:53:52 ispc sshd[1821452]: Invalid user blceu from 103.77.207.53 Dec 17 02:54:01 ispc CRON[1821464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:54:02 ispc CRON[1821464]: pam_unix(cron:session): session closed for user root Dec 17 02:55:01 ispc CRON[1821499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:55:01 ispc CRON[1821501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:55:01 ispc CRON[1821500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:55:01 ispc CRON[1821502]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 02:55:01 ispc CRON[1821500]: pam_unix(cron:session): session closed for user root Dec 17 02:55:01 ispc CRON[1821502]: pam_unix(cron:session): session closed for user getmail Dec 17 02:55:01 ispc CRON[1821501]: pam_unix(cron:session): session closed for user root Dec 17 02:55:01 ispc CRON[1821499]: pam_unix(cron:session): session closed for user root Dec 17 02:56:01 ispc CRON[1821603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:56:02 ispc CRON[1821603]: pam_unix(cron:session): session closed for user root Dec 17 02:56:29 ispc postfix/smtpd[1821626]: sql auxprop plugin using mysql engine Dec 17 02:56:30 ispc CRON[1820527]: pam_unix(cron:session): session closed for user root Dec 17 02:57:01 ispc CRON[1821634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:57:06 ispc CRON[1821634]: pam_unix(cron:session): session closed for user root Dec 17 02:58:01 ispc CRON[1821656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:58:10 ispc sshd[1821668]: Invalid user blceu from 202.46.29.79 Dec 17 02:58:38 ispc saslauthd[1821685]: pam_mysql - SELECT returned no result. Dec 17 02:58:38 ispc saslauthd[1821685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 02:58:38 ispc saslauthd[1821685]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 02:59:01 ispc CRON[1821696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 02:59:02 ispc CRON[1821696]: pam_unix(cron:session): session closed for user root Dec 17 03:00:01 ispc CRON[1821734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:00:01 ispc CRON[1821731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:00:01 ispc CRON[1821732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:00:01 ispc CRON[1821733]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:00:01 ispc CRON[1821735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:00:01 ispc CRON[1821736]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:00:01 ispc CRON[1821733]: pam_unix(cron:session): session closed for user www-data Dec 17 03:00:01 ispc CRON[1821732]: pam_unix(cron:session): session closed for user root Dec 17 03:00:01 ispc CRON[1821736]: pam_unix(cron:session): session closed for user getmail Dec 17 03:00:02 ispc CRON[1821735]: pam_unix(cron:session): session closed for user root Dec 17 03:00:02 ispc CRON[1821734]: pam_unix(cron:session): session closed for user root Dec 17 03:00:02 ispc CRON[1821731]: pam_unix(cron:session): session closed for user root Dec 17 03:01:01 ispc CRON[1821915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:01:01 ispc CRON[1821915]: pam_unix(cron:session): session closed for user root Dec 17 03:01:12 ispc sshd[1821930]: Invalid user blceu from 211.110.229.128 Dec 17 03:01:32 ispc sshd[1821942]: Invalid user blceu from 49.247.24.89 Dec 17 03:02:01 ispc CRON[1821957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:02:01 ispc CRON[1821956]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 03:02:02 ispc CRON[1821957]: pam_unix(cron:session): session closed for user root Dec 17 03:02:04 ispc sshd[1821986]: Invalid user martof from 49.247.24.89 Dec 17 03:02:58 ispc sshd[1822848]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 03:03:01 ispc CRON[1822854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:03:01 ispc CRON[1822854]: pam_unix(cron:session): session closed for user root Dec 17 03:03:17 ispc CRON[1821956]: pam_unix(cron:session): session closed for user logcheck Dec 17 03:03:21 ispc postfix/smtpd[1823056]: sql auxprop plugin using mysql engine Dec 17 03:03:23 ispc postfix/smtpd[1823058]: sql auxprop plugin using mysql engine Dec 17 03:03:25 ispc saslauthd[1823060]: pam_mysql - SELECT returned no result. Dec 17 03:03:25 ispc saslauthd[1823060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:03:25 ispc saslauthd[1823060]: do_auth : auth failure: [user=ilom-operator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:04:01 ispc CRON[1823080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:04:02 ispc CRON[1823080]: pam_unix(cron:session): session closed for user root Dec 17 03:05:01 ispc CRON[1823114]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:05:01 ispc CRON[1823111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:05:01 ispc CRON[1823112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:05:01 ispc CRON[1823113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:05:01 ispc CRON[1823114]: pam_unix(cron:session): session closed for user getmail Dec 17 03:05:01 ispc CRON[1823112]: pam_unix(cron:session): session closed for user root Dec 17 03:05:02 ispc CRON[1823113]: pam_unix(cron:session): session closed for user root Dec 17 03:05:03 ispc CRON[1823111]: pam_unix(cron:session): session closed for user root Dec 17 03:05:34 ispc sshd[1823199]: Invalid user blceu from 175.125.92.77 Dec 17 03:06:01 ispc CRON[1823215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:06:02 ispc CRON[1823215]: pam_unix(cron:session): session closed for user root Dec 17 03:06:32 ispc sshd[1823238]: Invalid user ziplines from 175.125.92.77 Dec 17 03:06:43 ispc postfix/smtpd[1823246]: sql auxprop plugin using mysql engine Dec 17 03:06:43 ispc saslauthd[1823248]: pam_mysql - SELECT returned no result. Dec 17 03:06:43 ispc saslauthd[1823248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:06:43 ispc saslauthd[1823248]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:07:01 ispc CRON[1823257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:07:01 ispc CRON[1823257]: pam_unix(cron:session): session closed for user root Dec 17 03:07:27 ispc postfix/smtpd[1823282]: sql auxprop plugin using mysql engine Dec 17 03:07:33 ispc postfix/smtpd[1823286]: sql auxprop plugin using mysql engine Dec 17 03:08:01 ispc CRON[1823310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:08:01 ispc CRON[1823310]: pam_unix(cron:session): session closed for user root Dec 17 03:09:01 ispc CRON[1823350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:09:01 ispc CRON[1823349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:09:02 ispc CRON[1823350]: pam_unix(cron:session): session closed for user root Dec 17 03:09:02 ispc CRON[1823349]: pam_unix(cron:session): session closed for user root Dec 17 03:10:01 ispc CRON[1823396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:10:01 ispc CRON[1823398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:10:01 ispc CRON[1823399]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:10:01 ispc CRON[1823400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:10:01 ispc CRON[1823401]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:10:01 ispc CRON[1823399]: pam_unix(cron:session): session closed for user www-data Dec 17 03:10:01 ispc CRON[1823398]: pam_unix(cron:session): session closed for user root Dec 17 03:10:01 ispc CRON[1823401]: pam_unix(cron:session): session closed for user getmail Dec 17 03:10:01 ispc CRON[1823400]: pam_unix(cron:session): session closed for user root Dec 17 03:10:01 ispc CRON[1823396]: pam_unix(cron:session): session closed for user root Dec 17 03:11:01 ispc CRON[1823495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:11:02 ispc CRON[1823495]: pam_unix(cron:session): session closed for user root Dec 17 03:12:01 ispc CRON[1823530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:12:02 ispc CRON[1823530]: pam_unix(cron:session): session closed for user root Dec 17 03:13:01 ispc CRON[1823580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:13:02 ispc CRON[1823580]: pam_unix(cron:session): session closed for user root Dec 17 03:14:01 ispc CRON[1823617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:14:02 ispc CRON[1823617]: pam_unix(cron:session): session closed for user root Dec 17 03:14:53 ispc postfix/smtpd[1823649]: sql auxprop plugin using mysql engine Dec 17 03:14:53 ispc saslauthd[1823651]: pam_mysql - SELECT returned no result. Dec 17 03:14:53 ispc saslauthd[1823651]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:14:53 ispc saslauthd[1823651]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:15:01 ispc CRON[1823656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:15:01 ispc CRON[1823657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:15:01 ispc CRON[1823658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:15:01 ispc CRON[1823659]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:15:02 ispc CRON[1823657]: pam_unix(cron:session): session closed for user root Dec 17 03:15:02 ispc CRON[1823659]: pam_unix(cron:session): session closed for user getmail Dec 17 03:15:02 ispc CRON[1823658]: pam_unix(cron:session): session closed for user root Dec 17 03:15:02 ispc CRON[1823656]: pam_unix(cron:session): session closed for user root Dec 17 03:16:01 ispc CRON[1823760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:16:02 ispc CRON[1823760]: pam_unix(cron:session): session closed for user root Dec 17 03:17:01 ispc CRON[1823799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:17:02 ispc CRON[1823799]: pam_unix(cron:session): session closed for user root Dec 17 03:18:01 ispc CRON[1823844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:18:01 ispc CRON[1823843]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 03:18:02 ispc CRON[1823844]: pam_unix(cron:session): session closed for user root Dec 17 03:18:06 ispc CRON[1823843]: pam_unix(cron:session): session closed for user amavis Dec 17 03:18:08 ispc postfix/smtpd[1823871]: sql auxprop plugin using mysql engine Dec 17 03:18:26 ispc postfix/smtpd[1823881]: sql auxprop plugin using mysql engine Dec 17 03:18:27 ispc saslauthd[1823884]: pam_mysql - SELECT returned no result. Dec 17 03:18:27 ispc saslauthd[1823884]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:18:27 ispc saslauthd[1823884]: do_auth : auth failure: [user=ilon] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:18:29 ispc CRON[1821656]: pam_unix(cron:session): session closed for user root Dec 17 03:18:33 ispc saslauthd[1823889]: pam_mysql - SELECT returned no result. Dec 17 03:18:33 ispc saslauthd[1823889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:18:33 ispc saslauthd[1823889]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:19:01 ispc CRON[1823890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:19:03 ispc CRON[1823890]: pam_unix(cron:session): session closed for user root Dec 17 03:20:01 ispc CRON[1823903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:20:01 ispc CRON[1823904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:20:01 ispc CRON[1823905]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:20:01 ispc CRON[1823906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:20:01 ispc CRON[1823907]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:20:02 ispc CRON[1823905]: pam_unix(cron:session): session closed for user www-data Dec 17 03:20:02 ispc CRON[1823904]: pam_unix(cron:session): session closed for user root Dec 17 03:20:02 ispc CRON[1823907]: pam_unix(cron:session): session closed for user getmail Dec 17 03:20:04 ispc CRON[1823903]: pam_unix(cron:session): session closed for user root Dec 17 03:21:01 ispc CRON[1824002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:21:01 ispc CRON[1824003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:21:01 ispc CRON[1824002]: pam_unix(cron:session): session closed for user root Dec 17 03:21:02 ispc CRON[1824003]: pam_unix(cron:session): session closed for user root Dec 17 03:22:01 ispc CRON[1824043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:22:02 ispc CRON[1824043]: pam_unix(cron:session): session closed for user root Dec 17 03:23:01 ispc CRON[1824091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:23:01 ispc CRON[1824091]: pam_unix(cron:session): session closed for user root Dec 17 03:23:13 ispc postfix/smtpd[1824108]: sql auxprop plugin using mysql engine Dec 17 03:23:13 ispc saslauthd[1824111]: pam_mysql - SELECT returned no result. Dec 17 03:23:13 ispc saslauthd[1824111]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:23:13 ispc saslauthd[1824111]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:23:26 ispc sshd[1824120]: Invalid user ziplines from 51.91.247.10 Dec 17 03:24:01 ispc CRON[1824139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:24:02 ispc CRON[1824139]: pam_unix(cron:session): session closed for user root Dec 17 03:25:01 ispc CRON[1824174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:25:01 ispc CRON[1824175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:25:01 ispc CRON[1824176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:25:01 ispc CRON[1824177]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:25:02 ispc CRON[1824175]: pam_unix(cron:session): session closed for user root Dec 17 03:25:02 ispc CRON[1824177]: pam_unix(cron:session): session closed for user getmail Dec 17 03:25:02 ispc CRON[1824176]: pam_unix(cron:session): session closed for user root Dec 17 03:25:03 ispc CRON[1824174]: pam_unix(cron:session): session closed for user root Dec 17 03:26:01 ispc CRON[1824274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:26:03 ispc CRON[1824274]: pam_unix(cron:session): session closed for user root Dec 17 03:26:28 ispc postfix/smtpd[1824299]: sql auxprop plugin using mysql engine Dec 17 03:27:01 ispc CRON[1824316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:27:02 ispc CRON[1824316]: pam_unix(cron:session): session closed for user root Dec 17 03:28:01 ispc CRON[1824361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:28:01 ispc CRON[1824361]: pam_unix(cron:session): session closed for user root Dec 17 03:29:01 ispc CRON[1824402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:29:02 ispc CRON[1824402]: pam_unix(cron:session): session closed for user root Dec 17 03:30:01 ispc CRON[1824438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:30:01 ispc CRON[1824439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:30:01 ispc CRON[1824440]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:30:01 ispc CRON[1824441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:30:01 ispc CRON[1824442]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:30:01 ispc CRON[1824440]: pam_unix(cron:session): session closed for user www-data Dec 17 03:30:01 ispc CRON[1824439]: pam_unix(cron:session): session closed for user root Dec 17 03:30:01 ispc CRON[1824442]: pam_unix(cron:session): session closed for user getmail Dec 17 03:30:02 ispc CRON[1824441]: pam_unix(cron:session): session closed for user root Dec 17 03:30:03 ispc CRON[1824438]: pam_unix(cron:session): session closed for user root Dec 17 03:31:01 ispc CRON[1824543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:31:01 ispc CRON[1824543]: pam_unix(cron:session): session closed for user root Dec 17 03:31:16 ispc postfix/smtpd[1824558]: sql auxprop plugin using mysql engine Dec 17 03:31:16 ispc saslauthd[1824561]: pam_mysql - SELECT returned no result. Dec 17 03:31:16 ispc saslauthd[1824561]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:31:16 ispc saslauthd[1824561]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:32:01 ispc CRON[1824580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:32:02 ispc CRON[1824580]: pam_unix(cron:session): session closed for user root Dec 17 03:32:57 ispc sshd[1824622]: Invalid user martof from 202.46.29.79 Dec 17 03:33:01 ispc CRON[1824626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:33:01 ispc CRON[1824626]: pam_unix(cron:session): session closed for user root Dec 17 03:33:25 ispc postfix/smtpd[1824650]: sql auxprop plugin using mysql engine Dec 17 03:33:26 ispc saslauthd[1824652]: pam_mysql - SELECT returned no result. Dec 17 03:33:26 ispc saslauthd[1824652]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:33:26 ispc saslauthd[1824652]: do_auth : auth failure: [user=inads] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:34:01 ispc CRON[1824665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:34:02 ispc CRON[1824665]: pam_unix(cron:session): session closed for user root Dec 17 03:35:01 ispc CRON[1824700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:35:01 ispc CRON[1824701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:35:01 ispc CRON[1824702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:35:01 ispc CRON[1824703]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:35:01 ispc CRON[1824701]: pam_unix(cron:session): session closed for user root Dec 17 03:35:01 ispc CRON[1824703]: pam_unix(cron:session): session closed for user getmail Dec 17 03:35:02 ispc CRON[1824702]: pam_unix(cron:session): session closed for user root Dec 17 03:35:03 ispc CRON[1824700]: pam_unix(cron:session): session closed for user root Dec 17 03:36:01 ispc CRON[1824806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:36:01 ispc CRON[1824806]: pam_unix(cron:session): session closed for user root Dec 17 03:37:01 ispc CRON[1824837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:37:02 ispc CRON[1824837]: pam_unix(cron:session): session closed for user root Dec 17 03:37:27 ispc sshd[1824860]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 03:37:27 ispc sshd[1824860]: Invalid user blceu from 157.245.115.125 Dec 17 03:38:01 ispc CRON[1824893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:38:02 ispc CRON[1824893]: pam_unix(cron:session): session closed for user root Dec 17 03:38:52 ispc postfix/smtpd[1824925]: sql auxprop plugin using mysql engine Dec 17 03:38:53 ispc saslauthd[1824928]: pam_mysql - SELECT returned no result. Dec 17 03:38:53 ispc saslauthd[1824928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:38:53 ispc saslauthd[1824928]: do_auth : auth failure: [user=root@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 03:39:01 ispc CRON[1824933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:39:01 ispc CRON[1824934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:39:01 ispc CRON[1824933]: pam_unix(cron:session): session closed for user root Dec 17 03:39:02 ispc CRON[1824934]: pam_unix(cron:session): session closed for user root Dec 17 03:39:20 ispc saslauthd[1824963]: pam_mysql - SELECT returned no result. Dec 17 03:39:20 ispc saslauthd[1824963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:39:20 ispc saslauthd[1824963]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:40:01 ispc CRON[1824982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:40:01 ispc CRON[1824983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:40:01 ispc CRON[1824984]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:40:01 ispc CRON[1824985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:40:01 ispc CRON[1824986]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:40:01 ispc CRON[1824983]: pam_unix(cron:session): session closed for user root Dec 17 03:40:01 ispc CRON[1824984]: pam_unix(cron:session): session closed for user www-data Dec 17 03:40:01 ispc CRON[1824986]: pam_unix(cron:session): session closed for user getmail Dec 17 03:40:03 ispc CRON[1824985]: pam_unix(cron:session): session closed for user root Dec 17 03:40:03 ispc CRON[1824982]: pam_unix(cron:session): session closed for user root Dec 17 03:40:43 ispc CRON[1823906]: pam_unix(cron:session): session closed for user root Dec 17 03:41:01 ispc CRON[1825116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:41:08 ispc CRON[1825116]: pam_unix(cron:session): session closed for user root Dec 17 03:42:01 ispc CRON[1825128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:43:01 ispc CRON[1825169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:43:02 ispc CRON[1825169]: pam_unix(cron:session): session closed for user root Dec 17 03:43:40 ispc sshd[1825196]: Invalid user matlbula from 35.239.77.168 Dec 17 03:44:01 ispc CRON[1825206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:44:02 ispc CRON[1825206]: pam_unix(cron:session): session closed for user root Dec 17 03:45:01 ispc CRON[1825247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:45:01 ispc CRON[1825248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:45:01 ispc CRON[1825249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:45:01 ispc CRON[1825250]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:45:01 ispc CRON[1825248]: pam_unix(cron:session): session closed for user root Dec 17 03:45:01 ispc CRON[1825250]: pam_unix(cron:session): session closed for user getmail Dec 17 03:45:02 ispc CRON[1825249]: pam_unix(cron:session): session closed for user root Dec 17 03:45:02 ispc CRON[1825247]: pam_unix(cron:session): session closed for user root Dec 17 03:46:01 ispc CRON[1825347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:46:02 ispc CRON[1825347]: pam_unix(cron:session): session closed for user root Dec 17 03:46:55 ispc sshd[1825380]: Invalid user ziplines from 118.218.219.250 Dec 17 03:47:01 ispc CRON[1825386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:47:01 ispc CRON[1825386]: pam_unix(cron:session): session closed for user root Dec 17 03:47:13 ispc postfix/smtpd[1825402]: sql auxprop plugin using mysql engine Dec 17 03:47:14 ispc saslauthd[1825405]: pam_mysql - SELECT returned no result. Dec 17 03:47:14 ispc saslauthd[1825405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:47:14 ispc saslauthd[1825405]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:47:44 ispc postfix/smtpd[1825418]: sql auxprop plugin using mysql engine Dec 17 03:48:01 ispc CRON[1825437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:48:02 ispc CRON[1825437]: pam_unix(cron:session): session closed for user root Dec 17 03:48:28 ispc saslauthd[1825456]: pam_mysql - SELECT returned no result. Dec 17 03:48:28 ispc saslauthd[1825456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:48:28 ispc saslauthd[1825456]: do_auth : auth failure: [user=informix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:49:01 ispc CRON[1825475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:49:02 ispc CRON[1825475]: pam_unix(cron:session): session closed for user root Dec 17 03:50:01 ispc CRON[1825510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:50:01 ispc CRON[1825511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:50:01 ispc CRON[1825512]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 03:50:01 ispc CRON[1825514]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:50:01 ispc CRON[1825513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:50:01 ispc CRON[1825512]: pam_unix(cron:session): session closed for user www-data Dec 17 03:50:01 ispc CRON[1825511]: pam_unix(cron:session): session closed for user root Dec 17 03:50:02 ispc CRON[1825514]: pam_unix(cron:session): session closed for user getmail Dec 17 03:50:02 ispc CRON[1825513]: pam_unix(cron:session): session closed for user root Dec 17 03:50:03 ispc CRON[1825510]: pam_unix(cron:session): session closed for user root Dec 17 03:50:39 ispc su[1819870]: pam_unix(su:session): session closed for user root Dec 17 03:50:39 ispc CRON[1816347]: pam_unix(cron:session): session closed for user root Dec 17 03:50:40 ispc postfix/smtpd[1825641]: sql auxprop plugin using mysql engine Dec 17 03:51:01 ispc CRON[1825651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:51:02 ispc CRON[1825651]: pam_unix(cron:session): session closed for user root Dec 17 03:51:52 ispc sshd[1825686]: Invalid user ziplines from 213.199.57.249 Dec 17 03:51:53 ispc sshd[1825688]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 03:51:53 ispc sshd[1825688]: Invalid user ziplines from 157.245.115.125 Dec 17 03:51:55 ispc sshd[1825690]: Invalid user martof from 118.218.219.250 Dec 17 03:51:56 ispc postfix/smtpd[1825692]: sql auxprop plugin using mysql engine Dec 17 03:51:56 ispc saslauthd[1825695]: pam_mysql - SELECT returned no result. Dec 17 03:51:56 ispc saslauthd[1825695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:51:56 ispc saslauthd[1825695]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:52:01 ispc CRON[1825700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:52:01 ispc CRON[1825701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:52:02 ispc CRON[1825701]: pam_unix(cron:session): session closed for user root Dec 17 03:53:01 ispc CRON[1825743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:53:02 ispc CRON[1825743]: pam_unix(cron:session): session closed for user root Dec 17 03:54:01 ispc CRON[1825780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:54:01 ispc CRON[1825780]: pam_unix(cron:session): session closed for user root Dec 17 03:54:21 ispc postfix/smtpd[1825800]: sql auxprop plugin using mysql engine Dec 17 03:55:01 ispc CRON[1825818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:55:01 ispc CRON[1825819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:55:01 ispc CRON[1825820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:55:01 ispc CRON[1825821]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 03:55:01 ispc CRON[1825819]: pam_unix(cron:session): session closed for user root Dec 17 03:55:02 ispc CRON[1825821]: pam_unix(cron:session): session closed for user getmail Dec 17 03:55:02 ispc CRON[1825820]: pam_unix(cron:session): session closed for user root Dec 17 03:55:02 ispc CRON[1825818]: pam_unix(cron:session): session closed for user root Dec 17 03:55:06 ispc postfix/smtpd[1825898]: sql auxprop plugin using mysql engine Dec 17 03:55:07 ispc saslauthd[1825900]: pam_mysql - SELECT returned no result. Dec 17 03:55:07 ispc saslauthd[1825900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:55:07 ispc saslauthd[1825900]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:55:19 ispc CRON[1825700]: pam_unix(cron:session): session closed for user root Dec 17 03:56:01 ispc CRON[1825922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:56:01 ispc CRON[1825922]: pam_unix(cron:session): session closed for user root Dec 17 03:56:33 ispc sshd[1825945]: Invalid user martof from 167.99.241.111 Dec 17 03:56:42 ispc saslauthd[1825952]: pam_mysql - SELECT returned no result. Dec 17 03:56:42 ispc saslauthd[1825952]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 03:56:42 ispc saslauthd[1825952]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 03:57:01 ispc CRON[1825961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:57:02 ispc CRON[1825961]: pam_unix(cron:session): session closed for user root Dec 17 03:58:01 ispc CRON[1826006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:58:01 ispc CRON[1826006]: pam_unix(cron:session): session closed for user root Dec 17 03:58:39 ispc postfix/smtpd[1826037]: sql auxprop plugin using mysql engine Dec 17 03:59:01 ispc CRON[1826047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 03:59:02 ispc CRON[1826047]: pam_unix(cron:session): session closed for user root Dec 17 04:00:01 ispc CRON[1826083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:00:01 ispc CRON[1826082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:00:01 ispc CRON[1826084]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:00:01 ispc CRON[1826085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:00:01 ispc CRON[1826086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:00:01 ispc CRON[1826087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:00:01 ispc CRON[1826088]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:00:01 ispc CRON[1826083]: pam_unix(cron:session): session closed for user root Dec 17 04:00:01 ispc CRON[1826084]: pam_unix(cron:session): session closed for user www-data Dec 17 04:00:01 ispc CRON[1826086]: pam_unix(cron:session): session closed for user root Dec 17 04:00:01 ispc CRON[1826088]: pam_unix(cron:session): session closed for user getmail Dec 17 04:00:01 ispc CRON[1826087]: pam_unix(cron:session): session closed for user root Dec 17 04:00:02 ispc CRON[1826082]: pam_unix(cron:session): session closed for user root Dec 17 04:00:02 ispc CRON[1826085]: pam_unix(cron:session): session closed for user root Dec 17 04:00:33 ispc sshd[1826255]: Invalid user blceu from 185.208.181.141 Dec 17 04:00:54 ispc sshd[1826265]: Invalid user ziplines from 202.46.29.79 Dec 17 04:01:01 ispc CRON[1826272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:01:01 ispc CRON[1826271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:01:01 ispc CRON[1826272]: pam_unix(cron:session): session closed for user root Dec 17 04:02:01 ispc CRON[1826897]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 04:02:01 ispc CRON[1826898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:02:02 ispc CRON[1826898]: pam_unix(cron:session): session closed for user root Dec 17 04:02:20 ispc postfix/smtpd[1827555]: sql auxprop plugin using mysql engine Dec 17 04:02:20 ispc CRON[1825128]: pam_unix(cron:session): session closed for user root Dec 17 04:02:58 ispc CRON[1826897]: pam_unix(cron:session): session closed for user logcheck Dec 17 04:03:01 ispc CRON[1828146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:03:04 ispc saslauthd[1828154]: pam_mysql - SELECT returned no result. Dec 17 04:03:04 ispc saslauthd[1828154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:03:04 ispc saslauthd[1828154]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:03:06 ispc postfix/smtpd[1828156]: sql auxprop plugin using mysql engine Dec 17 04:03:07 ispc CRON[1828146]: pam_unix(cron:session): session closed for user root Dec 17 04:03:27 ispc sshd[1828167]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:03:35 ispc saslauthd[1828169]: pam_mysql - SELECT returned no result. Dec 17 04:03:35 ispc saslauthd[1828169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:03:35 ispc saslauthd[1828169]: do_auth : auth failure: [user=init] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:04:01 ispc CRON[1828229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:05:01 ispc CRON[1828263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:05:01 ispc CRON[1828266]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:05:01 ispc CRON[1828265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:05:01 ispc CRON[1828264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:05:01 ispc CRON[1828264]: pam_unix(cron:session): session closed for user root Dec 17 04:05:01 ispc CRON[1828266]: pam_unix(cron:session): session closed for user getmail Dec 17 04:05:01 ispc CRON[1828263]: pam_unix(cron:session): session closed for user root Dec 17 04:05:01 ispc CRON[1828265]: pam_unix(cron:session): session closed for user root Dec 17 04:05:08 ispc sshd[1828344]: Invalid user martof from 213.199.57.249 Dec 17 04:05:30 ispc su[1828429]: Successful su for amavis by root Dec 17 04:05:30 ispc su[1828429]: + ??? root:amavis Dec 17 04:05:30 ispc su[1828429]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 17 04:05:31 ispc postfix/smtpd[1828436]: sql auxprop plugin using mysql engine Dec 17 04:05:48 ispc su[1828429]: pam_unix(su:session): session closed for user amavis Dec 17 04:06:01 ispc CRON[1828557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:06:02 ispc CRON[1828557]: pam_unix(cron:session): session closed for user root Dec 17 04:07:01 ispc CRON[1828594]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:07:02 ispc CRON[1828594]: pam_unix(cron:session): session closed for user root Dec 17 04:07:49 ispc sshd[1828622]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:08:01 ispc CRON[1828641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:08:02 ispc CRON[1828641]: pam_unix(cron:session): session closed for user root Dec 17 04:08:09 ispc CRON[1826271]: pam_unix(cron:session): session closed for user root Dec 17 04:08:11 ispc postfix/smtpd[1829061]: sql auxprop plugin using mysql engine Dec 17 04:09:01 ispc CRON[1829086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:09:01 ispc CRON[1829087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:09:01 ispc CRON[1829086]: pam_unix(cron:session): session closed for user root Dec 17 04:09:02 ispc CRON[1829087]: pam_unix(cron:session): session closed for user root Dec 17 04:09:58 ispc sshd[1829131]: Invalid user martof from 211.110.229.128 Dec 17 04:10:01 ispc CRON[1829137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:10:01 ispc CRON[1829138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:10:01 ispc CRON[1829139]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:10:01 ispc CRON[1829140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:10:01 ispc CRON[1829141]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:10:01 ispc CRON[1829138]: pam_unix(cron:session): session closed for user root Dec 17 04:10:01 ispc CRON[1829139]: pam_unix(cron:session): session closed for user www-data Dec 17 04:10:01 ispc CRON[1829141]: pam_unix(cron:session): session closed for user getmail Dec 17 04:10:02 ispc CRON[1829137]: pam_unix(cron:session): session closed for user root Dec 17 04:10:02 ispc CRON[1829140]: pam_unix(cron:session): session closed for user root Dec 17 04:10:56 ispc postfix/smtpd[1829239]: sql auxprop plugin using mysql engine Dec 17 04:10:56 ispc saslauthd[1829242]: pam_mysql - SELECT returned no result. Dec 17 04:10:56 ispc saslauthd[1829242]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:10:56 ispc saslauthd[1829242]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:11:00 ispc postfix/smtpd[1829247]: sql auxprop plugin using mysql engine Dec 17 04:11:01 ispc CRON[1829248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:11:02 ispc CRON[1829248]: pam_unix(cron:session): session closed for user root Dec 17 04:11:34 ispc sshd[1829271]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:11:36 ispc sshd[1829273]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:11:36 ispc sshd[1829273]: Invalid user klape from 189.89.20.45 Dec 17 04:11:38 ispc sshd[1829275]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:11:38 ispc sshd[1829275]: Invalid user ubuntu from 189.89.20.45 Dec 17 04:12:01 ispc CRON[1829290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:12:01 ispc CRON[1829290]: pam_unix(cron:session): session closed for user root Dec 17 04:12:24 ispc sshd[1829311]: Invalid user blceu from 203.146.21.153 Dec 17 04:13:01 ispc CRON[1829333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:13:02 ispc CRON[1829333]: pam_unix(cron:session): session closed for user root Dec 17 04:14:01 ispc CRON[1829374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:14:02 ispc CRON[1829374]: pam_unix(cron:session): session closed for user root Dec 17 04:14:14 ispc sshd[1829391]: Invalid user ziplines from 185.208.181.141 Dec 17 04:14:51 ispc sshd[1829411]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:15:01 ispc CRON[1829420]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:15:01 ispc CRON[1829417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:15:01 ispc CRON[1829418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:15:01 ispc CRON[1829419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:15:01 ispc CRON[1829418]: pam_unix(cron:session): session closed for user root Dec 17 04:15:01 ispc CRON[1829420]: pam_unix(cron:session): session closed for user getmail Dec 17 04:15:01 ispc CRON[1829419]: pam_unix(cron:session): session closed for user root Dec 17 04:15:01 ispc CRON[1829417]: pam_unix(cron:session): session closed for user root Dec 17 04:16:01 ispc CRON[1829517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:16:01 ispc CRON[1829517]: pam_unix(cron:session): session closed for user root Dec 17 04:17:01 ispc CRON[1829557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:17:02 ispc CRON[1829557]: pam_unix(cron:session): session closed for user root Dec 17 04:17:36 ispc sshd[1829581]: Did not receive identification string from 196.251.100.49 Dec 17 04:18:01 ispc CRON[1829600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:18:01 ispc CRON[1829600]: pam_unix(cron:session): session closed for user root Dec 17 04:18:37 ispc postfix/smtpd[1829628]: sql auxprop plugin using mysql engine Dec 17 04:18:38 ispc saslauthd[1829631]: pam_mysql - SELECT returned no result. Dec 17 04:18:38 ispc saslauthd[1829631]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:18:38 ispc saslauthd[1829631]: do_auth : auth failure: [user=install] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:18:57 ispc saslauthd[1829642]: pam_mysql - SELECT returned no result. Dec 17 04:18:57 ispc saslauthd[1829642]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:18:57 ispc saslauthd[1829642]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:19:01 ispc CRON[1829643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:19:02 ispc CRON[1829643]: pam_unix(cron:session): session closed for user root Dec 17 04:20:01 ispc CRON[1829750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:20:01 ispc CRON[1829751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:20:01 ispc CRON[1829752]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:20:01 ispc CRON[1829753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:20:01 ispc CRON[1829754]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:20:01 ispc CRON[1829751]: pam_unix(cron:session): session closed for user root Dec 17 04:20:01 ispc CRON[1829752]: pam_unix(cron:session): session closed for user www-data Dec 17 04:20:01 ispc CRON[1829754]: pam_unix(cron:session): session closed for user getmail Dec 17 04:20:01 ispc CRON[1829753]: pam_unix(cron:session): session closed for user root Dec 17 04:20:01 ispc CRON[1829750]: pam_unix(cron:session): session closed for user root Dec 17 04:20:13 ispc sshd[1829833]: Did not receive identification string from 45.140.17.97 Dec 17 04:21:01 ispc CRON[1829855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:21:01 ispc CRON[1829854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:21:01 ispc CRON[1829854]: pam_unix(cron:session): session closed for user root Dec 17 04:21:01 ispc CRON[1829855]: pam_unix(cron:session): session closed for user root Dec 17 04:22:01 ispc CRON[1829899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:22:02 ispc CRON[1829899]: pam_unix(cron:session): session closed for user root Dec 17 04:23:01 ispc CRON[1829944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:23:01 ispc CRON[1829944]: pam_unix(cron:session): session closed for user root Dec 17 04:24:01 ispc CRON[1829982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:24:02 ispc CRON[1829982]: pam_unix(cron:session): session closed for user root Dec 17 04:24:33 ispc postfix/smtpd[1830011]: sql auxprop plugin using mysql engine Dec 17 04:24:33 ispc CRON[1828229]: pam_unix(cron:session): session closed for user root Dec 17 04:25:01 ispc CRON[1830017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:25:01 ispc CRON[1830018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:25:01 ispc CRON[1830020]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:25:01 ispc CRON[1830019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:25:01 ispc CRON[1830018]: pam_unix(cron:session): session closed for user root Dec 17 04:25:01 ispc CRON[1830020]: pam_unix(cron:session): session closed for user getmail Dec 17 04:25:03 ispc CRON[1830017]: pam_unix(cron:session): session closed for user root Dec 17 04:25:07 ispc CRON[1830019]: pam_unix(cron:session): session closed for user root Dec 17 04:25:08 ispc sshd[1830093]: Invalid user martof from 203.146.21.153 Dec 17 04:25:17 ispc saslauthd[1830101]: pam_mysql - SELECT returned no result. Dec 17 04:25:17 ispc saslauthd[1830101]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:25:17 ispc saslauthd[1830101]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:26:01 ispc CRON[1830105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:26:47 ispc saslauthd[1830138]: pam_mysql - SELECT returned no result. Dec 17 04:26:47 ispc saslauthd[1830138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:26:47 ispc saslauthd[1830138]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:27:01 ispc CRON[1830143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:27:01 ispc CRON[1830143]: pam_unix(cron:session): session closed for user root Dec 17 04:28:01 ispc CRON[1830190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:28:01 ispc CRON[1830190]: pam_unix(cron:session): session closed for user root Dec 17 04:29:01 ispc CRON[1830228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:29:02 ispc CRON[1830228]: pam_unix(cron:session): session closed for user root Dec 17 04:30:01 ispc CRON[1830266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:30:01 ispc CRON[1830267]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:30:01 ispc CRON[1830269]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:30:01 ispc CRON[1830268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:30:01 ispc CRON[1830265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:30:01 ispc CRON[1830266]: pam_unix(cron:session): session closed for user root Dec 17 04:30:01 ispc CRON[1830267]: pam_unix(cron:session): session closed for user www-data Dec 17 04:30:01 ispc CRON[1830269]: pam_unix(cron:session): session closed for user getmail Dec 17 04:30:01 ispc CRON[1830268]: pam_unix(cron:session): session closed for user root Dec 17 04:30:02 ispc CRON[1830265]: pam_unix(cron:session): session closed for user root Dec 17 04:30:17 ispc postfix/smtpd[1830351]: sql auxprop plugin using mysql engine Dec 17 04:30:18 ispc saslauthd[1830354]: pam_mysql - SELECT returned no result. Dec 17 04:30:18 ispc saslauthd[1830354]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:30:18 ispc saslauthd[1830354]: do_auth : auth failure: [user=webmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 04:30:32 ispc postfix/smtpd[1830360]: sql auxprop plugin using mysql engine Dec 17 04:31:01 ispc CRON[1830379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:31:01 ispc CRON[1830379]: pam_unix(cron:session): session closed for user root Dec 17 04:32:01 ispc CRON[1830416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:32:01 ispc CRON[1830416]: pam_unix(cron:session): session closed for user root Dec 17 04:32:10 ispc postfix/smtpd[1830431]: sql auxprop plugin using mysql engine Dec 17 04:33:01 ispc CRON[1830466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:33:02 ispc CRON[1830466]: pam_unix(cron:session): session closed for user root Dec 17 04:33:32 ispc sshd[1830490]: Invalid user martof from 185.208.181.141 Dec 17 04:33:41 ispc saslauthd[1830496]: pam_mysql - SELECT returned no result. Dec 17 04:33:41 ispc saslauthd[1830496]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:33:41 ispc saslauthd[1830496]: do_auth : auth failure: [user=installer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:34:01 ispc CRON[1830505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:34:01 ispc CRON[1830505]: pam_unix(cron:session): session closed for user root Dec 17 04:34:43 ispc saslauthd[1830535]: pam_mysql - SELECT returned no result. Dec 17 04:34:43 ispc saslauthd[1830535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:34:43 ispc saslauthd[1830535]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:35:01 ispc CRON[1830545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:35:01 ispc CRON[1830546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:35:01 ispc CRON[1830544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:35:01 ispc CRON[1830547]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:35:01 ispc CRON[1830545]: pam_unix(cron:session): session closed for user root Dec 17 04:35:01 ispc CRON[1830547]: pam_unix(cron:session): session closed for user getmail Dec 17 04:35:01 ispc CRON[1830546]: pam_unix(cron:session): session closed for user root Dec 17 04:35:01 ispc CRON[1830544]: pam_unix(cron:session): session closed for user root Dec 17 04:36:01 ispc CRON[1830647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:36:02 ispc CRON[1830647]: pam_unix(cron:session): session closed for user root Dec 17 04:36:19 ispc sshd[1830667]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:36:19 ispc sshd[1830667]: Invalid user martof from 157.245.115.125 Dec 17 04:37:01 ispc CRON[1830686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:37:01 ispc CRON[1830686]: pam_unix(cron:session): session closed for user root Dec 17 04:37:14 ispc sshd[1830703]: Invalid user ziplines from 203.146.21.153 Dec 17 04:38:01 ispc CRON[1830736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:38:02 ispc CRON[1830736]: pam_unix(cron:session): session closed for user root Dec 17 04:38:21 ispc postfix/smtpd[1830755]: sql auxprop plugin using mysql engine Dec 17 04:39:01 ispc CRON[1830775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:39:01 ispc CRON[1830774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:39:01 ispc CRON[1830774]: pam_unix(cron:session): session closed for user root Dec 17 04:39:02 ispc CRON[1830775]: pam_unix(cron:session): session closed for user root Dec 17 04:39:03 ispc sshd[1830798]: Invalid user klape from 70.37.89.177 Dec 17 04:39:04 ispc sshd[1830800]: Invalid user ubuntu from 70.37.89.177 Dec 17 04:40:01 ispc CRON[1830827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:40:01 ispc CRON[1830828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:40:01 ispc CRON[1830829]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:40:01 ispc CRON[1830830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:40:01 ispc CRON[1830831]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:40:01 ispc CRON[1830831]: pam_unix(cron:session): session closed for user getmail Dec 17 04:40:01 ispc CRON[1830829]: pam_unix(cron:session): session closed for user www-data Dec 17 04:40:01 ispc CRON[1830828]: pam_unix(cron:session): session closed for user root Dec 17 04:40:02 ispc CRON[1830827]: pam_unix(cron:session): session closed for user root Dec 17 04:40:02 ispc CRON[1830830]: pam_unix(cron:session): session closed for user root Dec 17 04:40:30 ispc postfix/smtpd[1830918]: sql auxprop plugin using mysql engine Dec 17 04:41:01 ispc CRON[1830935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:41:02 ispc CRON[1830935]: pam_unix(cron:session): session closed for user root Dec 17 04:42:01 ispc CRON[1830977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:42:01 ispc CRON[1830977]: pam_unix(cron:session): session closed for user root Dec 17 04:42:45 ispc postfix/smtpd[1831005]: sql auxprop plugin using mysql engine Dec 17 04:42:46 ispc saslauthd[1831009]: pam_mysql - SELECT returned no result. Dec 17 04:42:46 ispc saslauthd[1831009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:42:46 ispc saslauthd[1831009]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:42:46 ispc sshd[1831007]: Invalid user ziplines from 51.77.203.224 Dec 17 04:43:01 ispc CRON[1831024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:43:02 ispc CRON[1831024]: pam_unix(cron:session): session closed for user root Dec 17 04:43:05 ispc sshd[1831035]: Invalid user matlbula from 221.156.137.103 Dec 17 04:43:51 ispc postfix/smtpd[1831060]: sql auxprop plugin using mysql engine Dec 17 04:43:52 ispc postfix/smtpd[1831062]: sql auxprop plugin using mysql engine Dec 17 04:44:01 ispc CRON[1831070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:44:02 ispc CRON[1831070]: pam_unix(cron:session): session closed for user root Dec 17 04:45:01 ispc CRON[1831107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:45:01 ispc CRON[1831108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:45:01 ispc CRON[1831109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:45:01 ispc CRON[1831110]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:45:01 ispc CRON[1831108]: pam_unix(cron:session): session closed for user root Dec 17 04:45:01 ispc CRON[1831110]: pam_unix(cron:session): session closed for user getmail Dec 17 04:45:01 ispc CRON[1831109]: pam_unix(cron:session): session closed for user root Dec 17 04:45:01 ispc CRON[1831107]: pam_unix(cron:session): session closed for user root Dec 17 04:46:01 ispc CRON[1831207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:46:01 ispc CRON[1831207]: pam_unix(cron:session): session closed for user root Dec 17 04:46:15 ispc CRON[1830105]: pam_unix(cron:session): session closed for user root Dec 17 04:46:15 ispc postfix/smtpd[1831232]: sql auxprop plugin using mysql engine Dec 17 04:46:58 ispc sshd[1831243]: Invalid user klape from 2.57.217.229 Dec 17 04:46:59 ispc sshd[1831245]: Invalid user ubuntu from 2.57.217.229 Dec 17 04:47:01 ispc CRON[1831247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:47:06 ispc CRON[1831247]: pam_unix(cron:session): session closed for user root Dec 17 04:47:30 ispc sshd[1831259]: Invalid user martof from 185.142.159.122 Dec 17 04:48:01 ispc CRON[1831269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:48:24 ispc sshd[1831290]: reverse mapping checking getaddrinfo for tieama.com [185.149.234.57] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 04:48:46 ispc saslauthd[1831301]: pam_mysql - SELECT returned no result. Dec 17 04:48:46 ispc saslauthd[1831301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:48:46 ispc saslauthd[1831301]: do_auth : auth failure: [user=internal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:49:01 ispc CRON[1831306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:49:02 ispc CRON[1831306]: pam_unix(cron:session): session closed for user root Dec 17 04:50:01 ispc CRON[1831342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:50:01 ispc CRON[1831344]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 04:50:01 ispc CRON[1831345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:50:01 ispc CRON[1831343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:50:01 ispc CRON[1831346]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:50:01 ispc CRON[1831344]: pam_unix(cron:session): session closed for user www-data Dec 17 04:50:01 ispc CRON[1831343]: pam_unix(cron:session): session closed for user root Dec 17 04:50:01 ispc CRON[1831346]: pam_unix(cron:session): session closed for user getmail Dec 17 04:50:01 ispc CRON[1831345]: pam_unix(cron:session): session closed for user root Dec 17 04:50:01 ispc CRON[1831342]: pam_unix(cron:session): session closed for user root Dec 17 04:51:01 ispc CRON[1831447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:51:02 ispc CRON[1831447]: pam_unix(cron:session): session closed for user root Dec 17 04:51:04 ispc postfix/smtpd[1831462]: sql auxprop plugin using mysql engine Dec 17 04:51:11 ispc postfix/smtpd[1831465]: sql auxprop plugin using mysql engine Dec 17 04:51:11 ispc saslauthd[1831467]: pam_mysql - SELECT returned no result. Dec 17 04:51:11 ispc saslauthd[1831467]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:51:11 ispc saslauthd[1831467]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:52:01 ispc CRON[1831495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:52:01 ispc CRON[1831495]: pam_unix(cron:session): session closed for user root Dec 17 04:52:52 ispc postfix/smtpd[1831536]: sql auxprop plugin using mysql engine Dec 17 04:53:01 ispc CRON[1831541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:53:01 ispc CRON[1831541]: pam_unix(cron:session): session closed for user root Dec 17 04:54:01 ispc CRON[1831579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:54:02 ispc CRON[1831579]: pam_unix(cron:session): session closed for user root Dec 17 04:55:01 ispc CRON[1831614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:55:01 ispc CRON[1831615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:55:01 ispc CRON[1831616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:55:01 ispc CRON[1831617]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 04:55:01 ispc CRON[1831615]: pam_unix(cron:session): session closed for user root Dec 17 04:55:01 ispc CRON[1831617]: pam_unix(cron:session): session closed for user getmail Dec 17 04:55:01 ispc CRON[1831616]: pam_unix(cron:session): session closed for user root Dec 17 04:55:01 ispc CRON[1831614]: pam_unix(cron:session): session closed for user root Dec 17 04:55:30 ispc sshd[1831704]: Invalid user martof from 62.84.181.22 Dec 17 04:56:00 ispc postfix/smtpd[1831721]: sql auxprop plugin using mysql engine Dec 17 04:56:01 ispc CRON[1831723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:56:02 ispc CRON[1831723]: pam_unix(cron:session): session closed for user root Dec 17 04:56:07 ispc sshd[1831736]: Did not receive identification string from 147.185.132.237 Dec 17 04:56:28 ispc sshd[1831694]: Invalid user matlbula from 165.210.33.193 Dec 17 04:56:36 ispc sshd[1831750]: Did not receive identification string from 80.94.92.165 Dec 17 04:57:01 ispc CRON[1831763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:57:02 ispc CRON[1831763]: pam_unix(cron:session): session closed for user root Dec 17 04:57:12 ispc sshd[1831778]: Invalid user zamestnanievzdravotnictve from 175.125.95.234 Dec 17 04:57:58 ispc sshd[1831815]: Invalid user blceu from 51.77.203.224 Dec 17 04:58:01 ispc CRON[1831817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:58:01 ispc CRON[1831817]: pam_unix(cron:session): session closed for user root Dec 17 04:58:36 ispc postfix/smtpd[1831840]: sql auxprop plugin using mysql engine Dec 17 04:58:37 ispc saslauthd[1831842]: pam_mysql - SELECT returned no result. Dec 17 04:58:37 ispc saslauthd[1831842]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:58:37 ispc saslauthd[1831842]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:59:01 ispc CRON[1831855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 04:59:01 ispc CRON[1831855]: pam_unix(cron:session): session closed for user root Dec 17 04:59:18 ispc saslauthd[1831872]: pam_mysql - SELECT returned no result. Dec 17 04:59:18 ispc saslauthd[1831872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 04:59:18 ispc saslauthd[1831872]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 04:59:39 ispc postfix/smtpd[1831883]: sql auxprop plugin using mysql engine Dec 17 04:59:44 ispc sshd[1831889]: Invalid user pronajemplosin from 183.215.179.154 Dec 17 05:00:01 ispc CRON[1831901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:00:01 ispc CRON[1831904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:00:01 ispc CRON[1831900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:00:01 ispc CRON[1831902]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:00:01 ispc CRON[1831903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:00:01 ispc CRON[1831905]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:00:01 ispc CRON[1831901]: pam_unix(cron:session): session closed for user root Dec 17 05:00:01 ispc CRON[1831902]: pam_unix(cron:session): session closed for user www-data Dec 17 05:00:02 ispc CRON[1831905]: pam_unix(cron:session): session closed for user getmail Dec 17 05:00:02 ispc CRON[1831904]: pam_unix(cron:session): session closed for user root Dec 17 05:00:02 ispc CRON[1831900]: pam_unix(cron:session): session closed for user root Dec 17 05:00:02 ispc CRON[1831903]: pam_unix(cron:session): session closed for user root Dec 17 05:00:13 ispc sshd[1832061]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 05:01:01 ispc CRON[1832082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:01:01 ispc CRON[1832082]: pam_unix(cron:session): session closed for user root Dec 17 05:02:01 ispc CRON[1832118]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 05:02:01 ispc CRON[1832119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:02:02 ispc CRON[1832119]: pam_unix(cron:session): session closed for user root Dec 17 05:02:40 ispc postfix/smtpd[1832749]: sql auxprop plugin using mysql engine Dec 17 05:03:01 ispc CRON[1832960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:03:01 ispc CRON[1832960]: pam_unix(cron:session): session closed for user root Dec 17 05:03:29 ispc CRON[1832118]: pam_unix(cron:session): session closed for user logcheck Dec 17 05:03:39 ispc postfix/smtpd[1833216]: sql auxprop plugin using mysql engine Dec 17 05:03:45 ispc postfix/smtpd[1833225]: sql auxprop plugin using mysql engine Dec 17 05:03:46 ispc saslauthd[1833226]: pam_mysql - SELECT returned no result. Dec 17 05:03:46 ispc saslauthd[1833226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:03:46 ispc saslauthd[1833226]: do_auth : auth failure: [user=itsadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:04:01 ispc CRON[1833233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:04:02 ispc CRON[1833233]: pam_unix(cron:session): session closed for user root Dec 17 05:04:30 ispc sshd[1833256]: Invalid user ethereum from 80.94.92.165 Dec 17 05:04:41 ispc sshd[1833266]: Invalid user klape from 51.77.222.24 Dec 17 05:04:42 ispc sshd[1833268]: Invalid user ubuntu from 51.77.222.24 Dec 17 05:05:01 ispc CRON[1833279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:05:01 ispc CRON[1833278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:05:01 ispc CRON[1833281]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:05:01 ispc CRON[1833280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:05:01 ispc CRON[1833279]: pam_unix(cron:session): session closed for user root Dec 17 05:05:01 ispc CRON[1833281]: pam_unix(cron:session): session closed for user getmail Dec 17 05:05:02 ispc CRON[1833280]: pam_unix(cron:session): session closed for user root Dec 17 05:05:02 ispc CRON[1833278]: pam_unix(cron:session): session closed for user root Dec 17 05:05:06 ispc sshd[1833360]: Invalid user klape from 103.164.20.29 Dec 17 05:05:07 ispc sshd[1833362]: Invalid user ubuntu from 103.164.20.29 Dec 17 05:06:01 ispc CRON[1833389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:06:01 ispc CRON[1833389]: pam_unix(cron:session): session closed for user root Dec 17 05:06:35 ispc sshd[1833412]: Invalid user ziplines from 5.129.195.224 Dec 17 05:07:01 ispc CRON[1833427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:07:02 ispc CRON[1833427]: pam_unix(cron:session): session closed for user root Dec 17 05:07:23 ispc postfix/smtpd[1833447]: sql auxprop plugin using mysql engine Dec 17 05:07:23 ispc saslauthd[1833450]: pam_mysql - SELECT returned no result. Dec 17 05:07:23 ispc saslauthd[1833450]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:07:23 ispc saslauthd[1833450]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:07:26 ispc sshd[1833451]: Invalid user firedancer from 80.94.92.165 Dec 17 05:07:44 ispc sshd[1833464]: Invalid user klape from 36.50.177.171 Dec 17 05:07:45 ispc sshd[1833466]: Invalid user ubuntu from 36.50.177.171 Dec 17 05:08:01 ispc CRON[1833487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:08:01 ispc CRON[1833487]: pam_unix(cron:session): session closed for user root Dec 17 05:08:06 ispc sshd[1833498]: reverse mapping checking getaddrinfo for static.cmcti.vn [203.205.27.100] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 05:08:19 ispc CRON[1831269]: pam_unix(cron:session): session closed for user root Dec 17 05:09:01 ispc CRON[1833508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:09:01 ispc CRON[1833509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:09:01 ispc CRON[1833508]: pam_unix(cron:session): session closed for user root Dec 17 05:09:06 ispc CRON[1833509]: pam_unix(cron:session): session closed for user root Dec 17 05:10:01 ispc CRON[1833539]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:10:01 ispc CRON[1833537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:10:01 ispc CRON[1833540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:10:01 ispc CRON[1833538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:10:01 ispc CRON[1833541]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:10:01 ispc CRON[1833538]: pam_unix(cron:session): session closed for user root Dec 17 05:10:01 ispc CRON[1833539]: pam_unix(cron:session): session closed for user www-data Dec 17 05:10:01 ispc CRON[1833541]: pam_unix(cron:session): session closed for user getmail Dec 17 05:10:04 ispc CRON[1833537]: pam_unix(cron:session): session closed for user root Dec 17 05:10:22 ispc sshd[1833623]: Invalid user cardano from 80.94.92.165 Dec 17 05:10:23 ispc sshd[1833629]: Invalid user matlbula from 35.239.77.168 Dec 17 05:10:51 ispc sshd[1833640]: Invalid user blceu from 221.156.137.103 Dec 17 05:11:01 ispc CRON[1833646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:11:01 ispc CRON[1833646]: pam_unix(cron:session): session closed for user root Dec 17 05:11:09 ispc postfix/smtpd[1833661]: sql auxprop plugin using mysql engine Dec 17 05:11:10 ispc saslauthd[1833663]: pam_mysql - SELECT returned no result. Dec 17 05:11:10 ispc saslauthd[1833663]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:11:10 ispc saslauthd[1833663]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:12:01 ispc CRON[1833687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:12:02 ispc CRON[1833687]: pam_unix(cron:session): session closed for user root Dec 17 05:13:01 ispc CRON[1833733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:13:02 ispc CRON[1833733]: pam_unix(cron:session): session closed for user root Dec 17 05:13:12 ispc sshd[1833748]: Invalid user polkadot from 80.94.92.165 Dec 17 05:13:23 ispc sshd[1833754]: Invalid user ziplines from 211.110.229.128 Dec 17 05:14:01 ispc CRON[1833774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:14:02 ispc CRON[1833774]: pam_unix(cron:session): session closed for user root Dec 17 05:14:23 ispc sshd[1833789]: Did not receive identification string from 161.35.218.223 Dec 17 05:15:01 ispc CRON[1833814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:15:01 ispc CRON[1833816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:15:01 ispc CRON[1833815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:15:01 ispc CRON[1833817]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:15:01 ispc CRON[1833815]: pam_unix(cron:session): session closed for user root Dec 17 05:15:01 ispc CRON[1833817]: pam_unix(cron:session): session closed for user getmail Dec 17 05:15:01 ispc CRON[1833816]: pam_unix(cron:session): session closed for user root Dec 17 05:15:02 ispc CRON[1833814]: pam_unix(cron:session): session closed for user root Dec 17 05:15:30 ispc postfix/smtpd[1833898]: sql auxprop plugin using mysql engine Dec 17 05:15:31 ispc saslauthd[1833905]: pam_mysql - SELECT returned no result. Dec 17 05:15:31 ispc saslauthd[1833905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:15:31 ispc saslauthd[1833905]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:16:01 ispc CRON[1833914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:16:01 ispc CRON[1833914]: pam_unix(cron:session): session closed for user root Dec 17 05:16:09 ispc sshd[1833929]: Invalid user solana from 80.94.92.165 Dec 17 05:17:01 ispc CRON[1833951]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:17:01 ispc CRON[1833952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:17:02 ispc CRON[1833952]: pam_unix(cron:session): session closed for user root Dec 17 05:17:03 ispc CRON[1833951]: pam_unix(cron:session): session closed for user www-data Dec 17 05:17:48 ispc sshd[1833986]: Invalid user martof from 175.125.92.77 Dec 17 05:18:01 ispc CRON[1834001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:18:01 ispc CRON[1834001]: pam_unix(cron:session): session closed for user root Dec 17 05:18:12 ispc postfix/smtpd[1834018]: sql auxprop plugin using mysql engine Dec 17 05:18:13 ispc saslauthd[1834020]: pam_mysql - SELECT returned no result. Dec 17 05:18:13 ispc saslauthd[1834020]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:18:13 ispc saslauthd[1834020]: do_auth : auth failure: [user=jamfsoftware] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:18:59 ispc sshd[1834037]: Invalid user tezos from 80.94.92.165 Dec 17 05:19:01 ispc CRON[1834051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:19:01 ispc CRON[1834051]: pam_unix(cron:session): session closed for user root Dec 17 05:20:01 ispc CRON[1834086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:20:01 ispc CRON[1834087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:20:01 ispc CRON[1834088]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:20:01 ispc CRON[1834089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:20:01 ispc CRON[1834090]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:20:01 ispc CRON[1834087]: pam_unix(cron:session): session closed for user root Dec 17 05:20:01 ispc CRON[1834088]: pam_unix(cron:session): session closed for user www-data Dec 17 05:20:02 ispc CRON[1834090]: pam_unix(cron:session): session closed for user getmail Dec 17 05:20:02 ispc CRON[1834086]: pam_unix(cron:session): session closed for user root Dec 17 05:20:02 ispc CRON[1834089]: pam_unix(cron:session): session closed for user root Dec 17 05:21:01 ispc CRON[1834191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:21:01 ispc CRON[1834192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:21:01 ispc CRON[1834191]: pam_unix(cron:session): session closed for user root Dec 17 05:21:02 ispc CRON[1834192]: pam_unix(cron:session): session closed for user root Dec 17 05:21:07 ispc sshd[1834206]: Invalid user ziplines from 49.247.24.89 Dec 17 05:21:48 ispc postfix/smtpd[1834227]: sql auxprop plugin using mysql engine Dec 17 05:21:54 ispc sshd[1834234]: Invalid user blceu from 62.84.181.22 Dec 17 05:22:01 ispc CRON[1834236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:22:01 ispc CRON[1834236]: pam_unix(cron:session): session closed for user root Dec 17 05:23:01 ispc CRON[1834283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:23:02 ispc CRON[1834283]: pam_unix(cron:session): session closed for user root Dec 17 05:24:01 ispc CRON[1834320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:24:01 ispc CRON[1834320]: pam_unix(cron:session): session closed for user root Dec 17 05:24:11 ispc postfix/smtpd[1834335]: sql auxprop plugin using mysql engine Dec 17 05:24:12 ispc saslauthd[1834337]: pam_mysql - SELECT returned no result. Dec 17 05:24:12 ispc saslauthd[1834337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:24:12 ispc saslauthd[1834337]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:24:15 ispc saslauthd[1834342]: pam_mysql - SELECT returned no result. Dec 17 05:24:15 ispc saslauthd[1834342]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:24:15 ispc saslauthd[1834342]: do_auth : auth failure: [user=postmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 05:24:42 ispc sshd[1834351]: Invalid user ziplines from 27.254.144.183 Dec 17 05:25:01 ispc CRON[1834364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:25:01 ispc CRON[1834368]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:25:01 ispc CRON[1834367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:25:01 ispc CRON[1834366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:25:01 ispc CRON[1834368]: pam_unix(cron:session): session closed for user getmail Dec 17 05:25:02 ispc CRON[1834366]: pam_unix(cron:session): session closed for user root Dec 17 05:25:02 ispc CRON[1834367]: pam_unix(cron:session): session closed for user root Dec 17 05:25:02 ispc CRON[1834364]: pam_unix(cron:session): session closed for user root Dec 17 05:25:47 ispc postfix/smtpd[1834467]: sql auxprop plugin using mysql engine Dec 17 05:26:01 ispc CRON[1834475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:26:02 ispc CRON[1834475]: pam_unix(cron:session): session closed for user root Dec 17 05:26:21 ispc sshd[1834498]: Invalid user klape from 200.32.52.150 Dec 17 05:26:22 ispc sshd[1834500]: Invalid user ubuntu from 200.32.52.150 Dec 17 05:26:43 ispc sshd[1834512]: Did not receive identification string from 209.38.101.211 Dec 17 05:27:01 ispc CRON[1834521]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:27:01 ispc CRON[1834522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:27:01 ispc CRON[1834522]: pam_unix(cron:session): session closed for user root Dec 17 05:27:44 ispc sshd[1834556]: Invalid user blceu from 213.199.57.249 Dec 17 05:28:01 ispc CRON[1834575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:28:02 ispc CRON[1834575]: pam_unix(cron:session): session closed for user root Dec 17 05:28:11 ispc CRON[1834521]: pam_unix(cron:session): session closed for user www-data Dec 17 05:28:13 ispc postfix/smtpd[1834596]: sql auxprop plugin using mysql engine Dec 17 05:28:33 ispc sshd[1834611]: Invalid user klape from 77.241.18.2 Dec 17 05:28:34 ispc sshd[1834613]: Invalid user ubuntu from 77.241.18.2 Dec 17 05:29:01 ispc CRON[1834628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:29:01 ispc CRON[1834628]: pam_unix(cron:session): session closed for user root Dec 17 05:29:45 ispc sshd[1834658]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 05:30:01 ispc CRON[1834672]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:30:01 ispc CRON[1834671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:30:01 ispc CRON[1834670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:30:01 ispc CRON[1834673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:30:01 ispc CRON[1834674]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:30:01 ispc CRON[1834672]: pam_unix(cron:session): session closed for user www-data Dec 17 05:30:01 ispc CRON[1834671]: pam_unix(cron:session): session closed for user root Dec 17 05:30:01 ispc CRON[1834674]: pam_unix(cron:session): session closed for user getmail Dec 17 05:30:02 ispc CRON[1834673]: pam_unix(cron:session): session closed for user root Dec 17 05:30:02 ispc CRON[1834670]: pam_unix(cron:session): session closed for user root Dec 17 05:30:29 ispc postfix/smtpd[1834762]: sql auxprop plugin using mysql engine Dec 17 05:30:58 ispc CRON[1833540]: pam_unix(cron:session): session closed for user root Dec 17 05:31:01 ispc CRON[1834883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:31:04 ispc CRON[1834883]: pam_unix(cron:session): session closed for user root Dec 17 05:31:52 ispc saslauthd[1834902]: pam_mysql - SELECT returned no result. Dec 17 05:31:52 ispc saslauthd[1834902]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:31:52 ispc saslauthd[1834902]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:32:01 ispc CRON[1834903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:32:31 ispc saslauthd[1834926]: pam_mysql - SELECT returned no result. Dec 17 05:32:31 ispc saslauthd[1834926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:32:31 ispc saslauthd[1834926]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:33:01 ispc CRON[1834953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:33:01 ispc CRON[1834953]: pam_unix(cron:session): session closed for user root Dec 17 05:33:16 ispc saslauthd[1834972]: pam_mysql - SELECT returned no result. Dec 17 05:33:16 ispc saslauthd[1834972]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:33:16 ispc saslauthd[1834972]: do_auth : auth failure: [user=jasperadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:34:01 ispc CRON[1834993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:34:01 ispc CRON[1834993]: pam_unix(cron:session): session closed for user root Dec 17 05:34:58 ispc sshd[1835033]: Invalid user blceu from 185.142.159.122 Dec 17 05:34:59 ispc sshd[1835035]: Invalid user from 44.220.188.189 Dec 17 05:35:02 ispc CRON[1835040]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:35:02 ispc CRON[1835038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:35:02 ispc CRON[1835039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:35:02 ispc CRON[1835037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:35:02 ispc CRON[1835038]: pam_unix(cron:session): session closed for user root Dec 17 05:35:02 ispc CRON[1835040]: pam_unix(cron:session): session closed for user getmail Dec 17 05:35:02 ispc CRON[1835037]: pam_unix(cron:session): session closed for user root Dec 17 05:35:02 ispc CRON[1835039]: pam_unix(cron:session): session closed for user root Dec 17 05:36:01 ispc CRON[1835147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:36:03 ispc CRON[1835147]: pam_unix(cron:session): session closed for user root Dec 17 05:36:41 ispc sshd[1835176]: Invalid user ziplines from 178.156.132.245 Dec 17 05:37:01 ispc CRON[1835188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:37:01 ispc CRON[1835188]: pam_unix(cron:session): session closed for user root Dec 17 05:37:03 ispc sshd[1835199]: Invalid user martof from 51.77.203.224 Dec 17 05:38:01 ispc CRON[1835240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:38:02 ispc CRON[1835240]: pam_unix(cron:session): session closed for user root Dec 17 05:38:21 ispc postfix/smtpd[1835259]: sql auxprop plugin using mysql engine Dec 17 05:39:01 ispc CRON[1835284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:39:01 ispc CRON[1835283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:39:01 ispc CRON[1835283]: pam_unix(cron:session): session closed for user root Dec 17 05:39:01 ispc postfix/smtpd[1835282]: sql auxprop plugin using mysql engine Dec 17 05:39:01 ispc CRON[1835284]: pam_unix(cron:session): session closed for user root Dec 17 05:39:22 ispc postfix/smtpd[1835317]: sql auxprop plugin using mysql engine Dec 17 05:39:45 ispc sshd[1835328]: Invalid user admin from 209.38.101.211 Dec 17 05:40:01 ispc CRON[1835339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:40:01 ispc CRON[1835341]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:40:01 ispc CRON[1835342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:40:01 ispc CRON[1835343]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:40:01 ispc CRON[1835340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:40:01 ispc CRON[1835341]: pam_unix(cron:session): session closed for user www-data Dec 17 05:40:01 ispc CRON[1835343]: pam_unix(cron:session): session closed for user getmail Dec 17 05:40:01 ispc CRON[1835340]: pam_unix(cron:session): session closed for user root Dec 17 05:40:02 ispc CRON[1835342]: pam_unix(cron:session): session closed for user root Dec 17 05:40:02 ispc CRON[1835339]: pam_unix(cron:session): session closed for user root Dec 17 05:40:12 ispc sshd[1835423]: Invalid user ziplines from 141.94.71.131 Dec 17 05:40:12 ispc sshd[1835421]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 05:40:12 ispc sshd[1835421]: Invalid user blceu from 157.245.115.125 Dec 17 05:40:20 ispc sshd[1835429]: Invalid user admin from 209.38.101.211 Dec 17 05:40:50 ispc postfix/smtpd[1835443]: sql auxprop plugin using mysql engine Dec 17 05:40:51 ispc saslauthd[1835445]: pam_mysql - SELECT returned no result. Dec 17 05:40:51 ispc saslauthd[1835445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:40:51 ispc saslauthd[1835445]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:40:56 ispc sshd[1835446]: Invalid user admin from 209.38.101.211 Dec 17 05:41:01 ispc CRON[1835452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:41:01 ispc CRON[1835452]: pam_unix(cron:session): session closed for user root Dec 17 05:41:33 ispc sshd[1835476]: Invalid user admin from 209.38.101.211 Dec 17 05:42:01 ispc CRON[1835490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:42:02 ispc CRON[1835490]: pam_unix(cron:session): session closed for user root Dec 17 05:42:05 ispc sshd[1835501]: Invalid user blceu from 175.125.92.77 Dec 17 05:42:10 ispc sshd[1835504]: Invalid user admin from 209.38.101.211 Dec 17 05:42:47 ispc sshd[1835522]: Invalid user admin from 209.38.101.211 Dec 17 05:43:01 ispc CRON[1835541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:43:02 ispc CRON[1835541]: pam_unix(cron:session): session closed for user root Dec 17 05:43:04 ispc sshd[1835552]: Invalid user ziplines from 175.125.92.77 Dec 17 05:43:07 ispc sshd[1835558]: Did not receive identification string from 192.227.134.84 Dec 17 05:44:01 ispc CRON[1835581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:44:01 ispc CRON[1835581]: pam_unix(cron:session): session closed for user root Dec 17 05:45:01 ispc CRON[1835618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:45:01 ispc CRON[1835620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:45:01 ispc CRON[1835621]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:45:01 ispc CRON[1835619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:45:01 ispc CRON[1835619]: pam_unix(cron:session): session closed for user root Dec 17 05:45:01 ispc CRON[1835621]: pam_unix(cron:session): session closed for user getmail Dec 17 05:45:02 ispc CRON[1835620]: pam_unix(cron:session): session closed for user root Dec 17 05:45:03 ispc CRON[1835618]: pam_unix(cron:session): session closed for user root Dec 17 05:45:39 ispc postfix/smtpd[1835711]: sql auxprop plugin using mysql engine Dec 17 05:46:01 ispc CRON[1835722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:46:01 ispc CRON[1835722]: pam_unix(cron:session): session closed for user root Dec 17 05:46:28 ispc sshd[1835741]: Invalid user blceu from 57.131.22.60 Dec 17 05:46:36 ispc postfix/smtpd[1835747]: sql auxprop plugin using mysql engine Dec 17 05:47:01 ispc CRON[1835764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:47:01 ispc CRON[1835764]: pam_unix(cron:session): session closed for user root Dec 17 05:48:01 ispc CRON[1835806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:48:02 ispc CRON[1835806]: pam_unix(cron:session): session closed for user root Dec 17 05:48:13 ispc postfix/smtpd[1835822]: sql auxprop plugin using mysql engine Dec 17 05:48:14 ispc saslauthd[1835828]: pam_mysql - SELECT returned no result. Dec 17 05:48:14 ispc saslauthd[1835828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:48:14 ispc saslauthd[1835828]: do_auth : auth failure: [user=jj] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:48:51 ispc sshd[1835841]: Invalid user blceu from 27.254.144.183 Dec 17 05:49:01 ispc CRON[1835847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:49:01 ispc CRON[1835847]: pam_unix(cron:session): session closed for user root Dec 17 05:49:09 ispc saslauthd[1835862]: pam_mysql - SELECT returned no result. Dec 17 05:49:09 ispc saslauthd[1835862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:49:09 ispc saslauthd[1835862]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:50:01 ispc CRON[1835884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:50:01 ispc CRON[1835885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:50:01 ispc CRON[1835886]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 05:50:01 ispc CRON[1835887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:50:01 ispc CRON[1835888]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:50:01 ispc CRON[1835885]: pam_unix(cron:session): session closed for user root Dec 17 05:50:01 ispc CRON[1835886]: pam_unix(cron:session): session closed for user www-data Dec 17 05:50:01 ispc CRON[1835888]: pam_unix(cron:session): session closed for user getmail Dec 17 05:50:01 ispc CRON[1835887]: pam_unix(cron:session): session closed for user root Dec 17 05:50:02 ispc CRON[1835884]: pam_unix(cron:session): session closed for user root Dec 17 05:51:01 ispc CRON[1835990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:51:01 ispc CRON[1835990]: pam_unix(cron:session): session closed for user root Dec 17 05:52:01 ispc CRON[1836029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:52:02 ispc CRON[1836029]: pam_unix(cron:session): session closed for user root Dec 17 05:52:23 ispc sshd[1836049]: Invalid user blceu from 211.110.229.128 Dec 17 05:52:30 ispc CRON[1834903]: pam_unix(cron:session): session closed for user root Dec 17 05:52:30 ispc postfix/smtpd[1836060]: sql auxprop plugin using mysql engine Dec 17 05:52:50 ispc postfix/smtpd[1836074]: sql auxprop plugin using mysql engine Dec 17 05:53:01 ispc CRON[1836079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:53:03 ispc CRON[1836079]: pam_unix(cron:session): session closed for user root Dec 17 05:54:01 ispc CRON[1836095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:54:37 ispc sshd[1836120]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 05:54:37 ispc sshd[1836120]: Invalid user ziplines from 157.245.115.125 Dec 17 05:55:01 ispc CRON[1836133]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 05:55:01 ispc CRON[1836131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:55:01 ispc CRON[1836132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:55:01 ispc CRON[1836130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:55:01 ispc CRON[1836131]: pam_unix(cron:session): session closed for user root Dec 17 05:55:01 ispc CRON[1836133]: pam_unix(cron:session): session closed for user getmail Dec 17 05:55:02 ispc CRON[1836132]: pam_unix(cron:session): session closed for user root Dec 17 05:55:02 ispc CRON[1836130]: pam_unix(cron:session): session closed for user root Dec 17 05:56:01 ispc CRON[1836230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:56:01 ispc CRON[1836230]: pam_unix(cron:session): session closed for user root Dec 17 05:56:19 ispc sshd[1836252]: Invalid user martof from 5.129.195.224 Dec 17 05:57:01 ispc CRON[1836271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:57:02 ispc CRON[1836271]: pam_unix(cron:session): session closed for user root Dec 17 05:57:21 ispc sshd[1836291]: Invalid user martof from 103.100.209.172 Dec 17 05:57:36 ispc postfix/smtpd[1836298]: sql auxprop plugin using mysql engine Dec 17 05:57:37 ispc saslauthd[1836301]: pam_mysql - SELECT returned no result. Dec 17 05:57:37 ispc saslauthd[1836301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 05:57:37 ispc saslauthd[1836301]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 05:58:01 ispc CRON[1836322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:58:02 ispc CRON[1836322]: pam_unix(cron:session): session closed for user root Dec 17 05:59:01 ispc CRON[1836358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 05:59:01 ispc CRON[1836358]: pam_unix(cron:session): session closed for user root Dec 17 06:00:01 ispc CRON[1836395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:00:01 ispc CRON[1836396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:00:01 ispc CRON[1836397]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:00:01 ispc CRON[1836398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:00:01 ispc CRON[1836399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:00:01 ispc CRON[1836400]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:00:01 ispc CRON[1836397]: pam_unix(cron:session): session closed for user www-data Dec 17 06:00:01 ispc CRON[1836396]: pam_unix(cron:session): session closed for user root Dec 17 06:00:01 ispc CRON[1836400]: pam_unix(cron:session): session closed for user getmail Dec 17 06:00:02 ispc CRON[1836399]: pam_unix(cron:session): session closed for user root Dec 17 06:00:02 ispc CRON[1836398]: pam_unix(cron:session): session closed for user root Dec 17 06:00:02 ispc CRON[1836395]: pam_unix(cron:session): session closed for user root Dec 17 06:01:01 ispc CRON[1836577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:01:01 ispc CRON[1836577]: pam_unix(cron:session): session closed for user root Dec 17 06:01:30 ispc postfix/smtpd[1836598]: sql auxprop plugin using mysql engine Dec 17 06:02:01 ispc CRON[1836618]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 06:02:01 ispc CRON[1836619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:02:02 ispc CRON[1836619]: pam_unix(cron:session): session closed for user root Dec 17 06:03:00 ispc CRON[1836618]: pam_unix(cron:session): session closed for user logcheck Dec 17 06:03:00 ispc CRON[1837668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:03:01 ispc CRON[1837668]: pam_unix(cron:session): session closed for user root Dec 17 06:03:06 ispc postfix/smtpd[1837687]: sql auxprop plugin using mysql engine Dec 17 06:03:13 ispc postfix/smtpd[1837697]: sql auxprop plugin using mysql engine Dec 17 06:03:14 ispc saslauthd[1837699]: pam_mysql - SELECT returned no result. Dec 17 06:03:14 ispc saslauthd[1837699]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:03:14 ispc saslauthd[1837699]: do_auth : auth failure: [user=joe] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:03:55 ispc saslauthd[1837718]: pam_mysql - SELECT returned no result. Dec 17 06:03:55 ispc saslauthd[1837718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:03:55 ispc saslauthd[1837718]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:04:01 ispc CRON[1837719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:04:02 ispc CRON[1837719]: pam_unix(cron:session): session closed for user root Dec 17 06:04:07 ispc postfix/smtpd[1837735]: sql auxprop plugin using mysql engine Dec 17 06:05:01 ispc CRON[1837759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:05:01 ispc CRON[1837758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:05:01 ispc CRON[1837760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:05:01 ispc CRON[1837761]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:05:01 ispc CRON[1837759]: pam_unix(cron:session): session closed for user root Dec 17 06:05:01 ispc CRON[1837761]: pam_unix(cron:session): session closed for user getmail Dec 17 06:05:01 ispc CRON[1837760]: pam_unix(cron:session): session closed for user root Dec 17 06:05:01 ispc CRON[1837758]: pam_unix(cron:session): session closed for user root Dec 17 06:05:14 ispc saslauthd[1837842]: pam_mysql - SELECT returned no result. Dec 17 06:05:14 ispc saslauthd[1837842]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:05:14 ispc saslauthd[1837842]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:05:45 ispc saslauthd[1837855]: pam_mysql - SELECT returned no result. Dec 17 06:05:45 ispc saslauthd[1837855]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:05:45 ispc saslauthd[1837855]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:05:53 ispc sshd[1837857]: Invalid user ziplines from 185.142.159.122 Dec 17 06:06:01 ispc CRON[1837863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:06:02 ispc CRON[1837863]: pam_unix(cron:session): session closed for user root Dec 17 06:06:25 ispc sshd[1837886]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 06:07:01 ispc CRON[1837902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:07:01 ispc CRON[1837902]: pam_unix(cron:session): session closed for user root Dec 17 06:08:01 ispc CRON[1837947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:08:01 ispc CRON[1837947]: pam_unix(cron:session): session closed for user root Dec 17 06:09:01 ispc CRON[1837985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:09:01 ispc CRON[1837986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:09:02 ispc CRON[1837985]: pam_unix(cron:session): session closed for user root Dec 17 06:09:02 ispc CRON[1837986]: pam_unix(cron:session): session closed for user root Dec 17 06:09:13 ispc sshd[1838013]: Did not receive identification string from 45.140.17.97 Dec 17 06:09:13 ispc postfix/smtpd[1838014]: sql auxprop plugin using mysql engine Dec 17 06:10:01 ispc CRON[1838040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:10:01 ispc CRON[1838041]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:10:01 ispc CRON[1838039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:10:01 ispc CRON[1838042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:10:01 ispc CRON[1838040]: pam_unix(cron:session): session closed for user root Dec 17 06:10:01 ispc CRON[1838043]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:10:01 ispc CRON[1838041]: pam_unix(cron:session): session closed for user www-data Dec 17 06:10:01 ispc CRON[1838043]: pam_unix(cron:session): session closed for user getmail Dec 17 06:10:01 ispc CRON[1838042]: pam_unix(cron:session): session closed for user root Dec 17 06:10:02 ispc CRON[1838039]: pam_unix(cron:session): session closed for user root Dec 17 06:10:39 ispc sshd[1838129]: Invalid user ftp from 203.146.21.153 Dec 17 06:11:01 ispc CRON[1838143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:11:01 ispc CRON[1838143]: pam_unix(cron:session): session closed for user root Dec 17 06:11:32 ispc postfix/smtpd[1838170]: sql auxprop plugin using mysql engine Dec 17 06:11:40 ispc postfix/smtpd[1838176]: sql auxprop plugin using mysql engine Dec 17 06:11:57 ispc sshd[1838182]: Invalid user martof from 178.156.132.245 Dec 17 06:12:01 ispc CRON[1838188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:12:02 ispc CRON[1838188]: pam_unix(cron:session): session closed for user root Dec 17 06:12:58 ispc sshd[1838159]: Invalid user blceu from 165.210.33.193 Dec 17 06:13:01 ispc CRON[1838235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:13:01 ispc CRON[1838235]: pam_unix(cron:session): session closed for user root Dec 17 06:13:58 ispc postfix/smtpd[1838267]: sql auxprop plugin using mysql engine Dec 17 06:13:58 ispc saslauthd[1838269]: pam_mysql - SELECT returned no result. Dec 17 06:13:58 ispc saslauthd[1838269]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:13:58 ispc saslauthd[1838269]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:14:01 ispc CRON[1838274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:14:02 ispc CRON[1838274]: pam_unix(cron:session): session closed for user root Dec 17 06:14:26 ispc CRON[1836095]: pam_unix(cron:session): session closed for user root Dec 17 06:15:01 ispc CRON[1838297]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:15:01 ispc CRON[1838295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:15:01 ispc CRON[1838294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:15:01 ispc CRON[1838296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:15:01 ispc CRON[1838295]: pam_unix(cron:session): session closed for user root Dec 17 06:15:01 ispc CRON[1838297]: pam_unix(cron:session): session closed for user getmail Dec 17 06:15:03 ispc CRON[1838294]: pam_unix(cron:session): session closed for user root Dec 17 06:15:06 ispc CRON[1838296]: pam_unix(cron:session): session closed for user root Dec 17 06:16:01 ispc CRON[1838373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:16:32 ispc sshd[1838396]: Invalid user ziplines from 103.100.209.172 Dec 17 06:17:01 ispc CRON[1838410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:17:02 ispc CRON[1838410]: pam_unix(cron:session): session closed for user root Dec 17 06:18:01 ispc postfix/smtpd[1838455]: sql auxprop plugin using mysql engine Dec 17 06:18:01 ispc CRON[1838457]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 06:18:01 ispc CRON[1838458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:18:01 ispc saslauthd[1838469]: pam_mysql - SELECT returned no result. Dec 17 06:18:01 ispc saslauthd[1838469]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:18:01 ispc saslauthd[1838469]: do_auth : auth failure: [user=web@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 06:18:01 ispc CRON[1838458]: pam_unix(cron:session): session closed for user root Dec 17 06:18:06 ispc CRON[1838457]: pam_unix(cron:session): session closed for user amavis Dec 17 06:18:08 ispc postfix/smtpd[1838485]: sql auxprop plugin using mysql engine Dec 17 06:18:16 ispc saslauthd[1838491]: pam_mysql - SELECT returned no result. Dec 17 06:18:16 ispc saslauthd[1838491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:18:16 ispc saslauthd[1838491]: do_auth : auth failure: [user=joeuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:19:01 ispc CRON[1838513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:19:02 ispc CRON[1838513]: pam_unix(cron:session): session closed for user root Dec 17 06:20:01 ispc CRON[1838553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:20:01 ispc CRON[1838554]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:20:01 ispc CRON[1838555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:20:01 ispc CRON[1838556]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:20:01 ispc CRON[1838552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:20:01 ispc CRON[1838553]: pam_unix(cron:session): session closed for user root Dec 17 06:20:01 ispc CRON[1838554]: pam_unix(cron:session): session closed for user www-data Dec 17 06:20:01 ispc CRON[1838556]: pam_unix(cron:session): session closed for user getmail Dec 17 06:20:02 ispc CRON[1838555]: pam_unix(cron:session): session closed for user root Dec 17 06:20:02 ispc CRON[1838552]: pam_unix(cron:session): session closed for user root Dec 17 06:21:01 ispc CRON[1838657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:21:01 ispc CRON[1838656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:21:01 ispc CRON[1838656]: pam_unix(cron:session): session closed for user root Dec 17 06:21:02 ispc CRON[1838657]: pam_unix(cron:session): session closed for user root Dec 17 06:21:52 ispc postfix/smtpd[1838692]: sql auxprop plugin using mysql engine Dec 17 06:21:52 ispc saslauthd[1838695]: pam_mysql - SELECT returned no result. Dec 17 06:21:52 ispc saslauthd[1838695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:21:52 ispc saslauthd[1838695]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:21:52 ispc sshd[1838690]: Invalid user ftp from 203.146.21.153 Dec 17 06:21:56 ispc postfix/smtpd[1838696]: sql auxprop plugin using mysql engine Dec 17 06:22:01 ispc CRON[1838701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:22:01 ispc CRON[1838701]: pam_unix(cron:session): session closed for user root Dec 17 06:23:01 ispc CRON[1838748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:23:02 ispc CRON[1838748]: pam_unix(cron:session): session closed for user root Dec 17 06:24:01 ispc CRON[1838783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:24:01 ispc CRON[1838783]: pam_unix(cron:session): session closed for user root Dec 17 06:25:01 ispc CRON[1838823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:25:01 ispc CRON[1838824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:25:01 ispc CRON[1838825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:25:01 ispc CRON[1838826]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:25:02 ispc CRON[1838824]: pam_unix(cron:session): session closed for user root Dec 17 06:25:02 ispc CRON[1838826]: pam_unix(cron:session): session closed for user getmail Dec 17 06:25:02 ispc CRON[1838825]: pam_unix(cron:session): session closed for user root Dec 17 06:25:04 ispc CRON[1838823]: pam_unix(cron:session): session closed for user root Dec 17 06:25:41 ispc postfix/smtpd[1838911]: sql auxprop plugin using mysql engine Dec 17 06:25:41 ispc saslauthd[1838918]: pam_mysql - SELECT returned no result. Dec 17 06:25:41 ispc saslauthd[1838918]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:25:41 ispc saslauthd[1838918]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:26:00 ispc sshd[1838925]: Invalid user klape from 187.190.35.163 Dec 17 06:26:01 ispc CRON[1838929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:26:01 ispc sshd[1838927]: Invalid user ubuntu from 187.190.35.163 Dec 17 06:26:01 ispc CRON[1838929]: pam_unix(cron:session): session closed for user root Dec 17 06:27:01 ispc CRON[1838967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:27:02 ispc CRON[1838967]: pam_unix(cron:session): session closed for user root Dec 17 06:28:01 ispc CRON[1839012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:28:01 ispc CRON[1839012]: pam_unix(cron:session): session closed for user root Dec 17 06:29:01 ispc CRON[1839052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:29:02 ispc CRON[1839052]: pam_unix(cron:session): session closed for user root Dec 17 06:29:30 ispc postfix/smtpd[1839078]: sql auxprop plugin using mysql engine Dec 17 06:29:56 ispc postfix/smtpd[1839093]: sql auxprop plugin using mysql engine Dec 17 06:29:56 ispc saslauthd[1839095]: pam_mysql - SELECT returned no result. Dec 17 06:29:56 ispc saslauthd[1839095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:29:56 ispc saslauthd[1839095]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:30:01 ispc CRON[1839098]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:30:01 ispc CRON[1839096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:30:01 ispc CRON[1839099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:30:01 ispc CRON[1839097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:30:01 ispc CRON[1839100]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:30:01 ispc CRON[1839097]: pam_unix(cron:session): session closed for user root Dec 17 06:30:01 ispc CRON[1839098]: pam_unix(cron:session): session closed for user www-data Dec 17 06:30:01 ispc CRON[1839100]: pam_unix(cron:session): session closed for user getmail Dec 17 06:30:01 ispc CRON[1839099]: pam_unix(cron:session): session closed for user root Dec 17 06:30:01 ispc CRON[1839096]: pam_unix(cron:session): session closed for user root Dec 17 06:31:01 ispc CRON[1839200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:31:02 ispc CRON[1839200]: pam_unix(cron:session): session closed for user root Dec 17 06:32:01 ispc CRON[1839236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:32:01 ispc CRON[1839236]: pam_unix(cron:session): session closed for user root Dec 17 06:33:01 ispc CRON[1839279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:33:02 ispc CRON[1839279]: pam_unix(cron:session): session closed for user root Dec 17 06:33:17 ispc postfix/smtpd[1839295]: sql auxprop plugin using mysql engine Dec 17 06:33:18 ispc saslauthd[1839302]: pam_mysql - SELECT returned no result. Dec 17 06:33:18 ispc saslauthd[1839302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:33:18 ispc saslauthd[1839302]: do_auth : auth failure: [user=johnson] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:33:28 ispc sshd[1839303]: Invalid user ziplines from 211.45.175.153 Dec 17 06:33:53 ispc sshd[1839318]: Invalid user ftp from 203.146.21.153 Dec 17 06:33:58 ispc sshd[1839326]: Invalid user blceu from 202.46.29.79 Dec 17 06:34:01 ispc CRON[1839332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:34:02 ispc CRON[1839332]: pam_unix(cron:session): session closed for user root Dec 17 06:35:01 ispc CRON[1839371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:35:01 ispc CRON[1839372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:35:01 ispc CRON[1839373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:35:01 ispc CRON[1839374]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:35:01 ispc CRON[1839372]: pam_unix(cron:session): session closed for user root Dec 17 06:35:01 ispc CRON[1839374]: pam_unix(cron:session): session closed for user getmail Dec 17 06:35:01 ispc CRON[1839373]: pam_unix(cron:session): session closed for user root Dec 17 06:35:01 ispc CRON[1839371]: pam_unix(cron:session): session closed for user root Dec 17 06:35:26 ispc postfix/smtpd[1839456]: sql auxprop plugin using mysql engine Dec 17 06:36:01 ispc CRON[1839471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:36:02 ispc CRON[1839471]: pam_unix(cron:session): session closed for user root Dec 17 06:36:27 ispc CRON[1838373]: pam_unix(cron:session): session closed for user root Dec 17 06:37:01 ispc CRON[1839498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:37:07 ispc CRON[1839498]: pam_unix(cron:session): session closed for user root Dec 17 06:38:01 ispc CRON[1839528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:38:04 ispc saslauthd[1839540]: pam_mysql - SELECT returned no result. Dec 17 06:38:04 ispc saslauthd[1839540]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:38:04 ispc saslauthd[1839540]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:38:12 ispc postfix/smtpd[1839541]: sql auxprop plugin using mysql engine Dec 17 06:38:40 ispc saslauthd[1839557]: pam_mysql - SELECT returned no result. Dec 17 06:38:40 ispc saslauthd[1839557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:38:40 ispc saslauthd[1839557]: do_auth : auth failure: [user=desk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:39:01 ispc CRON[1839567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:39:01 ispc CRON[1839568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:39:01 ispc CRON[1839567]: pam_unix(cron:session): session closed for user root Dec 17 06:39:01 ispc CRON[1839568]: pam_unix(cron:session): session closed for user root Dec 17 06:39:17 ispc sshd[1839598]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 06:39:17 ispc sshd[1839598]: Invalid user admin from 157.245.115.125 Dec 17 06:40:01 ispc CRON[1839624]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:40:01 ispc CRON[1839623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:40:01 ispc CRON[1839625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:40:01 ispc CRON[1839622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:40:01 ispc CRON[1839626]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:40:01 ispc CRON[1839624]: pam_unix(cron:session): session closed for user www-data Dec 17 06:40:01 ispc CRON[1839623]: pam_unix(cron:session): session closed for user root Dec 17 06:40:01 ispc CRON[1839626]: pam_unix(cron:session): session closed for user getmail Dec 17 06:40:02 ispc CRON[1839625]: pam_unix(cron:session): session closed for user root Dec 17 06:40:02 ispc CRON[1839622]: pam_unix(cron:session): session closed for user root Dec 17 06:41:01 ispc CRON[1839726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:41:02 ispc CRON[1839726]: pam_unix(cron:session): session closed for user root Dec 17 06:42:01 ispc CRON[1839762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:42:01 ispc CRON[1839762]: pam_unix(cron:session): session closed for user root Dec 17 06:42:27 ispc sshd[1839786]: Did not receive identification string from 192.227.134.84 Dec 17 06:43:01 ispc CRON[1839810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:43:02 ispc CRON[1839810]: pam_unix(cron:session): session closed for user root Dec 17 06:44:01 ispc CRON[1839848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:44:01 ispc CRON[1839848]: pam_unix(cron:session): session closed for user root Dec 17 06:45:01 ispc CRON[1839889]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:45:01 ispc CRON[1839887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:45:01 ispc CRON[1839886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:45:01 ispc CRON[1839888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:45:01 ispc CRON[1839887]: pam_unix(cron:session): session closed for user root Dec 17 06:45:01 ispc CRON[1839889]: pam_unix(cron:session): session closed for user getmail Dec 17 06:45:02 ispc CRON[1839888]: pam_unix(cron:session): session closed for user root Dec 17 06:45:02 ispc CRON[1839886]: pam_unix(cron:session): session closed for user root Dec 17 06:46:01 ispc CRON[1839987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:46:01 ispc CRON[1839987]: pam_unix(cron:session): session closed for user root Dec 17 06:46:48 ispc sshd[1840018]: Invalid user matlbula from 175.125.95.234 Dec 17 06:47:01 ispc CRON[1840029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:47:02 ispc CRON[1840029]: pam_unix(cron:session): session closed for user root Dec 17 06:47:44 ispc postfix/smtpd[1840057]: sql auxprop plugin using mysql engine Dec 17 06:47:45 ispc saslauthd[1840060]: pam_mysql - SELECT returned no result. Dec 17 06:47:45 ispc saslauthd[1840060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:47:45 ispc saslauthd[1840060]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:48:01 ispc CRON[1840077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:48:01 ispc CRON[1840077]: pam_unix(cron:session): session closed for user root Dec 17 06:48:31 ispc saslauthd[1840104]: pam_mysql - SELECT returned no result. Dec 17 06:48:31 ispc saslauthd[1840104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 06:48:31 ispc saslauthd[1840104]: do_auth : auth failure: [user=kermit] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 06:49:01 ispc CRON[1840117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:49:01 ispc CRON[1840117]: pam_unix(cron:session): session closed for user root Dec 17 06:50:01 ispc CRON[1840157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:50:01 ispc CRON[1840158]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 06:50:01 ispc CRON[1840156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:50:01 ispc CRON[1840159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:50:01 ispc CRON[1840160]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:50:01 ispc CRON[1840157]: pam_unix(cron:session): session closed for user root Dec 17 06:50:01 ispc CRON[1840158]: pam_unix(cron:session): session closed for user www-data Dec 17 06:50:01 ispc CRON[1840160]: pam_unix(cron:session): session closed for user getmail Dec 17 06:50:02 ispc CRON[1840156]: pam_unix(cron:session): session closed for user root Dec 17 06:50:02 ispc CRON[1840159]: pam_unix(cron:session): session closed for user root Dec 17 06:51:01 ispc CRON[1840261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:51:01 ispc CRON[1840261]: pam_unix(cron:session): session closed for user root Dec 17 06:52:01 ispc CRON[1840297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:52:01 ispc CRON[1840296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:52:01 ispc CRON[1840297]: pam_unix(cron:session): session closed for user root Dec 17 06:52:48 ispc sshd[1840336]: Invalid user blceu from 49.247.24.89 Dec 17 06:53:01 ispc CRON[1840349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:53:02 ispc CRON[1840349]: pam_unix(cron:session): session closed for user root Dec 17 06:53:21 ispc sshd[1840371]: Invalid user martof from 49.247.24.89 Dec 17 06:54:01 ispc CRON[1840390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:54:01 ispc CRON[1840390]: pam_unix(cron:session): session closed for user root Dec 17 06:55:01 ispc CRON[1840426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:55:01 ispc CRON[1840427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:55:01 ispc CRON[1840427]: pam_unix(cron:session): session closed for user root Dec 17 06:55:01 ispc CRON[1840432]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 06:55:01 ispc CRON[1840431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:55:01 ispc CRON[1840432]: pam_unix(cron:session): session closed for user getmail Dec 17 06:55:01 ispc CRON[1840426]: pam_unix(cron:session): session closed for user root Dec 17 06:55:01 ispc CRON[1840431]: pam_unix(cron:session): session closed for user root Dec 17 06:55:18 ispc CRON[1840296]: pam_unix(cron:session): session closed for user root Dec 17 06:56:01 ispc CRON[1840529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:56:02 ispc CRON[1840529]: pam_unix(cron:session): session closed for user root Dec 17 06:56:47 ispc sshd[1840560]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 06:57:01 ispc CRON[1840566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:57:01 ispc CRON[1840566]: pam_unix(cron:session): session closed for user root Dec 17 06:57:14 ispc postfix/smtpd[1840582]: sql auxprop plugin using mysql engine Dec 17 06:57:37 ispc sshd[1840593]: Invalid user martof from 202.46.29.79 Dec 17 06:58:02 ispc CRON[1840617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:58:02 ispc CRON[1840617]: pam_unix(cron:session): session closed for user root Dec 17 06:58:22 ispc postfix/smtpd[1840636]: sql auxprop plugin using mysql engine Dec 17 06:58:22 ispc CRON[1839528]: pam_unix(cron:session): session closed for user root Dec 17 06:59:02 ispc CRON[1840642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 06:59:07 ispc CRON[1840642]: pam_unix(cron:session): session closed for user root Dec 17 07:00:01 ispc CRON[1840657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:00:01 ispc CRON[1840654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:00:01 ispc CRON[1840658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:00:01 ispc CRON[1840659]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:00:01 ispc CRON[1840655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:00:01 ispc CRON[1840656]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:00:01 ispc CRON[1840656]: pam_unix(cron:session): session closed for user www-data Dec 17 07:00:01 ispc CRON[1840655]: pam_unix(cron:session): session closed for user root Dec 17 07:00:01 ispc CRON[1840659]: pam_unix(cron:session): session closed for user getmail Dec 17 07:00:02 ispc CRON[1840654]: pam_unix(cron:session): session closed for user root Dec 17 07:00:02 ispc CRON[1840657]: pam_unix(cron:session): session closed for user root Dec 17 07:00:19 ispc sshd[1840822]: Invalid user martof from 211.45.175.153 Dec 17 07:00:39 ispc saslauthd[1840834]: pam_mysql - SELECT returned no result. Dec 17 07:00:39 ispc saslauthd[1840834]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:00:39 ispc saslauthd[1840834]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:01:01 ispc CRON[1840843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:01:02 ispc CRON[1840843]: pam_unix(cron:session): session closed for user root Dec 17 07:02:01 ispc CRON[1840880]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 07:02:01 ispc CRON[1840881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:02:03 ispc CRON[1840881]: pam_unix(cron:session): session closed for user root Dec 17 07:03:01 ispc CRON[1841801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:03:01 ispc CRON[1841801]: pam_unix(cron:session): session closed for user root Dec 17 07:03:10 ispc CRON[1840880]: pam_unix(cron:session): session closed for user logcheck Dec 17 07:03:18 ispc postfix/smtpd[1841952]: sql auxprop plugin using mysql engine Dec 17 07:03:35 ispc postfix/smtpd[1841967]: sql auxprop plugin using mysql engine Dec 17 07:03:36 ispc saslauthd[1841969]: pam_mysql - SELECT returned no result. Dec 17 07:03:36 ispc saslauthd[1841969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:03:36 ispc saslauthd[1841969]: do_auth : auth failure: [user=lansweeperuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:04:01 ispc CRON[1841982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:04:02 ispc CRON[1841982]: pam_unix(cron:session): session closed for user root Dec 17 07:05:01 ispc CRON[1842017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:05:01 ispc CRON[1842018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:05:01 ispc CRON[1842019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:05:01 ispc CRON[1842020]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:05:01 ispc CRON[1842018]: pam_unix(cron:session): session closed for user root Dec 17 07:05:01 ispc CRON[1842020]: pam_unix(cron:session): session closed for user getmail Dec 17 07:05:02 ispc CRON[1842019]: pam_unix(cron:session): session closed for user root Dec 17 07:05:02 ispc CRON[1842017]: pam_unix(cron:session): session closed for user root Dec 17 07:06:01 ispc CRON[1842118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:06:02 ispc CRON[1842118]: pam_unix(cron:session): session closed for user root Dec 17 07:07:01 ispc CRON[1842155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:07:02 ispc CRON[1842155]: pam_unix(cron:session): session closed for user root Dec 17 07:08:01 ispc CRON[1842197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:08:03 ispc CRON[1842197]: pam_unix(cron:session): session closed for user root Dec 17 07:09:01 ispc CRON[1842236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:09:01 ispc CRON[1842237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:09:01 ispc CRON[1842236]: pam_unix(cron:session): session closed for user root Dec 17 07:09:02 ispc CRON[1842237]: pam_unix(cron:session): session closed for user root Dec 17 07:10:01 ispc CRON[1842282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:10:01 ispc CRON[1842283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:10:01 ispc CRON[1842284]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:10:01 ispc CRON[1842285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:10:01 ispc CRON[1842286]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:10:01 ispc CRON[1842283]: pam_unix(cron:session): session closed for user root Dec 17 07:10:01 ispc CRON[1842284]: pam_unix(cron:session): session closed for user www-data Dec 17 07:10:01 ispc CRON[1842286]: pam_unix(cron:session): session closed for user getmail Dec 17 07:10:02 ispc CRON[1842285]: pam_unix(cron:session): session closed for user root Dec 17 07:10:02 ispc CRON[1842282]: pam_unix(cron:session): session closed for user root Dec 17 07:11:01 ispc CRON[1842387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:11:02 ispc CRON[1842387]: pam_unix(cron:session): session closed for user root Dec 17 07:11:20 ispc sshd[1842407]: Invalid user martof from 27.254.144.183 Dec 17 07:12:01 ispc CRON[1842426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:12:02 ispc CRON[1842426]: pam_unix(cron:session): session closed for user root Dec 17 07:12:04 ispc postfix/smtpd[1842437]: sql auxprop plugin using mysql engine Dec 17 07:12:04 ispc saslauthd[1842440]: pam_mysql - SELECT returned no result. Dec 17 07:12:04 ispc saslauthd[1842440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:12:04 ispc saslauthd[1842440]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:12:28 ispc saslauthd[1842449]: pam_mysql - SELECT returned no result. Dec 17 07:12:28 ispc saslauthd[1842449]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:12:28 ispc saslauthd[1842449]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:13:01 ispc CRON[1842480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:13:02 ispc CRON[1842480]: pam_unix(cron:session): session closed for user root Dec 17 07:13:05 ispc postfix/smtpd[1842491]: sql auxprop plugin using mysql engine Dec 17 07:14:01 ispc CRON[1842517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:14:02 ispc CRON[1842517]: pam_unix(cron:session): session closed for user root Dec 17 07:15:01 ispc CRON[1842555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:15:01 ispc CRON[1842556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:15:01 ispc CRON[1842557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:15:01 ispc CRON[1842558]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:15:01 ispc CRON[1842556]: pam_unix(cron:session): session closed for user root Dec 17 07:15:01 ispc CRON[1842558]: pam_unix(cron:session): session closed for user getmail Dec 17 07:15:01 ispc sshd[1842553]: Invalid user ziplines from 202.46.29.79 Dec 17 07:15:02 ispc CRON[1842557]: pam_unix(cron:session): session closed for user root Dec 17 07:15:03 ispc CRON[1842555]: pam_unix(cron:session): session closed for user root Dec 17 07:16:01 ispc CRON[1842659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:16:02 ispc CRON[1842659]: pam_unix(cron:session): session closed for user root Dec 17 07:16:52 ispc sshd[1842693]: Invalid user from 165.245.143.120 Dec 17 07:17:01 ispc CRON[1842699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:17:02 ispc CRON[1842699]: pam_unix(cron:session): session closed for user root Dec 17 07:18:01 ispc CRON[1842750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:18:02 ispc CRON[1842750]: pam_unix(cron:session): session closed for user root Dec 17 07:18:32 ispc sshd[1842769]: Invalid user ziplines from 49.247.24.89 Dec 17 07:18:35 ispc postfix/smtpd[1842775]: sql auxprop plugin using mysql engine Dec 17 07:18:36 ispc saslauthd[1842778]: pam_mysql - SELECT returned no result. Dec 17 07:18:36 ispc saslauthd[1842778]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:18:36 ispc saslauthd[1842778]: do_auth : auth failure: [user=lexar] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:19:01 ispc CRON[1842787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:19:03 ispc CRON[1842787]: pam_unix(cron:session): session closed for user root Dec 17 07:20:01 ispc CRON[1842824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:20:01 ispc CRON[1842825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:20:01 ispc CRON[1842826]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:20:01 ispc CRON[1842827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:20:01 ispc CRON[1842828]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:20:01 ispc CRON[1842825]: pam_unix(cron:session): session closed for user root Dec 17 07:20:01 ispc CRON[1842826]: pam_unix(cron:session): session closed for user www-data Dec 17 07:20:01 ispc CRON[1842828]: pam_unix(cron:session): session closed for user getmail Dec 17 07:20:02 ispc CRON[1842827]: pam_unix(cron:session): session closed for user root Dec 17 07:20:02 ispc CRON[1842824]: pam_unix(cron:session): session closed for user root Dec 17 07:20:28 ispc postfix/smtpd[1842913]: sql auxprop plugin using mysql engine Dec 17 07:20:40 ispc CRON[1840658]: pam_unix(cron:session): session closed for user root Dec 17 07:20:48 ispc postfix/smtpd[1842962]: sql auxprop plugin using mysql engine Dec 17 07:21:01 ispc CRON[1842965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:21:01 ispc CRON[1842966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:21:01 ispc CRON[1842965]: pam_unix(cron:session): session closed for user root Dec 17 07:21:03 ispc sshd[1842977]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 07:21:05 ispc sshd[1842979]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 07:21:05 ispc sshd[1842979]: Invalid user klape from 189.89.20.45 Dec 17 07:21:07 ispc CRON[1842966]: pam_unix(cron:session): session closed for user root Dec 17 07:21:07 ispc sshd[1842981]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 07:21:07 ispc sshd[1842981]: Invalid user ubuntu from 189.89.20.45 Dec 17 07:22:01 ispc CRON[1842988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:22:02 ispc saslauthd[1842995]: pam_mysql - SELECT returned no result. Dec 17 07:22:02 ispc saslauthd[1842995]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:22:02 ispc saslauthd[1842995]: do_auth : auth failure: [user=admin1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 07:23:01 ispc CRON[1843031]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:23:02 ispc CRON[1843031]: pam_unix(cron:session): session closed for user root Dec 17 07:24:01 ispc CRON[1843066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:24:02 ispc CRON[1843066]: pam_unix(cron:session): session closed for user root Dec 17 07:24:05 ispc postfix/smtpd[1843077]: sql auxprop plugin using mysql engine Dec 17 07:24:05 ispc saslauthd[1843079]: pam_mysql - SELECT returned no result. Dec 17 07:24:05 ispc saslauthd[1843079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:24:05 ispc saslauthd[1843079]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:25:01 ispc CRON[1843111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:25:01 ispc CRON[1843112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:25:01 ispc CRON[1843113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:25:01 ispc CRON[1843114]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:25:01 ispc CRON[1843112]: pam_unix(cron:session): session closed for user root Dec 17 07:25:01 ispc CRON[1843114]: pam_unix(cron:session): session closed for user getmail Dec 17 07:25:02 ispc CRON[1843113]: pam_unix(cron:session): session closed for user root Dec 17 07:25:02 ispc CRON[1843111]: pam_unix(cron:session): session closed for user root Dec 17 07:26:01 ispc CRON[1843213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:26:02 ispc sshd[1843212]: Invalid user ziplines from 167.99.241.111 Dec 17 07:26:02 ispc CRON[1843213]: pam_unix(cron:session): session closed for user root Dec 17 07:27:01 ispc CRON[1843252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:27:02 ispc CRON[1843252]: pam_unix(cron:session): session closed for user root Dec 17 07:27:03 ispc sshd[1843246]: Invalid user blceu from 103.100.209.172 Dec 17 07:28:01 ispc CRON[1843308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:28:02 ispc CRON[1843308]: pam_unix(cron:session): session closed for user root Dec 17 07:29:01 ispc CRON[1843339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:29:02 ispc CRON[1843339]: pam_unix(cron:session): session closed for user root Dec 17 07:30:01 ispc CRON[1843382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:30:01 ispc CRON[1843383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:30:01 ispc CRON[1843384]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:30:01 ispc CRON[1843385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:30:01 ispc CRON[1843386]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:30:01 ispc CRON[1843383]: pam_unix(cron:session): session closed for user root Dec 17 07:30:01 ispc CRON[1843384]: pam_unix(cron:session): session closed for user www-data Dec 17 07:30:01 ispc CRON[1843386]: pam_unix(cron:session): session closed for user getmail Dec 17 07:30:02 ispc CRON[1843385]: pam_unix(cron:session): session closed for user root Dec 17 07:30:03 ispc CRON[1843382]: pam_unix(cron:session): session closed for user root Dec 17 07:31:01 ispc CRON[1843487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:31:02 ispc CRON[1843487]: pam_unix(cron:session): session closed for user root Dec 17 07:31:02 ispc postfix/smtpd[1843500]: sql auxprop plugin using mysql engine Dec 17 07:31:10 ispc postfix/smtpd[1843513]: sql auxprop plugin using mysql engine Dec 17 07:32:01 ispc postfix/smtpd[1843545]: sql auxprop plugin using mysql engine Dec 17 07:32:01 ispc CRON[1843547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:32:02 ispc CRON[1843547]: pam_unix(cron:session): session closed for user root Dec 17 07:33:01 ispc CRON[1843589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:33:02 ispc CRON[1843589]: pam_unix(cron:session): session closed for user root Dec 17 07:33:46 ispc postfix/smtpd[1843616]: sql auxprop plugin using mysql engine Dec 17 07:33:48 ispc saslauthd[1843618]: pam_mysql - SELECT returned no result. Dec 17 07:33:48 ispc saslauthd[1843618]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:33:48 ispc saslauthd[1843618]: do_auth : auth failure: [user=locate] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:34:01 ispc CRON[1843623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:34:02 ispc CRON[1843623]: pam_unix(cron:session): session closed for user root Dec 17 07:35:01 ispc CRON[1843659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:35:01 ispc CRON[1843660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:35:01 ispc CRON[1843661]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:35:01 ispc CRON[1843658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:35:01 ispc CRON[1843659]: pam_unix(cron:session): session closed for user root Dec 17 07:35:01 ispc CRON[1843661]: pam_unix(cron:session): session closed for user getmail Dec 17 07:35:02 ispc CRON[1843658]: pam_unix(cron:session): session closed for user root Dec 17 07:35:02 ispc CRON[1843660]: pam_unix(cron:session): session closed for user root Dec 17 07:36:01 ispc CRON[1843761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:36:02 ispc CRON[1843761]: pam_unix(cron:session): session closed for user root Dec 17 07:36:28 ispc postfix/smtpd[1843786]: sql auxprop plugin using mysql engine Dec 17 07:36:28 ispc saslauthd[1843788]: pam_mysql - SELECT returned no result. Dec 17 07:36:28 ispc saslauthd[1843788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:36:28 ispc saslauthd[1843788]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:36:36 ispc sshd[1843791]: Invalid user klape from 103.164.20.29 Dec 17 07:36:37 ispc sshd[1843793]: Invalid user ubuntu from 103.164.20.29 Dec 17 07:37:01 ispc CRON[1843807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:37:02 ispc CRON[1843807]: pam_unix(cron:session): session closed for user root Dec 17 07:37:04 ispc sshd[1843818]: Invalid user blceu from 211.45.175.153 Dec 17 07:37:41 ispc sshd[1843836]: Did not receive identification string from 192.227.134.84 Dec 17 07:38:01 ispc CRON[1843860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:38:03 ispc CRON[1843860]: pam_unix(cron:session): session closed for user root Dec 17 07:39:01 ispc CRON[1843897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:39:01 ispc CRON[1843898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:39:01 ispc CRON[1843897]: pam_unix(cron:session): session closed for user root Dec 17 07:39:02 ispc CRON[1843898]: pam_unix(cron:session): session closed for user root Dec 17 07:40:01 ispc CRON[1843945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:40:01 ispc CRON[1843947]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:40:01 ispc CRON[1843946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:40:01 ispc CRON[1843948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:40:01 ispc CRON[1843949]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:40:01 ispc CRON[1843947]: pam_unix(cron:session): session closed for user www-data Dec 17 07:40:01 ispc CRON[1843946]: pam_unix(cron:session): session closed for user root Dec 17 07:40:01 ispc CRON[1843949]: pam_unix(cron:session): session closed for user getmail Dec 17 07:40:02 ispc CRON[1843945]: pam_unix(cron:session): session closed for user root Dec 17 07:40:02 ispc CRON[1843948]: pam_unix(cron:session): session closed for user root Dec 17 07:40:43 ispc postfix/smtpd[1844044]: sql auxprop plugin using mysql engine Dec 17 07:40:44 ispc saslauthd[1844047]: pam_mysql - SELECT returned no result. Dec 17 07:40:44 ispc saslauthd[1844047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:40:44 ispc saslauthd[1844047]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:41:01 ispc CRON[1844058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:41:02 ispc CRON[1844058]: pam_unix(cron:session): session closed for user root Dec 17 07:42:01 ispc CRON[1844094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:42:02 ispc CRON[1844094]: pam_unix(cron:session): session closed for user root Dec 17 07:42:41 ispc postfix/smtpd[1844119]: sql auxprop plugin using mysql engine Dec 17 07:42:41 ispc CRON[1842988]: pam_unix(cron:session): session closed for user root Dec 17 07:43:01 ispc CRON[1844133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:43:07 ispc CRON[1844133]: pam_unix(cron:session): session closed for user root Dec 17 07:43:18 ispc postfix/smtpd[1844146]: sql auxprop plugin using mysql engine Dec 17 07:44:01 ispc CRON[1844161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:45:01 ispc CRON[1844193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:45:01 ispc CRON[1844194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:45:01 ispc CRON[1844195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:45:01 ispc CRON[1844196]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:45:02 ispc CRON[1844194]: pam_unix(cron:session): session closed for user root Dec 17 07:45:02 ispc CRON[1844196]: pam_unix(cron:session): session closed for user getmail Dec 17 07:45:02 ispc CRON[1844195]: pam_unix(cron:session): session closed for user root Dec 17 07:45:03 ispc CRON[1844193]: pam_unix(cron:session): session closed for user root Dec 17 07:45:36 ispc postfix/smtpd[1844288]: sql auxprop plugin using mysql engine Dec 17 07:45:36 ispc saslauthd[1844290]: pam_mysql - SELECT returned no result. Dec 17 07:45:36 ispc saslauthd[1844290]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:45:36 ispc saslauthd[1844290]: do_auth : auth failure: [user=copier] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:46:01 ispc CRON[1844299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:46:02 ispc CRON[1844299]: pam_unix(cron:session): session closed for user root Dec 17 07:46:36 ispc saslauthd[1844324]: pam_mysql - SELECT returned no result. Dec 17 07:46:36 ispc saslauthd[1844324]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:46:36 ispc saslauthd[1844324]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:47:01 ispc CRON[1844341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:47:01 ispc CRON[1844341]: pam_unix(cron:session): session closed for user root Dec 17 07:47:51 ispc sshd[1844357]: Invalid user webroot from 36.37.244.244 Dec 17 07:48:01 ispc CRON[1844388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:48:02 ispc CRON[1844388]: pam_unix(cron:session): session closed for user root Dec 17 07:48:59 ispc postfix/smtpd[1844419]: sql auxprop plugin using mysql engine Dec 17 07:49:01 ispc saslauthd[1844421]: pam_mysql - SELECT returned no result. Dec 17 07:49:01 ispc saslauthd[1844421]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:49:01 ispc saslauthd[1844421]: do_auth : auth failure: [user=login] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:49:01 ispc CRON[1844422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:49:02 ispc CRON[1844422]: pam_unix(cron:session): session closed for user root Dec 17 07:50:01 ispc CRON[1844458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:50:01 ispc CRON[1844459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:50:01 ispc CRON[1844460]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 07:50:01 ispc CRON[1844461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:50:01 ispc CRON[1844462]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:50:01 ispc CRON[1844459]: pam_unix(cron:session): session closed for user root Dec 17 07:50:01 ispc CRON[1844460]: pam_unix(cron:session): session closed for user www-data Dec 17 07:50:01 ispc CRON[1844462]: pam_unix(cron:session): session closed for user getmail Dec 17 07:50:02 ispc CRON[1844461]: pam_unix(cron:session): session closed for user root Dec 17 07:50:02 ispc CRON[1844458]: pam_unix(cron:session): session closed for user root Dec 17 07:50:34 ispc sshd[1844558]: Did not receive identification string from 161.35.86.90 Dec 17 07:51:01 ispc CRON[1844573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:51:02 ispc CRON[1844573]: pam_unix(cron:session): session closed for user root Dec 17 07:52:01 ispc CRON[1844611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:52:02 ispc CRON[1844611]: pam_unix(cron:session): session closed for user root Dec 17 07:52:50 ispc sshd[1844652]: Invalid user blceu from 167.99.241.111 Dec 17 07:53:01 ispc CRON[1844658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:53:02 ispc CRON[1844658]: pam_unix(cron:session): session closed for user root Dec 17 07:53:52 ispc postfix/smtpd[1844691]: sql auxprop plugin using mysql engine Dec 17 07:54:01 ispc CRON[1844698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:54:02 ispc CRON[1844698]: pam_unix(cron:session): session closed for user root Dec 17 07:55:01 ispc CRON[1844737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:55:01 ispc CRON[1844738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:55:01 ispc CRON[1844739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:55:01 ispc CRON[1844740]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 07:55:01 ispc CRON[1844738]: pam_unix(cron:session): session closed for user root Dec 17 07:55:01 ispc CRON[1844740]: pam_unix(cron:session): session closed for user getmail Dec 17 07:55:02 ispc CRON[1844739]: pam_unix(cron:session): session closed for user root Dec 17 07:55:03 ispc CRON[1844737]: pam_unix(cron:session): session closed for user root Dec 17 07:55:46 ispc sshd[1844832]: Invalid user hyundaicz from 114.246.241.87 Dec 17 07:56:01 ispc CRON[1844838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:56:02 ispc CRON[1844838]: pam_unix(cron:session): session closed for user root Dec 17 07:56:42 ispc sshd[1844871]: Invalid user martof from 175.125.92.77 Dec 17 07:57:01 ispc CRON[1844883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:57:02 ispc CRON[1844883]: pam_unix(cron:session): session closed for user root Dec 17 07:57:06 ispc postfix/smtpd[1844900]: sql auxprop plugin using mysql engine Dec 17 07:57:07 ispc saslauthd[1844902]: pam_mysql - SELECT returned no result. Dec 17 07:57:07 ispc saslauthd[1844902]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 07:57:07 ispc saslauthd[1844902]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 07:58:01 ispc CRON[1844941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:58:02 ispc CRON[1844941]: pam_unix(cron:session): session closed for user root Dec 17 07:58:27 ispc sshd[1844961]: Did not receive identification string from 45.140.17.97 Dec 17 07:59:01 ispc CRON[1844982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 07:59:01 ispc CRON[1844982]: pam_unix(cron:session): session closed for user root Dec 17 08:00:01 ispc CRON[1845020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:00:01 ispc CRON[1845021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:00:01 ispc CRON[1845022]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:00:01 ispc CRON[1845023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:00:01 ispc CRON[1845024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:00:01 ispc CRON[1845025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:00:01 ispc CRON[1845026]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:00:01 ispc CRON[1845022]: pam_unix(cron:session): session closed for user www-data Dec 17 08:00:01 ispc CRON[1845021]: pam_unix(cron:session): session closed for user root Dec 17 08:00:01 ispc CRON[1845024]: pam_unix(cron:session): session closed for user root Dec 17 08:00:01 ispc CRON[1845026]: pam_unix(cron:session): session closed for user getmail Dec 17 08:00:02 ispc CRON[1845025]: pam_unix(cron:session): session closed for user root Dec 17 08:00:02 ispc CRON[1845023]: pam_unix(cron:session): session closed for user root Dec 17 08:00:02 ispc CRON[1845020]: pam_unix(cron:session): session closed for user root Dec 17 08:00:48 ispc postfix/smtpd[1845202]: sql auxprop plugin using mysql engine Dec 17 08:01:01 ispc CRON[1845208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:01:02 ispc CRON[1845208]: pam_unix(cron:session): session closed for user root Dec 17 08:02:01 ispc CRON[1845247]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 08:02:01 ispc CRON[1845248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:02:02 ispc CRON[1845248]: pam_unix(cron:session): session closed for user root Dec 17 08:02:49 ispc sshd[1845986]: Invalid user klape from 36.50.177.171 Dec 17 08:02:50 ispc sshd[1846004]: Invalid user ubuntu from 36.50.177.171 Dec 17 08:03:01 ispc CRON[1846085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:03:02 ispc CRON[1846085]: pam_unix(cron:session): session closed for user root Dec 17 08:03:42 ispc CRON[1845247]: pam_unix(cron:session): session closed for user logcheck Dec 17 08:03:48 ispc postfix/smtpd[1846349]: sql auxprop plugin using mysql engine Dec 17 08:04:01 ispc CRON[1846359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:04:03 ispc CRON[1846359]: pam_unix(cron:session): session closed for user root Dec 17 08:04:12 ispc postfix/smtpd[1846377]: sql auxprop plugin using mysql engine Dec 17 08:04:13 ispc saslauthd[1846379]: pam_mysql - SELECT returned no result. Dec 17 08:04:13 ispc saslauthd[1846379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:04:13 ispc saslauthd[1846379]: do_auth : auth failure: [user=lp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:04:20 ispc sshd[1846384]: Invalid user tshombeknife from 114.246.241.87 Dec 17 08:04:39 ispc CRON[1844161]: pam_unix(cron:session): session closed for user root Dec 17 08:05:01 ispc CRON[1846398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:05:01 ispc CRON[1846399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:05:01 ispc CRON[1846401]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:05:01 ispc CRON[1846400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:05:01 ispc CRON[1846399]: pam_unix(cron:session): session closed for user root Dec 17 08:05:01 ispc CRON[1846401]: pam_unix(cron:session): session closed for user getmail Dec 17 08:05:02 ispc CRON[1846398]: pam_unix(cron:session): session closed for user root Dec 17 08:05:07 ispc CRON[1846400]: pam_unix(cron:session): session closed for user root Dec 17 08:05:45 ispc sshd[1846481]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 20.83.32.170 Dec 17 08:06:01 ispc CRON[1846482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:07:01 ispc CRON[1846519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:07:02 ispc CRON[1846519]: pam_unix(cron:session): session closed for user root Dec 17 08:07:11 ispc sshd[1846535]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 08:07:11 ispc sshd[1846535]: Invalid user martof from 193.110.157.47 Dec 17 08:07:26 ispc sshd[1846549]: Invalid user martof from 119.205.233.162 Dec 17 08:08:01 ispc CRON[1846573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:08:02 ispc CRON[1846573]: pam_unix(cron:session): session closed for user root Dec 17 08:08:31 ispc postfix/smtpd[1846605]: sql auxprop plugin using mysql engine Dec 17 08:08:32 ispc saslauthd[1846606]: pam_mysql - SELECT returned no result. Dec 17 08:08:32 ispc saslauthd[1846606]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:08:32 ispc saslauthd[1846606]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:09:01 ispc CRON[1846621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:09:01 ispc CRON[1846622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:09:01 ispc CRON[1846621]: pam_unix(cron:session): session closed for user root Dec 17 08:09:01 ispc sshd[1846560]: Invalid user ziplines from 161.35.218.223 Dec 17 08:09:02 ispc CRON[1846622]: pam_unix(cron:session): session closed for user root Dec 17 08:10:01 ispc CRON[1846669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:10:01 ispc CRON[1846670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:10:01 ispc CRON[1846671]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:10:01 ispc CRON[1846673]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:10:01 ispc CRON[1846672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:10:01 ispc CRON[1846670]: pam_unix(cron:session): session closed for user root Dec 17 08:10:01 ispc CRON[1846671]: pam_unix(cron:session): session closed for user www-data Dec 17 08:10:01 ispc CRON[1846673]: pam_unix(cron:session): session closed for user getmail Dec 17 08:10:01 ispc CRON[1846672]: pam_unix(cron:session): session closed for user root Dec 17 08:10:01 ispc CRON[1846669]: pam_unix(cron:session): session closed for user root Dec 17 08:10:25 ispc postfix/smtpd[1846757]: sql auxprop plugin using mysql engine Dec 17 08:11:00 ispc sshd[1846775]: Invalid user lanovacentra from 221.156.137.103 Dec 17 08:11:01 ispc CRON[1846777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:11:02 ispc CRON[1846777]: pam_unix(cron:session): session closed for user root Dec 17 08:11:32 ispc sshd[1846802]: Invalid user blceu from 202.46.29.79 Dec 17 08:11:50 ispc sshd[1846814]: Invalid user admin from 161.35.86.90 Dec 17 08:12:01 ispc CRON[1846820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:12:02 ispc CRON[1846820]: pam_unix(cron:session): session closed for user root Dec 17 08:12:34 ispc sshd[1846846]: Invalid user admin from 161.35.86.90 Dec 17 08:13:01 ispc CRON[1846869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:13:02 ispc CRON[1846869]: pam_unix(cron:session): session closed for user root Dec 17 08:13:18 ispc sshd[1846884]: Invalid user admin from 161.35.86.90 Dec 17 08:14:01 ispc CRON[1846910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:14:02 ispc CRON[1846910]: pam_unix(cron:session): session closed for user root Dec 17 08:14:03 ispc sshd[1846921]: Invalid user admin from 161.35.86.90 Dec 17 08:14:46 ispc sshd[1846943]: Invalid user admin from 161.35.86.90 Dec 17 08:15:01 ispc CRON[1846950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:15:01 ispc CRON[1846951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:15:01 ispc CRON[1846952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:15:01 ispc CRON[1846953]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:15:01 ispc CRON[1846951]: pam_unix(cron:session): session closed for user root Dec 17 08:15:01 ispc CRON[1846953]: pam_unix(cron:session): session closed for user getmail Dec 17 08:15:02 ispc CRON[1846952]: pam_unix(cron:session): session closed for user root Dec 17 08:15:04 ispc CRON[1846950]: pam_unix(cron:session): session closed for user root Dec 17 08:15:26 ispc postfix/smtpd[1847040]: sql auxprop plugin using mysql engine Dec 17 08:15:30 ispc sshd[1847047]: Invalid user admin from 161.35.86.90 Dec 17 08:16:01 ispc CRON[1847068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:16:02 ispc CRON[1847068]: pam_unix(cron:session): session closed for user root Dec 17 08:16:48 ispc sshd[1847100]: Invalid user upload from 45.134.26.201 Dec 17 08:16:48 ispc sshd[1847102]: Invalid user anonymous from 45.134.26.201 Dec 17 08:16:49 ispc sshd[1847108]: Invalid user mongodb from 45.134.26.201 Dec 17 08:16:51 ispc sshd[1847114]: Invalid user temp from 45.134.26.201 Dec 17 08:16:51 ispc sshd[1847116]: Invalid user apache from 45.134.26.201 Dec 17 08:16:52 ispc sshd[1847118]: Invalid user debian from 45.134.26.201 Dec 17 08:16:54 ispc sshd[1847124]: Invalid user admin from 45.134.26.201 Dec 17 08:17:01 ispc CRON[1847138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:17:02 ispc CRON[1847138]: pam_unix(cron:session): session closed for user root Dec 17 08:17:03 ispc sshd[1847136]: Invalid user pronajemplosin from 120.48.125.223 Dec 17 08:18:01 ispc CRON[1847185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:18:02 ispc CRON[1847185]: pam_unix(cron:session): session closed for user root Dec 17 08:19:01 ispc CRON[1847218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:19:02 ispc CRON[1847218]: pam_unix(cron:session): session closed for user root Dec 17 08:19:03 ispc postfix/smtpd[1847233]: sql auxprop plugin using mysql engine Dec 17 08:19:03 ispc saslauthd[1847236]: pam_mysql - SELECT returned no result. Dec 17 08:19:03 ispc saslauthd[1847236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:19:03 ispc saslauthd[1847236]: do_auth : auth failure: [user=center] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:19:24 ispc saslauthd[1847246]: pam_mysql - SELECT returned no result. Dec 17 08:19:24 ispc saslauthd[1847246]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:19:24 ispc saslauthd[1847246]: do_auth : auth failure: [user=lpadm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:20:01 ispc CRON[1847260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:20:01 ispc CRON[1847261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:20:01 ispc CRON[1847263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:20:01 ispc CRON[1847264]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:20:01 ispc CRON[1847262]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:20:01 ispc CRON[1847261]: pam_unix(cron:session): session closed for user root Dec 17 08:20:01 ispc CRON[1847262]: pam_unix(cron:session): session closed for user www-data Dec 17 08:20:01 ispc CRON[1847264]: pam_unix(cron:session): session closed for user getmail Dec 17 08:20:02 ispc CRON[1847263]: pam_unix(cron:session): session closed for user root Dec 17 08:20:03 ispc CRON[1847260]: pam_unix(cron:session): session closed for user root Dec 17 08:21:01 ispc CRON[1847363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:21:01 ispc CRON[1847362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:21:01 ispc CRON[1847362]: pam_unix(cron:session): session closed for user root Dec 17 08:21:02 ispc CRON[1847363]: pam_unix(cron:session): session closed for user root Dec 17 08:21:11 ispc sshd[1847380]: Invalid user blceu from 175.125.92.77 Dec 17 08:21:13 ispc postfix/smtpd[1847382]: sql auxprop plugin using mysql engine Dec 17 08:21:13 ispc saslauthd[1847384]: pam_mysql - SELECT returned no result. Dec 17 08:21:13 ispc saslauthd[1847384]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:21:13 ispc saslauthd[1847384]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:21:53 ispc sshd[1847403]: reverse mapping checking getaddrinfo for static.cmcti.vn [101.99.32.184] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 08:21:53 ispc sshd[1847403]: Invalid user blceu from 101.99.32.184 Dec 17 08:22:01 ispc CRON[1847409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:22:01 ispc CRON[1847409]: pam_unix(cron:session): session closed for user root Dec 17 08:22:14 ispc sshd[1847425]: Invalid user ziplines from 175.125.92.77 Dec 17 08:23:01 ispc CRON[1847455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:23:02 ispc CRON[1847455]: pam_unix(cron:session): session closed for user root Dec 17 08:23:14 ispc sshd[1847472]: Invalid user klape from 2.57.217.229 Dec 17 08:23:15 ispc sshd[1847474]: Invalid user ubuntu from 2.57.217.229 Dec 17 08:23:51 ispc sshd[1847496]: Invalid user martof from 211.23.78.98 Dec 17 08:24:01 ispc CRON[1847506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:24:03 ispc CRON[1847506]: pam_unix(cron:session): session closed for user root Dec 17 08:24:10 ispc sshd[1847517]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 08:24:16 ispc sshd[1847525]: Invalid user klape from 51.77.222.24 Dec 17 08:24:16 ispc sshd[1847527]: Invalid user ubuntu from 51.77.222.24 Dec 17 08:25:01 ispc CRON[1847547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:25:01 ispc CRON[1847548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:25:01 ispc CRON[1847549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:25:01 ispc CRON[1847550]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:25:01 ispc CRON[1847548]: pam_unix(cron:session): session closed for user root Dec 17 08:25:01 ispc CRON[1847550]: pam_unix(cron:session): session closed for user getmail Dec 17 08:25:02 ispc CRON[1847549]: pam_unix(cron:session): session closed for user root Dec 17 08:25:02 ispc CRON[1847547]: pam_unix(cron:session): session closed for user root Dec 17 08:26:01 ispc CRON[1847647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:26:03 ispc CRON[1847647]: pam_unix(cron:session): session closed for user root Dec 17 08:26:41 ispc postfix/smtpd[1847675]: sql auxprop plugin using mysql engine Dec 17 08:26:41 ispc CRON[1846482]: pam_unix(cron:session): session closed for user root Dec 17 08:26:46 ispc postfix/smtpd[1847678]: sql auxprop plugin using mysql engine Dec 17 08:26:50 ispc sshd[1847682]: Invalid user klape from 70.37.89.177 Dec 17 08:26:51 ispc sshd[1847684]: Invalid user ubuntu from 70.37.89.177 Dec 17 08:27:01 ispc CRON[1847686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:27:07 ispc CRON[1847686]: pam_unix(cron:session): session closed for user root Dec 17 08:27:33 ispc sshd[1847699]: Invalid user blceu from 211.23.78.98 Dec 17 08:28:01 ispc CRON[1847711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:28:50 ispc postfix/smtpd[1847740]: sql auxprop plugin using mysql engine Dec 17 08:29:01 ispc CRON[1847748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:29:02 ispc CRON[1847748]: pam_unix(cron:session): session closed for user root Dec 17 08:29:02 ispc sshd[1847746]: Invalid user ziplines from 221.156.137.103 Dec 17 08:29:25 ispc sshd[1847771]: Invalid user martof from 141.94.71.131 Dec 17 08:30:01 ispc CRON[1847785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:30:01 ispc CRON[1847786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:30:01 ispc CRON[1847787]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:30:01 ispc CRON[1847788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:30:01 ispc CRON[1847789]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:30:01 ispc CRON[1847786]: pam_unix(cron:session): session closed for user root Dec 17 08:30:01 ispc CRON[1847787]: pam_unix(cron:session): session closed for user www-data Dec 17 08:30:01 ispc CRON[1847789]: pam_unix(cron:session): session closed for user getmail Dec 17 08:30:02 ispc CRON[1847788]: pam_unix(cron:session): session closed for user root Dec 17 08:30:02 ispc CRON[1847785]: pam_unix(cron:session): session closed for user root Dec 17 08:30:12 ispc postfix/smtpd[1847868]: sql auxprop plugin using mysql engine Dec 17 08:30:12 ispc saslauthd[1847870]: pam_mysql - SELECT returned no result. Dec 17 08:30:12 ispc saslauthd[1847870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:30:12 ispc saslauthd[1847870]: do_auth : auth failure: [user=test1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 08:30:33 ispc sshd[1847880]: Invalid user martof from 51.159.91.86 Dec 17 08:30:58 ispc sshd[1847895]: Did not receive identification string from 192.227.134.84 Dec 17 08:31:01 ispc CRON[1847896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:31:03 ispc CRON[1847896]: pam_unix(cron:session): session closed for user root Dec 17 08:31:56 ispc saslauthd[1847934]: pam_mysql - SELECT returned no result. Dec 17 08:31:56 ispc saslauthd[1847934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:31:56 ispc saslauthd[1847934]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:32:00 ispc sshd[1847935]: Invalid user blceu from 221.156.137.103 Dec 17 08:32:01 ispc CRON[1847937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:32:01 ispc CRON[1847937]: pam_unix(cron:session): session closed for user root Dec 17 08:33:01 ispc CRON[1847981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:33:01 ispc CRON[1847981]: pam_unix(cron:session): session closed for user root Dec 17 08:34:01 ispc CRON[1848018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:34:02 ispc CRON[1848018]: pam_unix(cron:session): session closed for user root Dec 17 08:34:32 ispc postfix/smtpd[1848042]: sql auxprop plugin using mysql engine Dec 17 08:34:34 ispc saslauthd[1848044]: pam_mysql - SELECT returned no result. Dec 17 08:34:34 ispc saslauthd[1848044]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:34:34 ispc saslauthd[1848044]: do_auth : auth failure: [user=lpadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:35:01 ispc CRON[1848055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:35:01 ispc CRON[1848054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:35:01 ispc CRON[1848056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:35:01 ispc CRON[1848057]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:35:01 ispc CRON[1848055]: pam_unix(cron:session): session closed for user root Dec 17 08:35:01 ispc CRON[1848057]: pam_unix(cron:session): session closed for user getmail Dec 17 08:35:01 ispc CRON[1848056]: pam_unix(cron:session): session closed for user root Dec 17 08:35:02 ispc CRON[1848054]: pam_unix(cron:session): session closed for user root Dec 17 08:35:03 ispc sshd[1848134]: Invalid user martof from 202.46.29.79 Dec 17 08:36:01 ispc CRON[1848158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:36:01 ispc CRON[1848158]: pam_unix(cron:session): session closed for user root Dec 17 08:37:01 ispc CRON[1848193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:37:02 ispc CRON[1848193]: pam_unix(cron:session): session closed for user root Dec 17 08:38:01 ispc CRON[1848238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:38:01 ispc CRON[1848238]: pam_unix(cron:session): session closed for user root Dec 17 08:39:01 ispc CRON[1848273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:39:01 ispc CRON[1848274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:39:01 ispc CRON[1848273]: pam_unix(cron:session): session closed for user root Dec 17 08:39:02 ispc CRON[1848274]: pam_unix(cron:session): session closed for user root Dec 17 08:40:01 ispc CRON[1848321]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:40:01 ispc CRON[1848317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:40:01 ispc CRON[1848318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:40:01 ispc CRON[1848319]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:40:01 ispc CRON[1848320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:40:01 ispc CRON[1848318]: pam_unix(cron:session): session closed for user root Dec 17 08:40:01 ispc CRON[1848319]: pam_unix(cron:session): session closed for user www-data Dec 17 08:40:01 ispc CRON[1848321]: pam_unix(cron:session): session closed for user getmail Dec 17 08:40:01 ispc CRON[1848320]: pam_unix(cron:session): session closed for user root Dec 17 08:40:01 ispc CRON[1848317]: pam_unix(cron:session): session closed for user root Dec 17 08:40:09 ispc postfix/smtpd[1848399]: sql auxprop plugin using mysql engine Dec 17 08:40:10 ispc saslauthd[1848402]: pam_mysql - SELECT returned no result. Dec 17 08:40:10 ispc saslauthd[1848402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:40:10 ispc saslauthd[1848402]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:41:01 ispc CRON[1848423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:41:02 ispc CRON[1848423]: pam_unix(cron:session): session closed for user root Dec 17 08:41:04 ispc sshd[1848438]: Invalid user ziplines from 57.131.22.60 Dec 17 08:41:31 ispc sshd[1848450]: Invalid user ziplines from 43.135.148.156 Dec 17 08:42:01 ispc CRON[1848465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:42:01 ispc CRON[1848465]: pam_unix(cron:session): session closed for user root Dec 17 08:43:01 ispc CRON[1848511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:43:01 ispc CRON[1848511]: pam_unix(cron:session): session closed for user root Dec 17 08:44:01 ispc CRON[1848546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:44:02 ispc CRON[1848546]: pam_unix(cron:session): session closed for user root Dec 17 08:44:26 ispc sshd[1848570]: Invalid user blceu from 43.135.148.156 Dec 17 08:44:56 ispc postfix/smtpd[1848586]: sql auxprop plugin using mysql engine Dec 17 08:45:01 ispc CRON[1848589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:45:01 ispc CRON[1848591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:45:01 ispc CRON[1848590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:45:01 ispc CRON[1848592]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:45:01 ispc CRON[1848590]: pam_unix(cron:session): session closed for user root Dec 17 08:45:01 ispc CRON[1848592]: pam_unix(cron:session): session closed for user getmail Dec 17 08:45:01 ispc CRON[1848589]: pam_unix(cron:session): session closed for user root Dec 17 08:45:01 ispc CRON[1848591]: pam_unix(cron:session): session closed for user root Dec 17 08:45:05 ispc sshd[1848580]: Invalid user 0 from 185.246.128.170 Dec 17 08:45:34 ispc sshd[1848681]: Did not receive identification string from 167.99.217.226 Dec 17 08:45:42 ispc sshd[1848679]: Invalid user alan from 185.246.128.170 Dec 17 08:45:58 ispc sshd[1848690]: Invalid user dev from 185.246.128.170 Dec 17 08:46:01 ispc CRON[1848696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:46:02 ispc CRON[1848696]: pam_unix(cron:session): session closed for user root Dec 17 08:46:11 ispc sshd[1848707]: Invalid user momoru from 185.246.128.170 Dec 17 08:46:22 ispc sshd[1848717]: Invalid user admin1 from 185.246.128.170 Dec 17 08:46:40 ispc sshd[1848723]: Invalid user admin1 from 185.246.128.170 Dec 17 08:47:01 ispc CRON[1848747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:47:02 ispc CRON[1848747]: pam_unix(cron:session): session closed for user root Dec 17 08:48:01 ispc CRON[1848793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:48:02 ispc CRON[1848793]: pam_unix(cron:session): session closed for user root Dec 17 08:48:32 ispc CRON[1847711]: pam_unix(cron:session): session closed for user root Dec 17 08:48:32 ispc postfix/smtpd[1848819]: sql auxprop plugin using mysql engine Dec 17 08:49:01 ispc CRON[1848824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:49:03 ispc CRON[1848824]: pam_unix(cron:session): session closed for user root Dec 17 08:49:10 ispc saslauthd[1848837]: pam_mysql - SELECT returned no result. Dec 17 08:49:10 ispc saslauthd[1848837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:49:10 ispc saslauthd[1848837]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:49:44 ispc saslauthd[1848847]: pam_mysql - SELECT returned no result. Dec 17 08:49:44 ispc saslauthd[1848847]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:49:44 ispc saslauthd[1848847]: do_auth : auth failure: [user=lynx] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:50:01 ispc CRON[1848849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:50:01 ispc CRON[1848852]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:50:01 ispc CRON[1848851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:50:01 ispc CRON[1848848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:50:01 ispc CRON[1848850]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 08:50:01 ispc CRON[1848850]: pam_unix(cron:session): session closed for user www-data Dec 17 08:50:01 ispc CRON[1848849]: pam_unix(cron:session): session closed for user root Dec 17 08:50:01 ispc CRON[1848852]: pam_unix(cron:session): session closed for user getmail Dec 17 08:50:02 ispc CRON[1848848]: pam_unix(cron:session): session closed for user root Dec 17 08:50:45 ispc sshd[1848950]: Invalid user blceu from 49.247.24.89 Dec 17 08:51:01 ispc CRON[1848958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:51:01 ispc CRON[1848958]: pam_unix(cron:session): session closed for user root Dec 17 08:51:18 ispc sshd[1848977]: Invalid user martof from 49.247.24.89 Dec 17 08:52:01 ispc CRON[1849005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:52:02 ispc CRON[1849005]: pam_unix(cron:session): session closed for user root Dec 17 08:52:36 ispc postfix/smtpd[1849036]: sql auxprop plugin using mysql engine Dec 17 08:52:37 ispc saslauthd[1849038]: pam_mysql - SELECT returned no result. Dec 17 08:52:37 ispc saslauthd[1849038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:52:37 ispc saslauthd[1849038]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:52:40 ispc sshd[1849039]: Invalid user ziplines from 202.46.29.79 Dec 17 08:53:01 ispc CRON[1849064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:53:01 ispc sshd[1849062]: Invalid user admin from 167.99.217.226 Dec 17 08:53:01 ispc CRON[1849064]: pam_unix(cron:session): session closed for user root Dec 17 08:53:44 ispc sshd[1849095]: Invalid user admin from 167.99.217.226 Dec 17 08:54:01 ispc CRON[1849105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:54:02 ispc CRON[1849105]: pam_unix(cron:session): session closed for user root Dec 17 08:54:26 ispc sshd[1849124]: Invalid user admin from 167.99.217.226 Dec 17 08:55:01 ispc CRON[1849144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:55:01 ispc CRON[1849145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:55:01 ispc CRON[1849146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:55:01 ispc CRON[1849147]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 08:55:01 ispc CRON[1849145]: pam_unix(cron:session): session closed for user root Dec 17 08:55:01 ispc CRON[1849147]: pam_unix(cron:session): session closed for user getmail Dec 17 08:55:02 ispc CRON[1849146]: pam_unix(cron:session): session closed for user root Dec 17 08:55:02 ispc CRON[1849144]: pam_unix(cron:session): session closed for user root Dec 17 08:55:08 ispc sshd[1849224]: Invalid user admin from 167.99.217.226 Dec 17 08:55:25 ispc postfix/smtpd[1849231]: sql auxprop plugin using mysql engine Dec 17 08:55:35 ispc postfix/smtpd[1849244]: sql auxprop plugin using mysql engine Dec 17 08:55:52 ispc sshd[1849262]: Invalid user admin from 167.99.217.226 Dec 17 08:55:57 ispc saslauthd[1849264]: pam_mysql - SELECT returned no result. Dec 17 08:55:57 ispc saslauthd[1849264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 08:55:57 ispc saslauthd[1849264]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 08:56:01 ispc CRON[1849270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:56:01 ispc CRON[1849270]: pam_unix(cron:session): session closed for user root Dec 17 08:56:14 ispc sshd[1849287]: Invalid user blceu from 5.129.195.224 Dec 17 08:56:34 ispc sshd[1849299]: Invalid user admin from 167.99.217.226 Dec 17 08:57:01 ispc CRON[1849319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:57:02 ispc CRON[1849319]: pam_unix(cron:session): session closed for user root Dec 17 08:57:57 ispc sshd[1849355]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 08:57:57 ispc sshd[1849355]: Invalid user ziplines from 193.110.157.47 Dec 17 08:58:01 ispc CRON[1849368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:58:01 ispc CRON[1849368]: pam_unix(cron:session): session closed for user root Dec 17 08:59:01 ispc CRON[1849409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 08:59:02 ispc CRON[1849409]: pam_unix(cron:session): session closed for user root Dec 17 09:00:01 ispc CRON[1849448]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:00:01 ispc CRON[1849451]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:00:01 ispc CRON[1849446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:00:01 ispc CRON[1849447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:00:01 ispc CRON[1849449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:00:01 ispc CRON[1849450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:00:01 ispc CRON[1849447]: pam_unix(cron:session): session closed for user root Dec 17 09:00:01 ispc CRON[1849448]: pam_unix(cron:session): session closed for user www-data Dec 17 09:00:01 ispc CRON[1849451]: pam_unix(cron:session): session closed for user getmail Dec 17 09:00:02 ispc CRON[1849449]: pam_unix(cron:session): session closed for user root Dec 17 09:00:02 ispc CRON[1849450]: pam_unix(cron:session): session closed for user root Dec 17 09:00:02 ispc CRON[1849446]: pam_unix(cron:session): session closed for user root Dec 17 09:01:01 ispc CRON[1849628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:01:02 ispc CRON[1849628]: pam_unix(cron:session): session closed for user root Dec 17 09:01:23 ispc sshd[1849647]: Invalid user ziplines from 51.159.91.86 Dec 17 09:01:31 ispc sshd[1849649]: Invalid user martof from 210.114.18.123 Dec 17 09:02:01 ispc CRON[1849667]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 09:02:01 ispc CRON[1849668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:02:02 ispc CRON[1849668]: pam_unix(cron:session): session closed for user root Dec 17 09:02:55 ispc CRON[1849667]: pam_unix(cron:session): session closed for user logcheck Dec 17 09:03:01 ispc CRON[1850718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:03:02 ispc CRON[1850718]: pam_unix(cron:session): session closed for user root Dec 17 09:03:04 ispc postfix/smtpd[1850734]: sql auxprop plugin using mysql engine Dec 17 09:04:01 ispc CRON[1850759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:04:02 ispc CRON[1850759]: pam_unix(cron:session): session closed for user root Dec 17 09:04:12 ispc sshd[1850774]: Invalid user blceu from 141.94.71.131 Dec 17 09:04:57 ispc postfix/smtpd[1850797]: sql auxprop plugin using mysql engine Dec 17 09:04:58 ispc saslauthd[1850800]: pam_mysql - SELECT returned no result. Dec 17 09:04:58 ispc saslauthd[1850800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:04:58 ispc saslauthd[1850800]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:05:01 ispc CRON[1850801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:05:01 ispc CRON[1850802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:05:01 ispc CRON[1850803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:05:01 ispc CRON[1850804]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:05:01 ispc CRON[1850802]: pam_unix(cron:session): session closed for user root Dec 17 09:05:01 ispc CRON[1850804]: pam_unix(cron:session): session closed for user getmail Dec 17 09:05:02 ispc CRON[1850803]: pam_unix(cron:session): session closed for user root Dec 17 09:05:02 ispc CRON[1850801]: pam_unix(cron:session): session closed for user root Dec 17 09:05:40 ispc postfix/smtpd[1850898]: sql auxprop plugin using mysql engine Dec 17 09:05:46 ispc sshd[1850900]: Invalid user blceu from 51.159.91.86 Dec 17 09:06:01 ispc CRON[1850910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:06:02 ispc CRON[1850910]: pam_unix(cron:session): session closed for user root Dec 17 09:07:01 ispc CRON[1850949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:07:02 ispc CRON[1850949]: pam_unix(cron:session): session closed for user root Dec 17 09:08:01 ispc CRON[1850994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:08:02 ispc CRON[1850994]: pam_unix(cron:session): session closed for user root Dec 17 09:09:01 ispc CRON[1851032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:09:01 ispc CRON[1851033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:09:01 ispc CRON[1851032]: pam_unix(cron:session): session closed for user root Dec 17 09:09:02 ispc CRON[1851033]: pam_unix(cron:session): session closed for user root Dec 17 09:10:01 ispc CRON[1851078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:10:01 ispc CRON[1851079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:10:01 ispc CRON[1851080]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:10:01 ispc CRON[1851081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:10:01 ispc CRON[1851082]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:10:01 ispc CRON[1851079]: pam_unix(cron:session): session closed for user root Dec 17 09:10:01 ispc CRON[1851080]: pam_unix(cron:session): session closed for user www-data Dec 17 09:10:01 ispc CRON[1851082]: pam_unix(cron:session): session closed for user getmail Dec 17 09:10:02 ispc CRON[1851081]: pam_unix(cron:session): session closed for user root Dec 17 09:10:02 ispc CRON[1851078]: pam_unix(cron:session): session closed for user root Dec 17 09:10:28 ispc postfix/smtpd[1851169]: sql auxprop plugin using mysql engine Dec 17 09:10:34 ispc postfix/smtpd[1851193]: sql auxprop plugin using mysql engine Dec 17 09:10:40 ispc saslauthd[1851202]: pam_mysql - SELECT returned no result. Dec 17 09:10:40 ispc saslauthd[1851202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:10:40 ispc saslauthd[1851202]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:11:01 ispc CRON[1851205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:11:01 ispc CRON[1848851]: pam_unix(cron:session): session closed for user root Dec 17 09:12:01 ispc CRON[1851238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:12:02 ispc CRON[1851238]: pam_unix(cron:session): session closed for user root Dec 17 09:12:03 ispc sshd[1851254]: Bad protocol version identification 'GET / HTTP/1.1' from 65.49.20.67 Dec 17 09:12:58 ispc sshd[1851283]: Bad protocol version identification '\026\003\001' from 184.105.247.196 Dec 17 09:13:01 ispc CRON[1851284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:13:02 ispc CRON[1851284]: pam_unix(cron:session): session closed for user root Dec 17 09:14:01 ispc CRON[1851326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:14:02 ispc CRON[1851326]: pam_unix(cron:session): session closed for user root Dec 17 09:14:43 ispc postfix/smtpd[1851359]: sql auxprop plugin using mysql engine Dec 17 09:15:01 ispc CRON[1851370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:15:01 ispc CRON[1851371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:15:01 ispc CRON[1851372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:15:01 ispc CRON[1851373]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:15:01 ispc CRON[1851371]: pam_unix(cron:session): session closed for user root Dec 17 09:15:01 ispc CRON[1851373]: pam_unix(cron:session): session closed for user getmail Dec 17 09:15:02 ispc CRON[1851370]: pam_unix(cron:session): session closed for user root Dec 17 09:15:02 ispc CRON[1851372]: pam_unix(cron:session): session closed for user root Dec 17 09:16:01 ispc CRON[1851470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:16:02 ispc CRON[1851470]: pam_unix(cron:session): session closed for user root Dec 17 09:17:01 ispc CRON[1851506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:17:02 ispc CRON[1851506]: pam_unix(cron:session): session closed for user root Dec 17 09:18:01 ispc CRON[1851553]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 09:18:01 ispc CRON[1851554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:18:03 ispc CRON[1851554]: pam_unix(cron:session): session closed for user root Dec 17 09:18:07 ispc CRON[1851553]: pam_unix(cron:session): session closed for user amavis Dec 17 09:18:08 ispc postfix/smtpd[1851578]: sql auxprop plugin using mysql engine Dec 17 09:19:01 ispc CRON[1851610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:19:01 ispc CRON[1851610]: pam_unix(cron:session): session closed for user root Dec 17 09:19:28 ispc postfix/smtpd[1851631]: sql auxprop plugin using mysql engine Dec 17 09:19:35 ispc postfix/smtpd[1851638]: sql auxprop plugin using mysql engine Dec 17 09:19:36 ispc saslauthd[1851640]: pam_mysql - SELECT returned no result. Dec 17 09:19:36 ispc saslauthd[1851640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:19:36 ispc saslauthd[1851640]: do_auth : auth failure: [user=mailadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:19:54 ispc sshd[1851650]: Invalid user klape from 77.241.18.2 Dec 17 09:19:54 ispc sshd[1851652]: Invalid user ubuntu from 77.241.18.2 Dec 17 09:20:01 ispc CRON[1851658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:20:01 ispc CRON[1851659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:20:01 ispc CRON[1851660]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:20:01 ispc CRON[1851661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:20:01 ispc CRON[1851662]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:20:01 ispc CRON[1851660]: pam_unix(cron:session): session closed for user www-data Dec 17 09:20:01 ispc CRON[1851659]: pam_unix(cron:session): session closed for user root Dec 17 09:20:01 ispc CRON[1851662]: pam_unix(cron:session): session closed for user getmail Dec 17 09:20:02 ispc CRON[1851661]: pam_unix(cron:session): session closed for user root Dec 17 09:20:02 ispc CRON[1851658]: pam_unix(cron:session): session closed for user root Dec 17 09:21:01 ispc CRON[1851763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:21:01 ispc CRON[1851764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:21:02 ispc CRON[1851763]: pam_unix(cron:session): session closed for user root Dec 17 09:21:02 ispc CRON[1851764]: pam_unix(cron:session): session closed for user root Dec 17 09:21:07 ispc saslauthd[1851777]: pam_mysql - SELECT returned no result. Dec 17 09:21:07 ispc saslauthd[1851777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:21:07 ispc saslauthd[1851777]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:21:25 ispc sshd[1851786]: Invalid user blceu from 119.205.233.162 Dec 17 09:21:33 ispc saslauthd[1851792]: pam_mysql - SELECT returned no result. Dec 17 09:21:33 ispc saslauthd[1851792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:21:33 ispc saslauthd[1851792]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:22:01 ispc CRON[1851802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:22:03 ispc CRON[1851802]: pam_unix(cron:session): session closed for user root Dec 17 09:23:01 ispc CRON[1851845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:23:02 ispc CRON[1851845]: pam_unix(cron:session): session closed for user root Dec 17 09:23:53 ispc postfix/smtpd[1851879]: sql auxprop plugin using mysql engine Dec 17 09:24:01 ispc CRON[1851885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:24:01 ispc CRON[1851885]: pam_unix(cron:session): session closed for user root Dec 17 09:24:59 ispc sshd[1851930]: Did not receive identification string from 192.227.134.84 Dec 17 09:25:01 ispc CRON[1851931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:25:01 ispc CRON[1851932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:25:01 ispc CRON[1851933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:25:01 ispc CRON[1851934]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:25:02 ispc CRON[1851932]: pam_unix(cron:session): session closed for user root Dec 17 09:25:02 ispc CRON[1851934]: pam_unix(cron:session): session closed for user getmail Dec 17 09:25:03 ispc CRON[1851933]: pam_unix(cron:session): session closed for user root Dec 17 09:25:03 ispc CRON[1851931]: pam_unix(cron:session): session closed for user root Dec 17 09:25:58 ispc postfix/smtpd[1852031]: sql auxprop plugin using mysql engine Dec 17 09:25:59 ispc saslauthd[1852033]: pam_mysql - SELECT returned no result. Dec 17 09:25:59 ispc saslauthd[1852033]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:25:59 ispc saslauthd[1852033]: do_auth : auth failure: [user=video] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:26:01 ispc CRON[1852034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:26:02 ispc CRON[1852034]: pam_unix(cron:session): session closed for user root Dec 17 09:27:01 ispc CRON[1852069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:27:02 ispc CRON[1852069]: pam_unix(cron:session): session closed for user root Dec 17 09:28:01 ispc CRON[1852111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:28:02 ispc CRON[1852111]: pam_unix(cron:session): session closed for user root Dec 17 09:29:01 ispc CRON[1852148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:29:02 ispc CRON[1852148]: pam_unix(cron:session): session closed for user root Dec 17 09:30:01 ispc CRON[1852184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:30:01 ispc CRON[1852186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:30:01 ispc CRON[1852187]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:30:01 ispc CRON[1852183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:30:01 ispc CRON[1852185]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:30:01 ispc CRON[1852185]: pam_unix(cron:session): session closed for user www-data Dec 17 09:30:01 ispc CRON[1852184]: pam_unix(cron:session): session closed for user root Dec 17 09:30:01 ispc CRON[1852187]: pam_unix(cron:session): session closed for user getmail Dec 17 09:30:02 ispc CRON[1852186]: pam_unix(cron:session): session closed for user root Dec 17 09:30:02 ispc CRON[1852183]: pam_unix(cron:session): session closed for user root Dec 17 09:30:35 ispc sshd[1852276]: Invalid user klape from 200.32.52.150 Dec 17 09:30:37 ispc sshd[1852282]: Invalid user ubuntu from 200.32.52.150 Dec 17 09:31:01 ispc CRON[1852294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:31:03 ispc CRON[1852294]: pam_unix(cron:session): session closed for user root Dec 17 09:31:06 ispc postfix/smtpd[1852311]: sql auxprop plugin using mysql engine Dec 17 09:31:32 ispc CRON[1851205]: pam_unix(cron:session): session closed for user root Dec 17 09:31:46 ispc saslauthd[1852326]: pam_mysql - SELECT returned no result. Dec 17 09:31:46 ispc saslauthd[1852326]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:31:46 ispc saslauthd[1852326]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:32:01 ispc CRON[1852328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:32:07 ispc CRON[1852328]: pam_unix(cron:session): session closed for user root Dec 17 09:33:01 ispc CRON[1852351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:34:01 ispc CRON[1852389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:34:01 ispc CRON[1852389]: pam_unix(cron:session): session closed for user root Dec 17 09:34:47 ispc postfix/smtpd[1852420]: sql auxprop plugin using mysql engine Dec 17 09:34:48 ispc saslauthd[1852422]: pam_mysql - SELECT returned no result. Dec 17 09:34:48 ispc saslauthd[1852422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:34:48 ispc saslauthd[1852422]: do_auth : auth failure: [user=maint] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:35:01 ispc CRON[1852428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:35:01 ispc CRON[1852429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:35:01 ispc CRON[1852430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:35:01 ispc CRON[1852431]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:35:01 ispc CRON[1852429]: pam_unix(cron:session): session closed for user root Dec 17 09:35:01 ispc CRON[1852431]: pam_unix(cron:session): session closed for user getmail Dec 17 09:35:02 ispc CRON[1852428]: pam_unix(cron:session): session closed for user root Dec 17 09:35:02 ispc CRON[1852430]: pam_unix(cron:session): session closed for user root Dec 17 09:36:01 ispc CRON[1852529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:36:03 ispc CRON[1852529]: pam_unix(cron:session): session closed for user root Dec 17 09:36:14 ispc postfix/smtpd[1852545]: sql auxprop plugin using mysql engine Dec 17 09:37:01 ispc CRON[1852567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:37:02 ispc CRON[1852567]: pam_unix(cron:session): session closed for user root Dec 17 09:37:06 ispc sshd[1852578]: Invalid user ziplines from 211.23.78.98 Dec 17 09:38:01 ispc CRON[1852618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:38:02 ispc CRON[1852618]: pam_unix(cron:session): session closed for user root Dec 17 09:38:05 ispc postfix/smtpd[1852630]: sql auxprop plugin using mysql engine Dec 17 09:38:06 ispc saslauthd[1852631]: pam_mysql - SELECT returned no result. Dec 17 09:38:06 ispc saslauthd[1852631]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:38:06 ispc saslauthd[1852631]: do_auth : auth failure: [user=user1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 09:38:09 ispc sshd[1852636]: Invalid user martof from 57.131.22.60 Dec 17 09:38:37 ispc sshd[1852646]: Invalid user blceu from 210.114.18.123 Dec 17 09:39:01 ispc CRON[1852661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:39:01 ispc CRON[1852662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:39:01 ispc CRON[1852661]: pam_unix(cron:session): session closed for user root Dec 17 09:39:02 ispc CRON[1852662]: pam_unix(cron:session): session closed for user root Dec 17 09:40:01 ispc CRON[1852711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:40:01 ispc CRON[1852712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:40:01 ispc CRON[1852713]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:40:01 ispc CRON[1852714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:40:01 ispc CRON[1852715]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:40:01 ispc CRON[1852713]: pam_unix(cron:session): session closed for user www-data Dec 17 09:40:01 ispc CRON[1852712]: pam_unix(cron:session): session closed for user root Dec 17 09:40:01 ispc CRON[1852715]: pam_unix(cron:session): session closed for user getmail Dec 17 09:40:01 ispc CRON[1852714]: pam_unix(cron:session): session closed for user root Dec 17 09:40:02 ispc CRON[1852711]: pam_unix(cron:session): session closed for user root Dec 17 09:40:10 ispc sshd[1852793]: Invalid user ziplines from 213.199.57.249 Dec 17 09:40:51 ispc postfix/smtpd[1852814]: sql auxprop plugin using mysql engine Dec 17 09:40:52 ispc saslauthd[1852816]: pam_mysql - SELECT returned no result. Dec 17 09:40:52 ispc saslauthd[1852816]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:40:52 ispc saslauthd[1852816]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:40:52 ispc sshd[1852812]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 09:41:01 ispc CRON[1852821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:41:02 ispc CRON[1852821]: pam_unix(cron:session): session closed for user root Dec 17 09:42:01 ispc CRON[1852856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:42:02 ispc CRON[1852856]: pam_unix(cron:session): session closed for user root Dec 17 09:42:31 ispc sshd[1852877]: Invalid user ziplines from 119.205.233.162 Dec 17 09:43:01 ispc CRON[1852903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:43:02 ispc CRON[1852903]: pam_unix(cron:session): session closed for user root Dec 17 09:44:02 ispc CRON[1852939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:44:02 ispc CRON[1852939]: pam_unix(cron:session): session closed for user root Dec 17 09:45:01 ispc CRON[1852975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:45:01 ispc CRON[1852976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:45:01 ispc CRON[1852977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:45:01 ispc CRON[1852978]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:45:01 ispc CRON[1852976]: pam_unix(cron:session): session closed for user root Dec 17 09:45:01 ispc CRON[1852978]: pam_unix(cron:session): session closed for user getmail Dec 17 09:45:02 ispc CRON[1852977]: pam_unix(cron:session): session closed for user root Dec 17 09:45:02 ispc CRON[1852975]: pam_unix(cron:session): session closed for user root Dec 17 09:46:01 ispc CRON[1853073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:46:01 ispc CRON[1853073]: pam_unix(cron:session): session closed for user root Dec 17 09:47:01 ispc CRON[1853110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:47:02 ispc CRON[1853110]: pam_unix(cron:session): session closed for user root Dec 17 09:47:40 ispc sshd[1853140]: Did not receive identification string from 45.140.17.97 Dec 17 09:47:41 ispc postfix/smtpd[1853141]: sql auxprop plugin using mysql engine Dec 17 09:47:55 ispc saslauthd[1853156]: pam_mysql - SELECT returned no result. Dec 17 09:47:55 ispc saslauthd[1853156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:47:55 ispc saslauthd[1853156]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:47:57 ispc saslauthd[1853157]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 09:47:57 ispc saslauthd[1853157]: do_auth : auth failure: [user=info@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 17 09:48:01 ispc CRON[1853162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:48:02 ispc CRON[1853162]: pam_unix(cron:session): session closed for user root Dec 17 09:49:01 ispc CRON[1853198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:49:02 ispc CRON[1853198]: pam_unix(cron:session): session closed for user root Dec 17 09:49:56 ispc postfix/smtpd[1853229]: sql auxprop plugin using mysql engine Dec 17 09:49:57 ispc saslauthd[1853231]: pam_mysql - SELECT returned no result. Dec 17 09:49:57 ispc saslauthd[1853231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:49:57 ispc saslauthd[1853231]: do_auth : auth failure: [user=maint1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:49:59 ispc saslauthd[1853236]: pam_mysql - SELECT returned no result. Dec 17 09:49:59 ispc saslauthd[1853236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:49:59 ispc saslauthd[1853236]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:50:01 ispc CRON[1853238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:50:01 ispc CRON[1853239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:50:01 ispc CRON[1853240]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 09:50:01 ispc CRON[1853241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:50:01 ispc CRON[1853242]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:50:01 ispc CRON[1853240]: pam_unix(cron:session): session closed for user www-data Dec 17 09:50:01 ispc CRON[1853239]: pam_unix(cron:session): session closed for user root Dec 17 09:50:01 ispc CRON[1853242]: pam_unix(cron:session): session closed for user getmail Dec 17 09:50:02 ispc CRON[1853241]: pam_unix(cron:session): session closed for user root Dec 17 09:50:02 ispc CRON[1853238]: pam_unix(cron:session): session closed for user root Dec 17 09:51:01 ispc CRON[1853344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:51:01 ispc CRON[1853344]: pam_unix(cron:session): session closed for user root Dec 17 09:51:49 ispc sshd[1853373]: Invalid user ziplines from 27.254.144.183 Dec 17 09:52:00 ispc sshd[1853383]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 09:52:01 ispc CRON[1853385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:52:01 ispc CRON[1853386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:52:02 ispc CRON[1853386]: pam_unix(cron:session): session closed for user root Dec 17 09:53:01 ispc CRON[1853434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:53:02 ispc CRON[1853434]: pam_unix(cron:session): session closed for user root Dec 17 09:53:24 ispc postfix/smtpd[1853454]: sql auxprop plugin using mysql engine Dec 17 09:53:24 ispc CRON[1852351]: pam_unix(cron:session): session closed for user root Dec 17 09:53:41 ispc postfix/smtpd[1853458]: sql auxprop plugin using mysql engine Dec 17 09:53:58 ispc sshd[1853464]: Invalid user martof from 213.199.57.249 Dec 17 09:54:01 ispc CRON[1853466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:54:06 ispc CRON[1853466]: pam_unix(cron:session): session closed for user root Dec 17 09:55:01 ispc CRON[1853484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:55:01 ispc CRON[1853485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:55:01 ispc CRON[1853486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:55:01 ispc CRON[1853487]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 09:55:02 ispc CRON[1853485]: pam_unix(cron:session): session closed for user root Dec 17 09:55:02 ispc CRON[1853487]: pam_unix(cron:session): session closed for user getmail Dec 17 09:55:04 ispc CRON[1853484]: pam_unix(cron:session): session closed for user root Dec 17 09:55:14 ispc sshd[1853561]: Invalid user bluecap from 120.48.125.223 Dec 17 09:55:20 ispc CRON[1853385]: pam_unix(cron:session): session closed for user root Dec 17 09:56:01 ispc CRON[1853583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:56:02 ispc CRON[1853583]: pam_unix(cron:session): session closed for user root Dec 17 09:57:01 ispc CRON[1853623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:57:02 ispc CRON[1853623]: pam_unix(cron:session): session closed for user root Dec 17 09:57:27 ispc sshd[1853647]: Invalid user blceu from 35.239.77.168 Dec 17 09:57:40 ispc sshd[1853653]: Invalid user martof from 221.156.137.103 Dec 17 09:58:01 ispc CRON[1853674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:58:02 ispc CRON[1853674]: pam_unix(cron:session): session closed for user root Dec 17 09:58:13 ispc sshd[1853694]: Invalid user blceu from 118.218.219.250 Dec 17 09:58:52 ispc postfix/smtpd[1853714]: sql auxprop plugin using mysql engine Dec 17 09:58:53 ispc saslauthd[1853717]: pam_mysql - SELECT returned no result. Dec 17 09:58:53 ispc saslauthd[1853717]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:58:53 ispc saslauthd[1853717]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 09:59:01 ispc CRON[1853722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 09:59:02 ispc CRON[1853722]: pam_unix(cron:session): session closed for user root Dec 17 09:59:30 ispc saslauthd[1853745]: pam_mysql - SELECT returned no result. Dec 17 09:59:30 ispc saslauthd[1853745]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 09:59:30 ispc saslauthd[1853745]: do_auth : auth failure: [user=debbie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:00:01 ispc CRON[1853759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:00:01 ispc CRON[1853760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:00:01 ispc CRON[1853761]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:00:01 ispc CRON[1853760]: pam_unix(cron:session): session closed for user root Dec 17 10:00:01 ispc CRON[1853762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:00:01 ispc CRON[1853761]: pam_unix(cron:session): session closed for user www-data Dec 17 10:00:01 ispc CRON[1853763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:00:01 ispc CRON[1853764]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:00:01 ispc CRON[1853764]: pam_unix(cron:session): session closed for user getmail Dec 17 10:00:01 ispc CRON[1853763]: pam_unix(cron:session): session closed for user root Dec 17 10:00:02 ispc CRON[1853762]: pam_unix(cron:session): session closed for user root Dec 17 10:00:02 ispc CRON[1853759]: pam_unix(cron:session): session closed for user root Dec 17 10:01:01 ispc CRON[1853945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:01:02 ispc CRON[1853945]: pam_unix(cron:session): session closed for user root Dec 17 10:01:08 ispc postfix/smtpd[1853960]: sql auxprop plugin using mysql engine Dec 17 10:01:42 ispc sshd[1853974]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:02:01 ispc CRON[1853985]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 10:02:01 ispc CRON[1853986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:02:02 ispc CRON[1853986]: pam_unix(cron:session): session closed for user root Dec 17 10:02:46 ispc CRON[1853985]: pam_unix(cron:session): session closed for user logcheck Dec 17 10:02:52 ispc postfix/smtpd[1855036]: sql auxprop plugin using mysql engine Dec 17 10:03:01 ispc CRON[1855043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:03:02 ispc CRON[1855043]: pam_unix(cron:session): session closed for user root Dec 17 10:04:01 ispc CRON[1855080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:04:02 ispc CRON[1855080]: pam_unix(cron:session): session closed for user root Dec 17 10:04:59 ispc postfix/smtpd[1855117]: sql auxprop plugin using mysql engine Dec 17 10:05:01 ispc saslauthd[1855120]: pam_mysql - SELECT returned no result. Dec 17 10:05:01 ispc saslauthd[1855120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:05:01 ispc saslauthd[1855120]: do_auth : auth failure: [user=maint2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:05:01 ispc CRON[1855121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:05:01 ispc CRON[1855122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:05:01 ispc CRON[1855123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:05:01 ispc CRON[1855124]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:05:01 ispc CRON[1855122]: pam_unix(cron:session): session closed for user root Dec 17 10:05:01 ispc CRON[1855124]: pam_unix(cron:session): session closed for user getmail Dec 17 10:05:02 ispc CRON[1855123]: pam_unix(cron:session): session closed for user root Dec 17 10:05:02 ispc postfix/smtpd[1855180]: sql auxprop plugin using mysql engine Dec 17 10:05:03 ispc CRON[1855121]: pam_unix(cron:session): session closed for user root Dec 17 10:05:21 ispc sshd[1855209]: Invalid user klape from 187.190.35.163 Dec 17 10:05:22 ispc sshd[1855211]: Invalid user ubuntu from 187.190.35.163 Dec 17 10:05:36 ispc sshd[1855217]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:06:01 ispc CRON[1855233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:06:01 ispc CRON[1855233]: pam_unix(cron:session): session closed for user root Dec 17 10:06:11 ispc sshd[1855248]: Invalid user ziplines from 141.94.71.131 Dec 17 10:07:01 ispc CRON[1855271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:07:02 ispc CRON[1855271]: pam_unix(cron:session): session closed for user root Dec 17 10:08:00 ispc postfix/smtpd[1855315]: sql auxprop plugin using mysql engine Dec 17 10:08:00 ispc saslauthd[1855317]: pam_mysql - SELECT returned no result. Dec 17 10:08:00 ispc saslauthd[1855317]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:08:00 ispc saslauthd[1855317]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:08:01 ispc CRON[1855318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:08:01 ispc CRON[1855318]: pam_unix(cron:session): session closed for user root Dec 17 10:08:09 ispc sshd[1855331]: Invalid user klape from 103.164.20.29 Dec 17 10:08:10 ispc sshd[1855333]: Invalid user ubuntu from 103.164.20.29 Dec 17 10:08:27 ispc postfix/smtpd[1855343]: sql auxprop plugin using mysql engine Dec 17 10:09:01 ispc CRON[1855365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:09:01 ispc CRON[1855366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:09:01 ispc CRON[1855365]: pam_unix(cron:session): session closed for user root Dec 17 10:09:02 ispc CRON[1855366]: pam_unix(cron:session): session closed for user root Dec 17 10:10:01 ispc CRON[1855411]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:10:01 ispc CRON[1855410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:10:01 ispc CRON[1855409]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:10:01 ispc CRON[1855407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:10:01 ispc CRON[1855408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:10:01 ispc CRON[1855408]: pam_unix(cron:session): session closed for user root Dec 17 10:10:01 ispc CRON[1855409]: pam_unix(cron:session): session closed for user www-data Dec 17 10:10:01 ispc CRON[1855411]: pam_unix(cron:session): session closed for user getmail Dec 17 10:10:01 ispc CRON[1855410]: pam_unix(cron:session): session closed for user root Dec 17 10:10:02 ispc CRON[1855407]: pam_unix(cron:session): session closed for user root Dec 17 10:11:00 ispc postfix/smtpd[1855511]: sql auxprop plugin using mysql engine Dec 17 10:11:00 ispc saslauthd[1855513]: pam_mysql - SELECT returned no result. Dec 17 10:11:00 ispc saslauthd[1855513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:11:00 ispc saslauthd[1855513]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:11:01 ispc CRON[1855514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:11:01 ispc CRON[1855514]: pam_unix(cron:session): session closed for user root Dec 17 10:11:52 ispc sshd[1855548]: Invalid user pronajemplosin from 36.50.176.13 Dec 17 10:12:01 ispc CRON[1855554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:12:02 ispc CRON[1855554]: pam_unix(cron:session): session closed for user root Dec 17 10:12:36 ispc sshd[1855582]: Invalid user ziplines from 210.114.18.123 Dec 17 10:13:01 ispc CRON[1855600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:13:01 ispc CRON[1855600]: pam_unix(cron:session): session closed for user root Dec 17 10:14:01 ispc CRON[1855636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:14:02 ispc CRON[1855636]: pam_unix(cron:session): session closed for user root Dec 17 10:14:55 ispc sshd[1855671]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:15:01 ispc CRON[1855677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:15:01 ispc CRON[1855678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:15:01 ispc CRON[1855679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:15:01 ispc CRON[1855680]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:15:01 ispc CRON[1855678]: pam_unix(cron:session): session closed for user root Dec 17 10:15:01 ispc CRON[1855680]: pam_unix(cron:session): session closed for user getmail Dec 17 10:15:01 ispc CRON[1855679]: pam_unix(cron:session): session closed for user root Dec 17 10:15:02 ispc CRON[1855677]: pam_unix(cron:session): session closed for user root Dec 17 10:15:19 ispc postfix/smtpd[1855759]: sql auxprop plugin using mysql engine Dec 17 10:15:52 ispc sshd[1855872]: Did not receive identification string from 193.32.162.145 Dec 17 10:16:01 ispc CRON[1855873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:16:01 ispc CRON[1855873]: pam_unix(cron:session): session closed for user root Dec 17 10:16:03 ispc CRON[1853486]: pam_unix(cron:session): session closed for user root Dec 17 10:16:51 ispc sshd[1855886]: Invalid user blceu from 27.254.144.183 Dec 17 10:16:52 ispc sshd[1855888]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:17:01 ispc CRON[1855890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:17:08 ispc saslauthd[1855903]: pam_mysql - SELECT returned no result. Dec 17 10:17:08 ispc saslauthd[1855903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:17:08 ispc saslauthd[1855903]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:17:28 ispc sshd[1855910]: Invalid user ubuntu from 115.190.171.196 Dec 17 10:18:01 ispc CRON[1855937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:18:02 ispc CRON[1855937]: pam_unix(cron:session): session closed for user root Dec 17 10:19:01 ispc CRON[1855975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:19:01 ispc CRON[1855975]: pam_unix(cron:session): session closed for user root Dec 17 10:19:15 ispc sshd[1855994]: Invalid user lanovacentra from 35.239.77.168 Dec 17 10:20:01 ispc CRON[1856012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:20:01 ispc CRON[1856013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:20:01 ispc CRON[1856014]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:20:01 ispc CRON[1856015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:20:01 ispc CRON[1856013]: pam_unix(cron:session): session closed for user root Dec 17 10:20:01 ispc CRON[1856014]: pam_unix(cron:session): session closed for user www-data Dec 17 10:20:01 ispc CRON[1856016]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:20:01 ispc CRON[1856016]: pam_unix(cron:session): session closed for user getmail Dec 17 10:20:02 ispc CRON[1856015]: pam_unix(cron:session): session closed for user root Dec 17 10:20:02 ispc CRON[1856012]: pam_unix(cron:session): session closed for user root Dec 17 10:20:11 ispc postfix/smtpd[1856094]: sql auxprop plugin using mysql engine Dec 17 10:20:12 ispc saslauthd[1856096]: pam_mysql - SELECT returned no result. Dec 17 10:20:12 ispc saslauthd[1856096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:20:12 ispc saslauthd[1856096]: do_auth : auth failure: [user=maintainer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:20:43 ispc sshd[1856110]: Did not receive identification string from 192.227.134.84 Dec 17 10:21:01 ispc CRON[1856119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:21:01 ispc CRON[1856120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:21:01 ispc CRON[1856119]: pam_unix(cron:session): session closed for user root Dec 17 10:21:01 ispc CRON[1856120]: pam_unix(cron:session): session closed for user root Dec 17 10:21:57 ispc sshd[1856155]: Invalid user sol from 193.32.162.145 Dec 17 10:22:01 ispc CRON[1856163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:22:02 ispc CRON[1856163]: pam_unix(cron:session): session closed for user root Dec 17 10:23:01 ispc CRON[1856208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:23:01 ispc CRON[1856208]: pam_unix(cron:session): session closed for user root Dec 17 10:23:38 ispc postfix/smtpd[1856237]: sql auxprop plugin using mysql engine Dec 17 10:24:01 ispc CRON[1856248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:24:01 ispc CRON[1856248]: pam_unix(cron:session): session closed for user root Dec 17 10:24:05 ispc sshd[1856259]: Invalid user martof from 185.208.181.153 Dec 17 10:25:01 ispc CRON[1856289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:25:01 ispc CRON[1856290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:25:01 ispc CRON[1856291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:25:01 ispc CRON[1856290]: pam_unix(cron:session): session closed for user root Dec 17 10:25:01 ispc CRON[1856292]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:25:02 ispc CRON[1856292]: pam_unix(cron:session): session closed for user getmail Dec 17 10:25:02 ispc CRON[1856291]: pam_unix(cron:session): session closed for user root Dec 17 10:25:04 ispc CRON[1856289]: pam_unix(cron:session): session closed for user root Dec 17 10:25:07 ispc sshd[1856365]: Invalid user martof from 43.135.148.156 Dec 17 10:25:13 ispc sshd[1856371]: Invalid user solana from 193.32.162.145 Dec 17 10:26:01 ispc CRON[1856395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:26:02 ispc postfix/smtpd[1856406]: sql auxprop plugin using mysql engine Dec 17 10:26:02 ispc CRON[1856395]: pam_unix(cron:session): session closed for user root Dec 17 10:26:02 ispc saslauthd[1856408]: pam_mysql - SELECT returned no result. Dec 17 10:26:02 ispc saslauthd[1856408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:26:02 ispc saslauthd[1856408]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:26:36 ispc postfix/smtpd[1856421]: sql auxprop plugin using mysql engine Dec 17 10:27:01 ispc CRON[1856437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:27:01 ispc CRON[1856437]: pam_unix(cron:session): session closed for user root Dec 17 10:28:01 ispc CRON[1856481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:28:02 ispc CRON[1856481]: pam_unix(cron:session): session closed for user root Dec 17 10:28:40 ispc sshd[1856506]: Invalid user ubuntu from 193.32.162.145 Dec 17 10:29:01 ispc CRON[1856520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:29:02 ispc CRON[1856520]: pam_unix(cron:session): session closed for user root Dec 17 10:29:47 ispc sshd[1856544]: Invalid user pronajemplosin from 183.215.179.154 Dec 17 10:30:01 ispc CRON[1856558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:30:01 ispc CRON[1856559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:30:01 ispc CRON[1856560]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:30:01 ispc CRON[1856561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:30:01 ispc CRON[1856562]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:30:01 ispc CRON[1856559]: pam_unix(cron:session): session closed for user root Dec 17 10:30:01 ispc CRON[1856560]: pam_unix(cron:session): session closed for user www-data Dec 17 10:30:01 ispc CRON[1856562]: pam_unix(cron:session): session closed for user getmail Dec 17 10:30:01 ispc CRON[1856561]: pam_unix(cron:session): session closed for user root Dec 17 10:30:01 ispc CRON[1856558]: pam_unix(cron:session): session closed for user root Dec 17 10:31:01 ispc CRON[1856664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:31:02 ispc CRON[1856664]: pam_unix(cron:session): session closed for user root Dec 17 10:31:27 ispc sshd[1856687]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:31:29 ispc sshd[1856689]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:31:29 ispc sshd[1856689]: Invalid user klape from 189.89.20.45 Dec 17 10:31:31 ispc sshd[1856691]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:31:31 ispc sshd[1856691]: Invalid user ubuntu from 189.89.20.45 Dec 17 10:31:56 ispc sshd[1856705]: Invalid user validator from 193.32.162.145 Dec 17 10:32:01 ispc CRON[1856707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:32:02 ispc CRON[1856707]: pam_unix(cron:session): session closed for user root Dec 17 10:32:55 ispc postfix/smtpd[1856751]: sql auxprop plugin using mysql engine Dec 17 10:32:55 ispc saslauthd[1856754]: pam_mysql - SELECT returned no result. Dec 17 10:32:55 ispc saslauthd[1856754]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:32:55 ispc saslauthd[1856754]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:33:01 ispc CRON[1856755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:33:01 ispc CRON[1856755]: pam_unix(cron:session): session closed for user root Dec 17 10:33:32 ispc sshd[1856778]: Invalid user martof from 167.99.241.111 Dec 17 10:34:01 ispc CRON[1856794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:34:02 ispc CRON[1856794]: pam_unix(cron:session): session closed for user root Dec 17 10:35:01 ispc sshd[1856836]: Invalid user martof from 118.69.109.206 Dec 17 10:35:01 ispc CRON[1856838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:35:01 ispc CRON[1856840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:35:01 ispc CRON[1856839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:35:01 ispc CRON[1856841]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:35:01 ispc CRON[1856839]: pam_unix(cron:session): session closed for user root Dec 17 10:35:01 ispc CRON[1856841]: pam_unix(cron:session): session closed for user getmail Dec 17 10:35:02 ispc CRON[1856840]: pam_unix(cron:session): session closed for user root Dec 17 10:35:02 ispc CRON[1856838]: pam_unix(cron:session): session closed for user root Dec 17 10:35:09 ispc sshd[1856919]: Invalid user node from 193.32.162.145 Dec 17 10:35:18 ispc postfix/smtpd[1856925]: sql auxprop plugin using mysql engine Dec 17 10:35:19 ispc saslauthd[1856927]: pam_mysql - SELECT returned no result. Dec 17 10:35:19 ispc saslauthd[1856927]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:35:19 ispc saslauthd[1856927]: do_auth : auth failure: [user=man] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:36:01 ispc CRON[1856946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:36:02 ispc CRON[1856946]: pam_unix(cron:session): session closed for user root Dec 17 10:36:59 ispc sshd[1856978]: Invalid user martof from 175.125.92.77 Dec 17 10:37:01 ispc CRON[1856984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:37:02 ispc CRON[1856984]: pam_unix(cron:session): session closed for user root Dec 17 10:37:24 ispc postfix/smtpd[1857005]: sql auxprop plugin using mysql engine Dec 17 10:37:25 ispc CRON[1855890]: pam_unix(cron:session): session closed for user root Dec 17 10:38:01 ispc CRON[1857018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:38:06 ispc CRON[1857018]: pam_unix(cron:session): session closed for user root Dec 17 10:38:18 ispc sshd[1857030]: Invalid user solana from 193.32.162.145 Dec 17 10:38:24 ispc saslauthd[1857039]: pam_mysql - SELECT returned no result. Dec 17 10:38:24 ispc saslauthd[1857039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:38:24 ispc saslauthd[1857039]: do_auth : auth failure: [user=scan1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 10:38:41 ispc saslauthd[1857040]: pam_mysql - SELECT returned no result. Dec 17 10:38:41 ispc saslauthd[1857040]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:38:41 ispc saslauthd[1857040]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:39:01 ispc CRON[1857041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:39:01 ispc CRON[1857042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:39:01 ispc CRON[1857041]: pam_unix(cron:session): session closed for user root Dec 17 10:40:01 ispc CRON[1857088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:40:01 ispc CRON[1857089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:40:01 ispc CRON[1857090]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:40:01 ispc CRON[1857091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:40:01 ispc CRON[1857092]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:40:02 ispc CRON[1857089]: pam_unix(cron:session): session closed for user root Dec 17 10:40:02 ispc CRON[1857090]: pam_unix(cron:session): session closed for user www-data Dec 17 10:40:02 ispc CRON[1857092]: pam_unix(cron:session): session closed for user getmail Dec 17 10:40:02 ispc CRON[1857091]: pam_unix(cron:session): session closed for user root Dec 17 10:40:04 ispc CRON[1857088]: pam_unix(cron:session): session closed for user root Dec 17 10:41:01 ispc CRON[1857193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:41:02 ispc CRON[1857193]: pam_unix(cron:session): session closed for user root Dec 17 10:41:37 ispc sshd[1857221]: Invalid user martof from 211.23.78.98 Dec 17 10:42:01 ispc CRON[1857232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:42:02 ispc CRON[1857232]: pam_unix(cron:session): session closed for user root Dec 17 10:42:09 ispc sshd[1857249]: Invalid user martof from 51.159.91.86 Dec 17 10:42:16 ispc postfix/smtpd[1857255]: sql auxprop plugin using mysql engine Dec 17 10:43:01 ispc CRON[1857282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:43:02 ispc CRON[1857282]: pam_unix(cron:session): session closed for user root Dec 17 10:44:01 ispc CRON[1857318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:44:02 ispc CRON[1857318]: pam_unix(cron:session): session closed for user root Dec 17 10:45:01 ispc CRON[1857358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:45:01 ispc CRON[1857359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:45:01 ispc CRON[1857360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:45:01 ispc CRON[1857361]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:45:01 ispc CRON[1857359]: pam_unix(cron:session): session closed for user root Dec 17 10:45:01 ispc CRON[1857361]: pam_unix(cron:session): session closed for user getmail Dec 17 10:45:03 ispc CRON[1857360]: pam_unix(cron:session): session closed for user root Dec 17 10:45:03 ispc CRON[1857358]: pam_unix(cron:session): session closed for user root Dec 17 10:45:08 ispc sshd[1857438]: Did not receive identification string from 170.75.242.105 Dec 17 10:45:20 ispc sshd[1857443]: Invalid user blceu from 211.23.78.98 Dec 17 10:46:01 ispc CRON[1857462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:46:02 ispc CRON[1857462]: pam_unix(cron:session): session closed for user root Dec 17 10:46:40 ispc sshd[1857489]: Invalid user martof from 45.84.199.14 Dec 17 10:47:01 ispc CRON[1857499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:47:02 ispc CRON[1857499]: pam_unix(cron:session): session closed for user root Dec 17 10:47:15 ispc postfix/smtpd[1857514]: sql auxprop plugin using mysql engine Dec 17 10:48:00 ispc postfix/smtpd[1857548]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc postfix/smtpd[1857550]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc saslauthd[1857551]: do_request : NULL password received Dec 17 10:48:01 ispc postfix/smtpd[1857552]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc CRON[1857553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:48:01 ispc saslauthd[1857556]: pam_mysql - SELECT returned no result. Dec 17 10:48:01 ispc saslauthd[1857556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:01 ispc saslauthd[1857556]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:01 ispc postfix/smtpd[1857555]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc postfix/smtpd[1857559]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc saslauthd[1857565]: do_request : NULL password received Dec 17 10:48:01 ispc postfix/smtpd[1857564]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc saslauthd[1857562]: pam_mysql - SELECT returned no result. Dec 17 10:48:01 ispc saslauthd[1857562]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:01 ispc saslauthd[1857562]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:01 ispc saslauthd[1857567]: do_request : NULL password received Dec 17 10:48:01 ispc postfix/smtpd[1857566]: sql auxprop plugin using mysql engine Dec 17 10:48:01 ispc saslauthd[1857569]: pam_mysql - SELECT returned no result. Dec 17 10:48:01 ispc saslauthd[1857569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857569]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc postfix/smtpd[1857568]: sql auxprop plugin using mysql engine Dec 17 10:48:02 ispc saslauthd[1857570]: do_request : NULL password received Dec 17 10:48:02 ispc postfix/smtpd[1857573]: sql auxprop plugin using mysql engine Dec 17 10:48:02 ispc saslauthd[1857571]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857571]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857572]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857572]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857572]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857576]: do_request : NULL password received Dec 17 10:48:02 ispc postfix/smtpd[1857575]: sql auxprop plugin using mysql engine Dec 17 10:48:02 ispc saslauthd[1857577]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857577]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857583]: do_request : NULL password received Dec 17 10:48:02 ispc saslauthd[1857582]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857582]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857582]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857586]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857586]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc CRON[1857553]: pam_unix(cron:session): session closed for user root Dec 17 10:48:02 ispc saslauthd[1857585]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857585]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857584]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857584]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857584]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857587]: do_request : NULL password received Dec 17 10:48:02 ispc saslauthd[1857588]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857588]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857588]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857589]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857589]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857589]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857590]: do_request : NULL password received Dec 17 10:48:02 ispc saslauthd[1857592]: do_request : NULL password received Dec 17 10:48:02 ispc saslauthd[1857591]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857591]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857591]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857597]: do_request : NULL password received Dec 17 10:48:02 ispc saslauthd[1857594]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857594]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857593]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857593]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857596]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857595]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857595]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857595]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857596]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857596]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857600]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857600]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857600]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857598]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857598]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857598]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857604]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857604]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857604]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857607]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857607]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857601]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857601]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857601]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857605]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857605]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857599]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857599]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857606]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857606]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857606]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857599]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857611]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857611]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857609]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857611]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857609]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857610]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857610]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857610]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857608]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857608]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857615]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857615]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857615]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857616]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857616]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857616]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857612]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857612]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857612]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857614]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857614]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857614]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857613]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857617]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857617]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857613]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857617]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857613]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857620]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857620]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857620]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857618]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857618]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857618]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:02 ispc saslauthd[1857619]: pam_mysql - SELECT returned no result. Dec 17 10:48:02 ispc saslauthd[1857619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:02 ispc saslauthd[1857619]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857621]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857621]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857621]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857623]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857623]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857625]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857625]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857627]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857627]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857627]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857622]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857622]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857622]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857624]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857624]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857628]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857628]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857630]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857629]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857629]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857626]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857626]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857629]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857626]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857630]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857633]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857633]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857633]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857631]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857631]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857631]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857632]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857632]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857632]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857635]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857634]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857634]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857635]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857634]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857637]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857637]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857637]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857638]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857638]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857638]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857640]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857640]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857640]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857639]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857639]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857639]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857636]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857636]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857636]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857645]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857645]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857645]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857641]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857641]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857643]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857644]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857643]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857644]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857644]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857642]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857642]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857642]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857646]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857646]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857646]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857647]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857647]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857647]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857648]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857648]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857648]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857649]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857649]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857649]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857650]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857650]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857650]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857655]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857655]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857655]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857651]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857651]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857651]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857653]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857653]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857653]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857654]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857654]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857654]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857652]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857652]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857652]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857656]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857657]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857657]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857657]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857656]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:03 ispc saslauthd[1857659]: pam_mysql - SELECT returned no result. Dec 17 10:48:03 ispc saslauthd[1857659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:03 ispc saslauthd[1857659]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857661]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857661]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857661]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857660]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857660]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857660]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857662]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857662]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857662]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857663]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857663]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857663]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857666]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857666]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857666]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857665]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857665]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857665]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857664]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857664]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857668]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857668]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857668]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857669]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857669]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857669]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857667]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857667]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857667]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857670]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857670]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857670]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857672]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857671]: pam_mysql - SELECT returned no result. Dec 17 10:48:04 ispc saslauthd[1857672]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857671]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:04 ispc saslauthd[1857671]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:04 ispc saslauthd[1857672]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:05 ispc saslauthd[1857673]: pam_mysql - SELECT returned no result. Dec 17 10:48:05 ispc saslauthd[1857673]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:05 ispc saslauthd[1857673]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:05 ispc saslauthd[1857674]: pam_mysql - SELECT returned no result. Dec 17 10:48:05 ispc saslauthd[1857674]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:05 ispc saslauthd[1857674]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:06 ispc saslauthd[1857675]: pam_mysql - SELECT returned no result. Dec 17 10:48:06 ispc saslauthd[1857675]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:06 ispc saslauthd[1857675]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:06 ispc saslauthd[1857677]: pam_mysql - SELECT returned no result. Dec 17 10:48:06 ispc saslauthd[1857677]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:06 ispc saslauthd[1857677]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:06 ispc saslauthd[1857676]: pam_mysql - SELECT returned no result. Dec 17 10:48:06 ispc saslauthd[1857676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:06 ispc saslauthd[1857676]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:06 ispc saslauthd[1857678]: pam_mysql - SELECT returned no result. Dec 17 10:48:06 ispc saslauthd[1857678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:06 ispc saslauthd[1857678]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:06 ispc saslauthd[1857679]: pam_mysql - SELECT returned no result. Dec 17 10:48:06 ispc saslauthd[1857679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:06 ispc saslauthd[1857679]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:07 ispc saslauthd[1857680]: pam_mysql - SELECT returned no result. Dec 17 10:48:07 ispc saslauthd[1857680]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:07 ispc saslauthd[1857680]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:07 ispc saslauthd[1857686]: pam_mysql - SELECT returned no result. Dec 17 10:48:07 ispc saslauthd[1857686]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:07 ispc saslauthd[1857686]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:07 ispc saslauthd[1857685]: pam_mysql - SELECT returned no result. Dec 17 10:48:07 ispc saslauthd[1857685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:07 ispc saslauthd[1857685]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:07 ispc saslauthd[1857687]: pam_mysql - SELECT returned no result. Dec 17 10:48:07 ispc saslauthd[1857687]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:07 ispc saslauthd[1857687]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:08 ispc saslauthd[1857688]: pam_mysql - SELECT returned no result. Dec 17 10:48:08 ispc saslauthd[1857688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:08 ispc saslauthd[1857688]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:09 ispc saslauthd[1857689]: pam_mysql - SELECT returned no result. Dec 17 10:48:09 ispc saslauthd[1857689]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:09 ispc saslauthd[1857689]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:09 ispc saslauthd[1857690]: pam_mysql - SELECT returned no result. Dec 17 10:48:09 ispc saslauthd[1857690]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:09 ispc saslauthd[1857690]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:09 ispc saslauthd[1857691]: pam_mysql - SELECT returned no result. Dec 17 10:48:09 ispc saslauthd[1857691]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:09 ispc saslauthd[1857691]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:09 ispc saslauthd[1857692]: pam_mysql - SELECT returned no result. Dec 17 10:48:09 ispc saslauthd[1857692]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:09 ispc saslauthd[1857692]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc saslauthd[1857693]: pam_mysql - SELECT returned no result. Dec 17 10:48:10 ispc saslauthd[1857693]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:10 ispc saslauthd[1857693]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc saslauthd[1857694]: pam_mysql - SELECT returned no result. Dec 17 10:48:10 ispc saslauthd[1857694]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:10 ispc saslauthd[1857694]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc saslauthd[1857695]: pam_mysql - SELECT returned no result. Dec 17 10:48:10 ispc saslauthd[1857695]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:10 ispc saslauthd[1857695]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc saslauthd[1857696]: pam_mysql - SELECT returned no result. Dec 17 10:48:10 ispc saslauthd[1857696]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:10 ispc saslauthd[1857696]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc saslauthd[1857697]: pam_mysql - SELECT returned no result. Dec 17 10:48:10 ispc saslauthd[1857697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:10 ispc saslauthd[1857697]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:10 ispc postfix/smtpd[1857698]: sql auxprop plugin using mysql engine Dec 17 10:48:11 ispc saslauthd[1857699]: pam_mysql - SELECT returned no result. Dec 17 10:48:11 ispc saslauthd[1857699]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:11 ispc saslauthd[1857699]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:12 ispc saslauthd[1857700]: pam_mysql - SELECT returned no result. Dec 17 10:48:12 ispc saslauthd[1857700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:12 ispc saslauthd[1857700]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:12 ispc saslauthd[1857701]: pam_mysql - SELECT returned no result. Dec 17 10:48:12 ispc saslauthd[1857701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:12 ispc saslauthd[1857701]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:12 ispc saslauthd[1857702]: pam_mysql - SELECT returned no result. Dec 17 10:48:12 ispc saslauthd[1857702]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:12 ispc saslauthd[1857702]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:12 ispc saslauthd[1857703]: pam_mysql - SELECT returned no result. Dec 17 10:48:12 ispc saslauthd[1857703]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:12 ispc saslauthd[1857703]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:13 ispc saslauthd[1857704]: pam_mysql - SELECT returned no result. Dec 17 10:48:13 ispc saslauthd[1857704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:13 ispc saslauthd[1857704]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:13 ispc saslauthd[1857705]: pam_mysql - SELECT returned no result. Dec 17 10:48:13 ispc saslauthd[1857705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:13 ispc saslauthd[1857705]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:13 ispc saslauthd[1857706]: pam_mysql - SELECT returned no result. Dec 17 10:48:13 ispc saslauthd[1857706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:13 ispc saslauthd[1857706]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:13 ispc saslauthd[1857708]: pam_mysql - SELECT returned no result. Dec 17 10:48:13 ispc saslauthd[1857708]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:13 ispc saslauthd[1857708]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:13 ispc saslauthd[1857707]: pam_mysql - SELECT returned no result. Dec 17 10:48:13 ispc saslauthd[1857707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:13 ispc saslauthd[1857707]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:14 ispc saslauthd[1857709]: pam_mysql - SELECT returned no result. Dec 17 10:48:14 ispc saslauthd[1857709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:14 ispc saslauthd[1857709]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:15 ispc saslauthd[1857710]: pam_mysql - SELECT returned no result. Dec 17 10:48:15 ispc saslauthd[1857710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:15 ispc saslauthd[1857710]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857711]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857711]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857711]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857712]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857712]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857712]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857713]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857713]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857713]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857714]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857714]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857714]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857715]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857715]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857715]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:16 ispc saslauthd[1857716]: pam_mysql - SELECT returned no result. Dec 17 10:48:16 ispc saslauthd[1857716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:16 ispc saslauthd[1857716]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:17 ispc saslauthd[1857717]: pam_mysql - SELECT returned no result. Dec 17 10:48:17 ispc saslauthd[1857717]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:17 ispc saslauthd[1857717]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:17 ispc saslauthd[1857718]: pam_mysql - SELECT returned no result. Dec 17 10:48:17 ispc saslauthd[1857718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:17 ispc saslauthd[1857718]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:17 ispc saslauthd[1857719]: pam_mysql - SELECT returned no result. Dec 17 10:48:17 ispc saslauthd[1857719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:17 ispc saslauthd[1857719]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:18 ispc saslauthd[1857724]: pam_mysql - SELECT returned no result. Dec 17 10:48:18 ispc saslauthd[1857724]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:18 ispc saslauthd[1857724]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:19 ispc saslauthd[1857727]: pam_mysql - SELECT returned no result. Dec 17 10:48:19 ispc saslauthd[1857727]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:19 ispc saslauthd[1857727]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:19 ispc saslauthd[1857726]: pam_mysql - SELECT returned no result. Dec 17 10:48:19 ispc saslauthd[1857726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:19 ispc saslauthd[1857725]: pam_mysql - SELECT returned no result. Dec 17 10:48:19 ispc saslauthd[1857725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:19 ispc saslauthd[1857726]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:19 ispc saslauthd[1857725]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:19 ispc saslauthd[1857728]: pam_mysql - SELECT returned no result. Dec 17 10:48:19 ispc saslauthd[1857728]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:19 ispc saslauthd[1857728]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:19 ispc saslauthd[1857729]: pam_mysql - SELECT returned no result. Dec 17 10:48:19 ispc saslauthd[1857729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:19 ispc saslauthd[1857729]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:20 ispc saslauthd[1857730]: pam_mysql - SELECT returned no result. Dec 17 10:48:20 ispc saslauthd[1857730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:20 ispc saslauthd[1857730]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:20 ispc saslauthd[1857732]: pam_mysql - SELECT returned no result. Dec 17 10:48:20 ispc saslauthd[1857732]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:20 ispc saslauthd[1857732]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:20 ispc saslauthd[1857731]: pam_mysql - SELECT returned no result. Dec 17 10:48:20 ispc saslauthd[1857731]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:20 ispc saslauthd[1857731]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:20 ispc saslauthd[1857733]: pam_mysql - SELECT returned no result. Dec 17 10:48:20 ispc saslauthd[1857733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:20 ispc saslauthd[1857733]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:21 ispc saslauthd[1857735]: pam_mysql - SELECT returned no result. Dec 17 10:48:21 ispc saslauthd[1857735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:21 ispc saslauthd[1857735]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:22 ispc saslauthd[1857737]: pam_mysql - SELECT returned no result. Dec 17 10:48:22 ispc saslauthd[1857737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:22 ispc saslauthd[1857737]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:22 ispc saslauthd[1857739]: pam_mysql - SELECT returned no result. Dec 17 10:48:22 ispc saslauthd[1857739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:22 ispc saslauthd[1857739]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:22 ispc saslauthd[1857738]: pam_mysql - SELECT returned no result. Dec 17 10:48:22 ispc saslauthd[1857738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:22 ispc saslauthd[1857738]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:22 ispc saslauthd[1857741]: pam_mysql - SELECT returned no result. Dec 17 10:48:22 ispc saslauthd[1857741]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:22 ispc saslauthd[1857741]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:22 ispc saslauthd[1857740]: pam_mysql - SELECT returned no result. Dec 17 10:48:22 ispc saslauthd[1857740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:22 ispc saslauthd[1857740]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:23 ispc saslauthd[1857742]: pam_mysql - SELECT returned no result. Dec 17 10:48:23 ispc saslauthd[1857742]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:23 ispc saslauthd[1857742]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:23 ispc saslauthd[1857743]: pam_mysql - SELECT returned no result. Dec 17 10:48:23 ispc saslauthd[1857743]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:23 ispc saslauthd[1857743]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:23 ispc saslauthd[1857744]: pam_mysql - SELECT returned no result. Dec 17 10:48:23 ispc saslauthd[1857744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:23 ispc saslauthd[1857744]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:23 ispc saslauthd[1857745]: pam_mysql - SELECT returned no result. Dec 17 10:48:23 ispc saslauthd[1857745]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:23 ispc saslauthd[1857745]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:25 ispc saslauthd[1857746]: pam_mysql - SELECT returned no result. Dec 17 10:48:25 ispc saslauthd[1857746]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:25 ispc saslauthd[1857746]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:25 ispc saslauthd[1857750]: pam_mysql - SELECT returned no result. Dec 17 10:48:25 ispc saslauthd[1857750]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:25 ispc saslauthd[1857750]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:25 ispc saslauthd[1857751]: pam_mysql - SELECT returned no result. Dec 17 10:48:25 ispc saslauthd[1857751]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:25 ispc saslauthd[1857751]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:25 ispc saslauthd[1857749]: pam_mysql - SELECT returned no result. Dec 17 10:48:25 ispc saslauthd[1857749]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:25 ispc saslauthd[1857749]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857753]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857753]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857753]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857752]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857752]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857752]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857754]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857754]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857754]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857755]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857755]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857756]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857756]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857756]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:26 ispc saslauthd[1857757]: pam_mysql - SELECT returned no result. Dec 17 10:48:26 ispc saslauthd[1857757]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:26 ispc saslauthd[1857757]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:28 ispc saslauthd[1857762]: pam_mysql - SELECT returned no result. Dec 17 10:48:28 ispc saslauthd[1857762]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:28 ispc saslauthd[1857762]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857764]: pam_mysql - SELECT returned no result. Dec 17 10:48:29 ispc saslauthd[1857764]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:29 ispc saslauthd[1857764]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857763]: pam_mysql - SELECT returned no result. Dec 17 10:48:29 ispc saslauthd[1857763]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:29 ispc saslauthd[1857763]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857765]: pam_mysql - SELECT returned no result. Dec 17 10:48:29 ispc saslauthd[1857765]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:29 ispc saslauthd[1857765]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857767]: pam_mysql - SELECT returned no result. Dec 17 10:48:29 ispc saslauthd[1857767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:29 ispc saslauthd[1857767]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857766]: pam_mysql - SELECT returned no result. Dec 17 10:48:29 ispc saslauthd[1857766]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:29 ispc saslauthd[1857766]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:29 ispc saslauthd[1857769]: pam_mysql - SELECT returned no result. Dec 17 10:48:30 ispc saslauthd[1857769]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:30 ispc saslauthd[1857769]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:30 ispc saslauthd[1857768]: pam_mysql - SELECT returned no result. Dec 17 10:48:30 ispc saslauthd[1857768]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:30 ispc saslauthd[1857768]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:30 ispc saslauthd[1857770]: pam_mysql - SELECT returned no result. Dec 17 10:48:30 ispc saslauthd[1857770]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:30 ispc saslauthd[1857770]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:30 ispc saslauthd[1857771]: pam_mysql - SELECT returned no result. Dec 17 10:48:30 ispc saslauthd[1857771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:30 ispc saslauthd[1857771]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:31 ispc saslauthd[1857772]: pam_mysql - SELECT returned no result. Dec 17 10:48:31 ispc saslauthd[1857772]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:31 ispc saslauthd[1857772]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:32 ispc saslauthd[1857773]: pam_mysql - SELECT returned no result. Dec 17 10:48:32 ispc saslauthd[1857773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:32 ispc saslauthd[1857773]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:32 ispc saslauthd[1857774]: pam_mysql - SELECT returned no result. Dec 17 10:48:32 ispc saslauthd[1857774]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:32 ispc saslauthd[1857774]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:32 ispc saslauthd[1857775]: pam_mysql - SELECT returned no result. Dec 17 10:48:32 ispc saslauthd[1857775]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:32 ispc saslauthd[1857775]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:32 ispc saslauthd[1857777]: pam_mysql - SELECT returned no result. Dec 17 10:48:32 ispc saslauthd[1857777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:32 ispc saslauthd[1857777]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:32 ispc saslauthd[1857776]: pam_mysql - SELECT returned no result. Dec 17 10:48:32 ispc saslauthd[1857776]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:32 ispc saslauthd[1857776]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:33 ispc saslauthd[1857778]: pam_mysql - SELECT returned no result. Dec 17 10:48:33 ispc saslauthd[1857778]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:33 ispc saslauthd[1857778]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:33 ispc saslauthd[1857779]: pam_mysql - SELECT returned no result. Dec 17 10:48:33 ispc saslauthd[1857779]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:33 ispc saslauthd[1857779]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:33 ispc saslauthd[1857780]: pam_mysql - SELECT returned no result. Dec 17 10:48:33 ispc saslauthd[1857780]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:33 ispc saslauthd[1857780]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:33 ispc saslauthd[1857781]: pam_mysql - SELECT returned no result. Dec 17 10:48:33 ispc saslauthd[1857781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:33 ispc saslauthd[1857781]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:34 ispc saslauthd[1857782]: pam_mysql - SELECT returned no result. Dec 17 10:48:34 ispc saslauthd[1857782]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:34 ispc saslauthd[1857782]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:35 ispc saslauthd[1857783]: pam_mysql - SELECT returned no result. Dec 17 10:48:35 ispc saslauthd[1857783]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:35 ispc saslauthd[1857783]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:35 ispc saslauthd[1857784]: pam_mysql - SELECT returned no result. Dec 17 10:48:35 ispc saslauthd[1857784]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:35 ispc saslauthd[1857784]: do_auth : auth failure: [user=smtp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:35 ispc saslauthd[1857785]: pam_mysql - SELECT returned no result. Dec 17 10:48:35 ispc saslauthd[1857785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:35 ispc saslauthd[1857785]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:35 ispc saslauthd[1857786]: pam_mysql - SELECT returned no result. Dec 17 10:48:35 ispc saslauthd[1857786]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:35 ispc saslauthd[1857786]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:35 ispc saslauthd[1857787]: pam_mysql - SELECT returned no result. Dec 17 10:48:35 ispc saslauthd[1857787]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:35 ispc saslauthd[1857787]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:36 ispc saslauthd[1857788]: pam_mysql - SELECT returned no result. Dec 17 10:48:36 ispc saslauthd[1857788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:36 ispc saslauthd[1857788]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:36 ispc saslauthd[1857790]: pam_mysql - SELECT returned no result. Dec 17 10:48:36 ispc saslauthd[1857790]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:36 ispc saslauthd[1857790]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:36 ispc saslauthd[1857789]: pam_mysql - SELECT returned no result. Dec 17 10:48:36 ispc saslauthd[1857789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:36 ispc saslauthd[1857789]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:36 ispc saslauthd[1857791]: pam_mysql - SELECT returned no result. Dec 17 10:48:36 ispc saslauthd[1857791]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:36 ispc saslauthd[1857791]: do_auth : auth failure: [user=email] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857798]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857799]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857800]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857801]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857802]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857803]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857797]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857804]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857805]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857806]: do_request : NULL password received Dec 17 10:48:39 ispc saslauthd[1857809]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857809]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857809]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857810]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857810]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857807]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857807]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857807]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857812]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857812]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857815]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857815]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857815]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857808]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857808]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857808]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857813]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857813]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857811]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857811]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857811]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857814]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857814]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857814]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857819]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857819]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857824]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857824]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857824]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857823]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857823]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857820]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857823]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857820]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857820]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857821]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857821]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857821]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857827]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857827]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857827]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857825]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857825]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857822]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857822]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857822]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857828]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857828]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857826]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857826]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857829]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857829]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857829]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857835]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857835]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857835]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857830]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857830]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857834]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857834]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857834]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857831]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857831]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857831]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857833]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857833]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857833]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857837]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857837]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857836]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857832]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857836]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857832]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857832]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857841]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857841]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857841]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857839]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857839]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857838]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857838]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857840]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857840]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857840]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857845]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857845]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857845]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857844]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857844]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857844]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857843]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857843]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:39 ispc saslauthd[1857842]: pam_mysql - SELECT returned no result. Dec 17 10:48:39 ispc saslauthd[1857842]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:39 ispc saslauthd[1857842]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857846]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857846]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857846]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857848]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857847]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857847]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857848]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857847]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857849]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857849]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857849]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857850]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857850]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857851]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857851]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857855]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857855]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857855]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857854]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857854]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857854]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857852]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857852]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857853]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857853]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857853]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857861]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857861]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857861]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857858]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857858]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857857]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857857]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857857]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857860]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857860]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857856]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857856]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857859]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857859]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857856]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857859]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857863]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857864]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857864]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857863]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857864]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857865]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857865]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857865]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857862]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857862]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857870]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857870]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857870]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857871]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857871]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857871]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857867]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857867]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857867]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857869]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857869]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857866]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857866]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857866]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857868]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857868]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857868]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857874]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857874]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857874]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857875]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857875]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857875]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857872]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857872]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857873]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857873]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857873]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857878]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857878]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857878]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857880]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857880]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857879]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857879]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857876]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857876]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857879]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857877]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857877]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857877]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857881]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857881]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857881]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857885]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857885]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857883]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857883]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857883]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857882]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857882]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857884]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857884]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857884]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857888]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857888]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857888]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857889]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857889]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857886]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857886]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857886]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857890]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857890]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857890]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857887]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857887]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857891]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857891]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857891]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857893]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857893]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857893]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:40 ispc saslauthd[1857892]: pam_mysql - SELECT returned no result. Dec 17 10:48:40 ispc saslauthd[1857892]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:40 ispc saslauthd[1857892]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857894]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857894]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857894]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857895]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857895]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857896]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857898]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857898]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857896]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857898]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857897]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857897]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:41 ispc saslauthd[1857899]: pam_mysql - SELECT returned no result. Dec 17 10:48:41 ispc saslauthd[1857899]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:41 ispc saslauthd[1857899]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857900]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857900]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857901]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857901]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857901]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857903]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857903]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857902]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857902]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857902]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857905]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857905]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857904]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857904]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857906]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857906]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857908]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857908]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857907]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857907]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857907]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:43 ispc saslauthd[1857909]: pam_mysql - SELECT returned no result. Dec 17 10:48:43 ispc saslauthd[1857909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:43 ispc saslauthd[1857909]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857910]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857910]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857910]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857914]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857914]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857914]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857912]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857912]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857913]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857913]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857913]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857917]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857917]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857917]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857911]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857911]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857916]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857916]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857916]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857915]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857915]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857915]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857918]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857918]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857918]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:46 ispc saslauthd[1857919]: pam_mysql - SELECT returned no result. Dec 17 10:48:46 ispc saslauthd[1857919]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:46 ispc saslauthd[1857919]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:49 ispc saslauthd[1857925]: pam_mysql - SELECT returned no result. Dec 17 10:48:49 ispc saslauthd[1857925]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:49 ispc saslauthd[1857925]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:49 ispc saslauthd[1857927]: pam_mysql - SELECT returned no result. Dec 17 10:48:49 ispc saslauthd[1857927]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:49 ispc saslauthd[1857927]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:49 ispc saslauthd[1857926]: pam_mysql - SELECT returned no result. Dec 17 10:48:49 ispc saslauthd[1857926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:49 ispc saslauthd[1857926]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:49 ispc saslauthd[1857924]: pam_mysql - SELECT returned no result. Dec 17 10:48:49 ispc saslauthd[1857924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:49 ispc saslauthd[1857924]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857928]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857928]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857929]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857929]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857930]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857930]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857931]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857931]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857933]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857933]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857933]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:50 ispc saslauthd[1857932]: pam_mysql - SELECT returned no result. Dec 17 10:48:50 ispc saslauthd[1857932]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:50 ispc saslauthd[1857932]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:52 ispc saslauthd[1857934]: pam_mysql - SELECT returned no result. Dec 17 10:48:52 ispc saslauthd[1857934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:52 ispc saslauthd[1857934]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857936]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857936]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857935]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857935]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857935]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857937]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857937]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857940]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857940]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857940]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857938]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857938]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857939]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857939]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857942]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857942]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857942]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857941]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857941]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857941]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:53 ispc saslauthd[1857943]: pam_mysql - SELECT returned no result. Dec 17 10:48:53 ispc saslauthd[1857943]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:53 ispc saslauthd[1857943]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857944]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857944]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857944]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857945]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857945]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857946]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857946]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857946]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857947]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857947]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857947]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857950]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857950]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857950]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857948]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857948]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857948]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857949]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857949]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857952]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857949]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857952]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857952]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:56 ispc saslauthd[1857951]: pam_mysql - SELECT returned no result. Dec 17 10:48:56 ispc saslauthd[1857951]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:56 ispc saslauthd[1857951]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:57 ispc saslauthd[1857953]: pam_mysql - SELECT returned no result. Dec 17 10:48:57 ispc saslauthd[1857953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:57 ispc saslauthd[1857953]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:59 ispc saslauthd[1857958]: pam_mysql - SELECT returned no result. Dec 17 10:48:59 ispc saslauthd[1857958]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:59 ispc saslauthd[1857958]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:48:59 ispc saslauthd[1857959]: pam_mysql - SELECT returned no result. Dec 17 10:48:59 ispc saslauthd[1857959]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:48:59 ispc saslauthd[1857959]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857963]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857963]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857961]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857960]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857960]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857960]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857961]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857964]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857966]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857966]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857964]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857966]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857965]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857965]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857965]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857962]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857962]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:00 ispc saslauthd[1857967]: pam_mysql - SELECT returned no result. Dec 17 10:49:00 ispc saslauthd[1857967]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:00 ispc saslauthd[1857967]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:01 ispc CRON[1857968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:49:01 ispc CRON[1857968]: pam_unix(cron:session): session closed for user root Dec 17 10:49:02 ispc saslauthd[1857979]: pam_mysql - SELECT returned no result. Dec 17 10:49:02 ispc saslauthd[1857979]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:02 ispc saslauthd[1857979]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857980]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857980]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857980]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857981]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857981]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857983]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857982]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857982]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857981]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857983]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857982]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857984]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857984]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857985]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857985]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857986]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857986]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857987]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857987]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:03 ispc saslauthd[1857988]: pam_mysql - SELECT returned no result. Dec 17 10:49:03 ispc saslauthd[1857988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:03 ispc saslauthd[1857988]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857989]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857989]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857989]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857990]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857990]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857990]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857991]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857991]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857991]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857992]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857992]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857992]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857994]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857993]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857994]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857993]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857995]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857995]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857995]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857997]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857997]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857996]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857996]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:06 ispc saslauthd[1857998]: pam_mysql - SELECT returned no result. Dec 17 10:49:06 ispc saslauthd[1857998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:06 ispc saslauthd[1857998]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858003]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858003]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858003]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858004]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858004]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858005]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858005]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858008]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858008]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858008]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858006]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858006]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858007]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858007]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:09 ispc saslauthd[1858009]: pam_mysql - SELECT returned no result. Dec 17 10:49:09 ispc saslauthd[1858009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:09 ispc saslauthd[1858009]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:10 ispc saslauthd[1858010]: pam_mysql - SELECT returned no result. Dec 17 10:49:10 ispc saslauthd[1858010]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:10 ispc saslauthd[1858010]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:10 ispc saslauthd[1858012]: pam_mysql - SELECT returned no result. Dec 17 10:49:10 ispc saslauthd[1858012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:10 ispc saslauthd[1858012]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:10 ispc saslauthd[1858011]: pam_mysql - SELECT returned no result. Dec 17 10:49:10 ispc saslauthd[1858011]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:10 ispc saslauthd[1858011]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:12 ispc saslauthd[1858013]: pam_mysql - SELECT returned no result. Dec 17 10:49:12 ispc saslauthd[1858013]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:12 ispc saslauthd[1858013]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858014]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858014]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858017]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858017]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858017]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858015]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858015]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858015]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858018]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858018]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858018]: do_auth : auth failure: [user=paypal] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858016]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858016]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858016]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858019]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858019]: do_auth : auth failure: [user=tester] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858021]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858021]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858022]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858022]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858022]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:13 ispc saslauthd[1858020]: pam_mysql - SELECT returned no result. Dec 17 10:49:13 ispc saslauthd[1858020]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:13 ispc saslauthd[1858020]: do_auth : auth failure: [user=contact] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:15 ispc saslauthd[1858023]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858024]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858025]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858026]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858027]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858028]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858029]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858030]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858032]: do_request : NULL password received Dec 17 10:49:15 ispc saslauthd[1858031]: do_request : NULL password received Dec 17 10:49:16 ispc saslauthd[1858033]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858033]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858033]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858037]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858037]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858036]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858036]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858035]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858035]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858035]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858038]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858038]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858034]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858034]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858034]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858039]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858039]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858042]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858042]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858042]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858041]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858041]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858041]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858040]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858040]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858040]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858043]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858043]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858043]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858048]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858048]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858044]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858044]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858046]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858046]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858044]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858046]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858045]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858047]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858045]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858045]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858047]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858048]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858050]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858050]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858049]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858049]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858049]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858052]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858052]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858052]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858053]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858053]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858053]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858051]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858051]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858056]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858056]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858056]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858054]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858054]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858054]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858055]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858055]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858055]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858058]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858058]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858057]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858058]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858057]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858060]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858060]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858060]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858059]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858059]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858063]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858063]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858063]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858061]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858061]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858061]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858062]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858062]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858062]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858066]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858066]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858067]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858067]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858067]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858068]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858068]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858068]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858064]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858064]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858069]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858069]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858065]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858065]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858073]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858073]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858073]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858070]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858070]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858070]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858071]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858071]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858072]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858072]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858072]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858077]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858077]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858077]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858076]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858076]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858076]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858075]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858075]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858075]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:16 ispc saslauthd[1858074]: pam_mysql - SELECT returned no result. Dec 17 10:49:16 ispc saslauthd[1858074]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:16 ispc saslauthd[1858074]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858078]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858078]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858081]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858081]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858082]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858082]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858082]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858079]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858079]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858079]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858080]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858080]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858086]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858086]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858083]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858083]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858083]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858087]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858087]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858087]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858085]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858085]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858084]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858084]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858088]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858088]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858088]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858092]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858092]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858090]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858090]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858091]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858091]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858090]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858091]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858095]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858095]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858089]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858089]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858094]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858094]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858094]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858093]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858093]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858093]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858097]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858097]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858097]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858099]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858099]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858100]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858100]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858100]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858101]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858101]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858101]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858096]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858096]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858098]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858098]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858098]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858104]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858104]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858103]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858103]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858102]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858102]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858105]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858105]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858106]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858106]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858106]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858110]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858110]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858110]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858107]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858107]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858109]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858109]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858107]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858109]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858108]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858108]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858111]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858111]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858111]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858113]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858113]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858113]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858112]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858112]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858112]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858114]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858114]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858115]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858115]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858115]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858116]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858116]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858120]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858120]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858117]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858119]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858117]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858119]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858117]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858119]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858118]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858118]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:17 ispc saslauthd[1858121]: pam_mysql - SELECT returned no result. Dec 17 10:49:17 ispc saslauthd[1858121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:17 ispc saslauthd[1858121]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:18 ispc saslauthd[1858122]: pam_mysql - SELECT returned no result. Dec 17 10:49:18 ispc saslauthd[1858122]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:18 ispc saslauthd[1858122]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:19 ispc saslauthd[1858131]: pam_mysql - SELECT returned no result. Dec 17 10:49:19 ispc saslauthd[1858131]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:19 ispc saslauthd[1858131]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:19 ispc saslauthd[1858129]: pam_mysql - SELECT returned no result. Dec 17 10:49:19 ispc saslauthd[1858129]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:19 ispc saslauthd[1858129]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:19 ispc saslauthd[1858130]: pam_mysql - SELECT returned no result. Dec 17 10:49:19 ispc saslauthd[1858130]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:19 ispc saslauthd[1858130]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858132]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858132]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858132]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858135]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858135]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858134]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858134]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858134]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858136]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858136]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858133]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858133]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858133]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858137]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858137]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:20 ispc saslauthd[1858138]: pam_mysql - SELECT returned no result. Dec 17 10:49:20 ispc saslauthd[1858138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:20 ispc saslauthd[1858138]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:22 ispc postfix/smtpd[1858139]: sql auxprop plugin using mysql engine Dec 17 10:49:23 ispc saslauthd[1858141]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858143]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858141]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858143]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858142]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858142]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858142]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858145]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858145]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858148]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858148]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858148]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858145]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858146]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858146]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858147]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858147]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858144]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858144]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858144]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858149]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858149]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858149]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:23 ispc saslauthd[1858150]: pam_mysql - SELECT returned no result. Dec 17 10:49:23 ispc saslauthd[1858150]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:23 ispc saslauthd[1858150]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858151]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858151]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858152]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858152]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858153]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858153]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858156]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858156]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858154]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858154]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858157]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858157]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858155]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858158]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858155]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858158]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858159]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858159]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:26 ispc saslauthd[1858160]: pam_mysql - SELECT returned no result. Dec 17 10:49:26 ispc saslauthd[1858160]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:26 ispc saslauthd[1858160]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858162]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858162]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858161]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858161]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858164]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858165]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858165]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858166]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858166]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858164]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858166]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858163]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858163]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858163]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858168]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858168]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858167]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858167]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:29 ispc saslauthd[1858169]: pam_mysql - SELECT returned no result. Dec 17 10:49:29 ispc saslauthd[1858169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:29 ispc saslauthd[1858169]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:30 ispc saslauthd[1858170]: pam_mysql - SELECT returned no result. Dec 17 10:49:30 ispc saslauthd[1858170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:30 ispc saslauthd[1858170]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858176]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858176]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858175]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858175]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858179]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858179]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858177]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858177]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858180]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858180]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:32 ispc saslauthd[1858181]: pam_mysql - SELECT returned no result. Dec 17 10:49:32 ispc saslauthd[1858181]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:32 ispc saslauthd[1858181]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:33 ispc saslauthd[1858182]: pam_mysql - SELECT returned no result. Dec 17 10:49:33 ispc saslauthd[1858182]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:33 ispc saslauthd[1858182]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:33 ispc saslauthd[1858183]: pam_mysql - SELECT returned no result. Dec 17 10:49:33 ispc saslauthd[1858178]: pam_mysql - SELECT returned no result. Dec 17 10:49:33 ispc saslauthd[1858183]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:33 ispc saslauthd[1858178]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:33 ispc saslauthd[1858178]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:33 ispc saslauthd[1858183]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:33 ispc saslauthd[1858184]: pam_mysql - SELECT returned no result. Dec 17 10:49:33 ispc saslauthd[1858184]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:33 ispc saslauthd[1858184]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:35 ispc saslauthd[1858186]: pam_mysql - SELECT returned no result. Dec 17 10:49:35 ispc saslauthd[1858187]: pam_mysql - SELECT returned no result. Dec 17 10:49:35 ispc saslauthd[1858186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:35 ispc saslauthd[1858187]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:35 ispc saslauthd[1858187]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:35 ispc saslauthd[1858186]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858189]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858189]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858189]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858188]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858188]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858191]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858191]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858190]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858190]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858190]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858192]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858192]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858192]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858193]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858193]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858194]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858194]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:36 ispc saslauthd[1858195]: pam_mysql - SELECT returned no result. Dec 17 10:49:36 ispc saslauthd[1858195]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:36 ispc saslauthd[1858195]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858196]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858196]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858196]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858197]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858197]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858197]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858199]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858199]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858199]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858201]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858201]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858201]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858200]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858200]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858200]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858202]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858202]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858202]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858198]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858198]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858198]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858203]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858203]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858203]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858204]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858204]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858204]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:39 ispc saslauthd[1858205]: pam_mysql - SELECT returned no result. Dec 17 10:49:39 ispc saslauthd[1858205]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:39 ispc saslauthd[1858205]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858211]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858211]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858211]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858210]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858210]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858210]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858212]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858212]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858212]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858214]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858214]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858214]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858213]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858213]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858213]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858215]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858215]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858215]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858216]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858216]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858216]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858217]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858217]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858219]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858219]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:42 ispc saslauthd[1858218]: pam_mysql - SELECT returned no result. Dec 17 10:49:42 ispc saslauthd[1858218]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:42 ispc saslauthd[1858218]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858221]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858221]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858220]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858220]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858220]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858222]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858222]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858224]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858224]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858223]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858223]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858223]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858225]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858225]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858226]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858226]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858227]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858229]: pam_mysql - SELECT returned no result. Dec 17 10:49:45 ispc saslauthd[1858227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:45 ispc saslauthd[1858227]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:45 ispc saslauthd[1858229]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:46 ispc saslauthd[1858228]: pam_mysql - SELECT returned no result. Dec 17 10:49:46 ispc saslauthd[1858228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:46 ispc saslauthd[1858228]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:48 ispc saslauthd[1858230]: pam_mysql - SELECT returned no result. Dec 17 10:49:48 ispc saslauthd[1858230]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:48 ispc saslauthd[1858230]: do_auth : auth failure: [user=payment] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:48 ispc saslauthd[1858231]: pam_mysql - SELECT returned no result. Dec 17 10:49:48 ispc saslauthd[1858231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:48 ispc saslauthd[1858231]: do_auth : auth failure: [user=order] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:48 ispc saslauthd[1858232]: pam_mysql - SELECT returned no result. Dec 17 10:49:48 ispc saslauthd[1858232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:48 ispc saslauthd[1858232]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:48 ispc saslauthd[1858233]: pam_mysql - SELECT returned no result. Dec 17 10:49:48 ispc saslauthd[1858233]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:48 ispc saslauthd[1858233]: do_auth : auth failure: [user=billing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858235]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858236]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858235]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858235]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858236]: do_auth : auth failure: [user=all] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858234]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858234]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858234]: do_auth : auth failure: [user=director] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858237]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858237]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858237]: do_auth : auth failure: [user=newsletter] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858238]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858238]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858238]: do_auth : auth failure: [user=customers] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:49 ispc saslauthd[1858239]: pam_mysql - SELECT returned no result. Dec 17 10:49:49 ispc saslauthd[1858239]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:49 ispc saslauthd[1858239]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:51 ispc saslauthd[1858244]: do_request : NULL password received Dec 17 10:49:51 ispc saslauthd[1858245]: do_request : NULL password received Dec 17 10:49:51 ispc saslauthd[1858246]: do_request : NULL password received Dec 17 10:49:51 ispc saslauthd[1858247]: do_request : NULL password received Dec 17 10:49:51 ispc saslauthd[1858248]: do_request : NULL password received Dec 17 10:49:51 ispc saslauthd[1858249]: pam_mysql - SELECT returned no result. Dec 17 10:49:51 ispc saslauthd[1858249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:51 ispc saslauthd[1858249]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:51 ispc saslauthd[1858250]: pam_mysql - SELECT returned no result. Dec 17 10:49:51 ispc saslauthd[1858250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:51 ispc saslauthd[1858253]: pam_mysql - SELECT returned no result. Dec 17 10:49:51 ispc saslauthd[1858253]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:51 ispc saslauthd[1858250]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:51 ispc saslauthd[1858253]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:51 ispc saslauthd[1858251]: pam_mysql - SELECT returned no result. Dec 17 10:49:51 ispc saslauthd[1858251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:51 ispc saslauthd[1858251]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:51 ispc saslauthd[1858252]: pam_mysql - SELECT returned no result. Dec 17 10:49:51 ispc saslauthd[1858252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:51 ispc saslauthd[1858252]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858254]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858254]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858254]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858258]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858258]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858258]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858257]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858257]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858255]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858255]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858255]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858256]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858256]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858260]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858260]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858260]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858262]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858263]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858262]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858263]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858261]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858261]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858259]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858259]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858259]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858264]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858264]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858265]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858265]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858265]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858267]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858267]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858267]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858266]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858266]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858266]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858268]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858268]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858268]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858269]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858269]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858269]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858270]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858270]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858272]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858272]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858272]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858271]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858271]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858271]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858273]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858273]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858273]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858274]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858274]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858274]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858275]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858275]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858278]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858278]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858278]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858279]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858279]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858277]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858277]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858277]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:52 ispc saslauthd[1858276]: pam_mysql - SELECT returned no result. Dec 17 10:49:52 ispc saslauthd[1858276]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:52 ispc saslauthd[1858276]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858280]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858280]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858280]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858282]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858282]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858282]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858283]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858283]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858283]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858284]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858284]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858285]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858285]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858285]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858281]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858281]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858281]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858286]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858286]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858286]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858288]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858288]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858288]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858287]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858287]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858290]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858290]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858290]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858289]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858289]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858289]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858291]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858291]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858292]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858292]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:53 ispc saslauthd[1858293]: pam_mysql - SELECT returned no result. Dec 17 10:49:53 ispc saslauthd[1858293]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:53 ispc saslauthd[1858293]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:55 ispc saslauthd[1858294]: pam_mysql - SELECT returned no result. Dec 17 10:49:55 ispc saslauthd[1858294]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:55 ispc saslauthd[1858294]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:55 ispc saslauthd[1858295]: pam_mysql - SELECT returned no result. Dec 17 10:49:55 ispc saslauthd[1858295]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:55 ispc saslauthd[1858295]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:55 ispc saslauthd[1858297]: pam_mysql - SELECT returned no result. Dec 17 10:49:55 ispc saslauthd[1858297]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:55 ispc saslauthd[1858297]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:55 ispc saslauthd[1858296]: pam_mysql - SELECT returned no result. Dec 17 10:49:55 ispc saslauthd[1858296]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:55 ispc saslauthd[1858296]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:55 ispc saslauthd[1858298]: pam_mysql - SELECT returned no result. Dec 17 10:49:55 ispc saslauthd[1858298]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:55 ispc saslauthd[1858298]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:58 ispc saslauthd[1858299]: pam_mysql - SELECT returned no result. Dec 17 10:49:58 ispc saslauthd[1858299]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:58 ispc saslauthd[1858299]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:58 ispc saslauthd[1858300]: pam_mysql - SELECT returned no result. Dec 17 10:49:58 ispc saslauthd[1858300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:58 ispc saslauthd[1858300]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:59 ispc saslauthd[1858301]: pam_mysql - SELECT returned no result. Dec 17 10:49:59 ispc saslauthd[1858301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:59 ispc saslauthd[1858301]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:59 ispc saslauthd[1858303]: pam_mysql - SELECT returned no result. Dec 17 10:49:59 ispc saslauthd[1858303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:59 ispc saslauthd[1858303]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:49:59 ispc saslauthd[1858302]: pam_mysql - SELECT returned no result. Dec 17 10:49:59 ispc saslauthd[1858302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:49:59 ispc saslauthd[1858302]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:01 ispc CRON[1858312]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:50:01 ispc CRON[1858308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:50:01 ispc CRON[1858309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:50:01 ispc CRON[1858310]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 10:50:01 ispc CRON[1858311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:50:01 ispc CRON[1858309]: pam_unix(cron:session): session closed for user root Dec 17 10:50:01 ispc CRON[1858310]: pam_unix(cron:session): session closed for user www-data Dec 17 10:50:01 ispc CRON[1858312]: pam_unix(cron:session): session closed for user getmail Dec 17 10:50:02 ispc saslauthd[1858369]: pam_mysql - SELECT returned no result. Dec 17 10:50:02 ispc saslauthd[1858369]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:02 ispc saslauthd[1858369]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:02 ispc saslauthd[1858377]: pam_mysql - SELECT returned no result. Dec 17 10:50:02 ispc saslauthd[1858377]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:02 ispc saslauthd[1858377]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:02 ispc CRON[1858308]: pam_unix(cron:session): session closed for user root Dec 17 10:50:02 ispc CRON[1858311]: pam_unix(cron:session): session closed for user root Dec 17 10:50:02 ispc saslauthd[1858388]: pam_mysql - SELECT returned no result. Dec 17 10:50:02 ispc saslauthd[1858388]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:02 ispc saslauthd[1858388]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:02 ispc saslauthd[1858389]: pam_mysql - SELECT returned no result. Dec 17 10:50:02 ispc saslauthd[1858389]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:02 ispc saslauthd[1858389]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:02 ispc saslauthd[1858390]: pam_mysql - SELECT returned no result. Dec 17 10:50:02 ispc saslauthd[1858390]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:02 ispc saslauthd[1858390]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:05 ispc saslauthd[1858392]: pam_mysql - SELECT returned no result. Dec 17 10:50:05 ispc saslauthd[1858392]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:05 ispc saslauthd[1858392]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:05 ispc saslauthd[1858393]: pam_mysql - SELECT returned no result. Dec 17 10:50:05 ispc saslauthd[1858393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:05 ispc saslauthd[1858393]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:05 ispc saslauthd[1858395]: pam_mysql - SELECT returned no result. Dec 17 10:50:05 ispc saslauthd[1858395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:05 ispc saslauthd[1858395]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:05 ispc saslauthd[1858394]: pam_mysql - SELECT returned no result. Dec 17 10:50:05 ispc saslauthd[1858394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:05 ispc saslauthd[1858394]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:05 ispc saslauthd[1858396]: pam_mysql - SELECT returned no result. Dec 17 10:50:05 ispc saslauthd[1858396]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:05 ispc saslauthd[1858396]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:08 ispc saslauthd[1858397]: pam_mysql - SELECT returned no result. Dec 17 10:50:08 ispc saslauthd[1858397]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:08 ispc saslauthd[1858397]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:08 ispc saslauthd[1858398]: pam_mysql - SELECT returned no result. Dec 17 10:50:08 ispc saslauthd[1858398]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:08 ispc saslauthd[1858398]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:08 ispc saslauthd[1858399]: pam_mysql - SELECT returned no result. Dec 17 10:50:08 ispc saslauthd[1858399]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:08 ispc saslauthd[1858399]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:08 ispc saslauthd[1858400]: pam_mysql - SELECT returned no result. Dec 17 10:50:08 ispc saslauthd[1858400]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:08 ispc saslauthd[1858400]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:08 ispc saslauthd[1858401]: pam_mysql - SELECT returned no result. Dec 17 10:50:08 ispc saslauthd[1858401]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:08 ispc saslauthd[1858401]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:11 ispc saslauthd[1858407]: pam_mysql - SELECT returned no result. Dec 17 10:50:11 ispc saslauthd[1858407]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:11 ispc saslauthd[1858407]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:11 ispc saslauthd[1858409]: pam_mysql - SELECT returned no result. Dec 17 10:50:11 ispc saslauthd[1858409]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:11 ispc saslauthd[1858409]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:11 ispc saslauthd[1858406]: pam_mysql - SELECT returned no result. Dec 17 10:50:11 ispc saslauthd[1858406]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:11 ispc saslauthd[1858406]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:11 ispc saslauthd[1858408]: pam_mysql - SELECT returned no result. Dec 17 10:50:11 ispc saslauthd[1858408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:11 ispc saslauthd[1858408]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:11 ispc saslauthd[1858410]: pam_mysql - SELECT returned no result. Dec 17 10:50:11 ispc saslauthd[1858410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:11 ispc saslauthd[1858410]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:15 ispc saslauthd[1858412]: pam_mysql - SELECT returned no result. Dec 17 10:50:15 ispc saslauthd[1858412]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:15 ispc saslauthd[1858412]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:15 ispc saslauthd[1858413]: pam_mysql - SELECT returned no result. Dec 17 10:50:15 ispc saslauthd[1858413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:15 ispc saslauthd[1858413]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:15 ispc saslauthd[1858414]: pam_mysql - SELECT returned no result. Dec 17 10:50:15 ispc saslauthd[1858414]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:15 ispc saslauthd[1858414]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:15 ispc saslauthd[1858411]: pam_mysql - SELECT returned no result. Dec 17 10:50:15 ispc saslauthd[1858411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:15 ispc saslauthd[1858411]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:15 ispc saslauthd[1858415]: pam_mysql - SELECT returned no result. Dec 17 10:50:15 ispc saslauthd[1858415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:15 ispc saslauthd[1858415]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:18 ispc saslauthd[1858416]: pam_mysql - SELECT returned no result. Dec 17 10:50:18 ispc saslauthd[1858416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:18 ispc saslauthd[1858416]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:18 ispc saslauthd[1858418]: pam_mysql - SELECT returned no result. Dec 17 10:50:18 ispc saslauthd[1858418]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:18 ispc saslauthd[1858418]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:18 ispc saslauthd[1858417]: pam_mysql - SELECT returned no result. Dec 17 10:50:18 ispc saslauthd[1858417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:18 ispc saslauthd[1858417]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:18 ispc saslauthd[1858419]: pam_mysql - SELECT returned no result. Dec 17 10:50:18 ispc saslauthd[1858420]: pam_mysql - SELECT returned no result. Dec 17 10:50:18 ispc saslauthd[1858419]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:18 ispc saslauthd[1858420]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:18 ispc saslauthd[1858420]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:18 ispc saslauthd[1858419]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:21 ispc saslauthd[1858423]: pam_mysql - SELECT returned no result. Dec 17 10:50:21 ispc saslauthd[1858423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:21 ispc saslauthd[1858423]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:21 ispc saslauthd[1858422]: pam_mysql - SELECT returned no result. Dec 17 10:50:21 ispc saslauthd[1858422]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:21 ispc saslauthd[1858421]: pam_mysql - SELECT returned no result. Dec 17 10:50:21 ispc saslauthd[1858421]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:21 ispc saslauthd[1858422]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:21 ispc saslauthd[1858421]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:21 ispc saslauthd[1858425]: pam_mysql - SELECT returned no result. Dec 17 10:50:21 ispc saslauthd[1858425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:21 ispc saslauthd[1858425]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:21 ispc saslauthd[1858424]: pam_mysql - SELECT returned no result. Dec 17 10:50:21 ispc saslauthd[1858424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:21 ispc saslauthd[1858424]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:24 ispc saslauthd[1858431]: pam_mysql - SELECT returned no result. Dec 17 10:50:24 ispc saslauthd[1858431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:24 ispc saslauthd[1858431]: do_auth : auth failure: [user=payments] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:24 ispc saslauthd[1858432]: pam_mysql - SELECT returned no result. Dec 17 10:50:24 ispc saslauthd[1858432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:24 ispc saslauthd[1858432]: do_auth : auth failure: [user=jobs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:24 ispc saslauthd[1858430]: pam_mysql - SELECT returned no result. Dec 17 10:50:24 ispc saslauthd[1858430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:24 ispc saslauthd[1858430]: do_auth : auth failure: [user=company] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:24 ispc saslauthd[1858433]: pam_mysql - SELECT returned no result. Dec 17 10:50:24 ispc saslauthd[1858433]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:24 ispc saslauthd[1858433]: do_auth : auth failure: [user=marketing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:24 ispc saslauthd[1858434]: pam_mysql - SELECT returned no result. Dec 17 10:50:24 ispc saslauthd[1858434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:24 ispc saslauthd[1858434]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:50:48 ispc saslauthd[1858443]: pam_mysql - SELECT returned no result. Dec 17 10:50:48 ispc saslauthd[1858443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:50:48 ispc saslauthd[1858443]: do_auth : auth failure: [user=manager] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:51:01 ispc CRON[1858448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:51:01 ispc CRON[1858448]: pam_unix(cron:session): session closed for user root Dec 17 10:51:56 ispc sshd[1858483]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 10:51:56 ispc sshd[1858483]: Invalid user blceu from 193.110.157.47 Dec 17 10:52:01 ispc CRON[1858485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:52:02 ispc CRON[1858485]: pam_unix(cron:session): session closed for user root Dec 17 10:53:01 ispc CRON[1858526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:53:01 ispc CRON[1858526]: pam_unix(cron:session): session closed for user root Dec 17 10:54:01 ispc CRON[1858563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:54:02 ispc CRON[1858563]: pam_unix(cron:session): session closed for user root Dec 17 10:55:01 ispc CRON[1858605]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 10:55:01 ispc CRON[1858602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:55:01 ispc CRON[1858603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:55:01 ispc CRON[1858604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:55:01 ispc CRON[1858603]: pam_unix(cron:session): session closed for user root Dec 17 10:55:01 ispc CRON[1858605]: pam_unix(cron:session): session closed for user getmail Dec 17 10:55:01 ispc CRON[1858604]: pam_unix(cron:session): session closed for user root Dec 17 10:55:01 ispc CRON[1858602]: pam_unix(cron:session): session closed for user root Dec 17 10:55:24 ispc sshd[1858575]: Invalid user diamantdi from 165.210.33.193 Dec 17 10:56:01 ispc CRON[1858705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:56:02 ispc CRON[1858705]: pam_unix(cron:session): session closed for user root Dec 17 10:56:06 ispc sshd[1858716]: Invalid user ziplines from 43.135.148.156 Dec 17 10:57:01 ispc CRON[1858742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:57:01 ispc CRON[1858742]: pam_unix(cron:session): session closed for user root Dec 17 10:57:19 ispc postfix/smtpd[1858761]: sql auxprop plugin using mysql engine Dec 17 10:57:20 ispc saslauthd[1858764]: pam_mysql - SELECT returned no result. Dec 17 10:57:20 ispc saslauthd[1858764]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 10:57:20 ispc saslauthd[1858764]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 10:58:01 ispc CRON[1858796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:58:01 ispc CRON[1858796]: pam_unix(cron:session): session closed for user root Dec 17 10:58:59 ispc sshd[1858834]: Invalid user blceu from 43.135.148.156 Dec 17 10:59:01 ispc CRON[1858836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 10:59:02 ispc CRON[1858836]: pam_unix(cron:session): session closed for user root Dec 17 10:59:20 ispc postfix/smtpd[1858855]: sql auxprop plugin using mysql engine Dec 17 10:59:20 ispc CRON[1857042]: pam_unix(cron:session): session closed for user root Dec 17 11:00:01 ispc CRON[1858865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:00:01 ispc CRON[1858869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:00:01 ispc CRON[1858866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:00:01 ispc CRON[1858867]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:00:01 ispc CRON[1858868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:00:01 ispc CRON[1858870]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:00:01 ispc CRON[1858866]: pam_unix(cron:session): session closed for user root Dec 17 11:00:01 ispc CRON[1858867]: pam_unix(cron:session): session closed for user www-data Dec 17 11:00:01 ispc CRON[1858870]: pam_unix(cron:session): session closed for user getmail Dec 17 11:00:01 ispc CRON[1858865]: pam_unix(cron:session): session closed for user root Dec 17 11:00:01 ispc CRON[1858868]: pam_unix(cron:session): session closed for user root Dec 17 11:00:06 ispc CRON[1858869]: pam_unix(cron:session): session closed for user root Dec 17 11:01:01 ispc CRON[1859026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:01:50 ispc sshd[1859057]: Invalid user blceu from 175.125.92.77 Dec 17 11:02:01 ispc CRON[1859063]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 11:02:01 ispc CRON[1859064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:02:02 ispc CRON[1859064]: pam_unix(cron:session): session closed for user root Dec 17 11:02:14 ispc postfix/smtpd[1859517]: sql auxprop plugin using mysql engine Dec 17 11:02:22 ispc postfix/smtpd[1859676]: sql auxprop plugin using mysql engine Dec 17 11:02:48 ispc sshd[1859980]: Invalid user ziplines from 175.125.92.77 Dec 17 11:02:51 ispc sshd[1859998]: Invalid user ubuntu from 36.50.177.171 Dec 17 11:02:51 ispc sshd[1859951]: Invalid user klape from 36.50.177.171 Dec 17 11:02:56 ispc CRON[1859063]: pam_unix(cron:session): session closed for user logcheck Dec 17 11:03:01 ispc CRON[1860148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:03:01 ispc CRON[1860148]: pam_unix(cron:session): session closed for user root Dec 17 11:03:14 ispc sshd[1860164]: Invalid user ziplines from 211.45.175.153 Dec 17 11:04:01 ispc CRON[1860186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:04:02 ispc CRON[1860186]: pam_unix(cron:session): session closed for user root Dec 17 11:05:01 ispc CRON[1860223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:05:01 ispc CRON[1860224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:05:01 ispc CRON[1860225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:05:01 ispc CRON[1860226]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:05:01 ispc CRON[1860224]: pam_unix(cron:session): session closed for user root Dec 17 11:05:01 ispc CRON[1860226]: pam_unix(cron:session): session closed for user getmail Dec 17 11:05:01 ispc CRON[1860225]: pam_unix(cron:session): session closed for user root Dec 17 11:05:01 ispc CRON[1860223]: pam_unix(cron:session): session closed for user root Dec 17 11:06:01 ispc CRON[1860328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:06:02 ispc CRON[1860328]: pam_unix(cron:session): session closed for user root Dec 17 11:06:03 ispc postfix/smtpd[1860339]: sql auxprop plugin using mysql engine Dec 17 11:06:04 ispc saslauthd[1860342]: pam_mysql - SELECT returned no result. Dec 17 11:06:04 ispc saslauthd[1860342]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:06:04 ispc saslauthd[1860342]: do_auth : auth failure: [user=mary] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:06:11 ispc sshd[1860347]: Invalid user martof from 116.120.58.228 Dec 17 11:06:23 ispc saslauthd[1860353]: pam_mysql - SELECT returned no result. Dec 17 11:06:23 ispc saslauthd[1860353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:06:23 ispc saslauthd[1860353]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:06:35 ispc saslauthd[1860358]: pam_mysql - SELECT returned no result. Dec 17 11:06:35 ispc saslauthd[1860358]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:06:35 ispc saslauthd[1860358]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:07:01 ispc CRON[1860373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:07:03 ispc CRON[1860373]: pam_unix(cron:session): session closed for user root Dec 17 11:08:01 ispc CRON[1860419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:08:01 ispc CRON[1860419]: pam_unix(cron:session): session closed for user root Dec 17 11:08:05 ispc sshd[1860430]: Invalid user anoraksro from 152.53.188.144 Dec 17 11:09:01 ispc CRON[1860459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:09:01 ispc CRON[1860458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:09:02 ispc CRON[1860458]: pam_unix(cron:session): session closed for user root Dec 17 11:09:02 ispc CRON[1860459]: pam_unix(cron:session): session closed for user root Dec 17 11:10:01 ispc CRON[1860507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:10:01 ispc CRON[1860508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:10:01 ispc CRON[1860510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:10:01 ispc CRON[1860511]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:10:01 ispc CRON[1860509]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:10:01 ispc CRON[1860508]: pam_unix(cron:session): session closed for user root Dec 17 11:10:01 ispc CRON[1860509]: pam_unix(cron:session): session closed for user www-data Dec 17 11:10:01 ispc CRON[1860511]: pam_unix(cron:session): session closed for user getmail Dec 17 11:10:02 ispc CRON[1860507]: pam_unix(cron:session): session closed for user root Dec 17 11:10:02 ispc CRON[1860510]: pam_unix(cron:session): session closed for user root Dec 17 11:10:04 ispc sshd[1860585]: Invalid user ziplines from 165.227.38.205 Dec 17 11:11:01 ispc CRON[1860612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:11:02 ispc CRON[1860612]: pam_unix(cron:session): session closed for user root Dec 17 11:11:05 ispc sshd[1860624]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 11:12:01 ispc CRON[1860652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:12:01 ispc CRON[1860652]: pam_unix(cron:session): session closed for user root Dec 17 11:13:01 ispc CRON[1860699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:13:02 ispc CRON[1860699]: pam_unix(cron:session): session closed for user root Dec 17 11:13:17 ispc sshd[1860715]: Invalid user ziplines from 51.159.91.86 Dec 17 11:13:41 ispc sshd[1860730]: Did not receive identification string from 192.227.134.84 Dec 17 11:14:01 ispc CRON[1860740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:14:02 ispc CRON[1860740]: pam_unix(cron:session): session closed for user root Dec 17 11:14:57 ispc sshd[1860773]: Invalid user diamantdi from 35.239.77.168 Dec 17 11:15:01 ispc CRON[1860781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:15:01 ispc CRON[1860782]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:15:01 ispc CRON[1860779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:15:01 ispc CRON[1860780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:15:01 ispc CRON[1860780]: pam_unix(cron:session): session closed for user root Dec 17 11:15:01 ispc CRON[1860782]: pam_unix(cron:session): session closed for user getmail Dec 17 11:15:02 ispc CRON[1860781]: pam_unix(cron:session): session closed for user root Dec 17 11:15:02 ispc CRON[1860779]: pam_unix(cron:session): session closed for user root Dec 17 11:16:01 ispc CRON[1860883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:16:01 ispc CRON[1860883]: pam_unix(cron:session): session closed for user root Dec 17 11:17:01 ispc CRON[1860920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:17:02 ispc CRON[1860920]: pam_unix(cron:session): session closed for user root Dec 17 11:17:10 ispc postfix/smtpd[1860932]: sql auxprop plugin using mysql engine Dec 17 11:17:11 ispc saslauthd[1860939]: pam_mysql - SELECT returned no result. Dec 17 11:17:11 ispc saslauthd[1860939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:17:11 ispc saslauthd[1860939]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:17:41 ispc sshd[1860949]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 11:17:45 ispc sshd[1860955]: Invalid user blceu from 51.159.91.86 Dec 17 11:18:01 ispc CRON[1860974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:18:01 ispc CRON[1860974]: pam_unix(cron:session): session closed for user root Dec 17 11:18:37 ispc sshd[1861002]: Invalid user blceu from 213.199.57.249 Dec 17 11:19:01 ispc CRON[1861014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:19:02 ispc CRON[1861014]: pam_unix(cron:session): session closed for user root Dec 17 11:19:27 ispc sshd[1861041]: Did not receive identification string from 174.138.7.204 Dec 17 11:19:42 ispc sshd[1861047]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 11:20:01 ispc CRON[1861058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:20:01 ispc CRON[1861059]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:20:01 ispc CRON[1861060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:20:01 ispc CRON[1861061]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:20:01 ispc CRON[1861057]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:20:01 ispc CRON[1861058]: pam_unix(cron:session): session closed for user root Dec 17 11:20:01 ispc CRON[1861059]: pam_unix(cron:session): session closed for user www-data Dec 17 11:20:01 ispc CRON[1861061]: pam_unix(cron:session): session closed for user getmail Dec 17 11:20:01 ispc CRON[1861060]: pam_unix(cron:session): session closed for user root Dec 17 11:20:01 ispc CRON[1861057]: pam_unix(cron:session): session closed for user root Dec 17 11:21:01 ispc CRON[1861165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:21:01 ispc CRON[1861166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:21:01 ispc CRON[1861165]: pam_unix(cron:session): session closed for user root Dec 17 11:21:02 ispc CRON[1861166]: pam_unix(cron:session): session closed for user root Dec 17 11:21:14 ispc postfix/smtpd[1861183]: sql auxprop plugin using mysql engine Dec 17 11:21:16 ispc saslauthd[1861188]: pam_mysql - SELECT returned no result. Dec 17 11:21:16 ispc saslauthd[1861188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:21:16 ispc saslauthd[1861188]: do_auth : auth failure: [user=master] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:21:19 ispc CRON[1859026]: pam_unix(cron:session): session closed for user root Dec 17 11:22:01 ispc CRON[1861197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:22:06 ispc CRON[1861197]: pam_unix(cron:session): session closed for user root Dec 17 11:23:01 ispc CRON[1861229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:24:01 ispc CRON[1861264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:24:02 ispc CRON[1861264]: pam_unix(cron:session): session closed for user root Dec 17 11:25:01 ispc CRON[1861305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:25:01 ispc CRON[1861304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:25:01 ispc CRON[1861306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:25:01 ispc CRON[1861307]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:25:01 ispc CRON[1861305]: pam_unix(cron:session): session closed for user root Dec 17 11:25:01 ispc CRON[1861307]: pam_unix(cron:session): session closed for user getmail Dec 17 11:25:02 ispc CRON[1861306]: pam_unix(cron:session): session closed for user root Dec 17 11:25:02 ispc CRON[1861304]: pam_unix(cron:session): session closed for user root Dec 17 11:25:39 ispc sshd[1861402]: Did not receive identification string from 174.138.13.140 Dec 17 11:26:01 ispc CRON[1861411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:26:01 ispc CRON[1861411]: pam_unix(cron:session): session closed for user root Dec 17 11:26:06 ispc postfix/smtpd[1861428]: sql auxprop plugin using mysql engine Dec 17 11:26:07 ispc saslauthd[1861431]: pam_mysql - SELECT returned no result. Dec 17 11:26:07 ispc saslauthd[1861431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:26:07 ispc saslauthd[1861431]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:26:34 ispc postfix/smtpd[1861442]: sql auxprop plugin using mysql engine Dec 17 11:27:01 ispc CRON[1861458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:27:01 ispc CRON[1861458]: pam_unix(cron:session): session closed for user root Dec 17 11:28:02 ispc CRON[1861507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:28:02 ispc CRON[1861507]: pam_unix(cron:session): session closed for user root Dec 17 11:28:06 ispc postfix/smtpd[1861518]: sql auxprop plugin using mysql engine Dec 17 11:28:07 ispc saslauthd[1861520]: pam_mysql - SELECT returned no result. Dec 17 11:28:07 ispc saslauthd[1861520]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:28:07 ispc saslauthd[1861520]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:29:01 ispc CRON[1861550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:29:02 ispc CRON[1861550]: pam_unix(cron:session): session closed for user root Dec 17 11:30:01 ispc CRON[1861591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:30:01 ispc CRON[1861590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:30:01 ispc CRON[1861592]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:30:01 ispc CRON[1861593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:30:01 ispc CRON[1861594]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:30:01 ispc CRON[1861592]: pam_unix(cron:session): session closed for user www-data Dec 17 11:30:01 ispc CRON[1861591]: pam_unix(cron:session): session closed for user root Dec 17 11:30:01 ispc CRON[1861594]: pam_unix(cron:session): session closed for user getmail Dec 17 11:30:01 ispc CRON[1861593]: pam_unix(cron:session): session closed for user root Dec 17 11:30:01 ispc CRON[1861590]: pam_unix(cron:session): session closed for user root Dec 17 11:30:05 ispc sshd[1861668]: Invalid user ziplines from 118.218.219.250 Dec 17 11:30:41 ispc sshd[1861686]: Invalid user martof from 211.45.175.153 Dec 17 11:31:01 ispc CRON[1861704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:31:02 ispc CRON[1861704]: pam_unix(cron:session): session closed for user root Dec 17 11:32:01 ispc CRON[1861741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:32:02 ispc CRON[1861741]: pam_unix(cron:session): session closed for user root Dec 17 11:32:32 ispc postfix/smtpd[1861772]: sql auxprop plugin using mysql engine Dec 17 11:33:01 ispc CRON[1861794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:33:01 ispc sshd[1861792]: Invalid user ziplines from 116.120.58.228 Dec 17 11:33:02 ispc CRON[1861794]: pam_unix(cron:session): session closed for user root Dec 17 11:33:30 ispc sshd[1861821]: Invalid user klape from 200.32.52.150 Dec 17 11:33:34 ispc sshd[1861823]: Invalid user ubuntu from 200.32.52.150 Dec 17 11:34:01 ispc CRON[1861839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:34:01 ispc CRON[1861839]: pam_unix(cron:session): session closed for user root Dec 17 11:35:01 ispc CRON[1861884]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:35:01 ispc CRON[1861882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:35:01 ispc CRON[1861883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:35:01 ispc CRON[1861881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:35:01 ispc CRON[1861884]: pam_unix(cron:session): session closed for user getmail Dec 17 11:35:01 ispc CRON[1861882]: pam_unix(cron:session): session closed for user root Dec 17 11:35:02 ispc CRON[1861883]: pam_unix(cron:session): session closed for user root Dec 17 11:35:02 ispc CRON[1861881]: pam_unix(cron:session): session closed for user root Dec 17 11:35:21 ispc sshd[1861969]: Invalid user martof from 118.218.219.250 Dec 17 11:35:34 ispc sshd[1861976]: Did not receive identification string from 183.236.30.60 Dec 17 11:36:01 ispc CRON[1861991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:36:02 ispc CRON[1861991]: pam_unix(cron:session): session closed for user root Dec 17 11:36:17 ispc sshd[1862013]: Did not receive identification string from 45.140.17.97 Dec 17 11:36:17 ispc postfix/smtpd[1862014]: sql auxprop plugin using mysql engine Dec 17 11:36:23 ispc sshd[1862018]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 11:36:26 ispc saslauthd[1862024]: pam_mysql - SELECT returned no result. Dec 17 11:36:26 ispc saslauthd[1862024]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:36:26 ispc saslauthd[1862024]: do_auth : auth failure: [user=me] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:37:01 ispc CRON[1862040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:37:01 ispc CRON[1862040]: pam_unix(cron:session): session closed for user root Dec 17 11:38:01 ispc CRON[1862088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:38:02 ispc CRON[1862088]: pam_unix(cron:session): session closed for user root Dec 17 11:39:01 ispc CRON[1862128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:39:01 ispc CRON[1862127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:39:01 ispc CRON[1862127]: pam_unix(cron:session): session closed for user root Dec 17 11:39:01 ispc CRON[1862128]: pam_unix(cron:session): session closed for user root Dec 17 11:39:39 ispc postfix/smtpd[1862169]: sql auxprop plugin using mysql engine Dec 17 11:39:49 ispc postfix/smtpd[1862175]: sql auxprop plugin using mysql engine Dec 17 11:39:50 ispc saslauthd[1862177]: pam_mysql - SELECT returned no result. Dec 17 11:39:50 ispc saslauthd[1862177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:39:50 ispc saslauthd[1862177]: do_auth : auth failure: [user=finance] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:40:01 ispc CRON[1862182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:40:01 ispc CRON[1862184]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:40:01 ispc CRON[1862183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:40:01 ispc CRON[1862185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:40:01 ispc CRON[1862186]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:40:01 ispc CRON[1862184]: pam_unix(cron:session): session closed for user www-data Dec 17 11:40:01 ispc CRON[1862183]: pam_unix(cron:session): session closed for user root Dec 17 11:40:01 ispc CRON[1862186]: pam_unix(cron:session): session closed for user getmail Dec 17 11:40:01 ispc CRON[1862182]: pam_unix(cron:session): session closed for user root Dec 17 11:40:01 ispc CRON[1862185]: pam_unix(cron:session): session closed for user root Dec 17 11:41:01 ispc CRON[1862293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:41:02 ispc CRON[1862293]: pam_unix(cron:session): session closed for user root Dec 17 11:41:36 ispc postfix/smtpd[1862327]: sql auxprop plugin using mysql engine Dec 17 11:42:01 ispc CRON[1862349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:42:01 ispc CRON[1862349]: pam_unix(cron:session): session closed for user root Dec 17 11:42:06 ispc sshd[1862362]: Invalid user martof from 27.254.144.183 Dec 17 11:42:12 ispc postfix/smtpd[1862368]: sql auxprop plugin using mysql engine Dec 17 11:43:01 ispc CRON[1862402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:43:01 ispc CRON[1862402]: pam_unix(cron:session): session closed for user root Dec 17 11:43:11 ispc saslauthd[1862418]: pam_mysql - SELECT returned no result. Dec 17 11:43:11 ispc saslauthd[1862418]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:43:11 ispc saslauthd[1862418]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:43:26 ispc CRON[1861229]: pam_unix(cron:session): session closed for user root Dec 17 11:44:01 ispc CRON[1862428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:44:06 ispc CRON[1862428]: pam_unix(cron:session): session closed for user root Dec 17 11:44:17 ispc saslauthd[1862440]: pam_mysql - SELECT returned no result. Dec 17 11:44:17 ispc saslauthd[1862440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:44:17 ispc saslauthd[1862440]: do_auth : auth failure: [user=pass@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 11:44:43 ispc sshd[1862446]: Invalid user klape from 51.77.222.24 Dec 17 11:44:44 ispc sshd[1862448]: Invalid user ubuntu from 51.77.222.24 Dec 17 11:45:01 ispc CRON[1862454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:45:01 ispc CRON[1862456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:45:01 ispc CRON[1862457]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:45:01 ispc CRON[1862455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:45:01 ispc CRON[1862455]: pam_unix(cron:session): session closed for user root Dec 17 11:45:01 ispc CRON[1862457]: pam_unix(cron:session): session closed for user getmail Dec 17 11:45:03 ispc CRON[1862454]: pam_unix(cron:session): session closed for user root Dec 17 11:45:40 ispc postfix/smtpd[1862547]: sql auxprop plugin using mysql engine Dec 17 11:46:01 ispc CRON[1862559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:46:02 ispc CRON[1862559]: pam_unix(cron:session): session closed for user root Dec 17 11:47:01 ispc CRON[1862600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:47:01 ispc CRON[1862600]: pam_unix(cron:session): session closed for user root Dec 17 11:47:43 ispc sshd[1862630]: Invalid user admin from 174.138.7.204 Dec 17 11:47:53 ispc postfix/smtpd[1862641]: sql auxprop plugin using mysql engine Dec 17 11:47:57 ispc sshd[1862647]: Invalid user ziplines from 185.208.181.153 Dec 17 11:48:01 ispc CRON[1862653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:48:02 ispc CRON[1862653]: pam_unix(cron:session): session closed for user root Dec 17 11:48:13 ispc sshd[1862668]: Invalid user admin from 174.138.7.204 Dec 17 11:48:42 ispc sshd[1862682]: Invalid user admin from 174.138.7.204 Dec 17 11:49:01 ispc CRON[1862692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:49:02 ispc CRON[1862692]: pam_unix(cron:session): session closed for user root Dec 17 11:49:10 ispc sshd[1862707]: Invalid user admin from 174.138.7.204 Dec 17 11:49:37 ispc sshd[1862722]: Invalid user admin from 174.138.7.204 Dec 17 11:50:02 ispc CRON[1862737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:50:02 ispc CRON[1862738]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:50:02 ispc CRON[1862734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:50:02 ispc CRON[1862736]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 11:50:02 ispc CRON[1862735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:50:02 ispc CRON[1862735]: pam_unix(cron:session): session closed for user root Dec 17 11:50:02 ispc CRON[1862738]: pam_unix(cron:session): session closed for user getmail Dec 17 11:50:02 ispc CRON[1862736]: pam_unix(cron:session): session closed for user www-data Dec 17 11:50:02 ispc postfix/smtpd[1862758]: sql auxprop plugin using mysql engine Dec 17 11:50:02 ispc CRON[1862737]: pam_unix(cron:session): session closed for user root Dec 17 11:50:02 ispc CRON[1862734]: pam_unix(cron:session): session closed for user root Dec 17 11:50:05 ispc sshd[1862814]: Invalid user admin from 174.138.7.204 Dec 17 11:50:58 ispc sshd[1862851]: Did not receive identification string from 146.190.24.12 Dec 17 11:51:00 ispc sshd[1862852]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 11:51:01 ispc CRON[1862854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:51:03 ispc CRON[1862854]: pam_unix(cron:session): session closed for user root Dec 17 11:51:29 ispc postfix/smtpd[1862878]: sql auxprop plugin using mysql engine Dec 17 11:51:31 ispc saslauthd[1862880]: pam_mysql - SELECT returned no result. Dec 17 11:51:31 ispc saslauthd[1862880]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:51:31 ispc saslauthd[1862880]: do_auth : auth failure: [user=mfd] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:52:01 ispc CRON[1862893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:52:01 ispc CRON[1862893]: pam_unix(cron:session): session closed for user root Dec 17 11:53:01 ispc CRON[1862939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:53:01 ispc CRON[1862939]: pam_unix(cron:session): session closed for user root Dec 17 11:53:53 ispc postfix/smtpd[1862973]: sql auxprop plugin using mysql engine Dec 17 11:53:54 ispc saslauthd[1862975]: pam_mysql - SELECT returned no result. Dec 17 11:53:54 ispc saslauthd[1862975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 11:53:54 ispc saslauthd[1862975]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 11:54:01 ispc CRON[1862980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:54:01 ispc CRON[1862980]: pam_unix(cron:session): session closed for user root Dec 17 11:55:01 ispc CRON[1863021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:55:01 ispc CRON[1863022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:55:01 ispc CRON[1863020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:55:01 ispc CRON[1863023]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 11:55:01 ispc CRON[1863021]: pam_unix(cron:session): session closed for user root Dec 17 11:55:01 ispc CRON[1863023]: pam_unix(cron:session): session closed for user getmail Dec 17 11:55:02 ispc CRON[1863020]: pam_unix(cron:session): session closed for user root Dec 17 11:55:03 ispc CRON[1863022]: pam_unix(cron:session): session closed for user root Dec 17 11:55:43 ispc sshd[1863111]: Invalid user ziplines from 211.23.78.98 Dec 17 11:56:01 ispc CRON[1863128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:56:02 ispc CRON[1863128]: pam_unix(cron:session): session closed for user root Dec 17 11:57:01 ispc CRON[1863168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:57:02 ispc CRON[1863168]: pam_unix(cron:session): session closed for user root Dec 17 11:58:01 ispc CRON[1863216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:58:01 ispc CRON[1863216]: pam_unix(cron:session): session closed for user root Dec 17 11:59:01 ispc CRON[1863255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 11:59:02 ispc CRON[1863255]: pam_unix(cron:session): session closed for user root Dec 17 11:59:05 ispc postfix/smtpd[1863267]: sql auxprop plugin using mysql engine Dec 17 11:59:14 ispc sshd[1863276]: Invalid user admin from 210.114.18.123 Dec 17 11:59:52 ispc sshd[1863295]: Invalid user postgres from 146.190.24.12 Dec 17 12:00:01 ispc CRON[1863301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:00:01 ispc CRON[1863307]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:00:01 ispc CRON[1863302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:00:01 ispc CRON[1863303]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:00:01 ispc CRON[1863304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:00:01 ispc CRON[1863306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:00:01 ispc CRON[1863305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:00:01 ispc CRON[1863302]: pam_unix(cron:session): session closed for user root Dec 17 12:00:01 ispc CRON[1863303]: pam_unix(cron:session): session closed for user www-data Dec 17 12:00:01 ispc CRON[1863305]: pam_unix(cron:session): session closed for user root Dec 17 12:00:01 ispc CRON[1863307]: pam_unix(cron:session): session closed for user getmail Dec 17 12:00:01 ispc CRON[1863306]: pam_unix(cron:session): session closed for user root Dec 17 12:00:02 ispc CRON[1863304]: pam_unix(cron:session): session closed for user root Dec 17 12:00:03 ispc CRON[1863301]: pam_unix(cron:session): session closed for user root Dec 17 12:00:30 ispc sshd[1863471]: Invalid user klape from 2.57.217.229 Dec 17 12:00:30 ispc sshd[1863473]: Invalid user ubuntu from 2.57.217.229 Dec 17 12:00:37 ispc sshd[1863479]: Invalid user oracle from 146.190.24.12 Dec 17 12:01:01 ispc CRON[1863495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:01:02 ispc CRON[1863495]: pam_unix(cron:session): session closed for user root Dec 17 12:01:07 ispc sshd[1863506]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 12:01:22 ispc sshd[1863517]: Invalid user user from 146.190.24.12 Dec 17 12:02:01 ispc CRON[1863533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:02:01 ispc CRON[1863532]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 12:02:01 ispc CRON[1863533]: pam_unix(cron:session): session closed for user root Dec 17 12:02:06 ispc sshd[1863659]: Invalid user vps from 146.190.24.12 Dec 17 12:02:25 ispc sshd[1864095]: Invalid user from 165.245.143.108 Dec 17 12:02:48 ispc sshd[1864399]: Invalid user testuser from 146.190.24.12 Dec 17 12:03:01 ispc CRON[1864448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:03:02 ispc CRON[1864448]: pam_unix(cron:session): session closed for user root Dec 17 12:03:15 ispc CRON[1863532]: pam_unix(cron:session): session closed for user logcheck Dec 17 12:03:26 ispc postfix/smtpd[1864618]: sql auxprop plugin using mysql engine Dec 17 12:03:31 ispc sshd[1864622]: Invalid user server from 146.190.24.12 Dec 17 12:04:01 ispc CRON[1864643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:04:02 ispc CRON[1864643]: pam_unix(cron:session): session closed for user root Dec 17 12:05:01 ispc CRON[1864683]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:05:01 ispc CRON[1864679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:05:01 ispc CRON[1864680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:05:01 ispc CRON[1864681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:05:01 ispc CRON[1864682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:05:01 ispc CRON[1864681]: pam_unix(cron:session): session closed for user root Dec 17 12:05:01 ispc CRON[1864683]: pam_unix(cron:session): session closed for user getmail Dec 17 12:05:01 ispc CRON[1864682]: pam_unix(cron:session): session closed for user root Dec 17 12:05:03 ispc CRON[1864680]: pam_unix(cron:session): session closed for user root Dec 17 12:05:05 ispc CRON[1864679]: pam_unix(cron:session): session closed for user root Dec 17 12:05:32 ispc postfix/smtpd[1864774]: sql auxprop plugin using mysql engine Dec 17 12:06:01 ispc CRON[1864812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:06:02 ispc CRON[1864812]: pam_unix(cron:session): session closed for user root Dec 17 12:06:08 ispc saslauthd[1864825]: pam_mysql - SELECT returned no result. Dec 17 12:06:08 ispc saslauthd[1864825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:06:08 ispc saslauthd[1864825]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:06:16 ispc sshd[1864826]: Did not receive identification string from 192.227.134.84 Dec 17 12:06:22 ispc CRON[1862456]: pam_unix(cron:session): session closed for user root Dec 17 12:06:42 ispc saslauthd[1864828]: pam_mysql - SELECT returned no result. Dec 17 12:06:42 ispc saslauthd[1864828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:06:42 ispc saslauthd[1864828]: do_auth : auth failure: [user=mlusr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:07:01 ispc CRON[1864831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:08:01 ispc CRON[1864875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:08:01 ispc CRON[1864875]: pam_unix(cron:session): session closed for user root Dec 17 12:08:21 ispc sshd[1864900]: Invalid user blceu from 211.45.175.153 Dec 17 12:09:01 ispc CRON[1864918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:09:01 ispc CRON[1864919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:09:01 ispc CRON[1864918]: pam_unix(cron:session): session closed for user root Dec 17 12:09:02 ispc CRON[1864919]: pam_unix(cron:session): session closed for user root Dec 17 12:10:01 ispc CRON[1864966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:10:01 ispc CRON[1864967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:10:01 ispc CRON[1864968]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:10:01 ispc CRON[1864969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:10:01 ispc CRON[1864970]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:10:01 ispc CRON[1864968]: pam_unix(cron:session): session closed for user www-data Dec 17 12:10:01 ispc CRON[1864967]: pam_unix(cron:session): session closed for user root Dec 17 12:10:01 ispc CRON[1864970]: pam_unix(cron:session): session closed for user getmail Dec 17 12:10:01 ispc CRON[1864969]: pam_unix(cron:session): session closed for user root Dec 17 12:10:01 ispc CRON[1864966]: pam_unix(cron:session): session closed for user root Dec 17 12:11:01 ispc CRON[1865072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:11:01 ispc CRON[1865072]: pam_unix(cron:session): session closed for user root Dec 17 12:11:23 ispc postfix/smtpd[1865091]: sql auxprop plugin using mysql engine Dec 17 12:11:25 ispc saslauthd[1865100]: pam_mysql - SELECT returned no result. Dec 17 12:11:25 ispc saslauthd[1865100]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:11:25 ispc saslauthd[1865100]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:11:28 ispc saslauthd[1865101]: pam_mysql - SELECT returned no result. Dec 17 12:11:28 ispc saslauthd[1865101]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:11:28 ispc saslauthd[1865101]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 17 12:11:38 ispc sshd[1865107]: Did not receive identification string from 157.245.76.168 Dec 17 12:12:01 ispc CRON[1865116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:12:02 ispc CRON[1865116]: pam_unix(cron:session): session closed for user root Dec 17 12:13:01 ispc CRON[1865161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:13:02 ispc CRON[1865161]: pam_unix(cron:session): session closed for user root Dec 17 12:13:36 ispc postfix/smtpd[1865186]: sql auxprop plugin using mysql engine Dec 17 12:13:37 ispc saslauthd[1865188]: pam_mysql - SELECT returned no result. Dec 17 12:13:37 ispc saslauthd[1865188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:13:37 ispc saslauthd[1865188]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:14:01 ispc CRON[1865203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:14:01 ispc CRON[1865203]: pam_unix(cron:session): session closed for user root Dec 17 12:14:41 ispc sshd[1865229]: Invalid user klape from 70.37.89.177 Dec 17 12:14:42 ispc sshd[1865235]: Invalid user ubuntu from 70.37.89.177 Dec 17 12:15:01 ispc sshd[1865243]: Did not receive identification string from 157.245.76.168 Dec 17 12:15:01 ispc CRON[1865249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:15:01 ispc CRON[1865251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:15:01 ispc CRON[1865250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:15:01 ispc CRON[1865252]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:15:01 ispc CRON[1865250]: pam_unix(cron:session): session closed for user root Dec 17 12:15:01 ispc CRON[1865252]: pam_unix(cron:session): session closed for user getmail Dec 17 12:15:02 ispc CRON[1865251]: pam_unix(cron:session): session closed for user root Dec 17 12:15:02 ispc CRON[1865249]: pam_unix(cron:session): session closed for user root Dec 17 12:16:01 ispc CRON[1865352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:16:01 ispc CRON[1865352]: pam_unix(cron:session): session closed for user root Dec 17 12:16:16 ispc sshd[1865374]: Invalid user ziplines from 45.84.199.14 Dec 17 12:17:01 ispc CRON[1865395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:17:02 ispc CRON[1865395]: pam_unix(cron:session): session closed for user root Dec 17 12:18:01 ispc CRON[1865446]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 12:18:01 ispc CRON[1865447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:18:01 ispc CRON[1865447]: pam_unix(cron:session): session closed for user root Dec 17 12:18:05 ispc CRON[1865446]: pam_unix(cron:session): session closed for user amavis Dec 17 12:18:07 ispc postfix/smtpd[1865472]: sql auxprop plugin using mysql engine Dec 17 12:18:45 ispc postfix/smtpd[1865496]: sql auxprop plugin using mysql engine Dec 17 12:19:01 ispc CRON[1865508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:19:02 ispc CRON[1865508]: pam_unix(cron:session): session closed for user root Dec 17 12:19:53 ispc postfix/smtpd[1865545]: sql auxprop plugin using mysql engine Dec 17 12:19:53 ispc saslauthd[1865547]: pam_mysql - SELECT returned no result. Dec 17 12:19:53 ispc saslauthd[1865547]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:19:53 ispc saslauthd[1865547]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:20:01 ispc CRON[1865548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:20:01 ispc CRON[1865549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:20:01 ispc CRON[1865550]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:20:01 ispc CRON[1865551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:20:01 ispc CRON[1865552]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:20:01 ispc CRON[1865549]: pam_unix(cron:session): session closed for user root Dec 17 12:20:01 ispc CRON[1865550]: pam_unix(cron:session): session closed for user www-data Dec 17 12:20:01 ispc CRON[1865552]: pam_unix(cron:session): session closed for user getmail Dec 17 12:20:01 ispc CRON[1865548]: pam_unix(cron:session): session closed for user root Dec 17 12:20:02 ispc CRON[1865551]: pam_unix(cron:session): session closed for user root Dec 17 12:21:01 ispc CRON[1865657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:21:01 ispc CRON[1865658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:21:01 ispc CRON[1865657]: pam_unix(cron:session): session closed for user root Dec 17 12:21:01 ispc CRON[1865658]: pam_unix(cron:session): session closed for user root Dec 17 12:21:53 ispc postfix/smtpd[1865696]: sql auxprop plugin using mysql engine Dec 17 12:21:54 ispc saslauthd[1865702]: pam_mysql - SELECT returned no result. Dec 17 12:21:54 ispc saslauthd[1865702]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:21:54 ispc saslauthd[1865702]: do_auth : auth failure: [user=mobile] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:22:01 ispc CRON[1865705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:22:01 ispc CRON[1865705]: pam_unix(cron:session): session closed for user root Dec 17 12:22:06 ispc postfix/smtpd[1865724]: sql auxprop plugin using mysql engine Dec 17 12:23:01 ispc CRON[1865757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:23:02 ispc CRON[1865757]: pam_unix(cron:session): session closed for user root Dec 17 12:24:01 ispc CRON[1865796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:24:02 ispc CRON[1865796]: pam_unix(cron:session): session closed for user root Dec 17 12:25:01 ispc CRON[1865835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:25:01 ispc CRON[1865836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:25:01 ispc CRON[1865837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:25:01 ispc CRON[1865838]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:25:01 ispc CRON[1865836]: pam_unix(cron:session): session closed for user root Dec 17 12:25:01 ispc CRON[1865838]: pam_unix(cron:session): session closed for user getmail Dec 17 12:25:02 ispc CRON[1865837]: pam_unix(cron:session): session closed for user root Dec 17 12:25:02 ispc CRON[1865835]: pam_unix(cron:session): session closed for user root Dec 17 12:26:01 ispc CRON[1865941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:26:02 ispc CRON[1865941]: pam_unix(cron:session): session closed for user root Dec 17 12:27:01 ispc CRON[1865982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:27:02 ispc CRON[1865982]: pam_unix(cron:session): session closed for user root Dec 17 12:27:28 ispc postfix/smtpd[1866004]: sql auxprop plugin using mysql engine Dec 17 12:27:28 ispc CRON[1864831]: pam_unix(cron:session): session closed for user root Dec 17 12:27:58 ispc sshd[1866016]: Invalid user admin from 157.245.76.168 Dec 17 12:28:01 ispc CRON[1866023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:28:08 ispc CRON[1866023]: pam_unix(cron:session): session closed for user root Dec 17 12:28:27 ispc sshd[1866035]: Invalid user admin from 157.245.76.168 Dec 17 12:28:54 ispc sshd[1866038]: Invalid user admin from 157.245.76.168 Dec 17 12:29:01 ispc CRON[1866040]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:29:14 ispc saslauthd[1866059]: pam_mysql - SELECT returned no result. Dec 17 12:29:14 ispc saslauthd[1866059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:29:14 ispc saslauthd[1866059]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:29:20 ispc sshd[1866060]: Invalid user admin from 157.245.76.168 Dec 17 12:29:45 ispc sshd[1866076]: Invalid user admin from 157.245.76.168 Dec 17 12:30:01 ispc CRON[1866085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:30:01 ispc CRON[1866083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:30:01 ispc CRON[1866084]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:30:01 ispc CRON[1866086]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:30:01 ispc CRON[1866082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:30:01 ispc CRON[1866083]: pam_unix(cron:session): session closed for user root Dec 17 12:30:01 ispc CRON[1866084]: pam_unix(cron:session): session closed for user www-data Dec 17 12:30:01 ispc CRON[1866086]: pam_unix(cron:session): session closed for user getmail Dec 17 12:30:01 ispc CRON[1866085]: pam_unix(cron:session): session closed for user root Dec 17 12:30:01 ispc CRON[1866082]: pam_unix(cron:session): session closed for user root Dec 17 12:30:09 ispc sshd[1866166]: Invalid user admin from 157.245.76.168 Dec 17 12:30:47 ispc sshd[1866191]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 12:31:01 ispc CRON[1866199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:31:02 ispc CRON[1866199]: pam_unix(cron:session): session closed for user root Dec 17 12:32:01 ispc CRON[1866237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:32:01 ispc CRON[1866237]: pam_unix(cron:session): session closed for user root Dec 17 12:33:01 ispc CRON[1866280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:33:01 ispc CRON[1866280]: pam_unix(cron:session): session closed for user root Dec 17 12:33:51 ispc sshd[1866309]: Invalid user admin from 103.100.209.172 Dec 17 12:34:01 ispc CRON[1866319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:34:01 ispc CRON[1866319]: pam_unix(cron:session): session closed for user root Dec 17 12:35:02 ispc CRON[1866356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:35:02 ispc CRON[1866354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:35:02 ispc CRON[1866357]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:35:02 ispc CRON[1866355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:35:02 ispc CRON[1866355]: pam_unix(cron:session): session closed for user root Dec 17 12:35:02 ispc CRON[1866357]: pam_unix(cron:session): session closed for user getmail Dec 17 12:35:02 ispc CRON[1866354]: pam_unix(cron:session): session closed for user root Dec 17 12:35:02 ispc CRON[1866356]: pam_unix(cron:session): session closed for user root Dec 17 12:36:01 ispc CRON[1866457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:36:03 ispc CRON[1866457]: pam_unix(cron:session): session closed for user root Dec 17 12:36:41 ispc sshd[1866486]: Invalid user admin from 210.114.18.123 Dec 17 12:36:45 ispc sshd[1866488]: Invalid user martof from 43.135.148.156 Dec 17 12:37:01 ispc CRON[1866504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:37:01 ispc CRON[1866504]: pam_unix(cron:session): session closed for user root Dec 17 12:37:05 ispc postfix/smtpd[1866516]: sql auxprop plugin using mysql engine Dec 17 12:37:06 ispc saslauthd[1866519]: pam_mysql - SELECT returned no result. Dec 17 12:37:06 ispc saslauthd[1866519]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:37:06 ispc saslauthd[1866519]: do_auth : auth failure: [user=monitor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:37:31 ispc postfix/smtpd[1866532]: sql auxprop plugin using mysql engine Dec 17 12:38:01 ispc CRON[1866559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:38:02 ispc CRON[1866559]: pam_unix(cron:session): session closed for user root Dec 17 12:38:20 ispc saslauthd[1866579]: pam_mysql - SELECT returned no result. Dec 17 12:38:20 ispc saslauthd[1866579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:38:20 ispc saslauthd[1866579]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:39:00 ispc sshd[1866598]: Invalid user blceu from 118.218.219.250 Dec 17 12:39:01 ispc CRON[1866601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:39:01 ispc CRON[1866600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:39:01 ispc CRON[1866600]: pam_unix(cron:session): session closed for user root Dec 17 12:39:01 ispc CRON[1866601]: pam_unix(cron:session): session closed for user root Dec 17 12:40:01 ispc CRON[1866671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:40:01 ispc CRON[1866672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:40:01 ispc CRON[1866673]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:40:01 ispc CRON[1866674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:40:01 ispc CRON[1866675]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:40:01 ispc CRON[1866672]: pam_unix(cron:session): session closed for user root Dec 17 12:40:01 ispc CRON[1866673]: pam_unix(cron:session): session closed for user www-data Dec 17 12:40:01 ispc CRON[1866675]: pam_unix(cron:session): session closed for user getmail Dec 17 12:40:02 ispc CRON[1866674]: pam_unix(cron:session): session closed for user root Dec 17 12:40:02 ispc CRON[1866671]: pam_unix(cron:session): session closed for user root Dec 17 12:41:01 ispc CRON[1866777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:41:01 ispc CRON[1866777]: pam_unix(cron:session): session closed for user root Dec 17 12:41:10 ispc postfix/smtpd[1866792]: sql auxprop plugin using mysql engine Dec 17 12:41:10 ispc sshd[1866790]: Invalid user klape from 103.164.20.29 Dec 17 12:41:10 ispc saslauthd[1866798]: pam_mysql - SELECT returned no result. Dec 17 12:41:10 ispc saslauthd[1866798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:41:10 ispc saslauthd[1866798]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:41:11 ispc sshd[1866799]: Invalid user ubuntu from 103.164.20.29 Dec 17 12:42:01 ispc CRON[1866821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:42:02 ispc CRON[1866821]: pam_unix(cron:session): session closed for user root Dec 17 12:43:01 ispc CRON[1866861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:43:02 ispc CRON[1866861]: pam_unix(cron:session): session closed for user root Dec 17 12:44:01 ispc CRON[1866900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:44:04 ispc CRON[1866900]: pam_unix(cron:session): session closed for user root Dec 17 12:45:01 ispc CRON[1866938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:45:01 ispc CRON[1866939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:45:01 ispc CRON[1866940]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:45:01 ispc CRON[1866937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:45:01 ispc CRON[1866938]: pam_unix(cron:session): session closed for user root Dec 17 12:45:01 ispc CRON[1866940]: pam_unix(cron:session): session closed for user getmail Dec 17 12:45:01 ispc CRON[1866939]: pam_unix(cron:session): session closed for user root Dec 17 12:45:03 ispc CRON[1866937]: pam_unix(cron:session): session closed for user root Dec 17 12:45:45 ispc sshd[1867029]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 12:46:01 ispc CRON[1867039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:46:02 ispc CRON[1867039]: pam_unix(cron:session): session closed for user root Dec 17 12:46:13 ispc sshd[1867055]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 12:46:13 ispc sshd[1867055]: Invalid user admin from 114.7.163.154 Dec 17 12:47:01 ispc CRON[1867078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:47:01 ispc CRON[1867078]: pam_unix(cron:session): session closed for user root Dec 17 12:47:07 ispc postfix/smtpd[1867089]: sql auxprop plugin using mysql engine Dec 17 12:47:08 ispc saslauthd[1867092]: pam_mysql - SELECT returned no result. Dec 17 12:47:08 ispc saslauthd[1867092]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:47:08 ispc saslauthd[1867092]: do_auth : auth failure: [user=reception] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:47:19 ispc saslauthd[1867097]: pam_mysql - SELECT returned no result. Dec 17 12:47:19 ispc saslauthd[1867097]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:47:19 ispc saslauthd[1867097]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:48:01 ispc CRON[1867122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:48:01 ispc CRON[1867122]: pam_unix(cron:session): session closed for user root Dec 17 12:48:20 ispc saslauthd[1867141]: pam_mysql - SELECT returned no result. Dec 17 12:48:20 ispc saslauthd[1867141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:48:20 ispc saslauthd[1867141]: do_auth : auth failure: [user=noreply@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 12:49:01 ispc CRON[1867158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:49:02 ispc CRON[1867158]: pam_unix(cron:session): session closed for user root Dec 17 12:49:35 ispc CRON[1866040]: pam_unix(cron:session): session closed for user root Dec 17 12:50:01 ispc CRON[1867188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:50:01 ispc CRON[1867192]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:50:01 ispc CRON[1867189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:50:01 ispc CRON[1867190]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 12:50:01 ispc CRON[1867191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:50:01 ispc CRON[1867190]: pam_unix(cron:session): session closed for user www-data Dec 17 12:50:01 ispc CRON[1867189]: pam_unix(cron:session): session closed for user root Dec 17 12:50:01 ispc CRON[1867192]: pam_unix(cron:session): session closed for user getmail Dec 17 12:50:02 ispc CRON[1867188]: pam_unix(cron:session): session closed for user root Dec 17 12:50:03 ispc CRON[1867191]: pam_unix(cron:session): session closed for user root Dec 17 12:51:01 ispc CRON[1867271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:52:01 ispc CRON[1867312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:52:01 ispc CRON[1867313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:52:02 ispc CRON[1867313]: pam_unix(cron:session): session closed for user root Dec 17 12:52:17 ispc postfix/smtpd[1867336]: sql auxprop plugin using mysql engine Dec 17 12:52:19 ispc saslauthd[1867338]: pam_mysql - SELECT returned no result. Dec 17 12:52:19 ispc saslauthd[1867338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:52:19 ispc saslauthd[1867338]: do_auth : auth failure: [user=mountfs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:53:01 ispc CRON[1867364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:53:02 ispc CRON[1867364]: pam_unix(cron:session): session closed for user root Dec 17 12:53:31 ispc sshd[1867390]: Invalid user admin from 103.100.209.172 Dec 17 12:54:01 ispc CRON[1867405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:54:01 ispc CRON[1867405]: pam_unix(cron:session): session closed for user root Dec 17 12:54:48 ispc postfix/smtpd[1867437]: sql auxprop plugin using mysql engine Dec 17 12:55:01 ispc CRON[1867443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:55:01 ispc CRON[1867446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 12:55:01 ispc CRON[1867445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:55:01 ispc CRON[1867444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:55:01 ispc CRON[1867444]: pam_unix(cron:session): session closed for user root Dec 17 12:55:01 ispc CRON[1867446]: pam_unix(cron:session): session closed for user getmail Dec 17 12:55:01 ispc CRON[1867445]: pam_unix(cron:session): session closed for user root Dec 17 12:55:02 ispc CRON[1867443]: pam_unix(cron:session): session closed for user root Dec 17 12:55:18 ispc CRON[1867312]: pam_unix(cron:session): session closed for user root Dec 17 12:56:01 ispc CRON[1867545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:56:02 ispc CRON[1867545]: pam_unix(cron:session): session closed for user root Dec 17 12:56:10 ispc postfix/smtpd[1867560]: sql auxprop plugin using mysql engine Dec 17 12:56:10 ispc saslauthd[1867562]: pam_mysql - SELECT returned no result. Dec 17 12:56:10 ispc saslauthd[1867562]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 12:56:10 ispc saslauthd[1867562]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 12:57:01 ispc CRON[1867583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:57:01 ispc CRON[1867583]: pam_unix(cron:session): session closed for user root Dec 17 12:57:32 ispc sshd[1867606]: Invalid user blceu from 211.57.200.145 Dec 17 12:58:01 ispc CRON[1867628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:58:02 ispc CRON[1867628]: pam_unix(cron:session): session closed for user root Dec 17 12:58:35 ispc sshd[1867652]: Invalid user martof from 141.94.71.131 Dec 17 12:59:01 ispc CRON[1867666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 12:59:01 ispc CRON[1867666]: pam_unix(cron:session): session closed for user root Dec 17 12:59:20 ispc sshd[1867681]: Invalid user ziplines from 118.69.109.194 Dec 17 12:59:43 ispc sshd[1867695]: Did not receive identification string from 192.227.134.84 Dec 17 13:00:01 ispc CRON[1867704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:00:01 ispc CRON[1867705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:00:01 ispc CRON[1867706]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:00:01 ispc CRON[1867707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:00:01 ispc CRON[1867708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:00:01 ispc CRON[1867709]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:00:01 ispc CRON[1867706]: pam_unix(cron:session): session closed for user www-data Dec 17 13:00:01 ispc CRON[1867705]: pam_unix(cron:session): session closed for user root Dec 17 13:00:01 ispc CRON[1867709]: pam_unix(cron:session): session closed for user getmail Dec 17 13:00:02 ispc CRON[1867708]: pam_unix(cron:session): session closed for user root Dec 17 13:00:02 ispc CRON[1867704]: pam_unix(cron:session): session closed for user root Dec 17 13:00:02 ispc CRON[1867707]: pam_unix(cron:session): session closed for user root Dec 17 13:01:01 ispc CRON[1867882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:01:01 ispc CRON[1867882]: pam_unix(cron:session): session closed for user root Dec 17 13:02:01 ispc CRON[1867922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:02:01 ispc CRON[1867921]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 13:02:02 ispc CRON[1867922]: pam_unix(cron:session): session closed for user root Dec 17 13:02:42 ispc CRON[1867921]: pam_unix(cron:session): session closed for user logcheck Dec 17 13:02:48 ispc postfix/smtpd[1868984]: sql auxprop plugin using mysql engine Dec 17 13:03:01 ispc CRON[1868991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:03:02 ispc CRON[1868991]: pam_unix(cron:session): session closed for user root Dec 17 13:04:01 ispc CRON[1869028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:04:01 ispc CRON[1869028]: pam_unix(cron:session): session closed for user root Dec 17 13:04:05 ispc sshd[1869039]: Invalid user martof from 52.232.19.79 Dec 17 13:04:18 ispc postfix/smtpd[1869049]: sql auxprop plugin using mysql engine Dec 17 13:05:01 ispc CRON[1869068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:05:01 ispc CRON[1869069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:05:01 ispc CRON[1869070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:05:01 ispc CRON[1869071]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:05:01 ispc CRON[1869069]: pam_unix(cron:session): session closed for user root Dec 17 13:05:01 ispc CRON[1869071]: pam_unix(cron:session): session closed for user getmail Dec 17 13:05:01 ispc CRON[1869070]: pam_unix(cron:session): session closed for user root Dec 17 13:05:02 ispc CRON[1869068]: pam_unix(cron:session): session closed for user root Dec 17 13:05:17 ispc postfix/smtpd[1869148]: sql auxprop plugin using mysql engine Dec 17 13:05:17 ispc saslauthd[1869151]: pam_mysql - SELECT returned no result. Dec 17 13:05:17 ispc saslauthd[1869151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:05:17 ispc saslauthd[1869151]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:06:01 ispc CRON[1869171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:06:02 ispc CRON[1869171]: pam_unix(cron:session): session closed for user root Dec 17 13:07:01 ispc CRON[1869202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:07:01 ispc CRON[1869202]: pam_unix(cron:session): session closed for user root Dec 17 13:07:34 ispc postfix/smtpd[1869230]: sql auxprop plugin using mysql engine Dec 17 13:07:35 ispc saslauthd[1869232]: pam_mysql - SELECT returned no result. Dec 17 13:07:35 ispc saslauthd[1869232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:07:35 ispc saslauthd[1869232]: do_auth : auth failure: [user=mountfsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:08:01 ispc CRON[1869251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:08:01 ispc CRON[1869251]: pam_unix(cron:session): session closed for user root Dec 17 13:09:01 ispc CRON[1869291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:09:01 ispc CRON[1869290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:09:02 ispc CRON[1869290]: pam_unix(cron:session): session closed for user root Dec 17 13:09:02 ispc CRON[1869291]: pam_unix(cron:session): session closed for user root Dec 17 13:10:01 ispc CRON[1869339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:10:01 ispc CRON[1869342]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:10:01 ispc CRON[1869340]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:10:01 ispc CRON[1869341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:10:01 ispc CRON[1869339]: pam_unix(cron:session): session closed for user root Dec 17 13:10:01 ispc CRON[1869338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:10:01 ispc CRON[1869340]: pam_unix(cron:session): session closed for user www-data Dec 17 13:10:01 ispc CRON[1869342]: pam_unix(cron:session): session closed for user getmail Dec 17 13:10:02 ispc CRON[1869341]: pam_unix(cron:session): session closed for user root Dec 17 13:10:02 ispc CRON[1869338]: pam_unix(cron:session): session closed for user root Dec 17 13:11:01 ispc CRON[1869449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:11:01 ispc CRON[1869449]: pam_unix(cron:session): session closed for user root Dec 17 13:11:02 ispc sshd[1869447]: Invalid user admin from 210.114.18.123 Dec 17 13:11:33 ispc postfix/smtpd[1869478]: sql auxprop plugin using mysql engine Dec 17 13:11:33 ispc CRON[1867271]: pam_unix(cron:session): session closed for user root Dec 17 13:12:01 ispc CRON[1869484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:12:02 ispc postfix/smtpd[1869492]: sql auxprop plugin using mysql engine Dec 17 13:12:07 ispc CRON[1869484]: pam_unix(cron:session): session closed for user root Dec 17 13:12:36 ispc sshd[1869501]: Invalid user ziplines from 52.232.19.79 Dec 17 13:13:01 ispc CRON[1869511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:13:03 ispc sshd[1869523]: Invalid user blceu from 45.84.199.14 Dec 17 13:13:56 ispc sshd[1869550]: Invalid user klape from 77.241.18.2 Dec 17 13:13:56 ispc sshd[1869552]: Invalid user ubuntu from 77.241.18.2 Dec 17 13:14:01 ispc CRON[1869554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:14:01 ispc CRON[1869554]: pam_unix(cron:session): session closed for user root Dec 17 13:14:06 ispc postfix/smtpd[1869569]: sql auxprop plugin using mysql engine Dec 17 13:14:07 ispc saslauthd[1869571]: pam_mysql - SELECT returned no result. Dec 17 13:14:07 ispc saslauthd[1869571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:14:07 ispc saslauthd[1869571]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:14:20 ispc postfix/smtpd[1869585]: sql auxprop plugin using mysql engine Dec 17 13:14:43 ispc sshd[1869606]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:15:01 ispc CRON[1869616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:15:01 ispc CRON[1869619]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:15:01 ispc CRON[1869617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:15:01 ispc CRON[1869618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:15:01 ispc CRON[1869617]: pam_unix(cron:session): session closed for user root Dec 17 13:15:01 ispc CRON[1869619]: pam_unix(cron:session): session closed for user getmail Dec 17 13:15:02 ispc CRON[1869616]: pam_unix(cron:session): session closed for user root Dec 17 13:15:02 ispc CRON[1869618]: pam_unix(cron:session): session closed for user root Dec 17 13:15:05 ispc sshd[1869696]: Invalid user blceu from 139.59.66.222 Dec 17 13:16:01 ispc CRON[1869719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:16:03 ispc CRON[1869719]: pam_unix(cron:session): session closed for user root Dec 17 13:17:01 ispc CRON[1869758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:17:02 ispc CRON[1869758]: pam_unix(cron:session): session closed for user root Dec 17 13:18:01 ispc CRON[1869802]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 17 13:18:01 ispc CRON[1869803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:18:01 ispc CRON[1869803]: pam_unix(cron:session): session closed for user root Dec 17 13:18:04 ispc CRON[1869802]: pam_unix(cron:session): session closed for user web324 Dec 17 13:18:30 ispc sshd[1869829]: Invalid user blceu from 185.208.181.153 Dec 17 13:19:01 ispc CRON[1869846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:19:02 ispc CRON[1869846]: pam_unix(cron:session): session closed for user root Dec 17 13:19:02 ispc sshd[1869843]: Invalid user martof from 175.125.92.77 Dec 17 13:20:01 ispc CRON[1869878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:20:01 ispc CRON[1869879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:20:01 ispc CRON[1869880]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:20:01 ispc CRON[1869881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:20:01 ispc CRON[1869882]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:20:01 ispc CRON[1869879]: pam_unix(cron:session): session closed for user root Dec 17 13:20:01 ispc CRON[1869880]: pam_unix(cron:session): session closed for user www-data Dec 17 13:20:01 ispc CRON[1869882]: pam_unix(cron:session): session closed for user getmail Dec 17 13:20:02 ispc CRON[1869881]: pam_unix(cron:session): session closed for user root Dec 17 13:20:02 ispc CRON[1869878]: pam_unix(cron:session): session closed for user root Dec 17 13:20:47 ispc postfix/smtpd[1869977]: sql auxprop plugin using mysql engine Dec 17 13:20:47 ispc saslauthd[1869980]: pam_mysql - SELECT returned no result. Dec 17 13:20:47 ispc saslauthd[1869980]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:20:47 ispc saslauthd[1869980]: do_auth : auth failure: [user=abc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:21:01 ispc CRON[1869987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:21:01 ispc CRON[1869988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:21:01 ispc CRON[1869987]: pam_unix(cron:session): session closed for user root Dec 17 13:21:02 ispc CRON[1869988]: pam_unix(cron:session): session closed for user root Dec 17 13:22:01 ispc CRON[1870026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:22:02 ispc CRON[1870026]: pam_unix(cron:session): session closed for user root Dec 17 13:22:28 ispc postfix/smtpd[1870049]: sql auxprop plugin using mysql engine Dec 17 13:22:30 ispc saslauthd[1870051]: pam_mysql - SELECT returned no result. Dec 17 13:22:30 ispc saslauthd[1870051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:22:30 ispc saslauthd[1870051]: do_auth : auth failure: [user=mountsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:22:58 ispc saslauthd[1870075]: pam_mysql - SELECT returned no result. Dec 17 13:22:58 ispc saslauthd[1870075]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:22:58 ispc saslauthd[1870075]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:23:01 ispc CRON[1870076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:23:02 ispc CRON[1870076]: pam_unix(cron:session): session closed for user root Dec 17 13:24:01 ispc CRON[1870113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:24:02 ispc CRON[1870113]: pam_unix(cron:session): session closed for user root Dec 17 13:24:27 ispc sshd[1870133]: Did not receive identification string from 45.140.17.97 Dec 17 13:25:01 ispc CRON[1870148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:25:01 ispc CRON[1870149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:25:01 ispc CRON[1870150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:25:01 ispc CRON[1870151]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:25:01 ispc CRON[1870149]: pam_unix(cron:session): session closed for user root Dec 17 13:25:01 ispc CRON[1870151]: pam_unix(cron:session): session closed for user getmail Dec 17 13:25:01 ispc CRON[1870150]: pam_unix(cron:session): session closed for user root Dec 17 13:25:02 ispc sshd[1870187]: Invalid user ziplines from 139.59.66.222 Dec 17 13:25:03 ispc CRON[1870148]: pam_unix(cron:session): session closed for user root Dec 17 13:26:01 ispc CRON[1870251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:26:02 ispc CRON[1870251]: pam_unix(cron:session): session closed for user root Dec 17 13:27:01 ispc CRON[1870288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:27:01 ispc CRON[1870288]: pam_unix(cron:session): session closed for user root Dec 17 13:28:01 ispc CRON[1870332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:28:02 ispc CRON[1870332]: pam_unix(cron:session): session closed for user root Dec 17 13:29:01 ispc CRON[1870368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:29:02 ispc CRON[1870368]: pam_unix(cron:session): session closed for user root Dec 17 13:30:01 ispc CRON[1870406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:30:01 ispc CRON[1870407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:30:01 ispc CRON[1870408]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:30:01 ispc CRON[1870409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:30:01 ispc CRON[1870410]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:30:01 ispc CRON[1870408]: pam_unix(cron:session): session closed for user www-data Dec 17 13:30:01 ispc CRON[1870407]: pam_unix(cron:session): session closed for user root Dec 17 13:30:01 ispc CRON[1870410]: pam_unix(cron:session): session closed for user getmail Dec 17 13:30:02 ispc CRON[1870409]: pam_unix(cron:session): session closed for user root Dec 17 13:30:02 ispc CRON[1870406]: pam_unix(cron:session): session closed for user root Dec 17 13:31:01 ispc CRON[1870511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:31:03 ispc CRON[1870511]: pam_unix(cron:session): session closed for user root Dec 17 13:31:35 ispc postfix/smtpd[1870536]: sql auxprop plugin using mysql engine Dec 17 13:31:35 ispc saslauthd[1870539]: pam_mysql - SELECT returned no result. Dec 17 13:31:35 ispc saslauthd[1870539]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:31:35 ispc saslauthd[1870539]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:32:01 ispc CRON[1870554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:32:02 ispc CRON[1870554]: pam_unix(cron:session): session closed for user root Dec 17 13:32:55 ispc sshd[1870594]: Invalid user blceu from 116.120.58.228 Dec 17 13:33:01 ispc CRON[1870597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:33:02 ispc CRON[1870597]: pam_unix(cron:session): session closed for user root Dec 17 13:33:23 ispc postfix/smtpd[1870620]: sql auxprop plugin using mysql engine Dec 17 13:33:39 ispc postfix/smtpd[1870625]: sql auxprop plugin using mysql engine Dec 17 13:33:39 ispc CRON[1869511]: pam_unix(cron:session): session closed for user root Dec 17 13:33:47 ispc sshd[1870629]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:34:01 ispc CRON[1870633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:34:07 ispc CRON[1870633]: pam_unix(cron:session): session closed for user root Dec 17 13:35:01 ispc CRON[1870648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:35:01 ispc CRON[1870649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:35:01 ispc CRON[1870650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:35:01 ispc CRON[1870651]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:35:01 ispc CRON[1870649]: pam_unix(cron:session): session closed for user root Dec 17 13:35:01 ispc CRON[1870651]: pam_unix(cron:session): session closed for user getmail Dec 17 13:35:03 ispc CRON[1870648]: pam_unix(cron:session): session closed for user root Dec 17 13:35:22 ispc sshd[1870732]: Invalid user blceu from 141.94.71.131 Dec 17 13:36:01 ispc CRON[1870750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:36:03 ispc CRON[1870750]: pam_unix(cron:session): session closed for user root Dec 17 13:37:01 ispc CRON[1870789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:37:01 ispc CRON[1870789]: pam_unix(cron:session): session closed for user root Dec 17 13:37:51 ispc postfix/smtpd[1870825]: sql auxprop plugin using mysql engine Dec 17 13:37:53 ispc saslauthd[1870826]: pam_mysql - SELECT returned no result. Dec 17 13:37:53 ispc saslauthd[1870826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:37:53 ispc saslauthd[1870826]: do_auth : auth failure: [user=mtch] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:38:01 ispc CRON[1870835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:38:02 ispc CRON[1870835]: pam_unix(cron:session): session closed for user root Dec 17 13:39:01 ispc CRON[1870874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:39:01 ispc CRON[1870875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:39:01 ispc CRON[1870874]: pam_unix(cron:session): session closed for user root Dec 17 13:39:02 ispc CRON[1870875]: pam_unix(cron:session): session closed for user root Dec 17 13:40:01 ispc CRON[1870922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:40:01 ispc CRON[1870923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:40:01 ispc CRON[1870924]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:40:01 ispc CRON[1870925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:40:01 ispc CRON[1870926]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:40:01 ispc CRON[1870924]: pam_unix(cron:session): session closed for user www-data Dec 17 13:40:01 ispc CRON[1870923]: pam_unix(cron:session): session closed for user root Dec 17 13:40:01 ispc CRON[1870926]: pam_unix(cron:session): session closed for user getmail Dec 17 13:40:02 ispc CRON[1870925]: pam_unix(cron:session): session closed for user root Dec 17 13:40:03 ispc CRON[1870922]: pam_unix(cron:session): session closed for user root Dec 17 13:40:17 ispc sshd[1871004]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:40:18 ispc sshd[1871006]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:40:18 ispc sshd[1871006]: Invalid user klape from 189.89.20.45 Dec 17 13:40:20 ispc sshd[1871008]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:40:20 ispc sshd[1871008]: Invalid user ubuntu from 189.89.20.45 Dec 17 13:40:20 ispc postfix/smtpd[1871010]: sql auxprop plugin using mysql engine Dec 17 13:40:20 ispc saslauthd[1871012]: pam_mysql - SELECT returned no result. Dec 17 13:40:20 ispc saslauthd[1871012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:40:20 ispc saslauthd[1871012]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:41:01 ispc CRON[1871029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:41:02 ispc CRON[1871029]: pam_unix(cron:session): session closed for user root Dec 17 13:42:01 ispc CRON[1871067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:42:01 ispc CRON[1871067]: pam_unix(cron:session): session closed for user root Dec 17 13:43:01 ispc CRON[1871111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:43:02 ispc CRON[1871111]: pam_unix(cron:session): session closed for user root Dec 17 13:44:01 ispc CRON[1871146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:44:01 ispc CRON[1871146]: pam_unix(cron:session): session closed for user root Dec 17 13:44:04 ispc sshd[1871157]: Invalid user blceu from 175.125.92.77 Dec 17 13:44:26 ispc postfix/smtpd[1871167]: sql auxprop plugin using mysql engine Dec 17 13:44:27 ispc saslauthd[1871170]: pam_mysql - SELECT returned no result. Dec 17 13:44:27 ispc saslauthd[1871170]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:44:27 ispc saslauthd[1871170]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 13:45:01 ispc CRON[1871188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:45:01 ispc CRON[1871189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:45:01 ispc CRON[1871191]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:45:01 ispc CRON[1871190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:45:01 ispc CRON[1871189]: pam_unix(cron:session): session closed for user root Dec 17 13:45:01 ispc CRON[1871191]: pam_unix(cron:session): session closed for user getmail Dec 17 13:45:01 ispc CRON[1871190]: pam_unix(cron:session): session closed for user root Dec 17 13:45:03 ispc CRON[1871188]: pam_unix(cron:session): session closed for user root Dec 17 13:45:05 ispc sshd[1871233]: Invalid user ziplines from 175.125.92.77 Dec 17 13:45:14 ispc sshd[1871271]: Invalid user martof from 211.57.200.145 Dec 17 13:45:42 ispc sshd[1871290]: Invalid user klape from 187.190.35.163 Dec 17 13:45:43 ispc sshd[1871292]: Invalid user ubuntu from 187.190.35.163 Dec 17 13:46:01 ispc CRON[1871303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:46:02 ispc CRON[1871303]: pam_unix(cron:session): session closed for user root Dec 17 13:47:01 ispc CRON[1871340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:47:02 ispc CRON[1871340]: pam_unix(cron:session): session closed for user root Dec 17 13:47:16 ispc sshd[1871357]: Invalid user klape from 200.32.52.150 Dec 17 13:47:17 ispc sshd[1871359]: Invalid user ubuntu from 200.32.52.150 Dec 17 13:48:01 ispc CRON[1871391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:48:02 ispc CRON[1871391]: pam_unix(cron:session): session closed for user root Dec 17 13:48:58 ispc postfix/smtpd[1871425]: sql auxprop plugin using mysql engine Dec 17 13:49:00 ispc saslauthd[1871428]: pam_mysql - SELECT returned no result. Dec 17 13:49:00 ispc saslauthd[1871428]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:49:00 ispc saslauthd[1871428]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:49:01 ispc CRON[1871429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:49:02 ispc CRON[1871429]: pam_unix(cron:session): session closed for user root Dec 17 13:50:01 ispc CRON[1871465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:50:01 ispc CRON[1871466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:50:01 ispc CRON[1871467]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 13:50:01 ispc CRON[1871468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:50:01 ispc CRON[1871469]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:50:01 ispc CRON[1871467]: pam_unix(cron:session): session closed for user www-data Dec 17 13:50:01 ispc CRON[1871466]: pam_unix(cron:session): session closed for user root Dec 17 13:50:01 ispc CRON[1871469]: pam_unix(cron:session): session closed for user getmail Dec 17 13:50:01 ispc CRON[1871465]: pam_unix(cron:session): session closed for user root Dec 17 13:50:01 ispc CRON[1871468]: pam_unix(cron:session): session closed for user root Dec 17 13:50:03 ispc postfix/smtpd[1871547]: sql auxprop plugin using mysql engine Dec 17 13:51:01 ispc CRON[1871572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:51:02 ispc CRON[1871572]: pam_unix(cron:session): session closed for user root Dec 17 13:51:04 ispc sshd[1871587]: Invalid user martof from 139.59.66.222 Dec 17 13:52:01 ispc CRON[1871612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:52:01 ispc CRON[1871612]: pam_unix(cron:session): session closed for user root Dec 17 13:53:01 ispc CRON[1871655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:53:02 ispc CRON[1871655]: pam_unix(cron:session): session closed for user root Dec 17 13:53:14 ispc postfix/smtpd[1871670]: sql auxprop plugin using mysql engine Dec 17 13:53:15 ispc saslauthd[1871676]: pam_mysql - SELECT returned no result. Dec 17 13:53:15 ispc saslauthd[1871676]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:53:15 ispc saslauthd[1871676]: do_auth : auth failure: [user=mtcl] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:53:35 ispc sshd[1871681]: Did not receive identification string from 192.227.134.84 Dec 17 13:54:01 ispc CRON[1871694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:54:01 ispc CRON[1871694]: pam_unix(cron:session): session closed for user root Dec 17 13:54:22 ispc postfix/smtpd[1871714]: sql auxprop plugin using mysql engine Dec 17 13:54:30 ispc saslauthd[1871720]: pam_mysql - SELECT returned no result. Dec 17 13:54:30 ispc saslauthd[1871720]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:54:30 ispc saslauthd[1871720]: do_auth : auth failure: [user=control] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:55:01 ispc CRON[1871734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:55:01 ispc CRON[1871735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:55:01 ispc CRON[1871736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:55:01 ispc CRON[1871737]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 13:55:01 ispc CRON[1871735]: pam_unix(cron:session): session closed for user root Dec 17 13:55:01 ispc CRON[1871737]: pam_unix(cron:session): session closed for user getmail Dec 17 13:55:02 ispc CRON[1871736]: pam_unix(cron:session): session closed for user root Dec 17 13:55:04 ispc CRON[1871734]: pam_unix(cron:session): session closed for user root Dec 17 13:55:07 ispc sshd[1871814]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:56:01 ispc CRON[1871856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:56:03 ispc CRON[1871856]: pam_unix(cron:session): session closed for user root Dec 17 13:56:33 ispc CRON[1870650]: pam_unix(cron:session): session closed for user root Dec 17 13:56:34 ispc saslauthd[1871869]: pam_mysql - SELECT returned no result. Dec 17 13:56:34 ispc saslauthd[1871869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:56:34 ispc saslauthd[1871869]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:57:01 ispc CRON[1871870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:57:42 ispc saslauthd[1871897]: pam_mysql - SELECT returned no result. Dec 17 13:57:42 ispc saslauthd[1871897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 13:57:42 ispc saslauthd[1871897]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 13:58:01 ispc CRON[1871914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:58:02 ispc CRON[1871914]: pam_unix(cron:session): session closed for user root Dec 17 13:58:14 ispc sshd[1871929]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 13:59:01 ispc CRON[1871954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 13:59:02 ispc CRON[1871954]: pam_unix(cron:session): session closed for user root Dec 17 13:59:25 ispc sshd[1871975]: Invalid user ubuntu from 117.50.70.169 Dec 17 13:59:33 ispc sshd[1871981]: Invalid user blceu from 52.232.19.79 Dec 17 14:00:01 ispc CRON[1871998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:00:01 ispc CRON[1871999]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:00:01 ispc CRON[1872000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:00:01 ispc CRON[1872001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:00:01 ispc CRON[1872002]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:00:01 ispc CRON[1871997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:00:01 ispc CRON[1872002]: pam_unix(cron:session): session closed for user getmail Dec 17 14:00:01 ispc CRON[1871998]: pam_unix(cron:session): session closed for user root Dec 17 14:00:01 ispc CRON[1871999]: pam_unix(cron:session): session closed for user www-data Dec 17 14:00:02 ispc CRON[1871997]: pam_unix(cron:session): session closed for user root Dec 17 14:00:02 ispc CRON[1872001]: pam_unix(cron:session): session closed for user root Dec 17 14:00:03 ispc CRON[1872000]: pam_unix(cron:session): session closed for user root Dec 17 14:00:59 ispc sshd[1872176]: Invalid user blceu from 165.227.38.205 Dec 17 14:01:01 ispc CRON[1872182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:01:02 ispc CRON[1872182]: pam_unix(cron:session): session closed for user root Dec 17 14:02:01 ispc CRON[1872216]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 14:02:01 ispc CRON[1872217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:02:02 ispc CRON[1872217]: pam_unix(cron:session): session closed for user root Dec 17 14:02:09 ispc sshd[1872291]: Invalid user klape from 36.50.177.171 Dec 17 14:02:12 ispc sshd[1872403]: Invalid user ubuntu from 36.50.177.171 Dec 17 14:03:01 ispc CRON[1873102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:03:02 ispc CRON[1873102]: pam_unix(cron:session): session closed for user root Dec 17 14:03:19 ispc CRON[1872216]: pam_unix(cron:session): session closed for user logcheck Dec 17 14:03:25 ispc postfix/smtpd[1873300]: sql auxprop plugin using mysql engine Dec 17 14:04:01 ispc CRON[1873316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:04:02 ispc CRON[1873316]: pam_unix(cron:session): session closed for user root Dec 17 14:05:01 ispc CRON[1873354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:05:01 ispc CRON[1873355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:05:01 ispc CRON[1873356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:05:01 ispc CRON[1873357]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:05:01 ispc CRON[1873355]: pam_unix(cron:session): session closed for user root Dec 17 14:05:01 ispc CRON[1873357]: pam_unix(cron:session): session closed for user getmail Dec 17 14:05:02 ispc CRON[1873356]: pam_unix(cron:session): session closed for user root Dec 17 14:05:04 ispc CRON[1873354]: pam_unix(cron:session): session closed for user root Dec 17 14:05:20 ispc sshd[1873438]: Did not receive identification string from 103.236.90.15 Dec 17 14:05:49 ispc sshd[1873448]: Did not receive identification string from 103.144.2.66 Dec 17 14:06:01 ispc CRON[1873459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:06:02 ispc CRON[1873459]: pam_unix(cron:session): session closed for user root Dec 17 14:06:20 ispc postfix/smtpd[1873480]: sql auxprop plugin using mysql engine Dec 17 14:06:21 ispc saslauthd[1873483]: pam_mysql - SELECT returned no result. Dec 17 14:06:21 ispc saslauthd[1873483]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:06:21 ispc saslauthd[1873483]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:06:29 ispc sshd[1873484]: Invalid user admin from 103.100.209.172 Dec 17 14:07:02 ispc CRON[1873504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:07:03 ispc CRON[1873504]: pam_unix(cron:session): session closed for user root Dec 17 14:08:01 ispc CRON[1873544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:08:01 ispc CRON[1873544]: pam_unix(cron:session): session closed for user root Dec 17 14:08:25 ispc sshd[1873563]: Invalid user martof from 119.205.233.162 Dec 17 14:08:31 ispc sshd[1873569]: Invalid user martof from 148.216.54.17 Dec 17 14:08:34 ispc postfix/smtpd[1873571]: sql auxprop plugin using mysql engine Dec 17 14:08:36 ispc saslauthd[1873577]: pam_mysql - SELECT returned no result. Dec 17 14:08:36 ispc saslauthd[1873577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:08:36 ispc saslauthd[1873577]: do_auth : auth failure: [user=mydlp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:09:01 ispc CRON[1873588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:09:01 ispc CRON[1873589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:09:01 ispc CRON[1873588]: pam_unix(cron:session): session closed for user root Dec 17 14:09:02 ispc CRON[1873589]: pam_unix(cron:session): session closed for user root Dec 17 14:09:59 ispc sshd[1873634]: Invalid user ziplines from 167.99.241.111 Dec 17 14:10:01 ispc CRON[1873636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:10:01 ispc CRON[1873637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:10:01 ispc CRON[1873638]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:10:01 ispc CRON[1873639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:10:01 ispc CRON[1873640]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:10:01 ispc CRON[1873638]: pam_unix(cron:session): session closed for user www-data Dec 17 14:10:01 ispc CRON[1873637]: pam_unix(cron:session): session closed for user root Dec 17 14:10:01 ispc CRON[1873640]: pam_unix(cron:session): session closed for user getmail Dec 17 14:10:02 ispc CRON[1873639]: pam_unix(cron:session): session closed for user root Dec 17 14:10:03 ispc CRON[1873636]: pam_unix(cron:session): session closed for user root Dec 17 14:10:18 ispc sshd[1873719]: Invalid user anoraksro from 152.53.188.144 Dec 17 14:10:44 ispc sshd[1873732]: Invalid user ziplines from 118.218.219.250 Dec 17 14:11:01 ispc CRON[1873742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:11:02 ispc CRON[1873742]: pam_unix(cron:session): session closed for user root Dec 17 14:11:50 ispc sshd[1873770]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 14:12:01 ispc CRON[1873776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:12:02 ispc CRON[1873776]: pam_unix(cron:session): session closed for user root Dec 17 14:12:15 ispc sshd[1873792]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 14:12:15 ispc sshd[1873792]: Invalid user klape from 119.53.253.2 Dec 17 14:12:43 ispc postfix/smtpd[1873812]: sql auxprop plugin using mysql engine Dec 17 14:13:01 ispc CRON[1873826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:13:03 ispc CRON[1873826]: pam_unix(cron:session): session closed for user root Dec 17 14:13:21 ispc sshd[1873846]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 14:14:01 ispc CRON[1873866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:14:02 ispc CRON[1873866]: pam_unix(cron:session): session closed for user root Dec 17 14:14:59 ispc postfix/smtpd[1873904]: sql auxprop plugin using mysql engine Dec 17 14:15:00 ispc saslauthd[1873906]: pam_mysql - SELECT returned no result. Dec 17 14:15:00 ispc saslauthd[1873906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:15:00 ispc saslauthd[1873906]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:15:00 ispc sshd[1873907]: Did not receive identification string from 178.128.255.200 Dec 17 14:15:01 ispc CRON[1873908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:15:01 ispc CRON[1873909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:15:01 ispc CRON[1873910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:15:01 ispc CRON[1873911]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:15:01 ispc CRON[1873909]: pam_unix(cron:session): session closed for user root Dec 17 14:15:01 ispc CRON[1873911]: pam_unix(cron:session): session closed for user getmail Dec 17 14:15:02 ispc CRON[1873910]: pam_unix(cron:session): session closed for user root Dec 17 14:15:02 ispc CRON[1873908]: pam_unix(cron:session): session closed for user root Dec 17 14:15:21 ispc sshd[1873993]: Did not receive identification string from 209.38.110.66 Dec 17 14:16:01 ispc CRON[1874013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:16:01 ispc sshd[1874011]: Invalid user martof from 118.218.219.250 Dec 17 14:16:01 ispc CRON[1874013]: pam_unix(cron:session): session closed for user root Dec 17 14:16:25 ispc sshd[1874039]: Invalid user admin from 209.38.110.66 Dec 17 14:17:01 ispc CRON[1874058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:17:03 ispc CRON[1874058]: pam_unix(cron:session): session closed for user root Dec 17 14:17:06 ispc sshd[1874069]: Invalid user admin from 209.38.110.66 Dec 17 14:17:29 ispc sshd[1874081]: Invalid user test1 from 178.128.255.200 Dec 17 14:17:46 ispc postfix/smtpd[1874089]: sql auxprop plugin using mysql engine Dec 17 14:17:47 ispc CRON[1871870]: pam_unix(cron:session): session closed for user root Dec 17 14:17:48 ispc sshd[1874094]: Invalid user admin from 209.38.110.66 Dec 17 14:18:01 ispc CRON[1874104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:18:06 ispc CRON[1874104]: pam_unix(cron:session): session closed for user root Dec 17 14:18:14 ispc sshd[1874116]: Invalid user test2 from 178.128.255.200 Dec 17 14:18:30 ispc sshd[1874118]: Invalid user admin from 209.38.110.66 Dec 17 14:19:01 ispc sshd[1874122]: Invalid user test3 from 178.128.255.200 Dec 17 14:19:01 ispc CRON[1874124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:19:07 ispc sshd[1874136]: Invalid user admin from 209.38.110.66 Dec 17 14:19:45 ispc sshd[1874154]: Invalid user admin from 209.38.110.66 Dec 17 14:20:01 ispc CRON[1874170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:20:01 ispc CRON[1874173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:20:01 ispc CRON[1874171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:20:01 ispc CRON[1874172]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:20:01 ispc CRON[1874174]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:20:01 ispc CRON[1874172]: pam_unix(cron:session): session closed for user www-data Dec 17 14:20:01 ispc CRON[1874171]: pam_unix(cron:session): session closed for user root Dec 17 14:20:01 ispc CRON[1874174]: pam_unix(cron:session): session closed for user getmail Dec 17 14:20:02 ispc CRON[1874173]: pam_unix(cron:session): session closed for user root Dec 17 14:20:02 ispc CRON[1874170]: pam_unix(cron:session): session closed for user root Dec 17 14:21:01 ispc CRON[1874276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:21:01 ispc CRON[1874277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:21:01 ispc CRON[1874276]: pam_unix(cron:session): session closed for user root Dec 17 14:21:01 ispc CRON[1874277]: pam_unix(cron:session): session closed for user root Dec 17 14:21:51 ispc sshd[1874314]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 14:21:51 ispc sshd[1874314]: Invalid user admin from 114.7.163.154 Dec 17 14:22:01 ispc CRON[1874322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:22:02 ispc CRON[1874322]: pam_unix(cron:session): session closed for user root Dec 17 14:23:01 ispc CRON[1874371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:23:03 ispc CRON[1874371]: pam_unix(cron:session): session closed for user root Dec 17 14:23:53 ispc postfix/smtpd[1874405]: sql auxprop plugin using mysql engine Dec 17 14:23:53 ispc saslauthd[1874408]: pam_mysql - SELECT returned no result. Dec 17 14:23:53 ispc saslauthd[1874408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:23:53 ispc saslauthd[1874408]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:23:57 ispc saslauthd[1874411]: pam_mysql - SELECT returned no result. Dec 17 14:23:57 ispc saslauthd[1874411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:23:57 ispc saslauthd[1874411]: do_auth : auth failure: [user=n.a] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:24:01 ispc CRON[1874416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:24:02 ispc CRON[1874416]: pam_unix(cron:session): session closed for user root Dec 17 14:25:01 ispc CRON[1874452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:25:01 ispc CRON[1874453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:25:01 ispc CRON[1874454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:25:01 ispc CRON[1874455]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:25:01 ispc CRON[1874453]: pam_unix(cron:session): session closed for user root Dec 17 14:25:01 ispc CRON[1874455]: pam_unix(cron:session): session closed for user getmail Dec 17 14:25:01 ispc CRON[1874454]: pam_unix(cron:session): session closed for user root Dec 17 14:25:01 ispc CRON[1874452]: pam_unix(cron:session): session closed for user root Dec 17 14:25:13 ispc sshd[1874536]: Invalid user postgres from 178.128.255.200 Dec 17 14:25:50 ispc sshd[1874554]: Invalid user oracle from 178.128.255.200 Dec 17 14:26:02 ispc CRON[1874561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:26:02 ispc CRON[1874561]: pam_unix(cron:session): session closed for user root Dec 17 14:26:29 ispc sshd[1874584]: Invalid user user from 178.128.255.200 Dec 17 14:27:01 ispc CRON[1874607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:27:02 ispc CRON[1874607]: pam_unix(cron:session): session closed for user root Dec 17 14:28:01 ispc CRON[1874654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:28:02 ispc CRON[1874654]: pam_unix(cron:session): session closed for user root Dec 17 14:28:15 ispc postfix/smtpd[1874669]: sql auxprop plugin using mysql engine Dec 17 14:28:15 ispc saslauthd[1874678]: pam_mysql - SELECT returned no result. Dec 17 14:28:15 ispc saslauthd[1874678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:28:15 ispc saslauthd[1874678]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:29:01 ispc CRON[1874699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:29:01 ispc CRON[1874699]: pam_unix(cron:session): session closed for user root Dec 17 14:29:53 ispc sshd[1874732]: Invalid user ziplines from 27.254.144.183 Dec 17 14:30:01 ispc CRON[1874738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:30:01 ispc CRON[1874739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:30:01 ispc CRON[1874740]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:30:01 ispc CRON[1874741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:30:01 ispc CRON[1874742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:30:01 ispc CRON[1874739]: pam_unix(cron:session): session closed for user root Dec 17 14:30:01 ispc CRON[1874740]: pam_unix(cron:session): session closed for user www-data Dec 17 14:30:01 ispc CRON[1874742]: pam_unix(cron:session): session closed for user getmail Dec 17 14:30:01 ispc CRON[1874741]: pam_unix(cron:session): session closed for user root Dec 17 14:30:01 ispc CRON[1874738]: pam_unix(cron:session): session closed for user root Dec 17 14:31:01 ispc CRON[1874840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:31:02 ispc CRON[1874840]: pam_unix(cron:session): session closed for user root Dec 17 14:32:01 ispc CRON[1874875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:32:02 ispc CRON[1874875]: pam_unix(cron:session): session closed for user root Dec 17 14:32:35 ispc postfix/smtpd[1874900]: sql auxprop plugin using mysql engine Dec 17 14:32:35 ispc saslauthd[1874903]: pam_mysql - SELECT returned no result. Dec 17 14:32:35 ispc saslauthd[1874903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:32:35 ispc saslauthd[1874903]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:33:01 ispc CRON[1874923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:33:03 ispc CRON[1874923]: pam_unix(cron:session): session closed for user root Dec 17 14:34:01 ispc CRON[1874957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:34:01 ispc CRON[1874957]: pam_unix(cron:session): session closed for user root Dec 17 14:35:01 ispc CRON[1874991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:35:01 ispc CRON[1874992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:35:01 ispc CRON[1874993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:35:01 ispc CRON[1874994]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:35:01 ispc CRON[1874992]: pam_unix(cron:session): session closed for user root Dec 17 14:35:01 ispc CRON[1874994]: pam_unix(cron:session): session closed for user getmail Dec 17 14:35:03 ispc CRON[1874993]: pam_unix(cron:session): session closed for user root Dec 17 14:35:03 ispc postfix/smtpd[1875050]: sql auxprop plugin using mysql engine Dec 17 14:35:04 ispc CRON[1874991]: pam_unix(cron:session): session closed for user root Dec 17 14:36:01 ispc CRON[1875094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:36:02 ispc CRON[1875094]: pam_unix(cron:session): session closed for user root Dec 17 14:37:02 ispc CRON[1875130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:37:02 ispc CRON[1875130]: pam_unix(cron:session): session closed for user root Dec 17 14:37:11 ispc sshd[1875147]: Invalid user blceu from 167.99.241.111 Dec 17 14:38:01 ispc CRON[1875180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:38:01 ispc CRON[1875180]: pam_unix(cron:session): session closed for user root Dec 17 14:38:30 ispc sshd[1875207]: Invalid user klape from 67.205.163.146 Dec 17 14:38:31 ispc sshd[1875209]: Invalid user ubuntu from 67.205.163.146 Dec 17 14:39:01 ispc CRON[1875224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:39:01 ispc CRON[1875225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:39:02 ispc CRON[1875224]: pam_unix(cron:session): session closed for user root Dec 17 14:39:02 ispc CRON[1875225]: pam_unix(cron:session): session closed for user root Dec 17 14:39:19 ispc postfix/smtpd[1875254]: sql auxprop plugin using mysql engine Dec 17 14:39:21 ispc saslauthd[1875256]: pam_mysql - SELECT returned no result. Dec 17 14:39:21 ispc saslauthd[1875256]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:39:21 ispc saslauthd[1875256]: do_auth : auth failure: [user=naadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:39:24 ispc sshd[1875257]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 14:39:33 ispc CRON[1874124]: pam_unix(cron:session): session closed for user root Dec 17 14:40:01 ispc CRON[1875263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:40:01 ispc CRON[1875264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:40:01 ispc CRON[1875265]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:40:01 ispc CRON[1875266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:40:01 ispc CRON[1875267]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:40:01 ispc CRON[1875265]: pam_unix(cron:session): session closed for user www-data Dec 17 14:40:01 ispc CRON[1875264]: pam_unix(cron:session): session closed for user root Dec 17 14:40:01 ispc CRON[1875267]: pam_unix(cron:session): session closed for user getmail Dec 17 14:40:03 ispc CRON[1875263]: pam_unix(cron:session): session closed for user root Dec 17 14:40:07 ispc CRON[1875266]: pam_unix(cron:session): session closed for user root Dec 17 14:40:32 ispc saslauthd[1875346]: pam_mysql - SELECT returned no result. Dec 17 14:40:32 ispc saslauthd[1875346]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:40:32 ispc saslauthd[1875346]: do_auth : auth failure: [user=test@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 14:41:01 ispc CRON[1875351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:41:26 ispc sshd[1875371]: Invalid user ziplines from 211.57.200.145 Dec 17 14:41:29 ispc saslauthd[1875373]: pam_mysql - SELECT returned no result. Dec 17 14:41:29 ispc saslauthd[1875373]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:41:29 ispc saslauthd[1875373]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:42:01 ispc CRON[1875386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:42:02 ispc CRON[1875386]: pam_unix(cron:session): session closed for user root Dec 17 14:42:58 ispc sshd[1875435]: Did not receive identification string from 142.93.133.76 Dec 17 14:43:01 ispc CRON[1875437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:43:02 ispc CRON[1875437]: pam_unix(cron:session): session closed for user root Dec 17 14:43:44 ispc sshd[1875464]: Invalid user martof from 85.143.173.172 Dec 17 14:44:01 ispc CRON[1875474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:44:03 ispc CRON[1875474]: pam_unix(cron:session): session closed for user root Dec 17 14:44:16 ispc sshd[1875494]: Invalid user admin from 142.93.133.76 Dec 17 14:45:01 ispc CRON[1875512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:45:01 ispc CRON[1875513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:45:01 ispc CRON[1875514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:45:01 ispc CRON[1875515]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:45:01 ispc CRON[1875513]: pam_unix(cron:session): session closed for user root Dec 17 14:45:01 ispc CRON[1875515]: pam_unix(cron:session): session closed for user getmail Dec 17 14:45:01 ispc CRON[1875514]: pam_unix(cron:session): session closed for user root Dec 17 14:45:02 ispc CRON[1875512]: pam_unix(cron:session): session closed for user root Dec 17 14:45:06 ispc sshd[1875588]: Did not receive identification string from 192.227.134.84 Dec 17 14:45:10 ispc sshd[1875593]: Invalid user admin from 142.93.133.76 Dec 17 14:45:25 ispc postfix/smtpd[1875600]: sql auxprop plugin using mysql engine Dec 17 14:45:28 ispc sshd[1875607]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 14:46:01 ispc CRON[1875625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:46:01 ispc sshd[1875623]: Invalid user admin from 142.93.133.76 Dec 17 14:46:01 ispc CRON[1875625]: pam_unix(cron:session): session closed for user root Dec 17 14:46:48 ispc sshd[1875652]: Invalid user admin from 142.93.133.76 Dec 17 14:47:01 ispc CRON[1875662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:47:02 ispc CRON[1875662]: pam_unix(cron:session): session closed for user root Dec 17 14:47:35 ispc sshd[1875685]: Invalid user admin from 142.93.133.76 Dec 17 14:48:01 ispc CRON[1875709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:48:02 ispc CRON[1875709]: pam_unix(cron:session): session closed for user root Dec 17 14:48:18 ispc sshd[1875724]: Invalid user admin from 142.93.133.76 Dec 17 14:49:01 ispc CRON[1875755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:49:02 ispc CRON[1875755]: pam_unix(cron:session): session closed for user root Dec 17 14:50:01 ispc CRON[1875792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:50:01 ispc CRON[1875793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:50:01 ispc CRON[1875794]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 14:50:01 ispc CRON[1875795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:50:01 ispc CRON[1875796]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:50:01 ispc CRON[1875794]: pam_unix(cron:session): session closed for user www-data Dec 17 14:50:01 ispc CRON[1875793]: pam_unix(cron:session): session closed for user root Dec 17 14:50:02 ispc CRON[1875796]: pam_unix(cron:session): session closed for user getmail Dec 17 14:50:02 ispc CRON[1875795]: pam_unix(cron:session): session closed for user root Dec 17 14:50:04 ispc CRON[1875792]: pam_unix(cron:session): session closed for user root Dec 17 14:50:24 ispc postfix/smtpd[1875884]: sql auxprop plugin using mysql engine Dec 17 14:50:24 ispc saslauthd[1875887]: pam_mysql - SELECT returned no result. Dec 17 14:50:24 ispc saslauthd[1875887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:50:24 ispc saslauthd[1875887]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:50:51 ispc postfix/smtpd[1875896]: sql auxprop plugin using mysql engine Dec 17 14:51:01 ispc CRON[1875903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:51:01 ispc CRON[1875903]: pam_unix(cron:session): session closed for user root Dec 17 14:52:01 ispc CRON[1875939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:52:02 ispc CRON[1875939]: pam_unix(cron:session): session closed for user root Dec 17 14:53:01 ispc CRON[1875986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:53:02 ispc CRON[1875986]: pam_unix(cron:session): session closed for user root Dec 17 14:54:01 ispc CRON[1876021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:54:02 ispc CRON[1876021]: pam_unix(cron:session): session closed for user root Dec 17 14:54:42 ispc postfix/smtpd[1876049]: sql auxprop plugin using mysql engine Dec 17 14:54:44 ispc saslauthd[1876052]: pam_mysql - SELECT returned no result. Dec 17 14:54:44 ispc saslauthd[1876052]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:54:44 ispc saslauthd[1876052]: do_auth : auth failure: [user=ncrm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 14:55:01 ispc CRON[1876061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:55:01 ispc CRON[1876062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:55:01 ispc CRON[1876063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:55:01 ispc CRON[1876064]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 14:55:01 ispc CRON[1876062]: pam_unix(cron:session): session closed for user root Dec 17 14:55:01 ispc CRON[1876064]: pam_unix(cron:session): session closed for user getmail Dec 17 14:55:02 ispc CRON[1876063]: pam_unix(cron:session): session closed for user root Dec 17 14:55:04 ispc CRON[1876061]: pam_unix(cron:session): session closed for user root Dec 17 14:56:01 ispc CRON[1876158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:56:02 ispc CRON[1876158]: pam_unix(cron:session): session closed for user root Dec 17 14:56:29 ispc sshd[1876181]: Invalid user blceu from 27.254.144.183 Dec 17 14:57:01 ispc CRON[1876196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:57:01 ispc CRON[1876196]: pam_unix(cron:session): session closed for user root Dec 17 14:57:32 ispc sshd[1876219]: Invalid user blceu from 85.143.173.172 Dec 17 14:58:01 ispc CRON[1876243]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:58:02 ispc CRON[1876243]: pam_unix(cron:session): session closed for user root Dec 17 14:59:01 ispc CRON[1876280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 14:59:02 ispc CRON[1876280]: pam_unix(cron:session): session closed for user root Dec 17 14:59:38 ispc postfix/smtpd[1876307]: sql auxprop plugin using mysql engine Dec 17 14:59:38 ispc saslauthd[1876310]: pam_mysql - SELECT returned no result. Dec 17 14:59:38 ispc saslauthd[1876310]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 14:59:38 ispc saslauthd[1876310]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:00:01 ispc CRON[1876320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:00:01 ispc CRON[1876319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:00:01 ispc CRON[1876322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:00:01 ispc CRON[1876323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:00:01 ispc CRON[1876324]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:00:01 ispc CRON[1876321]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:00:01 ispc CRON[1876320]: pam_unix(cron:session): session closed for user root Dec 17 15:00:01 ispc CRON[1876321]: pam_unix(cron:session): session closed for user www-data Dec 17 15:00:01 ispc CRON[1876324]: pam_unix(cron:session): session closed for user getmail Dec 17 15:00:02 ispc CRON[1876323]: pam_unix(cron:session): session closed for user root Dec 17 15:00:02 ispc CRON[1876319]: pam_unix(cron:session): session closed for user root Dec 17 15:00:02 ispc CRON[1876322]: pam_unix(cron:session): session closed for user root Dec 17 15:01:01 ispc CRON[1876501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:01:02 ispc CRON[1876501]: pam_unix(cron:session): session closed for user root Dec 17 15:01:32 ispc postfix/smtpd[1876523]: sql auxprop plugin using mysql engine Dec 17 15:01:32 ispc CRON[1875351]: pam_unix(cron:session): session closed for user root Dec 17 15:02:01 ispc CRON[1876528]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 15:02:01 ispc CRON[1876529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:02:08 ispc CRON[1876529]: pam_unix(cron:session): session closed for user root Dec 17 15:02:22 ispc saslauthd[1877176]: pam_mysql - SELECT returned no result. Dec 17 15:02:22 ispc saslauthd[1877176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:02:22 ispc saslauthd[1877176]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:02:30 ispc sshd[1877272]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:02:30 ispc sshd[1877272]: Invalid user admin from 114.7.163.154 Dec 17 15:02:54 ispc CRON[1876528]: pam_unix(cron:session): session closed for user logcheck Dec 17 15:03:00 ispc postfix/smtpd[1877564]: sql auxprop plugin using mysql engine Dec 17 15:03:01 ispc CRON[1877568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:04:01 ispc CRON[1877601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:04:02 ispc CRON[1877601]: pam_unix(cron:session): session closed for user root Dec 17 15:04:56 ispc sshd[1877638]: Invalid user klape from 51.77.222.24 Dec 17 15:04:57 ispc sshd[1877640]: Invalid user ubuntu from 51.77.222.24 Dec 17 15:05:01 ispc CRON[1877643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:05:01 ispc CRON[1877644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:05:01 ispc CRON[1877645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:05:01 ispc CRON[1877646]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:05:01 ispc CRON[1877644]: pam_unix(cron:session): session closed for user root Dec 17 15:05:02 ispc CRON[1877646]: pam_unix(cron:session): session closed for user getmail Dec 17 15:05:02 ispc CRON[1877645]: pam_unix(cron:session): session closed for user root Dec 17 15:05:02 ispc CRON[1877643]: pam_unix(cron:session): session closed for user root Dec 17 15:06:01 ispc CRON[1877744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:06:02 ispc CRON[1877744]: pam_unix(cron:session): session closed for user root Dec 17 15:06:53 ispc sshd[1877776]: Did not receive identification string from 36.24.88.216 Dec 17 15:07:01 ispc CRON[1877781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:07:02 ispc CRON[1877781]: pam_unix(cron:session): session closed for user root Dec 17 15:08:01 ispc CRON[1877825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:08:01 ispc CRON[1877825]: pam_unix(cron:session): session closed for user root Dec 17 15:08:36 ispc postfix/smtpd[1877853]: sql auxprop plugin using mysql engine Dec 17 15:08:37 ispc saslauthd[1877856]: pam_mysql - SELECT returned no result. Dec 17 15:08:37 ispc saslauthd[1877856]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:08:37 ispc saslauthd[1877856]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:08:57 ispc postfix/smtpd[1877865]: sql auxprop plugin using mysql engine Dec 17 15:09:02 ispc CRON[1877867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:09:02 ispc CRON[1877868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:09:02 ispc CRON[1877867]: pam_unix(cron:session): session closed for user root Dec 17 15:09:02 ispc CRON[1877868]: pam_unix(cron:session): session closed for user root Dec 17 15:10:01 ispc CRON[1877914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:10:01 ispc CRON[1877915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:10:01 ispc CRON[1877916]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:10:01 ispc CRON[1877917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:10:01 ispc CRON[1877918]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:10:02 ispc CRON[1877916]: pam_unix(cron:session): session closed for user www-data Dec 17 15:10:02 ispc CRON[1877915]: pam_unix(cron:session): session closed for user root Dec 17 15:10:02 ispc CRON[1877918]: pam_unix(cron:session): session closed for user getmail Dec 17 15:10:02 ispc CRON[1877917]: pam_unix(cron:session): session closed for user root Dec 17 15:10:02 ispc CRON[1877914]: pam_unix(cron:session): session closed for user root Dec 17 15:10:11 ispc saslauthd[1877996]: pam_mysql - SELECT returned no result. Dec 17 15:10:11 ispc saslauthd[1877996]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:10:11 ispc saslauthd[1877996]: do_auth : auth failure: [user=netbotz] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:10:54 ispc sshd[1878013]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:11:01 ispc CRON[1878019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:11:02 ispc CRON[1878019]: pam_unix(cron:session): session closed for user root Dec 17 15:12:01 ispc CRON[1878055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:12:02 ispc CRON[1878055]: pam_unix(cron:session): session closed for user root Dec 17 15:12:19 ispc postfix/smtpd[1878074]: sql auxprop plugin using mysql engine Dec 17 15:12:19 ispc saslauthd[1878078]: pam_mysql - SELECT returned no result. Dec 17 15:12:19 ispc saslauthd[1878078]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:12:19 ispc saslauthd[1878078]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:12:20 ispc sshd[1878076]: Invalid user anoraksro from 152.53.188.144 Dec 17 15:13:01 ispc CRON[1878111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:13:02 ispc CRON[1878111]: pam_unix(cron:session): session closed for user root Dec 17 15:13:38 ispc sshd[1878136]: Did not receive identification string from 45.140.17.97 Dec 17 15:14:01 ispc CRON[1878149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:14:02 ispc CRON[1878149]: pam_unix(cron:session): session closed for user root Dec 17 15:15:01 ispc CRON[1878187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:15:01 ispc CRON[1878188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:15:01 ispc CRON[1878189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:15:01 ispc CRON[1878190]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:15:01 ispc CRON[1878188]: pam_unix(cron:session): session closed for user root Dec 17 15:15:01 ispc CRON[1878190]: pam_unix(cron:session): session closed for user getmail Dec 17 15:15:01 ispc CRON[1878189]: pam_unix(cron:session): session closed for user root Dec 17 15:15:02 ispc CRON[1878187]: pam_unix(cron:session): session closed for user root Dec 17 15:15:23 ispc sshd[1878273]: Invalid user klape from 103.164.20.29 Dec 17 15:15:24 ispc sshd[1878279]: Invalid user ubuntu from 103.164.20.29 Dec 17 15:15:27 ispc sshd[1878281]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 15:16:01 ispc CRON[1878297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:16:01 ispc CRON[1878297]: pam_unix(cron:session): session closed for user root Dec 17 15:17:01 ispc CRON[1878333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:17:02 ispc CRON[1878333]: pam_unix(cron:session): session closed for user root Dec 17 15:17:38 ispc postfix/smtpd[1878360]: sql auxprop plugin using mysql engine Dec 17 15:17:39 ispc saslauthd[1878363]: pam_mysql - SELECT returned no result. Dec 17 15:17:39 ispc saslauthd[1878363]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:17:39 ispc saslauthd[1878363]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:18:01 ispc CRON[1878379]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 15:18:01 ispc CRON[1878380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:18:01 ispc CRON[1878380]: pam_unix(cron:session): session closed for user root Dec 17 15:18:03 ispc CRON[1878379]: pam_unix(cron:session): session closed for user amavis Dec 17 15:18:06 ispc postfix/smtpd[1878407]: sql auxprop plugin using mysql engine Dec 17 15:18:08 ispc sshd[1878410]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:19:01 ispc CRON[1878433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:19:02 ispc CRON[1878433]: pam_unix(cron:session): session closed for user root Dec 17 15:20:01 ispc CRON[1878474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:20:01 ispc CRON[1878475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:20:01 ispc CRON[1878476]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:20:01 ispc CRON[1878477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:20:01 ispc CRON[1878478]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:20:01 ispc CRON[1878476]: pam_unix(cron:session): session closed for user www-data Dec 17 15:20:01 ispc CRON[1878475]: pam_unix(cron:session): session closed for user root Dec 17 15:20:01 ispc CRON[1878478]: pam_unix(cron:session): session closed for user getmail Dec 17 15:20:01 ispc CRON[1878477]: pam_unix(cron:session): session closed for user root Dec 17 15:20:02 ispc CRON[1878474]: pam_unix(cron:session): session closed for user root Dec 17 15:21:01 ispc CRON[1878577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:21:01 ispc CRON[1878578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:21:01 ispc CRON[1878577]: pam_unix(cron:session): session closed for user root Dec 17 15:21:01 ispc CRON[1878578]: pam_unix(cron:session): session closed for user root Dec 17 15:22:02 ispc CRON[1878618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:22:02 ispc CRON[1878618]: pam_unix(cron:session): session closed for user root Dec 17 15:23:01 ispc CRON[1878660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:23:01 ispc CRON[1878660]: pam_unix(cron:session): session closed for user root Dec 17 15:23:16 ispc postfix/smtpd[1878675]: sql auxprop plugin using mysql engine Dec 17 15:23:24 ispc postfix/smtpd[1878680]: sql auxprop plugin using mysql engine Dec 17 15:23:24 ispc CRON[1877568]: pam_unix(cron:session): session closed for user root Dec 17 15:24:01 ispc CRON[1878685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:24:07 ispc CRON[1878685]: pam_unix(cron:session): session closed for user root Dec 17 15:24:43 ispc sshd[1878699]: Invalid user blceu from 119.205.233.162 Dec 17 15:25:01 ispc CRON[1878701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:25:01 ispc CRON[1878702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:25:01 ispc CRON[1878703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:25:01 ispc CRON[1878704]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:25:01 ispc CRON[1878702]: pam_unix(cron:session): session closed for user root Dec 17 15:25:01 ispc CRON[1878704]: pam_unix(cron:session): session closed for user getmail Dec 17 15:25:04 ispc CRON[1878701]: pam_unix(cron:session): session closed for user root Dec 17 15:25:40 ispc saslauthd[1878791]: pam_mysql - SELECT returned no result. Dec 17 15:25:40 ispc saslauthd[1878791]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:25:40 ispc saslauthd[1878791]: do_auth : auth failure: [user=netlink] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:25:53 ispc sshd[1878796]: Invalid user ziplines from 45.119.213.109 Dec 17 15:25:56 ispc sshd[1878802]: Invalid user ziplines from 5.129.195.224 Dec 17 15:26:01 ispc CRON[1878804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:26:01 ispc CRON[1878804]: pam_unix(cron:session): session closed for user root Dec 17 15:26:47 ispc saslauthd[1878836]: pam_mysql - SELECT returned no result. Dec 17 15:26:47 ispc saslauthd[1878836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:26:47 ispc saslauthd[1878836]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:27:01 ispc CRON[1878841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:27:02 ispc CRON[1878841]: pam_unix(cron:session): session closed for user root Dec 17 15:28:01 ispc CRON[1878887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:28:01 ispc CRON[1878887]: pam_unix(cron:session): session closed for user root Dec 17 15:29:01 ispc CRON[1878928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:29:02 ispc CRON[1878928]: pam_unix(cron:session): session closed for user root Dec 17 15:29:05 ispc sshd[1878939]: Invalid user martof from 45.119.213.109 Dec 17 15:29:25 ispc sshd[1878949]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:30:01 ispc CRON[1878974]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:30:01 ispc CRON[1878971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:30:01 ispc CRON[1878970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:30:01 ispc CRON[1878972]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:30:01 ispc CRON[1878973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:30:01 ispc CRON[1878972]: pam_unix(cron:session): session closed for user www-data Dec 17 15:30:01 ispc CRON[1878971]: pam_unix(cron:session): session closed for user root Dec 17 15:30:01 ispc CRON[1878974]: pam_unix(cron:session): session closed for user getmail Dec 17 15:30:02 ispc CRON[1878973]: pam_unix(cron:session): session closed for user root Dec 17 15:30:02 ispc CRON[1878970]: pam_unix(cron:session): session closed for user root Dec 17 15:31:01 ispc CRON[1879078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:31:02 ispc CRON[1879078]: pam_unix(cron:session): session closed for user root Dec 17 15:31:51 ispc postfix/smtpd[1879111]: sql auxprop plugin using mysql engine Dec 17 15:32:01 ispc CRON[1879118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:32:01 ispc CRON[1879118]: pam_unix(cron:session): session closed for user root Dec 17 15:32:39 ispc saslauthd[1879146]: pam_mysql - SELECT returned no result. Dec 17 15:32:39 ispc saslauthd[1879146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:39 ispc saslauthd[1879146]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:40 ispc saslauthd[1879147]: pam_mysql - SELECT returned no result. Dec 17 15:32:40 ispc saslauthd[1879147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:40 ispc saslauthd[1879147]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:41 ispc saslauthd[1879148]: pam_mysql - SELECT returned no result. Dec 17 15:32:41 ispc saslauthd[1879148]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:41 ispc saslauthd[1879148]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:41 ispc postfix/smtpd[1879149]: sql auxprop plugin using mysql engine Dec 17 15:32:42 ispc saslauthd[1879152]: pam_mysql - SELECT returned no result. Dec 17 15:32:42 ispc saslauthd[1879152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:42 ispc saslauthd[1879152]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:42 ispc saslauthd[1879153]: pam_mysql - SELECT returned no result. Dec 17 15:32:42 ispc saslauthd[1879153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:42 ispc saslauthd[1879153]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:43 ispc saslauthd[1879154]: pam_mysql - SELECT returned no result. Dec 17 15:32:43 ispc saslauthd[1879154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:43 ispc saslauthd[1879154]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:44 ispc saslauthd[1879155]: pam_mysql - SELECT returned no result. Dec 17 15:32:44 ispc saslauthd[1879155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:44 ispc saslauthd[1879155]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:45 ispc saslauthd[1879156]: pam_mysql - SELECT returned no result. Dec 17 15:32:45 ispc saslauthd[1879156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:45 ispc saslauthd[1879156]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:46 ispc saslauthd[1879157]: pam_mysql - SELECT returned no result. Dec 17 15:32:46 ispc saslauthd[1879157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:46 ispc saslauthd[1879157]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:47 ispc saslauthd[1879158]: pam_mysql - SELECT returned no result. Dec 17 15:32:47 ispc saslauthd[1879158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:47 ispc saslauthd[1879158]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:48 ispc saslauthd[1879159]: pam_mysql - SELECT returned no result. Dec 17 15:32:48 ispc saslauthd[1879159]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:48 ispc saslauthd[1879159]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:48 ispc saslauthd[1879169]: pam_mysql - SELECT returned no result. Dec 17 15:32:48 ispc saslauthd[1879169]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:48 ispc saslauthd[1879169]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:49 ispc saslauthd[1879172]: pam_mysql - SELECT returned no result. Dec 17 15:32:49 ispc saslauthd[1879172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:49 ispc saslauthd[1879172]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:50 ispc saslauthd[1879173]: pam_mysql - SELECT returned no result. Dec 17 15:32:50 ispc saslauthd[1879173]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:50 ispc saslauthd[1879173]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:51 ispc saslauthd[1879174]: pam_mysql - SELECT returned no result. Dec 17 15:32:51 ispc saslauthd[1879174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:51 ispc saslauthd[1879174]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:52 ispc saslauthd[1879175]: pam_mysql - SELECT returned no result. Dec 17 15:32:52 ispc saslauthd[1879175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:52 ispc saslauthd[1879175]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:53 ispc saslauthd[1879176]: pam_mysql - SELECT returned no result. Dec 17 15:32:53 ispc saslauthd[1879176]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:53 ispc saslauthd[1879176]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:54 ispc saslauthd[1879177]: pam_mysql - SELECT returned no result. Dec 17 15:32:54 ispc saslauthd[1879177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:54 ispc saslauthd[1879177]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:55 ispc saslauthd[1879178]: pam_mysql - SELECT returned no result. Dec 17 15:32:55 ispc saslauthd[1879178]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:55 ispc saslauthd[1879178]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:56 ispc saslauthd[1879179]: pam_mysql - SELECT returned no result. Dec 17 15:32:56 ispc saslauthd[1879179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:56 ispc saslauthd[1879179]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:57 ispc saslauthd[1879180]: pam_mysql - SELECT returned no result. Dec 17 15:32:57 ispc saslauthd[1879180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:32:57 ispc saslauthd[1879180]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:32:58 ispc saslauthd[1879181]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:32:58 ispc saslauthd[1879181]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:32:59 ispc saslauthd[1879186]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:32:59 ispc saslauthd[1879186]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:00 ispc saslauthd[1879187]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:00 ispc saslauthd[1879187]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:01 ispc saslauthd[1879188]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:01 ispc saslauthd[1879188]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:01 ispc CRON[1879189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:33:01 ispc saslauthd[1879196]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:01 ispc saslauthd[1879196]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:02 ispc CRON[1879189]: pam_unix(cron:session): session closed for user root Dec 17 15:33:02 ispc saslauthd[1879201]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:02 ispc saslauthd[1879201]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:03 ispc saslauthd[1879203]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:03 ispc saslauthd[1879203]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:04 ispc saslauthd[1879204]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:04 ispc saslauthd[1879204]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:05 ispc saslauthd[1879205]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:05 ispc saslauthd[1879205]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:06 ispc saslauthd[1879206]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:06 ispc saslauthd[1879206]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:07 ispc saslauthd[1879207]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:07 ispc saslauthd[1879207]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:08 ispc saslauthd[1879208]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:08 ispc saslauthd[1879208]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:09 ispc saslauthd[1879213]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:09 ispc saslauthd[1879213]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:10 ispc saslauthd[1879214]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:10 ispc saslauthd[1879214]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:11 ispc saslauthd[1879215]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:11 ispc saslauthd[1879215]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:12 ispc saslauthd[1879216]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:12 ispc saslauthd[1879216]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:13 ispc saslauthd[1879217]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:13 ispc saslauthd[1879217]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:14 ispc saslauthd[1879218]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:14 ispc saslauthd[1879218]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:15 ispc saslauthd[1879219]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:15 ispc saslauthd[1879219]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:16 ispc saslauthd[1879220]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:16 ispc saslauthd[1879220]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:17 ispc saslauthd[1879221]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:17 ispc saslauthd[1879221]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:18 ispc saslauthd[1879222]: pam_mysql - SELECT returned no result. Dec 17 15:33:18 ispc saslauthd[1879222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:18 ispc saslauthd[1879222]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:19 ispc saslauthd[1879227]: pam_mysql - SELECT returned no result. Dec 17 15:33:19 ispc saslauthd[1879227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:19 ispc saslauthd[1879227]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:20 ispc saslauthd[1879228]: pam_mysql - SELECT returned no result. Dec 17 15:33:20 ispc saslauthd[1879228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:20 ispc saslauthd[1879228]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:21 ispc saslauthd[1879229]: pam_mysql - SELECT returned no result. Dec 17 15:33:21 ispc saslauthd[1879229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:21 ispc saslauthd[1879229]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:22 ispc saslauthd[1879230]: pam_mysql - SELECT returned no result. Dec 17 15:33:22 ispc saslauthd[1879230]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:22 ispc saslauthd[1879230]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:23 ispc saslauthd[1879231]: pam_mysql - SELECT returned no result. Dec 17 15:33:23 ispc saslauthd[1879231]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:23 ispc saslauthd[1879231]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:24 ispc saslauthd[1879232]: pam_mysql - SELECT returned no result. Dec 17 15:33:24 ispc saslauthd[1879232]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:24 ispc saslauthd[1879232]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:25 ispc saslauthd[1879233]: pam_mysql - SELECT returned no result. Dec 17 15:33:25 ispc saslauthd[1879233]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:25 ispc saslauthd[1879233]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:25 ispc saslauthd[1879234]: pam_mysql - SELECT returned no result. Dec 17 15:33:25 ispc saslauthd[1879234]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:25 ispc saslauthd[1879234]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:26 ispc saslauthd[1879235]: pam_mysql - SELECT returned no result. Dec 17 15:33:26 ispc saslauthd[1879235]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:26 ispc saslauthd[1879235]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:27 ispc saslauthd[1879236]: pam_mysql - SELECT returned no result. Dec 17 15:33:27 ispc saslauthd[1879236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:27 ispc saslauthd[1879236]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:28 ispc saslauthd[1879237]: pam_mysql - SELECT returned no result. Dec 17 15:33:28 ispc saslauthd[1879237]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:28 ispc saslauthd[1879237]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:29 ispc saslauthd[1879242]: pam_mysql - SELECT returned no result. Dec 17 15:33:29 ispc saslauthd[1879242]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:29 ispc saslauthd[1879242]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:30 ispc saslauthd[1879243]: pam_mysql - SELECT returned no result. Dec 17 15:33:30 ispc saslauthd[1879243]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:30 ispc saslauthd[1879243]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:31 ispc saslauthd[1879244]: pam_mysql - SELECT returned no result. Dec 17 15:33:31 ispc saslauthd[1879244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:31 ispc saslauthd[1879244]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:32 ispc saslauthd[1879245]: pam_mysql - SELECT returned no result. Dec 17 15:33:32 ispc saslauthd[1879245]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:32 ispc saslauthd[1879245]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:33 ispc saslauthd[1879246]: pam_mysql - SELECT returned no result. Dec 17 15:33:33 ispc saslauthd[1879246]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:33 ispc saslauthd[1879246]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:34 ispc saslauthd[1879247]: pam_mysql - SELECT returned no result. Dec 17 15:33:34 ispc saslauthd[1879247]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:34 ispc saslauthd[1879247]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:35 ispc saslauthd[1879248]: pam_mysql - SELECT returned no result. Dec 17 15:33:35 ispc saslauthd[1879248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:35 ispc saslauthd[1879248]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:36 ispc saslauthd[1879249]: pam_mysql - SELECT returned no result. Dec 17 15:33:36 ispc saslauthd[1879249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:36 ispc saslauthd[1879249]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:37 ispc saslauthd[1879250]: pam_mysql - SELECT returned no result. Dec 17 15:33:37 ispc saslauthd[1879250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:33:37 ispc saslauthd[1879250]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:33:38 ispc saslauthd[1879251]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:38 ispc saslauthd[1879251]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:40 ispc saslauthd[1879256]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:40 ispc saslauthd[1879256]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:40 ispc saslauthd[1879257]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:40 ispc saslauthd[1879257]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:41 ispc saslauthd[1879258]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:41 ispc saslauthd[1879258]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:42 ispc saslauthd[1879259]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:42 ispc saslauthd[1879259]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:43 ispc saslauthd[1879260]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:43 ispc saslauthd[1879260]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:45 ispc saslauthd[1879261]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:45 ispc saslauthd[1879261]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:46 ispc saslauthd[1879262]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:46 ispc saslauthd[1879262]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:47 ispc saslauthd[1879263]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:47 ispc saslauthd[1879263]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:48 ispc saslauthd[1879264]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:48 ispc saslauthd[1879264]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:49 ispc saslauthd[1879265]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:49 ispc saslauthd[1879265]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:50 ispc saslauthd[1879270]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:50 ispc saslauthd[1879270]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:50 ispc saslauthd[1879271]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:50 ispc saslauthd[1879271]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:51 ispc saslauthd[1879272]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:51 ispc saslauthd[1879272]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:52 ispc saslauthd[1879273]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:52 ispc saslauthd[1879273]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:53 ispc saslauthd[1879274]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:53 ispc saslauthd[1879274]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:54 ispc saslauthd[1879275]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:54 ispc saslauthd[1879275]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:55 ispc saslauthd[1879276]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:55 ispc saslauthd[1879276]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:56 ispc saslauthd[1879277]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:56 ispc saslauthd[1879277]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:57 ispc saslauthd[1879278]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:57 ispc saslauthd[1879278]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:33:58 ispc saslauthd[1879279]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 17 15:33:58 ispc saslauthd[1879279]: do_auth : auth failure: [user=info@zednictvi-stastny.eu] [service=smtp] [realm=zednictvi-stastny.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:34:01 ispc CRON[1879284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:34:01 ispc CRON[1879284]: pam_unix(cron:session): session closed for user root Dec 17 15:34:33 ispc sshd[1879309]: Did not receive identification string from 192.227.134.84 Dec 17 15:34:58 ispc sshd[1879319]: Did not receive identification string from 81.28.32.66 Dec 17 15:35:01 ispc CRON[1879324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:35:01 ispc CRON[1879325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:35:01 ispc CRON[1879326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:35:01 ispc CRON[1879327]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:35:01 ispc CRON[1879325]: pam_unix(cron:session): session closed for user root Dec 17 15:35:01 ispc CRON[1879327]: pam_unix(cron:session): session closed for user getmail Dec 17 15:35:02 ispc CRON[1879326]: pam_unix(cron:session): session closed for user root Dec 17 15:35:02 ispc CRON[1879324]: pam_unix(cron:session): session closed for user root Dec 17 15:35:26 ispc postfix/smtpd[1879409]: sql auxprop plugin using mysql engine Dec 17 15:35:26 ispc saslauthd[1879411]: pam_mysql - SELECT returned no result. Dec 17 15:35:26 ispc saslauthd[1879411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:35:26 ispc saslauthd[1879411]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:36:01 ispc CRON[1879432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:36:02 ispc CRON[1879432]: pam_unix(cron:session): session closed for user root Dec 17 15:36:45 ispc saslauthd[1879460]: pam_mysql - SELECT returned no result. Dec 17 15:36:45 ispc saslauthd[1879460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:36:45 ispc saslauthd[1879460]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:37:01 ispc CRON[1879465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:37:01 ispc CRON[1879465]: pam_unix(cron:session): session closed for user root Dec 17 15:37:49 ispc saslauthd[1879502]: pam_mysql - SELECT returned no result. Dec 17 15:37:49 ispc saslauthd[1879502]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:37:49 ispc saslauthd[1879502]: do_auth : auth failure: [user=user@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 15:38:01 ispc CRON[1879519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:38:02 ispc CRON[1879519]: pam_unix(cron:session): session closed for user root Dec 17 15:38:11 ispc sshd[1879537]: Invalid user klape from 2.57.217.229 Dec 17 15:38:12 ispc sshd[1879539]: Invalid user ubuntu from 2.57.217.229 Dec 17 15:38:34 ispc sshd[1879549]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:39:01 ispc CRON[1879563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:39:01 ispc CRON[1879564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:39:01 ispc CRON[1879563]: pam_unix(cron:session): session closed for user root Dec 17 15:39:02 ispc CRON[1879564]: pam_unix(cron:session): session closed for user root Dec 17 15:40:01 ispc CRON[1879614]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:40:01 ispc CRON[1879610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:40:01 ispc CRON[1879611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:40:01 ispc CRON[1879612]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:40:01 ispc CRON[1879613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:40:01 ispc CRON[1879612]: pam_unix(cron:session): session closed for user www-data Dec 17 15:40:01 ispc CRON[1879611]: pam_unix(cron:session): session closed for user root Dec 17 15:40:01 ispc CRON[1879614]: pam_unix(cron:session): session closed for user getmail Dec 17 15:40:02 ispc CRON[1879613]: pam_unix(cron:session): session closed for user root Dec 17 15:40:02 ispc CRON[1879610]: pam_unix(cron:session): session closed for user root Dec 17 15:41:01 ispc CRON[1879714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:41:01 ispc CRON[1879714]: pam_unix(cron:session): session closed for user root Dec 17 15:41:05 ispc postfix/smtpd[1879727]: sql auxprop plugin using mysql engine Dec 17 15:41:07 ispc saslauthd[1879729]: pam_mysql - SELECT returned no result. Dec 17 15:41:07 ispc saslauthd[1879729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:41:07 ispc saslauthd[1879729]: do_auth : auth failure: [user=netman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:42:01 ispc CRON[1879756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:42:01 ispc CRON[1879756]: pam_unix(cron:session): session closed for user root Dec 17 15:43:01 ispc CRON[1879800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:43:02 ispc CRON[1879800]: pam_unix(cron:session): session closed for user root Dec 17 15:44:01 ispc CRON[1879832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:44:01 ispc CRON[1879832]: pam_unix(cron:session): session closed for user root Dec 17 15:44:25 ispc postfix/smtpd[1879859]: sql auxprop plugin using mysql engine Dec 17 15:44:26 ispc saslauthd[1879861]: pam_mysql - SELECT returned no result. Dec 17 15:44:26 ispc saslauthd[1879861]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:44:26 ispc saslauthd[1879861]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:45:01 ispc CRON[1879876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:45:01 ispc CRON[1879875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:45:01 ispc CRON[1879877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:45:01 ispc CRON[1879878]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:45:01 ispc CRON[1879876]: pam_unix(cron:session): session closed for user root Dec 17 15:45:01 ispc CRON[1879878]: pam_unix(cron:session): session closed for user getmail Dec 17 15:45:02 ispc CRON[1879877]: pam_unix(cron:session): session closed for user root Dec 17 15:45:02 ispc CRON[1879875]: pam_unix(cron:session): session closed for user root Dec 17 15:46:01 ispc CRON[1880076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:46:02 ispc CRON[1880076]: pam_unix(cron:session): session closed for user root Dec 17 15:46:17 ispc sshd[1880090]: Invalid user ziplines from 119.205.233.162 Dec 17 15:46:24 ispc CRON[1878703]: pam_unix(cron:session): session closed for user root Dec 17 15:47:01 ispc CRON[1880093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:47:19 ispc postfix/smtpd[1880110]: sql auxprop plugin using mysql engine Dec 17 15:47:48 ispc sshd[1880124]: Invalid user martof from 213.199.57.249 Dec 17 15:48:01 ispc CRON[1880138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:48:02 ispc CRON[1880138]: pam_unix(cron:session): session closed for user root Dec 17 15:49:01 ispc CRON[1880177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:49:01 ispc CRON[1880177]: pam_unix(cron:session): session closed for user root Dec 17 15:50:01 ispc CRON[1880214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:50:01 ispc CRON[1880215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:50:01 ispc CRON[1880216]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 15:50:01 ispc CRON[1880217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:50:01 ispc CRON[1880218]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:50:01 ispc CRON[1880215]: pam_unix(cron:session): session closed for user root Dec 17 15:50:01 ispc CRON[1880216]: pam_unix(cron:session): session closed for user www-data Dec 17 15:50:01 ispc CRON[1880218]: pam_unix(cron:session): session closed for user getmail Dec 17 15:50:01 ispc CRON[1880217]: pam_unix(cron:session): session closed for user root Dec 17 15:50:01 ispc CRON[1880214]: pam_unix(cron:session): session closed for user root Dec 17 15:50:20 ispc sshd[1880300]: Bad protocol version identification '' from 3.134.148.59 Dec 17 15:50:59 ispc sshd[1880318]: Bad protocol version identification 'GET / HTTP/1.1' from 3.134.148.59 Dec 17 15:51:02 ispc CRON[1880319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:51:03 ispc CRON[1880319]: pam_unix(cron:session): session closed for user root Dec 17 15:52:01 ispc CRON[1880358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:52:01 ispc CRON[1880357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:52:02 ispc CRON[1880358]: pam_unix(cron:session): session closed for user root Dec 17 15:52:26 ispc sshd[1880383]: Invalid user klape from 200.32.52.150 Dec 17 15:52:29 ispc sshd[1880389]: Invalid user ubuntu from 200.32.52.150 Dec 17 15:53:01 ispc CRON[1880410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:53:02 ispc CRON[1880410]: pam_unix(cron:session): session closed for user root Dec 17 15:53:05 ispc postfix/smtpd[1880422]: sql auxprop plugin using mysql engine Dec 17 15:53:06 ispc saslauthd[1880425]: pam_mysql - SELECT returned no result. Dec 17 15:53:06 ispc saslauthd[1880425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:53:06 ispc saslauthd[1880425]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:53:15 ispc sshd[1880432]: Bad protocol version identification 'GET / HTTP/1.1' from 3.134.148.59 Dec 17 15:54:01 ispc CRON[1880455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:54:02 ispc CRON[1880455]: pam_unix(cron:session): session closed for user root Dec 17 15:54:13 ispc sshd[1880472]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 15:54:14 ispc postfix/smtpd[1880474]: sql auxprop plugin using mysql engine Dec 17 15:54:54 ispc sshd[1880493]: Bad protocol version identification '\026\003\001' from 3.134.148.59 Dec 17 15:55:01 ispc CRON[1880501]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 15:55:01 ispc CRON[1880500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:55:01 ispc CRON[1880499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:55:01 ispc CRON[1880498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:55:01 ispc CRON[1880499]: pam_unix(cron:session): session closed for user root Dec 17 15:55:01 ispc CRON[1880501]: pam_unix(cron:session): session closed for user getmail Dec 17 15:55:02 ispc CRON[1880498]: pam_unix(cron:session): session closed for user root Dec 17 15:55:02 ispc CRON[1880500]: pam_unix(cron:session): session closed for user root Dec 17 15:55:19 ispc CRON[1880357]: pam_unix(cron:session): session closed for user root Dec 17 15:56:01 ispc CRON[1880602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:56:02 ispc CRON[1880602]: pam_unix(cron:session): session closed for user root Dec 17 15:56:31 ispc postfix/smtpd[1880626]: sql auxprop plugin using mysql engine Dec 17 15:56:32 ispc saslauthd[1880628]: pam_mysql - SELECT returned no result. Dec 17 15:56:32 ispc saslauthd[1880628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 15:56:32 ispc saslauthd[1880628]: do_auth : auth failure: [user=netopia] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 15:57:01 ispc CRON[1880641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:57:02 ispc CRON[1880641]: pam_unix(cron:session): session closed for user root Dec 17 15:57:31 ispc sshd[1880667]: Bad protocol version identification '\026\003\001' from 3.134.148.59 Dec 17 15:58:01 ispc CRON[1880691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:58:02 ispc CRON[1880691]: pam_unix(cron:session): session closed for user root Dec 17 15:59:01 ispc CRON[1880730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 15:59:01 ispc CRON[1880730]: pam_unix(cron:session): session closed for user root Dec 17 16:00:01 ispc CRON[1880768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:00:01 ispc CRON[1880769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:00:01 ispc CRON[1880770]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:00:01 ispc CRON[1880771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:00:01 ispc CRON[1880772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:00:01 ispc CRON[1880773]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:00:01 ispc CRON[1880774]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:00:02 ispc CRON[1880770]: pam_unix(cron:session): session closed for user www-data Dec 17 16:00:02 ispc CRON[1880769]: pam_unix(cron:session): session closed for user root Dec 17 16:00:02 ispc CRON[1880772]: pam_unix(cron:session): session closed for user root Dec 17 16:00:02 ispc CRON[1880774]: pam_unix(cron:session): session closed for user getmail Dec 17 16:00:02 ispc CRON[1880773]: pam_unix(cron:session): session closed for user root Dec 17 16:00:02 ispc CRON[1880768]: pam_unix(cron:session): session closed for user root Dec 17 16:00:02 ispc CRON[1880771]: pam_unix(cron:session): session closed for user root Dec 17 16:01:01 ispc CRON[1880955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:01:02 ispc CRON[1880955]: pam_unix(cron:session): session closed for user root Dec 17 16:01:47 ispc postfix/smtpd[1880983]: sql auxprop plugin using mysql engine Dec 17 16:01:47 ispc saslauthd[1880986]: pam_mysql - SELECT returned no result. Dec 17 16:01:47 ispc saslauthd[1880986]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:01:47 ispc saslauthd[1880986]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:02:01 ispc CRON[1880995]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 16:02:01 ispc CRON[1880996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:02:01 ispc CRON[1880996]: pam_unix(cron:session): session closed for user root Dec 17 16:02:48 ispc sshd[1881856]: Invalid user klape from 70.37.89.177 Dec 17 16:02:49 ispc sshd[1881861]: Invalid user ubuntu from 70.37.89.177 Dec 17 16:03:01 ispc CRON[1881920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:03:02 ispc CRON[1881920]: pam_unix(cron:session): session closed for user root Dec 17 16:03:12 ispc CRON[1880995]: pam_unix(cron:session): session closed for user logcheck Dec 17 16:03:21 ispc postfix/smtpd[1882075]: sql auxprop plugin using mysql engine Dec 17 16:03:55 ispc sshd[1882096]: Invalid user blceu from 185.181.182.252 Dec 17 16:04:01 ispc CRON[1882098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:04:02 ispc CRON[1882098]: pam_unix(cron:session): session closed for user root Dec 17 16:05:01 ispc CRON[1882138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:05:01 ispc CRON[1882139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:05:01 ispc CRON[1882140]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:05:01 ispc CRON[1882137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:05:01 ispc CRON[1882138]: pam_unix(cron:session): session closed for user root Dec 17 16:05:01 ispc CRON[1882140]: pam_unix(cron:session): session closed for user getmail Dec 17 16:05:01 ispc CRON[1882137]: pam_unix(cron:session): session closed for user root Dec 17 16:05:02 ispc CRON[1882139]: pam_unix(cron:session): session closed for user root Dec 17 16:06:01 ispc CRON[1882241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:06:02 ispc CRON[1882241]: pam_unix(cron:session): session closed for user root Dec 17 16:06:49 ispc sshd[1882271]: Invalid user martof from 165.227.38.205 Dec 17 16:07:01 ispc CRON[1882282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:07:01 ispc CRON[1882282]: pam_unix(cron:session): session closed for user root Dec 17 16:07:27 ispc postfix/smtpd[1882300]: sql auxprop plugin using mysql engine Dec 17 16:07:27 ispc CRON[1880093]: pam_unix(cron:session): session closed for user root Dec 17 16:08:01 ispc CRON[1882316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:08:06 ispc CRON[1882316]: pam_unix(cron:session): session closed for user root Dec 17 16:08:11 ispc sshd[1882328]: Invalid user martof from 5.133.121.104 Dec 17 16:09:01 ispc CRON[1882331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:09:01 ispc CRON[1882332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:09:01 ispc CRON[1882331]: pam_unix(cron:session): session closed for user root Dec 17 16:09:41 ispc postfix/smtpd[1882372]: sql auxprop plugin using mysql engine Dec 17 16:10:01 ispc CRON[1882384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:10:01 ispc CRON[1882385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:10:01 ispc CRON[1882386]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:10:01 ispc CRON[1882387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:10:01 ispc CRON[1882388]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:10:01 ispc CRON[1882386]: pam_unix(cron:session): session closed for user www-data Dec 17 16:10:01 ispc CRON[1882385]: pam_unix(cron:session): session closed for user root Dec 17 16:10:01 ispc CRON[1882388]: pam_unix(cron:session): session closed for user getmail Dec 17 16:10:02 ispc CRON[1882387]: pam_unix(cron:session): session closed for user root Dec 17 16:10:02 ispc CRON[1882384]: pam_unix(cron:session): session closed for user root Dec 17 16:10:43 ispc postfix/smtpd[1882479]: sql auxprop plugin using mysql engine Dec 17 16:10:44 ispc saslauthd[1882484]: pam_mysql - SELECT returned no result. Dec 17 16:10:44 ispc saslauthd[1882484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:10:44 ispc saslauthd[1882484]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:10:55 ispc saslauthd[1882490]: pam_mysql - SELECT returned no result. Dec 17 16:10:55 ispc saslauthd[1882490]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:10:55 ispc saslauthd[1882490]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:11:01 ispc CRON[1882491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:11:01 ispc CRON[1882491]: pam_unix(cron:session): session closed for user root Dec 17 16:11:56 ispc saslauthd[1882529]: pam_mysql - SELECT returned no result. Dec 17 16:11:56 ispc saslauthd[1882529]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:11:56 ispc saslauthd[1882529]: do_auth : auth failure: [user=netrangr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:12:01 ispc CRON[1882530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:12:02 ispc CRON[1882530]: pam_unix(cron:session): session closed for user root Dec 17 16:13:01 ispc CRON[1882573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:13:01 ispc CRON[1882573]: pam_unix(cron:session): session closed for user root Dec 17 16:14:01 ispc CRON[1882612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:14:02 ispc CRON[1882612]: pam_unix(cron:session): session closed for user root Dec 17 16:14:36 ispc sshd[1882643]: Invalid user blceu from 148.216.54.17 Dec 17 16:15:01 ispc CRON[1882653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:15:01 ispc CRON[1882655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:15:01 ispc CRON[1882654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:15:01 ispc CRON[1882656]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:15:01 ispc CRON[1882654]: pam_unix(cron:session): session closed for user root Dec 17 16:15:01 ispc CRON[1882656]: pam_unix(cron:session): session closed for user getmail Dec 17 16:15:01 ispc CRON[1882655]: pam_unix(cron:session): session closed for user root Dec 17 16:15:02 ispc CRON[1882653]: pam_unix(cron:session): session closed for user root Dec 17 16:15:55 ispc postfix/smtpd[1882752]: sql auxprop plugin using mysql engine Dec 17 16:16:01 ispc CRON[1882763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:16:01 ispc CRON[1882763]: pam_unix(cron:session): session closed for user root Dec 17 16:16:04 ispc postfix/smtpd[1882776]: sql auxprop plugin using mysql engine Dec 17 16:17:01 ispc CRON[1882816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:17:02 ispc CRON[1882816]: pam_unix(cron:session): session closed for user root Dec 17 16:18:01 ispc CRON[1882865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:18:01 ispc CRON[1882865]: pam_unix(cron:session): session closed for user root Dec 17 16:19:01 ispc CRON[1882901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:19:02 ispc CRON[1882901]: pam_unix(cron:session): session closed for user root Dec 17 16:19:59 ispc postfix/smtpd[1882933]: sql auxprop plugin using mysql engine Dec 17 16:20:00 ispc saslauthd[1882936]: pam_mysql - SELECT returned no result. Dec 17 16:20:00 ispc saslauthd[1882936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:20:00 ispc saslauthd[1882936]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:20:01 ispc CRON[1882942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:20:01 ispc CRON[1882941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:20:01 ispc CRON[1882943]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:20:01 ispc CRON[1882944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:20:01 ispc CRON[1882945]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:20:01 ispc CRON[1882942]: pam_unix(cron:session): session closed for user root Dec 17 16:20:01 ispc CRON[1882943]: pam_unix(cron:session): session closed for user www-data Dec 17 16:20:01 ispc CRON[1882945]: pam_unix(cron:session): session closed for user getmail Dec 17 16:20:01 ispc CRON[1882944]: pam_unix(cron:session): session closed for user root Dec 17 16:20:01 ispc CRON[1882941]: pam_unix(cron:session): session closed for user root Dec 17 16:20:49 ispc postfix/smtpd[1883035]: sql auxprop plugin using mysql engine Dec 17 16:21:01 ispc CRON[1883046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:21:01 ispc CRON[1883045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:21:01 ispc CRON[1883045]: pam_unix(cron:session): session closed for user root Dec 17 16:21:02 ispc CRON[1883046]: pam_unix(cron:session): session closed for user root Dec 17 16:21:52 ispc postfix/smtpd[1883080]: sql auxprop plugin using mysql engine Dec 17 16:22:01 ispc CRON[1883086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:22:01 ispc CRON[1883086]: pam_unix(cron:session): session closed for user root Dec 17 16:22:04 ispc postfix/smtpd[1883097]: sql auxprop plugin using mysql engine Dec 17 16:23:01 ispc CRON[1883131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:23:02 ispc CRON[1883131]: pam_unix(cron:session): session closed for user root Dec 17 16:24:01 ispc CRON[1883163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:24:01 ispc CRON[1883163]: pam_unix(cron:session): session closed for user root Dec 17 16:25:01 ispc CRON[1883204]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:25:01 ispc CRON[1883201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:25:01 ispc CRON[1883203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:25:01 ispc CRON[1883202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:25:01 ispc CRON[1883202]: pam_unix(cron:session): session closed for user root Dec 17 16:25:01 ispc CRON[1883204]: pam_unix(cron:session): session closed for user getmail Dec 17 16:25:02 ispc CRON[1883201]: pam_unix(cron:session): session closed for user root Dec 17 16:25:02 ispc CRON[1883203]: pam_unix(cron:session): session closed for user root Dec 17 16:26:01 ispc CRON[1883306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:26:02 ispc CRON[1883306]: pam_unix(cron:session): session closed for user root Dec 17 16:26:39 ispc sshd[1883335]: Did not receive identification string from 192.227.134.84 Dec 17 16:27:01 ispc CRON[1883344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:27:01 ispc CRON[1883344]: pam_unix(cron:session): session closed for user root Dec 17 16:27:14 ispc postfix/smtpd[1883359]: sql auxprop plugin using mysql engine Dec 17 16:27:16 ispc saslauthd[1883366]: pam_mysql - SELECT returned no result. Dec 17 16:27:16 ispc saslauthd[1883366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:27:16 ispc saslauthd[1883366]: do_auth : auth failure: [user=netscreen] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:27:49 ispc sshd[1883380]: Invalid user martof from 27.254.144.183 Dec 17 16:28:01 ispc CRON[1883395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:28:02 ispc CRON[1883395]: pam_unix(cron:session): session closed for user root Dec 17 16:28:11 ispc saslauthd[1883411]: pam_mysql - SELECT returned no result. Dec 17 16:28:11 ispc saslauthd[1883411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:28:11 ispc saslauthd[1883411]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:28:56 ispc saslauthd[1883430]: pam_mysql - SELECT returned no result. Dec 17 16:28:56 ispc saslauthd[1883430]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:28:56 ispc saslauthd[1883430]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:29:01 ispc CRON[1883435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:29:01 ispc CRON[1883435]: pam_unix(cron:session): session closed for user root Dec 17 16:29:19 ispc CRON[1882332]: pam_unix(cron:session): session closed for user root Dec 17 16:30:01 ispc CRON[1883456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:30:01 ispc CRON[1883458]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:30:01 ispc CRON[1883457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:30:01 ispc CRON[1883459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:30:01 ispc CRON[1883460]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:30:01 ispc CRON[1883458]: pam_unix(cron:session): session closed for user www-data Dec 17 16:30:01 ispc CRON[1883457]: pam_unix(cron:session): session closed for user root Dec 17 16:30:01 ispc CRON[1883460]: pam_unix(cron:session): session closed for user getmail Dec 17 16:30:01 ispc CRON[1883456]: pam_unix(cron:session): session closed for user root Dec 17 16:30:06 ispc CRON[1883459]: pam_unix(cron:session): session closed for user root Dec 17 16:30:09 ispc postfix/smtpd[1883536]: sql auxprop plugin using mysql engine Dec 17 16:30:21 ispc postfix/smtpd[1883538]: sql auxprop plugin using mysql engine Dec 17 16:31:01 ispc CRON[1883542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:32:01 ispc CRON[1883580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:32:01 ispc CRON[1883580]: pam_unix(cron:session): session closed for user root Dec 17 16:32:29 ispc sshd[1883604]: Invalid user martof from 5.129.195.224 Dec 17 16:33:01 ispc CRON[1883628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:33:02 ispc CRON[1883628]: pam_unix(cron:session): session closed for user root Dec 17 16:33:33 ispc sshd[1883651]: Did not receive identification string from 167.99.37.173 Dec 17 16:34:01 ispc CRON[1883665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:34:01 ispc CRON[1883665]: pam_unix(cron:session): session closed for user root Dec 17 16:35:01 ispc CRON[1883701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:35:01 ispc CRON[1883703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:35:01 ispc CRON[1883702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:35:01 ispc CRON[1883704]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:35:01 ispc CRON[1883704]: pam_unix(cron:session): session closed for user getmail Dec 17 16:35:01 ispc CRON[1883702]: pam_unix(cron:session): session closed for user root Dec 17 16:35:01 ispc CRON[1883703]: pam_unix(cron:session): session closed for user root Dec 17 16:35:02 ispc CRON[1883701]: pam_unix(cron:session): session closed for user root Dec 17 16:35:18 ispc postfix/smtpd[1883786]: sql auxprop plugin using mysql engine Dec 17 16:35:19 ispc saslauthd[1883789]: pam_mysql - SELECT returned no result. Dec 17 16:35:19 ispc saslauthd[1883789]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:35:19 ispc saslauthd[1883789]: do_auth : auth failure: [user=sales@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 16:35:58 ispc sshd[1883811]: Did not receive identification string from 159.65.203.117 Dec 17 16:36:01 ispc CRON[1883816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:36:02 ispc CRON[1883816]: pam_unix(cron:session): session closed for user root Dec 17 16:37:01 ispc CRON[1883858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:37:01 ispc CRON[1883858]: pam_unix(cron:session): session closed for user root Dec 17 16:37:21 ispc sshd[1883880]: Did not receive identification string from 134.209.88.44 Dec 17 16:37:42 ispc postfix/smtpd[1883893]: sql auxprop plugin using mysql engine Dec 17 16:37:42 ispc saslauthd[1883895]: pam_mysql - SELECT returned no result. Dec 17 16:37:42 ispc saslauthd[1883895]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:37:42 ispc saslauthd[1883895]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:37:55 ispc sshd[1883907]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 16:38:01 ispc CRON[1883913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:38:02 ispc CRON[1883913]: pam_unix(cron:session): session closed for user root Dec 17 16:39:01 ispc CRON[1883953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:39:01 ispc CRON[1883954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:39:01 ispc CRON[1883953]: pam_unix(cron:session): session closed for user root Dec 17 16:39:01 ispc CRON[1883954]: pam_unix(cron:session): session closed for user root Dec 17 16:39:31 ispc sshd[1883991]: Invalid user test1 from 159.65.203.117 Dec 17 16:40:01 ispc CRON[1884006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:40:01 ispc CRON[1884007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:40:01 ispc CRON[1884008]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:40:01 ispc CRON[1884009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:40:01 ispc CRON[1884010]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:40:01 ispc CRON[1884007]: pam_unix(cron:session): session closed for user root Dec 17 16:40:01 ispc CRON[1884008]: pam_unix(cron:session): session closed for user www-data Dec 17 16:40:01 ispc CRON[1884010]: pam_unix(cron:session): session closed for user getmail Dec 17 16:40:01 ispc CRON[1884006]: pam_unix(cron:session): session closed for user root Dec 17 16:40:02 ispc CRON[1884009]: pam_unix(cron:session): session closed for user root Dec 17 16:40:33 ispc sshd[1884099]: Invalid user test2 from 159.65.203.117 Dec 17 16:41:01 ispc CRON[1884118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:41:02 ispc CRON[1884118]: pam_unix(cron:session): session closed for user root Dec 17 16:41:31 ispc sshd[1884143]: Invalid user test3 from 159.65.203.117 Dec 17 16:42:01 ispc CRON[1884159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:42:02 ispc CRON[1884159]: pam_unix(cron:session): session closed for user root Dec 17 16:42:34 ispc postfix/smtpd[1884188]: sql auxprop plugin using mysql engine Dec 17 16:42:36 ispc saslauthd[1884193]: pam_mysql - SELECT returned no result. Dec 17 16:42:36 ispc saslauthd[1884193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:42:36 ispc saslauthd[1884193]: do_auth : auth failure: [user=news] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:43:01 ispc CRON[1884217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:43:02 ispc CRON[1884217]: pam_unix(cron:session): session closed for user root Dec 17 16:44:01 ispc CRON[1884261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:44:01 ispc CRON[1884261]: pam_unix(cron:session): session closed for user root Dec 17 16:44:33 ispc postfix/smtpd[1884291]: sql auxprop plugin using mysql engine Dec 17 16:44:33 ispc saslauthd[1884293]: pam_mysql - SELECT returned no result. Dec 17 16:44:33 ispc saslauthd[1884293]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:44:33 ispc saslauthd[1884293]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:45:01 ispc CRON[1884308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:45:01 ispc CRON[1884309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:45:01 ispc CRON[1884311]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:45:01 ispc CRON[1884310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:45:01 ispc CRON[1884309]: pam_unix(cron:session): session closed for user root Dec 17 16:45:02 ispc CRON[1884311]: pam_unix(cron:session): session closed for user getmail Dec 17 16:45:02 ispc CRON[1884310]: pam_unix(cron:session): session closed for user root Dec 17 16:45:03 ispc CRON[1884308]: pam_unix(cron:session): session closed for user root Dec 17 16:46:01 ispc CRON[1884413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:46:01 ispc CRON[1884413]: pam_unix(cron:session): session closed for user root Dec 17 16:46:18 ispc sshd[1884390]: Invalid user matlbula from 165.210.33.193 Dec 17 16:46:29 ispc sshd[1884442]: Invalid user martof from 222.236.46.74 Dec 17 16:47:01 ispc CRON[1884458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:47:02 ispc CRON[1884458]: pam_unix(cron:session): session closed for user root Dec 17 16:47:09 ispc postfix/smtpd[1884477]: sql auxprop plugin using mysql engine Dec 17 16:47:10 ispc saslauthd[1884479]: pam_mysql - SELECT returned no result. Dec 17 16:47:10 ispc saslauthd[1884479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:47:10 ispc saslauthd[1884479]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:47:58 ispc sshd[1884508]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 16:47:59 ispc sshd[1884514]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 16:47:59 ispc sshd[1884514]: Invalid user klape from 189.89.20.45 Dec 17 16:48:01 ispc CRON[1884520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:48:01 ispc sshd[1884518]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 16:48:01 ispc sshd[1884518]: Invalid user ubuntu from 189.89.20.45 Dec 17 16:48:02 ispc CRON[1884520]: pam_unix(cron:session): session closed for user root Dec 17 16:49:01 ispc CRON[1884564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:49:01 ispc CRON[1884564]: pam_unix(cron:session): session closed for user root Dec 17 16:49:48 ispc sshd[1884602]: Invalid user postgres from 159.65.203.117 Dec 17 16:50:01 ispc CRON[1884608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:50:01 ispc CRON[1884609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:50:01 ispc CRON[1884610]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 16:50:01 ispc CRON[1884611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:50:01 ispc CRON[1884612]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:50:01 ispc CRON[1884609]: pam_unix(cron:session): session closed for user root Dec 17 16:50:01 ispc CRON[1884610]: pam_unix(cron:session): session closed for user www-data Dec 17 16:50:01 ispc CRON[1884612]: pam_unix(cron:session): session closed for user getmail Dec 17 16:50:02 ispc CRON[1884611]: pam_unix(cron:session): session closed for user root Dec 17 16:50:02 ispc CRON[1884608]: pam_unix(cron:session): session closed for user root Dec 17 16:50:41 ispc sshd[1884709]: Invalid user oracle from 159.65.203.117 Dec 17 16:51:01 ispc CRON[1884722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:51:02 ispc CRON[1884722]: pam_unix(cron:session): session closed for user root Dec 17 16:51:36 ispc sshd[1884747]: Invalid user user from 159.65.203.117 Dec 17 16:51:42 ispc postfix/smtpd[1884757]: sql auxprop plugin using mysql engine Dec 17 16:51:42 ispc CRON[1883542]: pam_unix(cron:session): session closed for user root Dec 17 16:52:01 ispc CRON[1884765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:52:04 ispc CRON[1884765]: pam_unix(cron:session): session closed for user root Dec 17 16:53:01 ispc CRON[1884792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:54:01 ispc CRON[1884832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:54:02 ispc CRON[1884832]: pam_unix(cron:session): session closed for user root Dec 17 16:54:34 ispc sshd[1884857]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 16:55:01 ispc CRON[1884875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:55:01 ispc CRON[1884876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:55:01 ispc CRON[1884877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:55:01 ispc CRON[1884878]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 16:55:01 ispc CRON[1884876]: pam_unix(cron:session): session closed for user root Dec 17 16:55:01 ispc CRON[1884878]: pam_unix(cron:session): session closed for user getmail Dec 17 16:55:02 ispc CRON[1884877]: pam_unix(cron:session): session closed for user root Dec 17 16:55:03 ispc CRON[1884875]: pam_unix(cron:session): session closed for user root Dec 17 16:55:12 ispc postfix/smtpd[1884957]: sql auxprop plugin using mysql engine Dec 17 16:55:26 ispc postfix/smtpd[1884972]: sql auxprop plugin using mysql engine Dec 17 16:56:01 ispc CRON[1884991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:56:01 ispc CRON[1884991]: pam_unix(cron:session): session closed for user root Dec 17 16:56:49 ispc saslauthd[1885022]: pam_mysql - SELECT returned no result. Dec 17 16:56:49 ispc saslauthd[1885022]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:56:49 ispc saslauthd[1885022]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:57:02 ispc CRON[1885033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:57:03 ispc CRON[1885033]: pam_unix(cron:session): session closed for user root Dec 17 16:57:51 ispc saslauthd[1885074]: pam_mysql - SELECT returned no result. Dec 17 16:57:51 ispc saslauthd[1885074]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 16:57:51 ispc saslauthd[1885074]: do_auth : auth failure: [user=nm2user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 16:57:56 ispc sshd[1885075]: Invalid user admin from 134.209.88.44 Dec 17 16:58:01 ispc CRON[1885088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:58:02 ispc CRON[1885088]: pam_unix(cron:session): session closed for user root Dec 17 16:58:42 ispc sshd[1885117]: Invalid user admin from 134.209.88.44 Dec 17 16:59:01 ispc CRON[1885123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 16:59:01 ispc CRON[1885123]: pam_unix(cron:session): session closed for user root Dec 17 16:59:28 ispc sshd[1885149]: Invalid user admin from 134.209.88.44 Dec 17 17:00:01 ispc CRON[1885168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:00:01 ispc CRON[1885169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:00:01 ispc CRON[1885170]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:00:01 ispc CRON[1885171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:00:01 ispc CRON[1885172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:00:01 ispc CRON[1885173]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:00:01 ispc CRON[1885170]: pam_unix(cron:session): session closed for user www-data Dec 17 17:00:01 ispc CRON[1885173]: pam_unix(cron:session): session closed for user getmail Dec 17 17:00:01 ispc CRON[1885169]: pam_unix(cron:session): session closed for user root Dec 17 17:00:02 ispc CRON[1885171]: pam_unix(cron:session): session closed for user root Dec 17 17:00:02 ispc CRON[1885168]: pam_unix(cron:session): session closed for user root Dec 17 17:00:02 ispc CRON[1885172]: pam_unix(cron:session): session closed for user root Dec 17 17:00:13 ispc sshd[1885329]: Invalid user admin from 134.209.88.44 Dec 17 17:00:59 ispc sshd[1885354]: Invalid user admin from 134.209.88.44 Dec 17 17:01:01 ispc CRON[1885357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:01:02 ispc CRON[1885357]: pam_unix(cron:session): session closed for user root Dec 17 17:01:45 ispc sshd[1885387]: Invalid user admin from 134.209.88.44 Dec 17 17:02:01 ispc CRON[1885408]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 17:02:01 ispc CRON[1885409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:02:01 ispc CRON[1885409]: pam_unix(cron:session): session closed for user root Dec 17 17:02:46 ispc sshd[1886279]: Did not receive identification string from 45.140.17.97 Dec 17 17:02:46 ispc postfix/smtpd[1886280]: sql auxprop plugin using mysql engine Dec 17 17:03:00 ispc CRON[1885408]: pam_unix(cron:session): session closed for user logcheck Dec 17 17:03:00 ispc CRON[1886470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:03:00 ispc CRON[1886470]: pam_unix(cron:session): session closed for user root Dec 17 17:03:04 ispc postfix/smtpd[1886486]: sql auxprop plugin using mysql engine Dec 17 17:03:44 ispc sshd[1886507]: Invalid user ubuntu from 36.50.177.171 Dec 17 17:04:01 ispc CRON[1886527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:04:01 ispc CRON[1886527]: pam_unix(cron:session): session closed for user root Dec 17 17:04:13 ispc sshd[1886503]: Invalid user klape from 36.50.177.171 Dec 17 17:05:00 ispc sshd[1886566]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:05:01 ispc CRON[1886568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:05:01 ispc CRON[1886569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:05:01 ispc CRON[1886570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:05:02 ispc CRON[1886571]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:05:02 ispc CRON[1886569]: pam_unix(cron:session): session closed for user root Dec 17 17:05:02 ispc CRON[1886571]: pam_unix(cron:session): session closed for user getmail Dec 17 17:05:02 ispc CRON[1886570]: pam_unix(cron:session): session closed for user root Dec 17 17:05:02 ispc CRON[1886568]: pam_unix(cron:session): session closed for user root Dec 17 17:06:01 ispc CRON[1886673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:06:03 ispc CRON[1886673]: pam_unix(cron:session): session closed for user root Dec 17 17:06:18 ispc postfix/smtpd[1886693]: sql auxprop plugin using mysql engine Dec 17 17:06:20 ispc saslauthd[1886698]: pam_mysql - SELECT returned no result. Dec 17 17:06:20 ispc saslauthd[1886698]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:06:20 ispc saslauthd[1886698]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:06:21 ispc sshd[1886696]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:07:01 ispc CRON[1886718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:07:02 ispc CRON[1886718]: pam_unix(cron:session): session closed for user root Dec 17 17:08:01 ispc CRON[1886768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:08:01 ispc CRON[1886768]: pam_unix(cron:session): session closed for user root Dec 17 17:09:01 ispc CRON[1886806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:09:01 ispc CRON[1886807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:09:02 ispc CRON[1886806]: pam_unix(cron:session): session closed for user root Dec 17 17:09:02 ispc CRON[1886807]: pam_unix(cron:session): session closed for user root Dec 17 17:10:01 ispc CRON[1886854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:10:01 ispc CRON[1886855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:10:01 ispc CRON[1886856]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:10:01 ispc CRON[1886857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:10:01 ispc CRON[1886858]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:10:01 ispc CRON[1886856]: pam_unix(cron:session): session closed for user www-data Dec 17 17:10:01 ispc CRON[1886855]: pam_unix(cron:session): session closed for user root Dec 17 17:10:01 ispc CRON[1886858]: pam_unix(cron:session): session closed for user getmail Dec 17 17:10:02 ispc CRON[1886854]: pam_unix(cron:session): session closed for user root Dec 17 17:10:02 ispc CRON[1886857]: pam_unix(cron:session): session closed for user root Dec 17 17:11:01 ispc CRON[1886965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:11:02 ispc CRON[1886965]: pam_unix(cron:session): session closed for user root Dec 17 17:11:40 ispc postfix/smtpd[1886996]: sql auxprop plugin using mysql engine Dec 17 17:12:01 ispc CRON[1887007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:12:02 ispc CRON[1887007]: pam_unix(cron:session): session closed for user root Dec 17 17:12:42 ispc postfix/smtpd[1887036]: sql auxprop plugin using mysql engine Dec 17 17:12:43 ispc saslauthd[1887038]: pam_mysql - SELECT returned no result. Dec 17 17:12:43 ispc saslauthd[1887038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:12:43 ispc saslauthd[1887038]: do_auth : auth failure: [user=nms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:12:47 ispc sshd[1887040]: Invalid user admin from 167.99.37.173 Dec 17 17:12:52 ispc sshd[1887054]: Invalid user martof from 119.205.233.162 Dec 17 17:13:01 ispc CRON[1887061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:13:03 ispc CRON[1887061]: pam_unix(cron:session): session closed for user root Dec 17 17:13:26 ispc sshd[1887080]: Invalid user admin from 167.99.37.173 Dec 17 17:13:34 ispc CRON[1884792]: pam_unix(cron:session): session closed for user root Dec 17 17:14:01 ispc CRON[1887089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:14:06 ispc sshd[1887099]: Invalid user admin from 167.99.37.173 Dec 17 17:14:07 ispc CRON[1887089]: pam_unix(cron:session): session closed for user root Dec 17 17:14:44 ispc sshd[1887111]: Invalid user admin from 167.99.37.173 Dec 17 17:15:01 ispc CRON[1887119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:15:01 ispc CRON[1887120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:15:01 ispc CRON[1887121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:15:01 ispc CRON[1887118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:15:02 ispc CRON[1887119]: pam_unix(cron:session): session closed for user root Dec 17 17:15:02 ispc CRON[1887121]: pam_unix(cron:session): session closed for user getmail Dec 17 17:15:04 ispc CRON[1887118]: pam_unix(cron:session): session closed for user root Dec 17 17:15:21 ispc sshd[1887202]: Invalid user admin from 167.99.37.173 Dec 17 17:15:45 ispc sshd[1887218]: Invalid user ziplines from 85.143.173.172 Dec 17 17:15:57 ispc sshd[1887224]: Invalid user admin from 167.99.37.173 Dec 17 17:16:01 ispc CRON[1887234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:16:02 ispc CRON[1887234]: pam_unix(cron:session): session closed for user root Dec 17 17:16:07 ispc postfix/smtpd[1887249]: sql auxprop plugin using mysql engine Dec 17 17:16:08 ispc saslauthd[1887251]: pam_mysql - SELECT returned no result. Dec 17 17:16:08 ispc saslauthd[1887251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:16:08 ispc saslauthd[1887251]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:17:01 ispc CRON[1887278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:17:02 ispc CRON[1887278]: pam_unix(cron:session): session closed for user root Dec 17 17:17:06 ispc sshd[1887293]: Invalid user blceu from 213.199.57.249 Dec 17 17:18:01 ispc CRON[1887322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:18:02 ispc CRON[1887322]: pam_unix(cron:session): session closed for user root Dec 17 17:18:07 ispc sshd[1887341]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:07 ispc sshd[1887341]: Invalid user admin from 27.79.43.253 Dec 17 17:18:14 ispc sshd[1887344]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:14 ispc sshd[1887344]: Invalid user user from 27.79.5.192 Dec 17 17:18:16 ispc postfix/smtpd[1887354]: sql auxprop plugin using mysql engine Dec 17 17:18:17 ispc saslauthd[1887356]: pam_mysql - SELECT returned no result. Dec 17 17:18:17 ispc saslauthd[1887356]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:18:17 ispc saslauthd[1887356]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:18:17 ispc sshd[1887351]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:17 ispc sshd[1887351]: Invalid user admin from 27.79.43.253 Dec 17 17:18:17 ispc sshd[1887350]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:23 ispc sshd[1887358]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:23 ispc sshd[1887358]: Invalid user system from 27.79.43.253 Dec 17 17:18:48 ispc sshd[1887375]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:48 ispc sshd[1887375]: Invalid user admin from 27.79.43.253 Dec 17 17:18:49 ispc sshd[1887377]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:49 ispc sshd[1887377]: Invalid user user from 27.79.43.253 Dec 17 17:18:50 ispc sshd[1887379]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:50 ispc sshd[1887379]: Invalid user test from 27.79.5.192 Dec 17 17:18:54 ispc sshd[1887381]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:54 ispc sshd[1887381]: Invalid user squid from 27.79.5.192 Dec 17 17:18:57 ispc sshd[1887387]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:57 ispc sshd[1887387]: Invalid user admin from 27.79.5.192 Dec 17 17:18:58 ispc sshd[1887390]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:18:58 ispc sshd[1887390]: Invalid user admin from 27.79.5.192 Dec 17 17:19:01 ispc CRON[1887394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:19:01 ispc CRON[1887394]: pam_unix(cron:session): session closed for user root Dec 17 17:19:02 ispc sshd[1887392]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:03 ispc sshd[1887405]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:07 ispc sshd[1887411]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:07 ispc sshd[1887411]: Invalid user admin from 27.79.5.192 Dec 17 17:19:07 ispc sshd[1887413]: Address 27.79.5.192 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:07 ispc sshd[1887413]: Invalid user ftp from 27.79.5.192 Dec 17 17:19:23 ispc sshd[1887427]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:26 ispc sshd[1887429]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:44 ispc sshd[1887440]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:45 ispc sshd[1887442]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:45 ispc sshd[1887442]: Invalid user nikita from 27.79.43.253 Dec 17 17:19:45 ispc sshd[1887444]: Address 27.79.43.253 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:19:45 ispc sshd[1887444]: Invalid user support from 27.79.43.253 Dec 17 17:20:01 ispc CRON[1887464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:20:01 ispc CRON[1887465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:20:01 ispc CRON[1887466]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:20:01 ispc CRON[1887467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:20:01 ispc CRON[1887468]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:20:01 ispc CRON[1887465]: pam_unix(cron:session): session closed for user root Dec 17 17:20:01 ispc CRON[1887466]: pam_unix(cron:session): session closed for user www-data Dec 17 17:20:01 ispc CRON[1887468]: pam_unix(cron:session): session closed for user getmail Dec 17 17:20:01 ispc CRON[1887467]: pam_unix(cron:session): session closed for user root Dec 17 17:20:02 ispc CRON[1887464]: pam_unix(cron:session): session closed for user root Dec 17 17:21:01 ispc CRON[1887568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:21:01 ispc CRON[1887569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:21:01 ispc CRON[1887568]: pam_unix(cron:session): session closed for user root Dec 17 17:21:01 ispc CRON[1887569]: pam_unix(cron:session): session closed for user root Dec 17 17:21:19 ispc sshd[1887590]: Did not receive identification string from 192.227.134.84 Dec 17 17:21:24 ispc sshd[1887594]: Invalid user ziplines from 5.133.121.104 Dec 17 17:21:35 ispc sshd[1887600]: Invalid user admin from 45.148.10.121 Dec 17 17:22:01 ispc CRON[1887620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:22:02 ispc CRON[1887620]: pam_unix(cron:session): session closed for user root Dec 17 17:22:32 ispc sshd[1887649]: Invalid user blceu from 5.133.121.104 Dec 17 17:23:01 ispc CRON[1887672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:23:02 ispc CRON[1887672]: pam_unix(cron:session): session closed for user root Dec 17 17:24:01 ispc CRON[1887708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:24:01 ispc CRON[1887708]: pam_unix(cron:session): session closed for user root Dec 17 17:24:19 ispc sshd[1887730]: Invalid user martof from 167.99.241.111 Dec 17 17:25:01 ispc CRON[1887759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:25:01 ispc CRON[1887761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:25:01 ispc CRON[1887760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:25:01 ispc CRON[1887762]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:25:01 ispc CRON[1887760]: pam_unix(cron:session): session closed for user root Dec 17 17:25:01 ispc CRON[1887762]: pam_unix(cron:session): session closed for user getmail Dec 17 17:25:02 ispc CRON[1887761]: pam_unix(cron:session): session closed for user root Dec 17 17:25:03 ispc CRON[1887759]: pam_unix(cron:session): session closed for user root Dec 17 17:25:17 ispc sshd[1887842]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:25:18 ispc sshd[1887840]: Invalid user blceu from 118.69.109.196 Dec 17 17:25:43 ispc postfix/smtpd[1887857]: sql auxprop plugin using mysql engine Dec 17 17:25:44 ispc saslauthd[1887860]: pam_mysql - SELECT returned no result. Dec 17 17:25:44 ispc saslauthd[1887860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:25:44 ispc saslauthd[1887860]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:26:01 ispc CRON[1887869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:26:02 ispc CRON[1887869]: pam_unix(cron:session): session closed for user root Dec 17 17:27:01 ispc CRON[1887908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:27:01 ispc CRON[1887908]: pam_unix(cron:session): session closed for user root Dec 17 17:27:22 ispc saslauthd[1887930]: pam_mysql - SELECT returned no result. Dec 17 17:27:22 ispc saslauthd[1887930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:27:22 ispc saslauthd[1887930]: do_auth : auth failure: [user=nobody] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:28:01 ispc CRON[1887954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:28:02 ispc CRON[1887954]: pam_unix(cron:session): session closed for user root Dec 17 17:28:02 ispc saslauthd[1887969]: pam_mysql - SELECT returned no result. Dec 17 17:28:02 ispc saslauthd[1887969]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:28:02 ispc saslauthd[1887969]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:29:01 ispc CRON[1887994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:29:02 ispc CRON[1887994]: pam_unix(cron:session): session closed for user root Dec 17 17:30:02 ispc CRON[1888036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:30:02 ispc CRON[1888037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:30:02 ispc CRON[1888040]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:30:02 ispc CRON[1888038]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:30:02 ispc CRON[1888039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:30:02 ispc CRON[1888038]: pam_unix(cron:session): session closed for user www-data Dec 17 17:30:02 ispc CRON[1888037]: pam_unix(cron:session): session closed for user root Dec 17 17:30:02 ispc CRON[1888040]: pam_unix(cron:session): session closed for user getmail Dec 17 17:30:02 ispc CRON[1888039]: pam_unix(cron:session): session closed for user root Dec 17 17:30:03 ispc CRON[1888036]: pam_unix(cron:session): session closed for user root Dec 17 17:30:22 ispc postfix/smtpd[1888123]: sql auxprop plugin using mysql engine Dec 17 17:30:36 ispc postfix/smtpd[1888129]: sql auxprop plugin using mysql engine Dec 17 17:30:36 ispc saslauthd[1888135]: pam_mysql - SELECT returned no result. Dec 17 17:30:36 ispc saslauthd[1888135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:30:36 ispc saslauthd[1888135]: do_auth : auth failure: [user=scan@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 17:31:01 ispc CRON[1888145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:31:02 ispc CRON[1888145]: pam_unix(cron:session): session closed for user root Dec 17 17:32:01 ispc CRON[1888186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:32:02 ispc CRON[1888186]: pam_unix(cron:session): session closed for user root Dec 17 17:33:01 ispc CRON[1888229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:33:02 ispc CRON[1888229]: pam_unix(cron:session): session closed for user root Dec 17 17:34:01 ispc CRON[1888268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:34:02 ispc CRON[1888268]: pam_unix(cron:session): session closed for user root Dec 17 17:34:31 ispc sshd[1888290]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:34:51 ispc sshd[1888305]: Invalid user martof from 51.91.76.213 Dec 17 17:34:52 ispc postfix/smtpd[1888310]: sql auxprop plugin using mysql engine Dec 17 17:34:52 ispc saslauthd[1888313]: pam_mysql - SELECT returned no result. Dec 17 17:34:52 ispc saslauthd[1888313]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:34:52 ispc saslauthd[1888313]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:35:01 ispc CRON[1888314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:35:01 ispc CRON[1888315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:35:01 ispc CRON[1888316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:35:01 ispc CRON[1888317]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:35:01 ispc CRON[1888315]: pam_unix(cron:session): session closed for user root Dec 17 17:35:01 ispc CRON[1888317]: pam_unix(cron:session): session closed for user getmail Dec 17 17:35:02 ispc CRON[1888316]: pam_unix(cron:session): session closed for user root Dec 17 17:35:02 ispc CRON[1888314]: pam_unix(cron:session): session closed for user root Dec 17 17:35:34 ispc sshd[1888435]: Invalid user matlbula from 51.159.18.215 Dec 17 17:35:54 ispc CRON[1887120]: pam_unix(cron:session): session closed for user root Dec 17 17:36:01 ispc CRON[1888437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:37:01 ispc CRON[1888475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:37:02 ispc CRON[1888475]: pam_unix(cron:session): session closed for user root Dec 17 17:37:53 ispc sshd[1888510]: Invalid user lanovacentra from 51.159.18.215 Dec 17 17:38:01 ispc CRON[1888519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:38:02 ispc CRON[1888519]: pam_unix(cron:session): session closed for user root Dec 17 17:39:01 ispc CRON[1888555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:39:01 ispc CRON[1888556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:39:01 ispc CRON[1888555]: pam_unix(cron:session): session closed for user root Dec 17 17:39:02 ispc CRON[1888556]: pam_unix(cron:session): session closed for user root Dec 17 17:40:01 ispc CRON[1888602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:40:01 ispc CRON[1888603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:40:01 ispc CRON[1888604]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:40:01 ispc CRON[1888605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:40:01 ispc CRON[1888606]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:40:01 ispc CRON[1888603]: pam_unix(cron:session): session closed for user root Dec 17 17:40:01 ispc CRON[1888604]: pam_unix(cron:session): session closed for user www-data Dec 17 17:40:01 ispc CRON[1888606]: pam_unix(cron:session): session closed for user getmail Dec 17 17:40:02 ispc CRON[1888605]: pam_unix(cron:session): session closed for user root Dec 17 17:40:03 ispc CRON[1888602]: pam_unix(cron:session): session closed for user root Dec 17 17:40:27 ispc sshd[1888691]: Invalid user blceu from 211.57.200.145 Dec 17 17:40:41 ispc sshd[1888697]: Did not receive identification string from 103.203.57.11 Dec 17 17:41:01 ispc CRON[1888706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:41:02 ispc CRON[1888706]: pam_unix(cron:session): session closed for user root Dec 17 17:41:08 ispc postfix/smtpd[1888721]: sql auxprop plugin using mysql engine Dec 17 17:42:01 ispc CRON[1888744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:42:01 ispc CRON[1888744]: pam_unix(cron:session): session closed for user root Dec 17 17:42:36 ispc postfix/smtpd[1888771]: sql auxprop plugin using mysql engine Dec 17 17:42:37 ispc saslauthd[1888773]: pam_mysql - SELECT returned no result. Dec 17 17:42:37 ispc saslauthd[1888773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:42:37 ispc saslauthd[1888773]: do_auth : auth failure: [user=none] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:43:02 ispc CRON[1888793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:43:02 ispc CRON[1888793]: pam_unix(cron:session): session closed for user root Dec 17 17:43:33 ispc saslauthd[1888817]: pam_mysql - SELECT returned no result. Dec 17 17:43:33 ispc saslauthd[1888817]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:43:33 ispc saslauthd[1888817]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:43:39 ispc saslauthd[1888822]: pam_mysql - SELECT returned no result. Dec 17 17:43:39 ispc saslauthd[1888822]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:43:39 ispc saslauthd[1888822]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:44:01 ispc CRON[1888831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:44:02 ispc CRON[1888831]: pam_unix(cron:session): session closed for user root Dec 17 17:45:01 ispc CRON[1888874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:45:01 ispc CRON[1888875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:45:01 ispc CRON[1888876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:45:01 ispc CRON[1888877]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:45:01 ispc CRON[1888875]: pam_unix(cron:session): session closed for user root Dec 17 17:45:01 ispc CRON[1888877]: pam_unix(cron:session): session closed for user getmail Dec 17 17:45:02 ispc CRON[1888876]: pam_unix(cron:session): session closed for user root Dec 17 17:45:02 ispc CRON[1888874]: pam_unix(cron:session): session closed for user root Dec 17 17:46:01 ispc CRON[1888989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:46:01 ispc CRON[1888989]: pam_unix(cron:session): session closed for user root Dec 17 17:46:45 ispc sshd[1889016]: Invalid user ziplines from 148.216.54.17 Dec 17 17:47:01 ispc CRON[1889026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:47:03 ispc CRON[1889026]: pam_unix(cron:session): session closed for user root Dec 17 17:48:01 ispc CRON[1889072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:48:02 ispc CRON[1889072]: pam_unix(cron:session): session closed for user root Dec 17 17:48:45 ispc sshd[1889102]: Invalid user klape from 103.164.20.29 Dec 17 17:48:46 ispc sshd[1889104]: Invalid user ubuntu from 103.164.20.29 Dec 17 17:49:01 ispc CRON[1889114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:49:02 ispc CRON[1889114]: pam_unix(cron:session): session closed for user root Dec 17 17:49:19 ispc postfix/smtpd[1889129]: sql auxprop plugin using mysql engine Dec 17 17:50:01 ispc CRON[1889153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:50:01 ispc CRON[1889154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:50:01 ispc CRON[1889155]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 17:50:01 ispc CRON[1889156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:50:01 ispc CRON[1889157]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:50:01 ispc CRON[1889155]: pam_unix(cron:session): session closed for user www-data Dec 17 17:50:01 ispc CRON[1889154]: pam_unix(cron:session): session closed for user root Dec 17 17:50:01 ispc CRON[1889157]: pam_unix(cron:session): session closed for user getmail Dec 17 17:50:01 ispc CRON[1889156]: pam_unix(cron:session): session closed for user root Dec 17 17:50:02 ispc CRON[1889153]: pam_unix(cron:session): session closed for user root Dec 17 17:50:05 ispc sshd[1889235]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:51:01 ispc CRON[1889260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:51:01 ispc CRON[1889260]: pam_unix(cron:session): session closed for user root Dec 17 17:52:01 ispc CRON[1889295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:52:02 ispc CRON[1889295]: pam_unix(cron:session): session closed for user root Dec 17 17:52:05 ispc postfix/smtpd[1889310]: sql auxprop plugin using mysql engine Dec 17 17:52:06 ispc saslauthd[1889312]: pam_mysql - SELECT returned no result. Dec 17 17:52:06 ispc saslauthd[1889312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:52:06 ispc saslauthd[1889312]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:52:29 ispc sshd[1889321]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 17:52:49 ispc saslauthd[1889339]: pam_mysql - SELECT returned no result. Dec 17 17:52:49 ispc saslauthd[1889339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:52:49 ispc saslauthd[1889339]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:53:01 ispc CRON[1889345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:53:03 ispc CRON[1889345]: pam_unix(cron:session): session closed for user root Dec 17 17:54:01 ispc CRON[1889383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:54:01 ispc CRON[1889383]: pam_unix(cron:session): session closed for user root Dec 17 17:55:01 ispc CRON[1889423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:55:01 ispc CRON[1889424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:55:01 ispc CRON[1889425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:55:01 ispc CRON[1889426]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 17:55:02 ispc CRON[1889424]: pam_unix(cron:session): session closed for user root Dec 17 17:55:02 ispc CRON[1889426]: pam_unix(cron:session): session closed for user getmail Dec 17 17:55:02 ispc CRON[1889425]: pam_unix(cron:session): session closed for user root Dec 17 17:55:02 ispc CRON[1889423]: pam_unix(cron:session): session closed for user root Dec 17 17:56:01 ispc CRON[1889524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:56:02 ispc CRON[1889524]: pam_unix(cron:session): session closed for user root Dec 17 17:56:29 ispc postfix/smtpd[1889550]: sql auxprop plugin using mysql engine Dec 17 17:56:29 ispc CRON[1888437]: pam_unix(cron:session): session closed for user root Dec 17 17:57:01 ispc CRON[1889560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:57:02 ispc CRON[1889560]: pam_unix(cron:session): session closed for user root Dec 17 17:57:42 ispc sshd[1889574]: Invalid user ziplines from 211.45.175.153 Dec 17 17:57:44 ispc saslauthd[1889577]: pam_mysql - SELECT returned no result. Dec 17 17:57:44 ispc saslauthd[1889577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 17:57:44 ispc saslauthd[1889577]: do_auth : auth failure: [user=nsroot] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 17:58:01 ispc CRON[1889588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:58:01 ispc CRON[1889588]: pam_unix(cron:session): session closed for user root Dec 17 17:59:01 ispc CRON[1889603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 17:59:03 ispc CRON[1889603]: pam_unix(cron:session): session closed for user root Dec 17 17:59:19 ispc sshd[1889618]: Invalid user AdminGPON from 45.148.10.121 Dec 17 17:59:33 ispc sshd[1889620]: Invalid user ubuntu from 35.240.174.82 Dec 17 18:00:01 ispc CRON[1889622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:00:01 ispc CRON[1889623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:00:01 ispc CRON[1889624]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:00:01 ispc CRON[1889625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:00:01 ispc CRON[1889626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:00:01 ispc CRON[1889627]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:00:01 ispc CRON[1889624]: pam_unix(cron:session): session closed for user www-data Dec 17 18:00:01 ispc CRON[1889623]: pam_unix(cron:session): session closed for user root Dec 17 18:00:01 ispc CRON[1889627]: pam_unix(cron:session): session closed for user getmail Dec 17 18:00:01 ispc CRON[1889625]: pam_unix(cron:session): session closed for user root Dec 17 18:00:01 ispc CRON[1889622]: pam_unix(cron:session): session closed for user root Dec 17 18:00:43 ispc CRON[1889626]: pam_unix(cron:session): session closed for user root Dec 17 18:01:01 ispc CRON[1889893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:01:41 ispc saslauthd[1889919]: pam_mysql - SELECT returned no result. Dec 17 18:01:41 ispc saslauthd[1889919]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:01:41 ispc saslauthd[1889919]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:02:01 ispc CRON[1889929]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 18:02:01 ispc CRON[1889930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:02:01 ispc CRON[1889930]: pam_unix(cron:session): session closed for user root Dec 17 18:03:01 ispc CRON[1890906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:03:02 ispc CRON[1890906]: pam_unix(cron:session): session closed for user root Dec 17 18:03:06 ispc CRON[1889929]: pam_unix(cron:session): session closed for user logcheck Dec 17 18:03:12 ispc postfix/smtpd[1891001]: sql auxprop plugin using mysql engine Dec 17 18:03:59 ispc sshd[1891025]: Invalid user martof from 51.91.247.10 Dec 17 18:04:01 ispc CRON[1891027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:04:02 ispc CRON[1891027]: pam_unix(cron:session): session closed for user root Dec 17 18:05:01 ispc CRON[1891064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:05:01 ispc CRON[1891065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:05:01 ispc CRON[1891066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:05:01 ispc CRON[1891067]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:05:01 ispc CRON[1891065]: pam_unix(cron:session): session closed for user root Dec 17 18:05:01 ispc CRON[1891067]: pam_unix(cron:session): session closed for user getmail Dec 17 18:05:02 ispc CRON[1891066]: pam_unix(cron:session): session closed for user root Dec 17 18:05:02 ispc CRON[1891064]: pam_unix(cron:session): session closed for user root Dec 17 18:06:01 ispc CRON[1891166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:06:03 ispc CRON[1891166]: pam_unix(cron:session): session closed for user root Dec 17 18:07:01 ispc CRON[1891205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:07:01 ispc CRON[1891205]: pam_unix(cron:session): session closed for user root Dec 17 18:08:01 ispc CRON[1891255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:08:02 ispc CRON[1891255]: pam_unix(cron:session): session closed for user root Dec 17 18:09:01 ispc CRON[1891294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:09:01 ispc CRON[1891295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:09:01 ispc CRON[1891294]: pam_unix(cron:session): session closed for user root Dec 17 18:09:02 ispc CRON[1891295]: pam_unix(cron:session): session closed for user root Dec 17 18:09:30 ispc postfix/smtpd[1891328]: sql auxprop plugin using mysql engine Dec 17 18:10:01 ispc CRON[1891344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:10:01 ispc CRON[1891345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:10:01 ispc CRON[1891346]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:10:01 ispc CRON[1891347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:10:01 ispc CRON[1891348]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:10:01 ispc CRON[1891346]: pam_unix(cron:session): session closed for user www-data Dec 17 18:10:01 ispc CRON[1891345]: pam_unix(cron:session): session closed for user root Dec 17 18:10:01 ispc CRON[1891348]: pam_unix(cron:session): session closed for user getmail Dec 17 18:10:01 ispc CRON[1891344]: pam_unix(cron:session): session closed for user root Dec 17 18:10:02 ispc CRON[1891347]: pam_unix(cron:session): session closed for user root Dec 17 18:10:20 ispc sshd[1891430]: Invalid user pronajemplosin from 120.48.125.223 Dec 17 18:11:01 ispc CRON[1891448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:11:01 ispc CRON[1891448]: pam_unix(cron:session): session closed for user root Dec 17 18:11:04 ispc postfix/smtpd[1891459]: sql auxprop plugin using mysql engine Dec 17 18:11:05 ispc saslauthd[1891461]: pam_mysql - SELECT returned no result. Dec 17 18:11:05 ispc saslauthd[1891461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:11:05 ispc saslauthd[1891461]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:11:21 ispc sshd[1891470]: Did not receive identification string from 192.227.134.84 Dec 17 18:11:38 ispc sshd[1891476]: Invalid user ziplines from 62.84.181.22 Dec 17 18:12:01 ispc CRON[1891491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:12:02 ispc CRON[1891491]: pam_unix(cron:session): session closed for user root Dec 17 18:12:42 ispc sshd[1891520]: Invalid user ziplines from 51.77.203.224 Dec 17 18:12:54 ispc postfix/smtpd[1891533]: sql auxprop plugin using mysql engine Dec 17 18:12:55 ispc saslauthd[1891535]: pam_mysql - SELECT returned no result. Dec 17 18:12:55 ispc saslauthd[1891535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:12:55 ispc saslauthd[1891535]: do_auth : auth failure: [user=ntpupdate] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:13:01 ispc CRON[1891540]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:13:02 ispc CRON[1891540]: pam_unix(cron:session): session closed for user root Dec 17 18:13:04 ispc sshd[1891551]: Invalid user matlbula from 35.239.77.168 Dec 17 18:14:01 ispc CRON[1891580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:14:03 ispc CRON[1891580]: pam_unix(cron:session): session closed for user root Dec 17 18:15:01 ispc CRON[1891615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:15:01 ispc CRON[1891616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:15:01 ispc CRON[1891617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:15:01 ispc CRON[1891618]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:15:01 ispc CRON[1891616]: pam_unix(cron:session): session closed for user root Dec 17 18:15:01 ispc CRON[1891618]: pam_unix(cron:session): session closed for user getmail Dec 17 18:15:02 ispc CRON[1891617]: pam_unix(cron:session): session closed for user root Dec 17 18:15:04 ispc CRON[1891615]: pam_unix(cron:session): session closed for user root Dec 17 18:16:02 ispc CRON[1891716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:16:03 ispc CRON[1891716]: pam_unix(cron:session): session closed for user root Dec 17 18:17:01 ispc CRON[1891755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:17:01 ispc CRON[1891755]: pam_unix(cron:session): session closed for user root Dec 17 18:18:01 ispc CRON[1891802]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 18:18:01 ispc CRON[1891803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:18:02 ispc CRON[1891803]: pam_unix(cron:session): session closed for user root Dec 17 18:18:07 ispc CRON[1891802]: pam_unix(cron:session): session closed for user amavis Dec 17 18:18:08 ispc postfix/smtpd[1891826]: sql auxprop plugin using mysql engine Dec 17 18:19:01 ispc CRON[1891860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:19:02 ispc CRON[1891860]: pam_unix(cron:session): session closed for user root Dec 17 18:19:04 ispc postfix/smtpd[1891871]: sql auxprop plugin using mysql engine Dec 17 18:20:01 ispc CRON[1891909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:20:01 ispc CRON[1891910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:20:01 ispc CRON[1891911]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:20:01 ispc CRON[1891912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:20:01 ispc CRON[1891913]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:20:01 ispc CRON[1891911]: pam_unix(cron:session): session closed for user www-data Dec 17 18:20:01 ispc CRON[1891910]: pam_unix(cron:session): session closed for user root Dec 17 18:20:01 ispc CRON[1891913]: pam_unix(cron:session): session closed for user getmail Dec 17 18:20:02 ispc CRON[1891912]: pam_unix(cron:session): session closed for user root Dec 17 18:20:02 ispc CRON[1891909]: pam_unix(cron:session): session closed for user root Dec 17 18:20:05 ispc sshd[1891987]: Did not receive identification string from 161.35.218.223 Dec 17 18:20:09 ispc saslauthd[1891988]: pam_mysql - SELECT returned no result. Dec 17 18:20:09 ispc saslauthd[1891988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:20:09 ispc saslauthd[1891988]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:21:01 ispc CRON[1892011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:21:01 ispc CRON[1892012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:21:01 ispc CRON[1892011]: pam_unix(cron:session): session closed for user root Dec 17 18:21:02 ispc CRON[1892012]: pam_unix(cron:session): session closed for user root Dec 17 18:21:22 ispc CRON[1889893]: pam_unix(cron:session): session closed for user root Dec 17 18:22:01 ispc CRON[1892038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:22:03 ispc CRON[1892038]: pam_unix(cron:session): session closed for user root Dec 17 18:23:01 ispc CRON[1892064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:23:02 ispc CRON[1892064]: pam_unix(cron:session): session closed for user root Dec 17 18:24:01 ispc CRON[1892079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:24:02 ispc CRON[1892079]: pam_unix(cron:session): session closed for user root Dec 17 18:25:01 ispc CRON[1892092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:25:01 ispc CRON[1892094]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:25:01 ispc CRON[1892091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:25:01 ispc CRON[1892093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:25:01 ispc CRON[1892092]: pam_unix(cron:session): session closed for user root Dec 17 18:25:01 ispc CRON[1892094]: pam_unix(cron:session): session closed for user getmail Dec 17 18:25:03 ispc CRON[1892091]: pam_unix(cron:session): session closed for user root Dec 17 18:25:35 ispc CRON[1892093]: pam_unix(cron:session): session closed for user root Dec 17 18:25:41 ispc sshd[1892199]: Invalid user martof from 211.45.175.153 Dec 17 18:25:43 ispc saslauthd[1892201]: pam_mysql - SELECT returned no result. Dec 17 18:25:43 ispc saslauthd[1892201]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:25:43 ispc saslauthd[1892201]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:26:01 ispc CRON[1892202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:26:27 ispc postfix/smtpd[1892222]: sql auxprop plugin using mysql engine Dec 17 18:27:01 ispc CRON[1892236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:27:02 ispc CRON[1892236]: pam_unix(cron:session): session closed for user root Dec 17 18:27:11 ispc saslauthd[1892251]: pam_mysql - SELECT returned no result. Dec 17 18:27:11 ispc saslauthd[1892251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:27:11 ispc saslauthd[1892251]: do_auth : auth failure: [user=scanner@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 18:28:01 ispc CRON[1892282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:28:01 ispc CRON[1892282]: pam_unix(cron:session): session closed for user root Dec 17 18:28:03 ispc saslauthd[1892293]: pam_mysql - SELECT returned no result. Dec 17 18:28:03 ispc saslauthd[1892293]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:28:03 ispc saslauthd[1892293]: do_auth : auth failure: [user=nuucp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:28:44 ispc sshd[1892318]: Did not receive identification string from 45.140.17.97 Dec 17 18:28:46 ispc saslauthd[1892319]: pam_mysql - SELECT returned no result. Dec 17 18:28:46 ispc saslauthd[1892319]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:28:46 ispc saslauthd[1892319]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:29:00 ispc sshd[1892326]: Invalid user martof from 211.57.200.145 Dec 17 18:29:01 ispc CRON[1892328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:29:02 ispc CRON[1892328]: pam_unix(cron:session): session closed for user root Dec 17 18:29:10 ispc sshd[1892343]: Invalid user blceu from 119.205.233.162 Dec 17 18:29:21 ispc sshd[1892349]: Invalid user blceu from 51.77.203.224 Dec 17 18:30:01 ispc CRON[1892367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:30:01 ispc CRON[1892369]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:30:01 ispc CRON[1892370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:30:01 ispc CRON[1892371]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:30:01 ispc CRON[1892368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:30:01 ispc CRON[1892369]: pam_unix(cron:session): session closed for user www-data Dec 17 18:30:01 ispc CRON[1892371]: pam_unix(cron:session): session closed for user getmail Dec 17 18:30:01 ispc CRON[1892368]: pam_unix(cron:session): session closed for user root Dec 17 18:30:02 ispc CRON[1892367]: pam_unix(cron:session): session closed for user root Dec 17 18:30:02 ispc CRON[1892370]: pam_unix(cron:session): session closed for user root Dec 17 18:31:01 ispc CRON[1892469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:31:02 ispc CRON[1892469]: pam_unix(cron:session): session closed for user root Dec 17 18:31:32 ispc sshd[1892494]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 18:32:01 ispc CRON[1892509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:32:01 ispc CRON[1892509]: pam_unix(cron:session): session closed for user root Dec 17 18:33:01 ispc CRON[1892552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:33:02 ispc CRON[1892552]: pam_unix(cron:session): session closed for user root Dec 17 18:33:09 ispc postfix/smtpd[1892567]: sql auxprop plugin using mysql engine Dec 17 18:34:01 ispc CRON[1892592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:34:02 ispc CRON[1892592]: pam_unix(cron:session): session closed for user root Dec 17 18:35:01 ispc CRON[1892630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:35:01 ispc CRON[1892631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:35:01 ispc CRON[1892632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:35:01 ispc CRON[1892633]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:35:01 ispc CRON[1892631]: pam_unix(cron:session): session closed for user root Dec 17 18:35:01 ispc CRON[1892633]: pam_unix(cron:session): session closed for user getmail Dec 17 18:35:01 ispc CRON[1892632]: pam_unix(cron:session): session closed for user root Dec 17 18:35:02 ispc CRON[1892630]: pam_unix(cron:session): session closed for user root Dec 17 18:36:01 ispc CRON[1892734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:36:01 ispc CRON[1892734]: pam_unix(cron:session): session closed for user root Dec 17 18:37:01 ispc CRON[1892774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:37:02 ispc CRON[1892774]: pam_unix(cron:session): session closed for user root Dec 17 18:37:41 ispc postfix/smtpd[1892802]: sql auxprop plugin using mysql engine Dec 17 18:37:42 ispc saslauthd[1892805]: pam_mysql - SELECT returned no result. Dec 17 18:37:42 ispc saslauthd[1892805]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:37:42 ispc saslauthd[1892805]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:38:01 ispc CRON[1892825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:38:02 ispc CRON[1892825]: pam_unix(cron:session): session closed for user root Dec 17 18:39:01 ispc CRON[1892861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:39:01 ispc CRON[1892862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:39:01 ispc CRON[1892861]: pam_unix(cron:session): session closed for user root Dec 17 18:39:01 ispc CRON[1892862]: pam_unix(cron:session): session closed for user root Dec 17 18:40:00 ispc sshd[1892905]: Did not receive identification string from 159.65.197.10 Dec 17 18:40:01 ispc CRON[1892911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:40:01 ispc CRON[1892912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:40:01 ispc CRON[1892913]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:40:01 ispc CRON[1892914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:40:01 ispc CRON[1892915]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:40:01 ispc CRON[1892913]: pam_unix(cron:session): session closed for user www-data Dec 17 18:40:02 ispc CRON[1892912]: pam_unix(cron:session): session closed for user root Dec 17 18:40:02 ispc CRON[1892915]: pam_unix(cron:session): session closed for user getmail Dec 17 18:40:02 ispc CRON[1892914]: pam_unix(cron:session): session closed for user root Dec 17 18:40:02 ispc CRON[1892911]: pam_unix(cron:session): session closed for user root Dec 17 18:41:01 ispc CRON[1893015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:41:02 ispc CRON[1893015]: pam_unix(cron:session): session closed for user root Dec 17 18:42:01 ispc CRON[1893050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:42:02 ispc CRON[1893050]: pam_unix(cron:session): session closed for user root Dec 17 18:43:01 ispc CRON[1893092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:43:02 ispc CRON[1893092]: pam_unix(cron:session): session closed for user root Dec 17 18:43:17 ispc postfix/smtpd[1893111]: sql auxprop plugin using mysql engine Dec 17 18:43:19 ispc saslauthd[1893114]: pam_mysql - SELECT returned no result. Dec 17 18:43:19 ispc saslauthd[1893114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:43:19 ispc saslauthd[1893114]: do_auth : auth failure: [user=ods] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:43:58 ispc sshd[1893131]: Invalid user blceu from 45.119.213.109 Dec 17 18:44:01 ispc CRON[1893133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:44:01 ispc CRON[1893133]: pam_unix(cron:session): session closed for user root Dec 17 18:44:37 ispc sshd[1893162]: Invalid user martof from 45.84.199.14 Dec 17 18:45:01 ispc CRON[1893175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:45:01 ispc CRON[1893176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:45:01 ispc CRON[1893177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:45:01 ispc CRON[1893178]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:45:01 ispc CRON[1893176]: pam_unix(cron:session): session closed for user root Dec 17 18:45:01 ispc CRON[1893178]: pam_unix(cron:session): session closed for user getmail Dec 17 18:45:01 ispc CRON[1893177]: pam_unix(cron:session): session closed for user root Dec 17 18:45:02 ispc CRON[1893175]: pam_unix(cron:session): session closed for user root Dec 17 18:45:28 ispc sshd[1893264]: Invalid user blceu from 51.91.247.10 Dec 17 18:46:01 ispc CRON[1893279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:46:01 ispc CRON[1893279]: pam_unix(cron:session): session closed for user root Dec 17 18:46:18 ispc postfix/smtpd[1893296]: sql auxprop plugin using mysql engine Dec 17 18:46:18 ispc CRON[1892202]: pam_unix(cron:session): session closed for user root Dec 17 18:46:19 ispc saslauthd[1893300]: pam_mysql - SELECT returned no result. Dec 17 18:46:19 ispc saslauthd[1893300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:46:19 ispc saslauthd[1893300]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:47:01 ispc CRON[1893301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:47:02 ispc CRON[1893301]: pam_unix(cron:session): session closed for user root Dec 17 18:47:53 ispc sshd[1893323]: Invalid user ubuntu from 117.50.70.169 Dec 17 18:48:01 ispc CRON[1893330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:48:03 ispc CRON[1893330]: pam_unix(cron:session): session closed for user root Dec 17 18:49:01 ispc CRON[1893343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:49:02 ispc CRON[1893343]: pam_unix(cron:session): session closed for user root Dec 17 18:50:01 ispc CRON[1893355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:50:01 ispc CRON[1893356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:50:01 ispc CRON[1893357]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 18:50:01 ispc CRON[1893358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:50:01 ispc CRON[1893359]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:50:01 ispc CRON[1893357]: pam_unix(cron:session): session closed for user www-data Dec 17 18:50:01 ispc CRON[1893356]: pam_unix(cron:session): session closed for user root Dec 17 18:50:01 ispc CRON[1893359]: pam_unix(cron:session): session closed for user getmail Dec 17 18:50:01 ispc CRON[1893355]: pam_unix(cron:session): session closed for user root Dec 17 18:50:31 ispc CRON[1893358]: pam_unix(cron:session): session closed for user root Dec 17 18:50:36 ispc sshd[1893464]: Invalid user ziplines from 119.205.233.162 Dec 17 18:51:01 ispc CRON[1893474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:52:01 ispc CRON[1893508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:52:01 ispc CRON[1893509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:52:03 ispc CRON[1893509]: pam_unix(cron:session): session closed for user root Dec 17 18:52:25 ispc postfix/smtpd[1893537]: sql auxprop plugin using mysql engine Dec 17 18:53:01 ispc CRON[1893558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:53:02 ispc CRON[1893558]: pam_unix(cron:session): session closed for user root Dec 17 18:53:28 ispc postfix/smtpd[1893582]: sql auxprop plugin using mysql engine Dec 17 18:54:01 ispc CRON[1893597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:54:01 ispc CRON[1893597]: pam_unix(cron:session): session closed for user root Dec 17 18:55:01 ispc CRON[1893637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:55:01 ispc CRON[1893638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:55:01 ispc CRON[1893639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:55:01 ispc CRON[1893640]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 18:55:01 ispc CRON[1893638]: pam_unix(cron:session): session closed for user root Dec 17 18:55:01 ispc CRON[1893640]: pam_unix(cron:session): session closed for user getmail Dec 17 18:55:02 ispc CRON[1893639]: pam_unix(cron:session): session closed for user root Dec 17 18:55:02 ispc CRON[1893637]: pam_unix(cron:session): session closed for user root Dec 17 18:55:08 ispc postfix/smtpd[1893717]: sql auxprop plugin using mysql engine Dec 17 18:55:09 ispc saslauthd[1893719]: pam_mysql - SELECT returned no result. Dec 17 18:55:09 ispc saslauthd[1893719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:55:09 ispc saslauthd[1893719]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:55:19 ispc CRON[1893508]: pam_unix(cron:session): session closed for user root Dec 17 18:56:01 ispc CRON[1893740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:56:02 ispc CRON[1893740]: pam_unix(cron:session): session closed for user root Dec 17 18:56:28 ispc sshd[1893764]: Invalid user ziplines from 51.91.76.213 Dec 17 18:57:01 ispc CRON[1893778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:57:02 ispc CRON[1893778]: pam_unix(cron:session): session closed for user root Dec 17 18:58:01 ispc CRON[1893830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:58:02 ispc CRON[1893830]: pam_unix(cron:session): session closed for user root Dec 17 18:58:19 ispc postfix/smtpd[1893850]: sql auxprop plugin using mysql engine Dec 17 18:58:20 ispc saslauthd[1893852]: pam_mysql - SELECT returned no result. Dec 17 18:58:20 ispc saslauthd[1893852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:58:20 ispc saslauthd[1893852]: do_auth : auth failure: [user=onlime_r] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:58:24 ispc sshd[1893853]: Did not receive identification string from 159.65.194.206 Dec 17 18:58:42 ispc sshd[1893864]: Did not receive identification string from 161.35.153.41 Dec 17 18:58:48 ispc saslauthd[1893866]: pam_mysql - SELECT returned no result. Dec 17 18:58:48 ispc saslauthd[1893866]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:58:48 ispc saslauthd[1893866]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 18:59:01 ispc CRON[1893876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 18:59:02 ispc CRON[1893876]: pam_unix(cron:session): session closed for user root Dec 17 18:59:21 ispc saslauthd[1893897]: pam_mysql - SELECT returned no result. Dec 17 18:59:21 ispc saslauthd[1893897]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 18:59:21 ispc saslauthd[1893897]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:00:01 ispc CRON[1893916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:00:01 ispc CRON[1893917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:00:01 ispc CRON[1893918]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:00:01 ispc CRON[1893919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:00:01 ispc CRON[1893920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:00:01 ispc CRON[1893921]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:00:01 ispc CRON[1893918]: pam_unix(cron:session): session closed for user www-data Dec 17 19:00:01 ispc CRON[1893917]: pam_unix(cron:session): session closed for user root Dec 17 19:00:01 ispc CRON[1893921]: pam_unix(cron:session): session closed for user getmail Dec 17 19:00:01 ispc CRON[1893920]: pam_unix(cron:session): session closed for user root Dec 17 19:00:02 ispc CRON[1893919]: pam_unix(cron:session): session closed for user root Dec 17 19:00:02 ispc CRON[1893916]: pam_unix(cron:session): session closed for user root Dec 17 19:01:01 ispc CRON[1894094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:01:02 ispc CRON[1894094]: pam_unix(cron:session): session closed for user root Dec 17 19:01:28 ispc sshd[1894117]: Did not receive identification string from 192.227.134.84 Dec 17 19:02:01 ispc CRON[1894133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:02:01 ispc CRON[1894132]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 19:02:02 ispc CRON[1894133]: pam_unix(cron:session): session closed for user root Dec 17 19:03:01 ispc CRON[1895013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:03:02 ispc CRON[1895013]: pam_unix(cron:session): session closed for user root Dec 17 19:03:12 ispc CRON[1894132]: pam_unix(cron:session): session closed for user logcheck Dec 17 19:03:20 ispc postfix/smtpd[1895214]: sql auxprop plugin using mysql engine Dec 17 19:03:31 ispc sshd[1895222]: Invalid user blceu from 211.45.175.153 Dec 17 19:04:01 ispc CRON[1895236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:04:02 ispc CRON[1895236]: pam_unix(cron:session): session closed for user root Dec 17 19:04:03 ispc postfix/smtpd[1895247]: sql auxprop plugin using mysql engine Dec 17 19:04:03 ispc saslauthd[1895250]: pam_mysql - SELECT returned no result. Dec 17 19:04:03 ispc saslauthd[1895250]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:04:03 ispc saslauthd[1895250]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:05:01 ispc CRON[1895278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:05:01 ispc CRON[1895279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:05:01 ispc CRON[1895280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:05:01 ispc CRON[1895281]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:05:01 ispc CRON[1895281]: pam_unix(cron:session): session closed for user getmail Dec 17 19:05:01 ispc CRON[1895279]: pam_unix(cron:session): session closed for user root Dec 17 19:05:02 ispc CRON[1895280]: pam_unix(cron:session): session closed for user root Dec 17 19:05:02 ispc CRON[1895278]: pam_unix(cron:session): session closed for user root Dec 17 19:06:01 ispc CRON[1895382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:06:02 ispc CRON[1895382]: pam_unix(cron:session): session closed for user root Dec 17 19:07:01 ispc CRON[1895417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:07:02 ispc CRON[1895417]: pam_unix(cron:session): session closed for user root Dec 17 19:07:12 ispc sshd[1895432]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:07:12 ispc sshd[1895432]: Invalid user ziplines from 103.146.203.212 Dec 17 19:08:01 ispc CRON[1895467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:08:01 ispc CRON[1895467]: pam_unix(cron:session): session closed for user root Dec 17 19:09:01 ispc CRON[1895508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:09:01 ispc CRON[1895509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:09:02 ispc CRON[1895508]: pam_unix(cron:session): session closed for user root Dec 17 19:09:02 ispc CRON[1895509]: pam_unix(cron:session): session closed for user root Dec 17 19:09:03 ispc sshd[1895526]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:09:08 ispc postfix/smtpd[1895532]: sql auxprop plugin using mysql engine Dec 17 19:10:01 ispc CRON[1895561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:10:01 ispc CRON[1895562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:10:01 ispc CRON[1895563]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:10:01 ispc CRON[1895564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:10:01 ispc CRON[1895565]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:10:01 ispc CRON[1895563]: pam_unix(cron:session): session closed for user www-data Dec 17 19:10:01 ispc CRON[1895562]: pam_unix(cron:session): session closed for user root Dec 17 19:10:01 ispc CRON[1895565]: pam_unix(cron:session): session closed for user getmail Dec 17 19:10:02 ispc CRON[1895564]: pam_unix(cron:session): session closed for user root Dec 17 19:10:02 ispc CRON[1895561]: pam_unix(cron:session): session closed for user root Dec 17 19:10:08 ispc postfix/smtpd[1895640]: sql auxprop plugin using mysql engine Dec 17 19:11:01 ispc CRON[1895665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:11:02 ispc CRON[1895665]: pam_unix(cron:session): session closed for user root Dec 17 19:11:23 ispc CRON[1893474]: pam_unix(cron:session): session closed for user root Dec 17 19:12:01 ispc CRON[1895696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:12:03 ispc CRON[1895696]: pam_unix(cron:session): session closed for user root Dec 17 19:12:37 ispc sshd[1895710]: Invalid user martof from 51.77.203.224 Dec 17 19:13:01 ispc CRON[1895720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:13:02 ispc CRON[1895720]: pam_unix(cron:session): session closed for user root Dec 17 19:13:06 ispc saslauthd[1895733]: pam_mysql - SELECT returned no result. Dec 17 19:13:06 ispc saslauthd[1895733]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:13:06 ispc saslauthd[1895733]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:13:25 ispc saslauthd[1895734]: pam_mysql - SELECT returned no result. Dec 17 19:13:25 ispc saslauthd[1895734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:13:25 ispc saslauthd[1895734]: do_auth : auth failure: [user=op] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:13:27 ispc sshd[1895735]: Invalid user diamantdi from 51.159.18.215 Dec 17 19:14:01 ispc CRON[1895737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:14:03 ispc CRON[1895737]: pam_unix(cron:session): session closed for user root Dec 17 19:14:09 ispc sshd[1895750]: Invalid user user from 45.148.10.121 Dec 17 19:14:24 ispc sshd[1895753]: Invalid user blceu from 51.91.76.213 Dec 17 19:15:01 ispc CRON[1895756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:15:01 ispc CRON[1895757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:15:01 ispc CRON[1895758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:15:01 ispc CRON[1895759]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:15:01 ispc CRON[1895757]: pam_unix(cron:session): session closed for user root Dec 17 19:15:01 ispc CRON[1895759]: pam_unix(cron:session): session closed for user getmail Dec 17 19:15:03 ispc CRON[1895756]: pam_unix(cron:session): session closed for user root Dec 17 19:15:12 ispc sshd[1895942]: Did not receive identification string from 159.65.201.86 Dec 17 19:15:47 ispc CRON[1895758]: pam_unix(cron:session): session closed for user root Dec 17 19:16:01 ispc CRON[1895945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:17:01 ispc CRON[1895985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:17:02 ispc CRON[1895985]: pam_unix(cron:session): session closed for user root Dec 17 19:18:01 ispc CRON[1896034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:18:02 ispc CRON[1896034]: pam_unix(cron:session): session closed for user root Dec 17 19:18:56 ispc sshd[1896068]: Invalid user martof from 103.100.209.172 Dec 17 19:19:01 ispc CRON[1896074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:19:03 ispc CRON[1896074]: pam_unix(cron:session): session closed for user root Dec 17 19:20:01 ispc CRON[1896122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:20:01 ispc CRON[1896123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:20:01 ispc CRON[1896124]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:20:01 ispc CRON[1896125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:20:01 ispc CRON[1896126]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:20:01 ispc CRON[1896123]: pam_unix(cron:session): session closed for user root Dec 17 19:20:01 ispc CRON[1896124]: pam_unix(cron:session): session closed for user www-data Dec 17 19:20:01 ispc CRON[1896126]: pam_unix(cron:session): session closed for user getmail Dec 17 19:20:01 ispc CRON[1896125]: pam_unix(cron:session): session closed for user root Dec 17 19:20:02 ispc CRON[1896122]: pam_unix(cron:session): session closed for user root Dec 17 19:21:01 ispc CRON[1896223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:21:01 ispc CRON[1896224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:21:01 ispc CRON[1896223]: pam_unix(cron:session): session closed for user root Dec 17 19:21:02 ispc CRON[1896224]: pam_unix(cron:session): session closed for user root Dec 17 19:21:45 ispc postfix/smtpd[1896261]: sql auxprop plugin using mysql engine Dec 17 19:21:46 ispc saslauthd[1896264]: pam_mysql - SELECT returned no result. Dec 17 19:21:46 ispc saslauthd[1896264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:21:46 ispc saslauthd[1896264]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:22:01 ispc CRON[1896275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:22:02 ispc CRON[1896275]: pam_unix(cron:session): session closed for user root Dec 17 19:23:01 ispc CRON[1896321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:23:01 ispc CRON[1896321]: pam_unix(cron:session): session closed for user root Dec 17 19:23:27 ispc postfix/smtpd[1896346]: sql auxprop plugin using mysql engine Dec 17 19:23:27 ispc saslauthd[1896348]: pam_mysql - SELECT returned no result. Dec 17 19:23:27 ispc saslauthd[1896348]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:23:27 ispc saslauthd[1896348]: do_auth : auth failure: [user=backup@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 19:24:01 ispc CRON[1896364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:24:03 ispc CRON[1896364]: pam_unix(cron:session): session closed for user root Dec 17 19:24:18 ispc sshd[1896385]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:24:33 ispc sshd[1896394]: Invalid user blceu from 167.99.241.111 Dec 17 19:24:56 ispc sshd[1896408]: Invalid user ziplines from 211.57.200.145 Dec 17 19:25:01 ispc CRON[1896414]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:25:01 ispc CRON[1896415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:25:01 ispc CRON[1896416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:25:01 ispc CRON[1896417]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:25:01 ispc CRON[1896415]: pam_unix(cron:session): session closed for user root Dec 17 19:25:01 ispc CRON[1896417]: pam_unix(cron:session): session closed for user getmail Dec 17 19:25:02 ispc CRON[1896416]: pam_unix(cron:session): session closed for user root Dec 17 19:25:03 ispc CRON[1896414]: pam_unix(cron:session): session closed for user root Dec 17 19:25:35 ispc sshd[1896507]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:25:35 ispc sshd[1896507]: Invalid user martof from 103.146.203.212 Dec 17 19:26:01 ispc CRON[1896522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:26:01 ispc CRON[1896522]: pam_unix(cron:session): session closed for user root Dec 17 19:27:01 ispc CRON[1896561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:27:02 ispc CRON[1896561]: pam_unix(cron:session): session closed for user root Dec 17 19:27:59 ispc sshd[1896606]: Invalid user blceu from 51.159.18.215 Dec 17 19:28:01 ispc CRON[1896613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:28:01 ispc CRON[1896613]: pam_unix(cron:session): session closed for user root Dec 17 19:28:27 ispc postfix/smtpd[1896632]: sql auxprop plugin using mysql engine Dec 17 19:28:28 ispc saslauthd[1896641]: pam_mysql - SELECT returned no result. Dec 17 19:28:28 ispc saslauthd[1896641]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:28:28 ispc saslauthd[1896641]: do_auth : auth failure: [user=openfiler] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:29:01 ispc CRON[1896654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:29:02 ispc CRON[1896654]: pam_unix(cron:session): session closed for user root Dec 17 19:29:34 ispc postfix/smtpd[1896679]: sql auxprop plugin using mysql engine Dec 17 19:30:01 ispc CRON[1896696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:30:01 ispc CRON[1896697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:30:01 ispc CRON[1896698]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:30:01 ispc CRON[1896699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:30:01 ispc CRON[1896700]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:30:01 ispc CRON[1896698]: pam_unix(cron:session): session closed for user www-data Dec 17 19:30:01 ispc CRON[1896697]: pam_unix(cron:session): session closed for user root Dec 17 19:30:01 ispc CRON[1896700]: pam_unix(cron:session): session closed for user getmail Dec 17 19:30:02 ispc CRON[1896699]: pam_unix(cron:session): session closed for user root Dec 17 19:30:02 ispc CRON[1896696]: pam_unix(cron:session): session closed for user root Dec 17 19:30:17 ispc sshd[1896783]: Invalid user blceu from 222.236.46.74 Dec 17 19:30:41 ispc postfix/smtpd[1896800]: sql auxprop plugin using mysql engine Dec 17 19:30:42 ispc saslauthd[1896802]: pam_mysql - SELECT returned no result. Dec 17 19:30:42 ispc saslauthd[1896802]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:30:42 ispc saslauthd[1896802]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:31:01 ispc CRON[1896813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:31:02 ispc CRON[1896813]: pam_unix(cron:session): session closed for user root Dec 17 19:32:01 ispc CRON[1896848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:32:01 ispc CRON[1896848]: pam_unix(cron:session): session closed for user root Dec 17 19:32:47 ispc postfix/smtpd[1896884]: sql auxprop plugin using mysql engine Dec 17 19:32:47 ispc saslauthd[1896886]: pam_mysql - SELECT returned no result. Dec 17 19:32:47 ispc saslauthd[1896886]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:32:47 ispc saslauthd[1896886]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:33:01 ispc CRON[1896899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:33:02 ispc CRON[1896899]: pam_unix(cron:session): session closed for user root Dec 17 19:34:01 ispc CRON[1896941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:34:02 ispc CRON[1896941]: pam_unix(cron:session): session closed for user root Dec 17 19:34:28 ispc sshd[1896965]: Invalid user admin from 159.65.201.86 Dec 17 19:35:01 ispc CRON[1896980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:35:01 ispc CRON[1896981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:35:01 ispc CRON[1896982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:35:01 ispc CRON[1896983]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:35:01 ispc CRON[1896981]: pam_unix(cron:session): session closed for user root Dec 17 19:35:01 ispc CRON[1896983]: pam_unix(cron:session): session closed for user getmail Dec 17 19:35:02 ispc CRON[1896982]: pam_unix(cron:session): session closed for user root Dec 17 19:35:02 ispc sshd[1897007]: Invalid user admin from 159.65.201.86 Dec 17 19:35:02 ispc CRON[1896980]: pam_unix(cron:session): session closed for user root Dec 17 19:35:34 ispc sshd[1897070]: Invalid user admin from 159.65.201.86 Dec 17 19:36:01 ispc CRON[1897086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:36:02 ispc CRON[1897086]: pam_unix(cron:session): session closed for user root Dec 17 19:36:08 ispc sshd[1897101]: Invalid user admin from 159.65.201.86 Dec 17 19:36:25 ispc CRON[1895945]: pam_unix(cron:session): session closed for user root Dec 17 19:36:25 ispc postfix/smtpd[1897110]: sql auxprop plugin using mysql engine Dec 17 19:36:37 ispc sshd[1897116]: Invalid user ziplines from 141.94.71.131 Dec 17 19:37:01 ispc CRON[1897118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:37:01 ispc CRON[1897118]: pam_unix(cron:session): session closed for user root Dec 17 19:37:18 ispc sshd[1897130]: Invalid user admin from 159.65.201.86 Dec 17 19:37:51 ispc sshd[1897138]: Invalid user admin from 159.65.201.86 Dec 17 19:38:01 ispc CRON[1897162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:38:03 ispc CRON[1897162]: pam_unix(cron:session): session closed for user root Dec 17 19:38:05 ispc postfix/smtpd[1897176]: sql auxprop plugin using mysql engine Dec 17 19:38:27 ispc sshd[1897186]: Invalid user ziplines from 103.100.209.172 Dec 17 19:39:01 ispc CRON[1897191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:39:01 ispc CRON[1897192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:39:01 ispc CRON[1897191]: pam_unix(cron:session): session closed for user root Dec 17 19:39:02 ispc CRON[1897192]: pam_unix(cron:session): session closed for user root Dec 17 19:39:10 ispc sshd[1897218]: Invalid user matlbula from 35.239.77.168 Dec 17 19:39:19 ispc saslauthd[1897221]: pam_mysql - SELECT returned no result. Dec 17 19:39:19 ispc saslauthd[1897221]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:39:19 ispc saslauthd[1897221]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:40:01 ispc CRON[1897224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:40:01 ispc CRON[1897225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:40:01 ispc CRON[1897226]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:40:01 ispc CRON[1897227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:40:01 ispc CRON[1897228]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:40:01 ispc CRON[1897226]: pam_unix(cron:session): session closed for user www-data Dec 17 19:40:01 ispc CRON[1897225]: pam_unix(cron:session): session closed for user root Dec 17 19:40:01 ispc CRON[1897228]: pam_unix(cron:session): session closed for user getmail Dec 17 19:40:02 ispc CRON[1897224]: pam_unix(cron:session): session closed for user root Dec 17 19:40:25 ispc sshd[1897336]: Did not receive identification string from 122.193.64.145 Dec 17 19:40:43 ispc CRON[1897227]: pam_unix(cron:session): session closed for user root Dec 17 19:40:52 ispc postfix/smtpd[1897338]: sql auxprop plugin using mysql engine Dec 17 19:41:01 ispc CRON[1897341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:42:01 ispc CRON[1897373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:42:01 ispc CRON[1897373]: pam_unix(cron:session): session closed for user root Dec 17 19:42:13 ispc sshd[1897388]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:43:01 ispc CRON[1897418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:43:02 ispc CRON[1897418]: pam_unix(cron:session): session closed for user root Dec 17 19:43:14 ispc sshd[1897437]: Invalid user martof from 5.133.121.104 Dec 17 19:43:26 ispc postfix/smtpd[1897445]: sql auxprop plugin using mysql engine Dec 17 19:43:28 ispc saslauthd[1897447]: pam_mysql - SELECT returned no result. Dec 17 19:43:28 ispc saslauthd[1897447]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:43:28 ispc saslauthd[1897447]: do_auth : auth failure: [user=operator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:44:01 ispc CRON[1897460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:44:02 ispc CRON[1897460]: pam_unix(cron:session): session closed for user root Dec 17 19:45:02 ispc CRON[1897499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:45:02 ispc CRON[1897500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:45:02 ispc CRON[1897501]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:45:02 ispc CRON[1897498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:45:02 ispc CRON[1897499]: pam_unix(cron:session): session closed for user root Dec 17 19:45:02 ispc CRON[1897501]: pam_unix(cron:session): session closed for user getmail Dec 17 19:45:02 ispc CRON[1897500]: pam_unix(cron:session): session closed for user root Dec 17 19:45:03 ispc CRON[1897498]: pam_unix(cron:session): session closed for user root Dec 17 19:46:01 ispc CRON[1897608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:46:02 ispc CRON[1897608]: pam_unix(cron:session): session closed for user root Dec 17 19:46:58 ispc sshd[1897641]: Invalid user bluecap from 120.48.125.223 Dec 17 19:47:01 ispc CRON[1897647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:47:02 ispc CRON[1897647]: pam_unix(cron:session): session closed for user root Dec 17 19:48:01 ispc CRON[1897698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:48:01 ispc CRON[1897698]: pam_unix(cron:session): session closed for user root Dec 17 19:48:12 ispc postfix/smtpd[1897713]: sql auxprop plugin using mysql engine Dec 17 19:48:13 ispc saslauthd[1897716]: pam_mysql - SELECT returned no result. Dec 17 19:48:13 ispc saslauthd[1897716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:48:13 ispc saslauthd[1897716]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:49:01 ispc CRON[1897742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:49:02 ispc CRON[1897742]: pam_unix(cron:session): session closed for user root Dec 17 19:49:14 ispc sshd[1897775]: Invalid user ziplines from 51.91.247.10 Dec 17 19:49:26 ispc sshd[1897797]: Invalid user blceu from 139.59.66.222 Dec 17 19:49:48 ispc sshd[1897809]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:49:48 ispc sshd[1897809]: Invalid user blceu from 103.146.203.212 Dec 17 19:50:01 ispc CRON[1897819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:50:01 ispc CRON[1897820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:50:01 ispc CRON[1897821]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 19:50:01 ispc CRON[1897822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:50:01 ispc CRON[1897823]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:50:01 ispc CRON[1897821]: pam_unix(cron:session): session closed for user www-data Dec 17 19:50:01 ispc CRON[1897820]: pam_unix(cron:session): session closed for user root Dec 17 19:50:01 ispc CRON[1897823]: pam_unix(cron:session): session closed for user getmail Dec 17 19:50:02 ispc CRON[1897822]: pam_unix(cron:session): session closed for user root Dec 17 19:50:02 ispc CRON[1897819]: pam_unix(cron:session): session closed for user root Dec 17 19:51:01 ispc CRON[1897925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:51:02 ispc CRON[1897925]: pam_unix(cron:session): session closed for user root Dec 17 19:51:10 ispc sshd[1897936]: Invalid user ubnt from 45.148.10.121 Dec 17 19:51:51 ispc sshd[1897955]: Invalid user martof from 167.99.241.111 Dec 17 19:52:01 ispc CRON[1897961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:52:01 ispc CRON[1897961]: pam_unix(cron:session): session closed for user root Dec 17 19:52:36 ispc sshd[1897991]: Did not receive identification string from 192.227.134.84 Dec 17 19:53:01 ispc CRON[1898007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:53:05 ispc CRON[1898007]: pam_unix(cron:session): session closed for user root Dec 17 19:53:07 ispc sshd[1898022]: Address 14.225.2.126 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:53:55 ispc postfix/smtpd[1898045]: sql auxprop plugin using mysql engine Dec 17 19:54:01 ispc CRON[1898048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:54:02 ispc CRON[1898048]: pam_unix(cron:session): session closed for user root Dec 17 19:55:01 ispc CRON[1898085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:55:01 ispc CRON[1898086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:55:01 ispc CRON[1898088]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 19:55:01 ispc CRON[1898087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:55:01 ispc CRON[1898086]: pam_unix(cron:session): session closed for user root Dec 17 19:55:01 ispc CRON[1898088]: pam_unix(cron:session): session closed for user getmail Dec 17 19:55:01 ispc CRON[1898087]: pam_unix(cron:session): session closed for user root Dec 17 19:55:01 ispc CRON[1898085]: pam_unix(cron:session): session closed for user root Dec 17 19:55:49 ispc sshd[1898182]: Did not receive identification string from 60.16.202.81 Dec 17 19:56:00 ispc sshd[1898193]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:56:01 ispc CRON[1898197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:56:01 ispc sshd[1898195]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:56:01 ispc sshd[1898195]: Invalid user klape from 189.89.20.45 Dec 17 19:56:02 ispc CRON[1898197]: pam_unix(cron:session): session closed for user root Dec 17 19:56:03 ispc sshd[1898204]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:56:03 ispc sshd[1898204]: Invalid user ubuntu from 189.89.20.45 Dec 17 19:56:09 ispc postfix/smtpd[1898214]: sql auxprop plugin using mysql engine Dec 17 19:56:39 ispc sshd[1898228]: Invalid user from 65.49.1.183 Dec 17 19:56:54 ispc postfix/smtpd[1898234]: sql auxprop plugin using mysql engine Dec 17 19:56:54 ispc saslauthd[1898236]: pam_mysql - SELECT returned no result. Dec 17 19:56:54 ispc saslauthd[1898236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:56:54 ispc saslauthd[1898236]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:57:01 ispc CRON[1898242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:57:02 ispc CRON[1898242]: pam_unix(cron:session): session closed for user root Dec 17 19:58:01 ispc CRON[1898289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:58:02 ispc CRON[1898289]: pam_unix(cron:session): session closed for user root Dec 17 19:58:12 ispc sshd[1898304]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 19:58:29 ispc saslauthd[1898314]: pam_mysql - SELECT returned no result. Dec 17 19:58:29 ispc saslauthd[1898314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 19:58:29 ispc saslauthd[1898314]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 19:59:01 ispc CRON[1898328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 19:59:02 ispc CRON[1898328]: pam_unix(cron:session): session closed for user root Dec 17 19:59:59 ispc sshd[1898365]: Invalid user ziplines from 139.59.66.222 Dec 17 20:00:01 ispc CRON[1898372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:00:01 ispc CRON[1898369]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:00:01 ispc CRON[1898373]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:00:01 ispc CRON[1898368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:00:01 ispc CRON[1898367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:00:01 ispc CRON[1898371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:00:01 ispc CRON[1898370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:00:01 ispc CRON[1898369]: pam_unix(cron:session): session closed for user www-data Dec 17 20:00:01 ispc CRON[1898368]: pam_unix(cron:session): session closed for user root Dec 17 20:00:01 ispc CRON[1898373]: pam_unix(cron:session): session closed for user getmail Dec 17 20:00:01 ispc CRON[1898371]: pam_unix(cron:session): session closed for user root Dec 17 20:00:02 ispc CRON[1898372]: pam_unix(cron:session): session closed for user root Dec 17 20:00:02 ispc CRON[1898367]: pam_unix(cron:session): session closed for user root Dec 17 20:00:03 ispc CRON[1898370]: pam_unix(cron:session): session closed for user root Dec 17 20:01:01 ispc CRON[1898553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:01:01 ispc CRON[1898553]: pam_unix(cron:session): session closed for user root Dec 17 20:01:12 ispc sshd[1898566]: Invalid user klape from 36.50.177.171 Dec 17 20:01:13 ispc sshd[1898572]: Invalid user ubuntu from 36.50.177.171 Dec 17 20:01:20 ispc postfix/smtpd[1898576]: sql auxprop plugin using mysql engine Dec 17 20:01:20 ispc CRON[1897341]: pam_unix(cron:session): session closed for user root Dec 17 20:02:01 ispc CRON[1898581]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 20:02:01 ispc CRON[1898582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:02:02 ispc CRON[1898582]: pam_unix(cron:session): session closed for user root Dec 17 20:03:01 ispc CRON[1899504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:03:02 ispc CRON[1899504]: pam_unix(cron:session): session closed for user root Dec 17 20:03:10 ispc CRON[1898581]: pam_unix(cron:session): session closed for user logcheck Dec 17 20:03:17 ispc sshd[1899635]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 20:03:18 ispc postfix/smtpd[1899638]: sql auxprop plugin using mysql engine Dec 17 20:04:01 ispc CRON[1899643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:04:02 ispc CRON[1899643]: pam_unix(cron:session): session closed for user root Dec 17 20:04:27 ispc sshd[1899658]: Bad protocol version identification 'GET / HTTP/1.1' from 172.105.128.12 Dec 17 20:04:27 ispc sshd[1899659]: Bad protocol version identification '\026\003\001' from 172.105.128.12 Dec 17 20:05:01 ispc CRON[1899663]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:05:01 ispc CRON[1899660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:05:01 ispc CRON[1899662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:05:01 ispc CRON[1899661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:05:01 ispc CRON[1899661]: pam_unix(cron:session): session closed for user root Dec 17 20:05:01 ispc CRON[1899663]: pam_unix(cron:session): session closed for user getmail Dec 17 20:05:02 ispc CRON[1899660]: pam_unix(cron:session): session closed for user root Dec 17 20:05:05 ispc saslauthd[1899766]: pam_mysql - SELECT returned no result. Dec 17 20:05:05 ispc saslauthd[1899766]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:05:05 ispc saslauthd[1899766]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:05:36 ispc CRON[1899662]: pam_unix(cron:session): session closed for user root Dec 17 20:06:01 ispc CRON[1899772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:06:12 ispc saslauthd[1899788]: pam_mysql - SELECT returned no result. Dec 17 20:06:12 ispc saslauthd[1899788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:06:12 ispc saslauthd[1899788]: do_auth : auth failure: [user=shop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:06:55 ispc sshd[1899805]: Invalid user ziplines from 222.236.46.74 Dec 17 20:07:01 ispc CRON[1899807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:07:02 ispc CRON[1899807]: pam_unix(cron:session): session closed for user root Dec 17 20:08:01 ispc CRON[1899852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:08:01 ispc CRON[1899852]: pam_unix(cron:session): session closed for user root Dec 17 20:09:01 ispc CRON[1899890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:09:01 ispc CRON[1899891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:09:02 ispc CRON[1899890]: pam_unix(cron:session): session closed for user root Dec 17 20:09:02 ispc CRON[1899891]: pam_unix(cron:session): session closed for user root Dec 17 20:10:01 ispc CRON[1899938]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:10:01 ispc CRON[1899936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:10:01 ispc CRON[1899937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:10:01 ispc CRON[1899939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:10:01 ispc CRON[1899940]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:10:01 ispc CRON[1899938]: pam_unix(cron:session): session closed for user www-data Dec 17 20:10:01 ispc CRON[1899937]: pam_unix(cron:session): session closed for user root Dec 17 20:10:01 ispc CRON[1899940]: pam_unix(cron:session): session closed for user getmail Dec 17 20:10:02 ispc CRON[1899939]: pam_unix(cron:session): session closed for user root Dec 17 20:10:02 ispc CRON[1899936]: pam_unix(cron:session): session closed for user root Dec 17 20:10:58 ispc sshd[1900039]: Invalid user blceu from 5.129.195.224 Dec 17 20:11:01 ispc CRON[1900041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:11:01 ispc CRON[1900041]: pam_unix(cron:session): session closed for user root Dec 17 20:12:01 ispc CRON[1900079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:12:02 ispc CRON[1900079]: pam_unix(cron:session): session closed for user root Dec 17 20:13:01 ispc CRON[1900122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:13:01 ispc CRON[1900122]: pam_unix(cron:session): session closed for user root Dec 17 20:13:34 ispc postfix/smtpd[1900148]: sql auxprop plugin using mysql engine Dec 17 20:13:35 ispc saslauthd[1900151]: pam_mysql - SELECT returned no result. Dec 17 20:13:35 ispc saslauthd[1900151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:13:35 ispc saslauthd[1900151]: do_auth : auth failure: [user=overseer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:13:45 ispc saslauthd[1900156]: pam_mysql - SELECT returned no result. Dec 17 20:13:45 ispc saslauthd[1900156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:13:45 ispc saslauthd[1900156]: do_auth : auth failure: [user=desk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:13:48 ispc saslauthd[1900161]: pam_mysql - SELECT returned no result. Dec 17 20:13:48 ispc saslauthd[1900161]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:13:48 ispc saslauthd[1900161]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:14:01 ispc CRON[1900166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:14:01 ispc CRON[1900166]: pam_unix(cron:session): session closed for user root Dec 17 20:15:01 ispc CRON[1900206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:15:01 ispc CRON[1900204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:15:01 ispc CRON[1900205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:15:01 ispc CRON[1900207]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:15:01 ispc CRON[1900205]: pam_unix(cron:session): session closed for user root Dec 17 20:15:01 ispc CRON[1900207]: pam_unix(cron:session): session closed for user getmail Dec 17 20:15:02 ispc CRON[1900204]: pam_unix(cron:session): session closed for user root Dec 17 20:15:02 ispc CRON[1900206]: pam_unix(cron:session): session closed for user root Dec 17 20:16:01 ispc CRON[1900308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:16:02 ispc CRON[1900308]: pam_unix(cron:session): session closed for user root Dec 17 20:16:07 ispc sshd[1900321]: Did not receive identification string from 45.140.17.97 Dec 17 20:16:07 ispc postfix/smtpd[1900322]: sql auxprop plugin using mysql engine Dec 17 20:16:46 ispc sshd[1900342]: Did not receive identification string from 68.183.14.57 Dec 17 20:17:01 ispc CRON[1900351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:17:01 ispc CRON[1900351]: pam_unix(cron:session): session closed for user root Dec 17 20:17:11 ispc postfix/smtpd[1900366]: sql auxprop plugin using mysql engine Dec 17 20:17:35 ispc sshd[1900379]: Did not receive identification string from 172.105.246.139 Dec 17 20:17:55 ispc postfix/smtpd[1900430]: sql auxprop plugin using mysql engine Dec 17 20:17:56 ispc saslauthd[1900432]: pam_mysql - SELECT returned no result. Dec 17 20:17:56 ispc saslauthd[1900432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:17:56 ispc saslauthd[1900432]: do_auth : auth failure: [user=testuser@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 20:18:01 ispc CRON[1900441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:18:02 ispc CRON[1900441]: pam_unix(cron:session): session closed for user root Dec 17 20:18:17 ispc sshd[1900457]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 20:18:17 ispc sshd[1900457]: Invalid user blceu from 114.7.163.154 Dec 17 20:18:55 ispc sshd[1900476]: Invalid user ziplines from 45.84.199.14 Dec 17 20:19:01 ispc CRON[1900482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:19:01 ispc CRON[1900482]: pam_unix(cron:session): session closed for user root Dec 17 20:20:01 ispc CRON[1900522]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:20:01 ispc CRON[1900518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:20:01 ispc CRON[1900519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:20:01 ispc CRON[1900520]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:20:01 ispc CRON[1900521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:20:01 ispc CRON[1900519]: pam_unix(cron:session): session closed for user root Dec 17 20:20:01 ispc CRON[1900520]: pam_unix(cron:session): session closed for user www-data Dec 17 20:20:01 ispc CRON[1900522]: pam_unix(cron:session): session closed for user getmail Dec 17 20:20:02 ispc CRON[1900518]: pam_unix(cron:session): session closed for user root Dec 17 20:20:02 ispc CRON[1900521]: pam_unix(cron:session): session closed for user root Dec 17 20:20:59 ispc sshd[1900618]: Invalid user klape from 103.164.20.29 Dec 17 20:21:00 ispc sshd[1900620]: Invalid user ubuntu from 103.164.20.29 Dec 17 20:21:01 ispc CRON[1900626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:21:01 ispc CRON[1900627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:21:01 ispc CRON[1900626]: pam_unix(cron:session): session closed for user root Dec 17 20:21:02 ispc CRON[1900627]: pam_unix(cron:session): session closed for user root Dec 17 20:22:01 ispc CRON[1900661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:22:01 ispc CRON[1900661]: pam_unix(cron:session): session closed for user root Dec 17 20:22:29 ispc postfix/smtpd[1900684]: sql auxprop plugin using mysql engine Dec 17 20:22:29 ispc saslauthd[1900687]: pam_mysql - SELECT returned no result. Dec 17 20:22:29 ispc saslauthd[1900687]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:22:29 ispc saslauthd[1900687]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:22:55 ispc sshd[1900708]: Invalid user anoraksro from 152.53.188.144 Dec 17 20:23:01 ispc CRON[1900713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:23:02 ispc CRON[1900713]: pam_unix(cron:session): session closed for user root Dec 17 20:24:01 ispc CRON[1900755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:24:02 ispc CRON[1900755]: pam_unix(cron:session): session closed for user root Dec 17 20:24:58 ispc sshd[1900798]: Did not receive identification string from 68.183.14.57 Dec 17 20:25:01 ispc CRON[1900802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:25:01 ispc CRON[1900804]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:25:01 ispc CRON[1900801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:25:01 ispc CRON[1900803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:25:01 ispc CRON[1900802]: pam_unix(cron:session): session closed for user root Dec 17 20:25:01 ispc CRON[1900804]: pam_unix(cron:session): session closed for user getmail Dec 17 20:25:02 ispc CRON[1900803]: pam_unix(cron:session): session closed for user root Dec 17 20:25:02 ispc CRON[1900801]: pam_unix(cron:session): session closed for user root Dec 17 20:26:01 ispc CRON[1900908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:26:01 ispc CRON[1900908]: pam_unix(cron:session): session closed for user root Dec 17 20:26:07 ispc sshd[1900923]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 20:26:14 ispc CRON[1899772]: pam_unix(cron:session): session closed for user root Dec 17 20:26:15 ispc postfix/smtpd[1900927]: sql auxprop plugin using mysql engine Dec 17 20:27:01 ispc CRON[1900939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:27:03 ispc CRON[1900939]: pam_unix(cron:session): session closed for user root Dec 17 20:27:51 ispc sshd[1900963]: Invalid user martof from 139.59.66.222 Dec 17 20:28:01 ispc CRON[1900972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:28:02 ispc CRON[1900972]: pam_unix(cron:session): session closed for user root Dec 17 20:28:31 ispc sshd[1900987]: Invalid user admin from 45.148.10.121 Dec 17 20:28:32 ispc saslauthd[1900991]: pam_mysql - SELECT returned no result. Dec 17 20:28:32 ispc saslauthd[1900991]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:28:32 ispc saslauthd[1900991]: do_auth : auth failure: [user=piranha] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:29:01 ispc CRON[1900996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:29:03 ispc CRON[1900996]: pam_unix(cron:session): session closed for user root Dec 17 20:30:01 ispc CRON[1901018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:30:01 ispc CRON[1901019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:30:01 ispc CRON[1901020]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:30:01 ispc CRON[1901021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:30:01 ispc CRON[1901022]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:30:01 ispc CRON[1901020]: pam_unix(cron:session): session closed for user www-data Dec 17 20:30:01 ispc CRON[1901019]: pam_unix(cron:session): session closed for user root Dec 17 20:30:01 ispc CRON[1901022]: pam_unix(cron:session): session closed for user getmail Dec 17 20:30:02 ispc CRON[1901018]: pam_unix(cron:session): session closed for user root Dec 17 20:30:05 ispc sshd[1901126]: Invalid user martof from 185.208.181.152 Dec 17 20:30:39 ispc CRON[1901021]: pam_unix(cron:session): session closed for user root Dec 17 20:30:48 ispc saslauthd[1901217]: pam_mysql - SELECT returned no result. Dec 17 20:30:48 ispc saslauthd[1901217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:30:48 ispc saslauthd[1901217]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:31:01 ispc CRON[1901218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:31:38 ispc sshd[1901250]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 20:32:01 ispc CRON[1901262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:32:03 ispc CRON[1901262]: pam_unix(cron:session): session closed for user root Dec 17 20:33:01 ispc CRON[1901312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:33:02 ispc CRON[1901312]: pam_unix(cron:session): session closed for user root Dec 17 20:34:01 ispc CRON[1901358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:34:02 ispc CRON[1901358]: pam_unix(cron:session): session closed for user root Dec 17 20:35:01 ispc CRON[1901408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:35:01 ispc CRON[1901406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:35:01 ispc CRON[1901407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:35:01 ispc CRON[1901409]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:35:01 ispc CRON[1901407]: pam_unix(cron:session): session closed for user root Dec 17 20:35:01 ispc CRON[1901409]: pam_unix(cron:session): session closed for user getmail Dec 17 20:35:01 ispc CRON[1901408]: pam_unix(cron:session): session closed for user root Dec 17 20:35:01 ispc CRON[1901406]: pam_unix(cron:session): session closed for user root Dec 17 20:36:01 ispc CRON[1901515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:36:02 ispc CRON[1901515]: pam_unix(cron:session): session closed for user root Dec 17 20:36:22 ispc sshd[1901537]: Did not receive identification string from 219.151.187.97 Dec 17 20:37:01 ispc CRON[1901560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:37:01 ispc CRON[1901560]: pam_unix(cron:session): session closed for user root Dec 17 20:38:01 ispc CRON[1901609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:38:01 ispc CRON[1901609]: pam_unix(cron:session): session closed for user root Dec 17 20:38:07 ispc sshd[1901620]: Invalid user diamantdi from 152.136.108.201 Dec 17 20:39:01 ispc CRON[1901647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:39:01 ispc CRON[1901648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:39:01 ispc CRON[1901647]: pam_unix(cron:session): session closed for user root Dec 17 20:39:02 ispc postfix/smtpd[1901665]: sql auxprop plugin using mysql engine Dec 17 20:39:02 ispc CRON[1901648]: pam_unix(cron:session): session closed for user root Dec 17 20:39:03 ispc saslauthd[1901672]: pam_mysql - SELECT returned no result. Dec 17 20:39:03 ispc saslauthd[1901672]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:39:03 ispc saslauthd[1901672]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:39:30 ispc saslauthd[1901688]: pam_mysql - SELECT returned no result. Dec 17 20:39:30 ispc saslauthd[1901688]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:39:30 ispc saslauthd[1901688]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:39:48 ispc postfix/smtpd[1901698]: sql auxprop plugin using mysql engine Dec 17 20:40:01 ispc CRON[1901709]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:40:01 ispc CRON[1901705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:40:01 ispc CRON[1901706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:40:01 ispc CRON[1901707]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:40:01 ispc CRON[1901708]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:40:01 ispc CRON[1901706]: pam_unix(cron:session): session closed for user root Dec 17 20:40:01 ispc CRON[1901709]: pam_unix(cron:session): session closed for user getmail Dec 17 20:40:01 ispc CRON[1901707]: pam_unix(cron:session): session closed for user www-data Dec 17 20:40:02 ispc CRON[1901708]: pam_unix(cron:session): session closed for user root Dec 17 20:40:02 ispc CRON[1901705]: pam_unix(cron:session): session closed for user root Dec 17 20:41:01 ispc CRON[1901815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:41:02 ispc CRON[1901815]: pam_unix(cron:session): session closed for user root Dec 17 20:42:01 ispc CRON[1901857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:42:01 ispc CRON[1901857]: pam_unix(cron:session): session closed for user root Dec 17 20:42:49 ispc sshd[1901887]: Invalid user blceu from 103.100.209.172 Dec 17 20:43:01 ispc CRON[1901905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:43:03 ispc CRON[1901905]: pam_unix(cron:session): session closed for user root Dec 17 20:43:41 ispc postfix/smtpd[1901936]: sql auxprop plugin using mysql engine Dec 17 20:43:43 ispc saslauthd[1901941]: pam_mysql - SELECT returned no result. Dec 17 20:43:43 ispc saslauthd[1901941]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:43:43 ispc saslauthd[1901941]: do_auth : auth failure: [user=pnadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:44:01 ispc CRON[1901953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:44:01 ispc CRON[1901953]: pam_unix(cron:session): session closed for user root Dec 17 20:45:01 ispc CRON[1901994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:45:01 ispc CRON[1901995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:45:01 ispc CRON[1901996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:45:01 ispc CRON[1901997]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:45:02 ispc CRON[1901995]: pam_unix(cron:session): session closed for user root Dec 17 20:45:02 ispc CRON[1901997]: pam_unix(cron:session): session closed for user getmail Dec 17 20:45:02 ispc CRON[1901996]: pam_unix(cron:session): session closed for user root Dec 17 20:45:03 ispc CRON[1901994]: pam_unix(cron:session): session closed for user root Dec 17 20:46:01 ispc CRON[1902095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:46:01 ispc CRON[1902095]: pam_unix(cron:session): session closed for user root Dec 17 20:46:04 ispc sshd[1902110]: Did not receive identification string from 36.91.166.189 Dec 17 20:47:01 ispc CRON[1902137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:47:02 ispc CRON[1902137]: pam_unix(cron:session): session closed for user root Dec 17 20:47:05 ispc postfix/smtpd[1902152]: sql auxprop plugin using mysql engine Dec 17 20:47:06 ispc saslauthd[1902155]: pam_mysql - SELECT returned no result. Dec 17 20:47:06 ispc saslauthd[1902155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:47:06 ispc saslauthd[1902155]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:47:06 ispc sshd[1902156]: Did not receive identification string from 178.62.219.98 Dec 17 20:48:01 ispc CRON[1902192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:48:02 ispc CRON[1902192]: pam_unix(cron:session): session closed for user root Dec 17 20:49:01 ispc CRON[1902244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:49:01 ispc CRON[1902244]: pam_unix(cron:session): session closed for user root Dec 17 20:49:43 ispc sshd[1902278]: Did not receive identification string from 198.235.24.204 Dec 17 20:50:01 ispc CRON[1902289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:50:01 ispc CRON[1902290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:50:01 ispc CRON[1902291]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 20:50:01 ispc CRON[1902292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:50:01 ispc CRON[1902293]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:50:01 ispc CRON[1902290]: pam_unix(cron:session): session closed for user root Dec 17 20:50:01 ispc CRON[1902291]: pam_unix(cron:session): session closed for user www-data Dec 17 20:50:01 ispc CRON[1902293]: pam_unix(cron:session): session closed for user getmail Dec 17 20:50:02 ispc CRON[1902292]: pam_unix(cron:session): session closed for user root Dec 17 20:50:02 ispc CRON[1902289]: pam_unix(cron:session): session closed for user root Dec 17 20:50:17 ispc sshd[1902374]: Invalid user ziplines from 5.133.121.104 Dec 17 20:50:21 ispc postfix/smtpd[1902380]: sql auxprop plugin using mysql engine Dec 17 20:51:01 ispc CRON[1902403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:51:01 ispc CRON[1902403]: pam_unix(cron:session): session closed for user root Dec 17 20:51:21 ispc sshd[1902424]: Invalid user blceu from 5.133.121.104 Dec 17 20:51:34 ispc CRON[1901218]: pam_unix(cron:session): session closed for user root Dec 17 20:52:01 ispc CRON[1902438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:52:07 ispc CRON[1902438]: pam_unix(cron:session): session closed for user root Dec 17 20:52:27 ispc postfix/smtpd[1902452]: sql auxprop plugin using mysql engine Dec 17 20:53:01 ispc CRON[1902468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:54:01 ispc CRON[1902516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:54:01 ispc CRON[1902516]: pam_unix(cron:session): session closed for user root Dec 17 20:55:01 ispc CRON[1902560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:55:01 ispc CRON[1902561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:55:01 ispc CRON[1902563]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 20:55:01 ispc CRON[1902562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:55:01 ispc CRON[1902561]: pam_unix(cron:session): session closed for user root Dec 17 20:55:01 ispc CRON[1902563]: pam_unix(cron:session): session closed for user getmail Dec 17 20:55:02 ispc CRON[1902560]: pam_unix(cron:session): session closed for user root Dec 17 20:55:02 ispc CRON[1902562]: pam_unix(cron:session): session closed for user root Dec 17 20:56:01 ispc CRON[1902670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:56:01 ispc CRON[1902670]: pam_unix(cron:session): session closed for user root Dec 17 20:56:37 ispc postfix/smtpd[1902702]: sql auxprop plugin using mysql engine Dec 17 20:56:38 ispc saslauthd[1902705]: pam_mysql - SELECT returned no result. Dec 17 20:56:38 ispc saslauthd[1902705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:56:38 ispc saslauthd[1902705]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:57:01 ispc CRON[1902719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:57:02 ispc CRON[1902719]: pam_unix(cron:session): session closed for user root Dec 17 20:57:04 ispc sshd[1902730]: Invalid user blceu from 185.208.181.152 Dec 17 20:58:01 ispc CRON[1902774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:58:01 ispc CRON[1902774]: pam_unix(cron:session): session closed for user root Dec 17 20:58:44 ispc postfix/smtpd[1902811]: sql auxprop plugin using mysql engine Dec 17 20:58:45 ispc saslauthd[1902817]: pam_mysql - SELECT returned no result. Dec 17 20:58:45 ispc saslauthd[1902817]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 20:58:45 ispc saslauthd[1902817]: do_auth : auth failure: [user=politically] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 20:59:01 ispc CRON[1902828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 20:59:01 ispc CRON[1902828]: pam_unix(cron:session): session closed for user root Dec 17 20:59:13 ispc postfix/smtpd[1902847]: sql auxprop plugin using mysql engine Dec 17 20:59:54 ispc postfix/smtpd[1902874]: sql auxprop plugin using mysql engine Dec 17 21:00:01 ispc CRON[1902880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:00:01 ispc CRON[1902881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:00:01 ispc CRON[1902882]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:00:01 ispc CRON[1902883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:00:01 ispc CRON[1902884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:00:01 ispc CRON[1902885]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:00:02 ispc CRON[1902881]: pam_unix(cron:session): session closed for user root Dec 17 21:00:02 ispc CRON[1902882]: pam_unix(cron:session): session closed for user www-data Dec 17 21:00:02 ispc CRON[1902885]: pam_unix(cron:session): session closed for user getmail Dec 17 21:00:02 ispc CRON[1902884]: pam_unix(cron:session): session closed for user root Dec 17 21:00:02 ispc CRON[1902883]: pam_unix(cron:session): session closed for user root Dec 17 21:00:02 ispc CRON[1902880]: pam_unix(cron:session): session closed for user root Dec 17 21:00:43 ispc sshd[1903063]: Invalid user ziplines from 45.119.213.109 Dec 17 21:01:01 ispc CRON[1903075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:01:02 ispc CRON[1903075]: pam_unix(cron:session): session closed for user root Dec 17 21:01:45 ispc postfix/smtpd[1903106]: sql auxprop plugin using mysql engine Dec 17 21:02:01 ispc CRON[1903121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:02:01 ispc CRON[1903120]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 21:02:01 ispc CRON[1903121]: pam_unix(cron:session): session closed for user root Dec 17 21:02:31 ispc sshd[1903692]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 21:03:01 ispc CRON[1904011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:03:02 ispc CRON[1904011]: pam_unix(cron:session): session closed for user root Dec 17 21:03:14 ispc CRON[1903120]: pam_unix(cron:session): session closed for user logcheck Dec 17 21:03:20 ispc postfix/smtpd[1904215]: sql auxprop plugin using mysql engine Dec 17 21:04:01 ispc CRON[1904241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:04:01 ispc CRON[1904241]: pam_unix(cron:session): session closed for user root Dec 17 21:04:03 ispc sshd[1904252]: Invalid user martof from 45.119.213.109 Dec 17 21:04:21 ispc sshd[1904266]: Invalid user admin from 68.183.14.57 Dec 17 21:04:57 ispc sshd[1904282]: Invalid user admin from 68.183.14.57 Dec 17 21:05:01 ispc CRON[1904288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:05:01 ispc CRON[1904289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:05:01 ispc CRON[1904290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:05:01 ispc CRON[1904291]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:05:01 ispc CRON[1904289]: pam_unix(cron:session): session closed for user root Dec 17 21:05:01 ispc CRON[1904291]: pam_unix(cron:session): session closed for user getmail Dec 17 21:05:02 ispc CRON[1904290]: pam_unix(cron:session): session closed for user root Dec 17 21:05:02 ispc CRON[1904288]: pam_unix(cron:session): session closed for user root Dec 17 21:05:03 ispc postfix/smtpd[1904364]: sql auxprop plugin using mysql engine Dec 17 21:05:03 ispc saslauthd[1904366]: pam_mysql - SELECT returned no result. Dec 17 21:05:03 ispc saslauthd[1904366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:05:03 ispc saslauthd[1904366]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:05:33 ispc sshd[1904382]: Invalid user admin from 68.183.14.57 Dec 17 21:06:01 ispc CRON[1904398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:06:02 ispc CRON[1904398]: pam_unix(cron:session): session closed for user root Dec 17 21:06:08 ispc sshd[1904409]: Invalid user admin from 68.183.14.57 Dec 17 21:06:14 ispc sshd[1904415]: Invalid user messagebus from 45.148.10.121 Dec 17 21:06:43 ispc sshd[1904437]: Invalid user admin from 68.183.14.57 Dec 17 21:07:01 ispc CRON[1904453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:07:01 ispc CRON[1904453]: pam_unix(cron:session): session closed for user root Dec 17 21:07:16 ispc sshd[1904469]: Invalid user admin from 68.183.14.57 Dec 17 21:08:01 ispc CRON[1904510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:08:02 ispc CRON[1904510]: pam_unix(cron:session): session closed for user root Dec 17 21:09:01 ispc CRON[1904546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:09:01 ispc CRON[1904547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:09:01 ispc CRON[1904546]: pam_unix(cron:session): session closed for user root Dec 17 21:09:01 ispc CRON[1904547]: pam_unix(cron:session): session closed for user root Dec 17 21:10:01 ispc CRON[1904601]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:10:01 ispc CRON[1904600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:10:01 ispc CRON[1904598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:10:01 ispc CRON[1904599]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:10:01 ispc CRON[1904597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:10:01 ispc CRON[1904598]: pam_unix(cron:session): session closed for user root Dec 17 21:10:01 ispc CRON[1904599]: pam_unix(cron:session): session closed for user www-data Dec 17 21:10:01 ispc CRON[1904601]: pam_unix(cron:session): session closed for user getmail Dec 17 21:10:02 ispc CRON[1904600]: pam_unix(cron:session): session closed for user root Dec 17 21:10:02 ispc CRON[1904597]: pam_unix(cron:session): session closed for user root Dec 17 21:11:01 ispc CRON[1904702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:11:02 ispc CRON[1904702]: pam_unix(cron:session): session closed for user root Dec 17 21:11:44 ispc sshd[1904737]: Did not receive identification string from 5.101.64.6 Dec 17 21:11:49 ispc postfix/smtpd[1904738]: sql auxprop plugin using mysql engine Dec 17 21:11:50 ispc saslauthd[1904741]: pam_mysql - SELECT returned no result. Dec 17 21:11:50 ispc saslauthd[1904741]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:11:50 ispc saslauthd[1904741]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 21:12:01 ispc CRON[1904746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:12:01 ispc CRON[1904746]: pam_unix(cron:session): session closed for user root Dec 17 21:12:07 ispc sshd[1904763]: Did not receive identification string from 5.101.64.6 Dec 17 21:12:53 ispc saslauthd[1904794]: pam_mysql - SELECT returned no result. Dec 17 21:12:53 ispc saslauthd[1904794]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:12:53 ispc saslauthd[1904794]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:13:01 ispc CRON[1904799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:13:01 ispc CRON[1904799]: pam_unix(cron:session): session closed for user root Dec 17 21:13:14 ispc CRON[1902468]: pam_unix(cron:session): session closed for user root Dec 17 21:13:29 ispc saslauthd[1904822]: pam_mysql - SELECT returned no result. Dec 17 21:13:29 ispc saslauthd[1904822]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:13:29 ispc saslauthd[1904822]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:13:29 ispc postfix/smtpd[1904823]: sql auxprop plugin using mysql engine Dec 17 21:13:30 ispc saslauthd[1904826]: pam_mysql - SELECT returned no result. Dec 17 21:13:30 ispc saslauthd[1904826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:13:30 ispc saslauthd[1904826]: do_auth : auth failure: [user=poll] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:14:01 ispc CRON[1904832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:14:02 ispc CRON[1904832]: pam_unix(cron:session): session closed for user root Dec 17 21:15:01 ispc CRON[1904851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:15:01 ispc CRON[1904853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:15:01 ispc CRON[1904854]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:15:01 ispc CRON[1904852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:15:01 ispc CRON[1904852]: pam_unix(cron:session): session closed for user root Dec 17 21:15:01 ispc CRON[1904854]: pam_unix(cron:session): session closed for user getmail Dec 17 21:15:01 ispc CRON[1904851]: pam_unix(cron:session): session closed for user root Dec 17 21:15:39 ispc CRON[1904853]: pam_unix(cron:session): session closed for user root Dec 17 21:16:01 ispc CRON[1905043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:17:01 ispc CRON[1905080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:17:02 ispc CRON[1905080]: pam_unix(cron:session): session closed for user root Dec 17 21:18:01 ispc CRON[1905130]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 17 21:18:01 ispc CRON[1905131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:18:02 ispc CRON[1905131]: pam_unix(cron:session): session closed for user root Dec 17 21:18:04 ispc sshd[1905146]: Invalid user blceu from 45.84.199.14 Dec 17 21:18:05 ispc CRON[1905130]: pam_unix(cron:session): session closed for user amavis Dec 17 21:18:06 ispc postfix/smtpd[1905162]: sql auxprop plugin using mysql engine Dec 17 21:18:36 ispc sshd[1905175]: Invalid user admin from 178.62.219.98 Dec 17 21:19:01 ispc CRON[1905188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:19:02 ispc CRON[1905188]: pam_unix(cron:session): session closed for user root Dec 17 21:19:07 ispc sshd[1905199]: Invalid user admin from 178.62.219.98 Dec 17 21:19:36 ispc sshd[1905217]: Invalid user admin from 178.62.219.98 Dec 17 21:19:42 ispc sshd[1905223]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 21:20:01 ispc CRON[1905237]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:20:01 ispc CRON[1905234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:20:01 ispc CRON[1905235]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:20:01 ispc CRON[1905236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:20:01 ispc CRON[1905233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:20:01 ispc CRON[1905235]: pam_unix(cron:session): session closed for user www-data Dec 17 21:20:01 ispc CRON[1905234]: pam_unix(cron:session): session closed for user root Dec 17 21:20:01 ispc CRON[1905237]: pam_unix(cron:session): session closed for user getmail Dec 17 21:20:01 ispc CRON[1905236]: pam_unix(cron:session): session closed for user root Dec 17 21:20:01 ispc CRON[1905233]: pam_unix(cron:session): session closed for user root Dec 17 21:20:07 ispc sshd[1905311]: Invalid user admin from 178.62.219.98 Dec 17 21:20:38 ispc sshd[1905326]: Invalid user admin from 178.62.219.98 Dec 17 21:20:41 ispc sshd[1905325]: Did not receive identification string from 20.65.193.174 Dec 17 21:20:41 ispc sshd[1905332]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 20.65.193.174 Dec 17 21:20:58 ispc sshd[1905338]: Invalid user ziplines from 5.129.195.224 Dec 17 21:21:01 ispc CRON[1905344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:21:01 ispc CRON[1905345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:21:01 ispc CRON[1905344]: pam_unix(cron:session): session closed for user root Dec 17 21:21:02 ispc CRON[1905345]: pam_unix(cron:session): session closed for user root Dec 17 21:21:10 ispc sshd[1905365]: Invalid user admin from 178.62.219.98 Dec 17 21:21:55 ispc postfix/smtpd[1905408]: sql auxprop plugin using mysql engine Dec 17 21:21:55 ispc saslauthd[1905411]: pam_mysql - SELECT returned no result. Dec 17 21:21:55 ispc saslauthd[1905411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:21:55 ispc saslauthd[1905411]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:22:01 ispc CRON[1905417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:22:02 ispc CRON[1905417]: pam_unix(cron:session): session closed for user root Dec 17 21:22:11 ispc postfix/smtpd[1905432]: sql auxprop plugin using mysql engine Dec 17 21:22:42 ispc sshd[1905446]: Invalid user martof from 5.133.121.104 Dec 17 21:23:01 ispc CRON[1905463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:23:01 ispc CRON[1905463]: pam_unix(cron:session): session closed for user root Dec 17 21:24:01 ispc CRON[1905505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:24:02 ispc CRON[1905505]: pam_unix(cron:session): session closed for user root Dec 17 21:24:34 ispc sshd[1905529]: Invalid user martof from 62.84.181.22 Dec 17 21:24:55 ispc sshd[1905540]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 21:24:55 ispc postfix/smtpd[1905539]: sql auxprop plugin using mysql engine Dec 17 21:25:01 ispc CRON[1905543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:25:01 ispc CRON[1905544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:25:01 ispc CRON[1905545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:25:01 ispc CRON[1905546]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:25:01 ispc CRON[1905544]: pam_unix(cron:session): session closed for user root Dec 17 21:25:01 ispc CRON[1905546]: pam_unix(cron:session): session closed for user getmail Dec 17 21:25:01 ispc CRON[1905545]: pam_unix(cron:session): session closed for user root Dec 17 21:25:01 ispc CRON[1905543]: pam_unix(cron:session): session closed for user root Dec 17 21:26:01 ispc CRON[1905644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:26:02 ispc CRON[1905644]: pam_unix(cron:session): session closed for user root Dec 17 21:26:31 ispc sshd[1905668]: Invalid user anoraksro from 152.53.188.144 Dec 17 21:27:01 ispc CRON[1905682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:27:02 ispc CRON[1905682]: pam_unix(cron:session): session closed for user root Dec 17 21:27:52 ispc postfix/smtpd[1905718]: sql auxprop plugin using mysql engine Dec 17 21:27:53 ispc saslauthd[1905719]: pam_mysql - SELECT returned no result. Dec 17 21:27:53 ispc saslauthd[1905719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:27:53 ispc saslauthd[1905719]: do_auth : auth failure: [user=postgres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:28:01 ispc CRON[1905729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:28:01 ispc CRON[1905729]: pam_unix(cron:session): session closed for user root Dec 17 21:28:39 ispc saslauthd[1905760]: pam_mysql - SELECT returned no result. Dec 17 21:28:39 ispc saslauthd[1905760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:28:39 ispc saslauthd[1905760]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:29:01 ispc CRON[1905770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:29:02 ispc CRON[1905770]: pam_unix(cron:session): session closed for user root Dec 17 21:29:43 ispc sshd[1905797]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 21:30:01 ispc CRON[1905809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:30:01 ispc CRON[1905810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:30:01 ispc CRON[1905811]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:30:01 ispc CRON[1905812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:30:01 ispc CRON[1905813]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:30:01 ispc CRON[1905810]: pam_unix(cron:session): session closed for user root Dec 17 21:30:01 ispc CRON[1905811]: pam_unix(cron:session): session closed for user www-data Dec 17 21:30:01 ispc CRON[1905813]: pam_unix(cron:session): session closed for user getmail Dec 17 21:30:01 ispc CRON[1905812]: pam_unix(cron:session): session closed for user root Dec 17 21:30:02 ispc CRON[1905809]: pam_unix(cron:session): session closed for user root Dec 17 21:30:42 ispc postfix/smtpd[1905904]: sql auxprop plugin using mysql engine Dec 17 21:30:42 ispc saslauthd[1905906]: pam_mysql - SELECT returned no result. Dec 17 21:30:42 ispc saslauthd[1905906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:30:42 ispc saslauthd[1905906]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:31:01 ispc CRON[1905915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:31:01 ispc CRON[1905915]: pam_unix(cron:session): session closed for user root Dec 17 21:31:26 ispc sshd[1905934]: Invalid user martof from 118.69.109.202 Dec 17 21:32:01 ispc CRON[1905952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:32:02 ispc CRON[1905952]: pam_unix(cron:session): session closed for user root Dec 17 21:32:18 ispc postfix/smtpd[1905968]: sql auxprop plugin using mysql engine Dec 17 21:33:01 ispc CRON[1906002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:33:01 ispc CRON[1906002]: pam_unix(cron:session): session closed for user root Dec 17 21:33:38 ispc sshd[1906028]: Invalid user ziplines from 165.227.38.205 Dec 17 21:34:01 ispc CRON[1906042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:34:02 ispc CRON[1906042]: pam_unix(cron:session): session closed for user root Dec 17 21:35:01 ispc CRON[1906084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:35:01 ispc CRON[1906085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:35:01 ispc CRON[1906086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:35:01 ispc CRON[1906087]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:35:01 ispc CRON[1906085]: pam_unix(cron:session): session closed for user root Dec 17 21:35:01 ispc CRON[1906087]: pam_unix(cron:session): session closed for user getmail Dec 17 21:35:01 ispc CRON[1906086]: pam_unix(cron:session): session closed for user root Dec 17 21:35:02 ispc CRON[1906084]: pam_unix(cron:session): session closed for user root Dec 17 21:36:01 ispc CRON[1906188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:36:01 ispc CRON[1906188]: pam_unix(cron:session): session closed for user root Dec 17 21:36:22 ispc postfix/smtpd[1906209]: sql auxprop plugin using mysql engine Dec 17 21:36:22 ispc CRON[1905043]: pam_unix(cron:session): session closed for user root Dec 17 21:37:01 ispc CRON[1906213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:37:05 ispc CRON[1906213]: pam_unix(cron:session): session closed for user root Dec 17 21:38:01 ispc CRON[1906244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:38:01 ispc CRON[1906244]: pam_unix(cron:session): session closed for user root Dec 17 21:38:55 ispc saslauthd[1906260]: pam_mysql - SELECT returned no result. Dec 17 21:38:55 ispc saslauthd[1906260]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:38:55 ispc saslauthd[1906260]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:39:01 ispc CRON[1906262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:39:01 ispc CRON[1906261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:39:01 ispc CRON[1906261]: pam_unix(cron:session): session closed for user root Dec 17 21:39:02 ispc CRON[1906262]: pam_unix(cron:session): session closed for user root Dec 17 21:40:01 ispc CRON[1906288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:40:01 ispc CRON[1906289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:40:01 ispc CRON[1906290]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:40:01 ispc CRON[1906291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:40:01 ispc CRON[1906292]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:40:01 ispc CRON[1906290]: pam_unix(cron:session): session closed for user www-data Dec 17 21:40:01 ispc CRON[1906289]: pam_unix(cron:session): session closed for user root Dec 17 21:40:01 ispc CRON[1906292]: pam_unix(cron:session): session closed for user getmail Dec 17 21:40:03 ispc CRON[1906288]: pam_unix(cron:session): session closed for user root Dec 17 21:40:40 ispc CRON[1906291]: pam_unix(cron:session): session closed for user root Dec 17 21:41:01 ispc CRON[1906403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:42:01 ispc CRON[1906437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:42:02 ispc CRON[1906437]: pam_unix(cron:session): session closed for user root Dec 17 21:42:34 ispc sshd[1906460]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 21:42:51 ispc postfix/smtpd[1906477]: sql auxprop plugin using mysql engine Dec 17 21:42:53 ispc saslauthd[1906478]: pam_mysql - SELECT returned no result. Dec 17 21:42:53 ispc saslauthd[1906478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:42:53 ispc saslauthd[1906478]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:43:01 ispc CRON[1906483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:43:01 ispc CRON[1906483]: pam_unix(cron:session): session closed for user root Dec 17 21:44:01 ispc CRON[1906523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:44:02 ispc CRON[1906523]: pam_unix(cron:session): session closed for user root Dec 17 21:45:01 ispc CRON[1906562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:45:01 ispc CRON[1906563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:45:01 ispc CRON[1906564]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:45:01 ispc CRON[1906561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:45:01 ispc CRON[1906562]: pam_unix(cron:session): session closed for user root Dec 17 21:45:01 ispc CRON[1906564]: pam_unix(cron:session): session closed for user getmail Dec 17 21:45:01 ispc CRON[1906563]: pam_unix(cron:session): session closed for user root Dec 17 21:45:01 ispc CRON[1906561]: pam_unix(cron:session): session closed for user root Dec 17 21:45:02 ispc sshd[1906637]: Did not receive identification string from 194.0.234.20 Dec 17 21:45:22 ispc postfix/smtpd[1906647]: sql auxprop plugin using mysql engine Dec 17 21:46:01 ispc CRON[1906666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:46:02 ispc CRON[1906666]: pam_unix(cron:session): session closed for user root Dec 17 21:46:03 ispc sshd[1906674]: Invalid user ziplines from 221.156.137.103 Dec 17 21:46:10 ispc postfix/smtpd[1906683]: sql auxprop plugin using mysql engine Dec 17 21:46:10 ispc saslauthd[1906685]: pam_mysql - SELECT returned no result. Dec 17 21:46:10 ispc saslauthd[1906685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:46:10 ispc saslauthd[1906685]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:47:01 ispc CRON[1906706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:47:01 ispc CRON[1906706]: pam_unix(cron:session): session closed for user root Dec 17 21:47:09 ispc saslauthd[1906721]: pam_mysql - SELECT returned no result. Dec 17 21:47:09 ispc saslauthd[1906721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:47:09 ispc saslauthd[1906721]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:48:01 ispc CRON[1906751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:48:02 ispc CRON[1906751]: pam_unix(cron:session): session closed for user root Dec 17 21:48:58 ispc sshd[1906789]: Invalid user blceu from 221.156.137.103 Dec 17 21:49:01 ispc CRON[1906795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:49:01 ispc CRON[1906795]: pam_unix(cron:session): session closed for user root Dec 17 21:50:00 ispc postfix/smtpd[1906827]: sql auxprop plugin using mysql engine Dec 17 21:50:01 ispc CRON[1906835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:50:01 ispc CRON[1906838]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:50:01 ispc CRON[1906834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:50:01 ispc CRON[1906836]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 21:50:01 ispc CRON[1906837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:50:01 ispc CRON[1906836]: pam_unix(cron:session): session closed for user www-data Dec 17 21:50:01 ispc CRON[1906835]: pam_unix(cron:session): session closed for user root Dec 17 21:50:01 ispc CRON[1906838]: pam_unix(cron:session): session closed for user getmail Dec 17 21:50:02 ispc CRON[1906837]: pam_unix(cron:session): session closed for user root Dec 17 21:50:02 ispc CRON[1906834]: pam_unix(cron:session): session closed for user root Dec 17 21:50:06 ispc postfix/smtpd[1906918]: sql auxprop plugin using mysql engine Dec 17 21:51:01 ispc CRON[1906947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:51:02 ispc CRON[1906947]: pam_unix(cron:session): session closed for user root Dec 17 21:51:12 ispc sshd[1906962]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 21:51:12 ispc sshd[1906962]: Invalid user martof from 114.7.163.154 Dec 17 21:51:49 ispc sshd[1906981]: Invalid user blceu from 62.84.181.22 Dec 17 21:52:01 ispc CRON[1906987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:52:01 ispc CRON[1906988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:52:01 ispc CRON[1906988]: pam_unix(cron:session): session closed for user root Dec 17 21:53:01 ispc CRON[1907043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:53:02 ispc CRON[1907043]: pam_unix(cron:session): session closed for user root Dec 17 21:53:57 ispc sshd[1907078]: Did not receive identification string from 142.93.129.156 Dec 17 21:54:01 ispc CRON[1907079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:54:01 ispc CRON[1907079]: pam_unix(cron:session): session closed for user root Dec 17 21:55:01 ispc CRON[1907121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:55:01 ispc CRON[1907122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:55:01 ispc CRON[1907123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:55:01 ispc CRON[1907124]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 21:55:01 ispc CRON[1907122]: pam_unix(cron:session): session closed for user root Dec 17 21:55:01 ispc CRON[1907124]: pam_unix(cron:session): session closed for user getmail Dec 17 21:55:02 ispc CRON[1907121]: pam_unix(cron:session): session closed for user root Dec 17 21:55:02 ispc CRON[1907123]: pam_unix(cron:session): session closed for user root Dec 17 21:55:17 ispc CRON[1906987]: pam_unix(cron:session): session closed for user root Dec 17 21:55:19 ispc postfix/smtpd[1907205]: sql auxprop plugin using mysql engine Dec 17 21:55:19 ispc saslauthd[1907208]: pam_mysql - SELECT returned no result. Dec 17 21:55:19 ispc saslauthd[1907208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:55:19 ispc saslauthd[1907208]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:55:24 ispc sshd[1907211]: Did not receive identification string from 64.227.74.3 Dec 17 21:56:02 ispc CRON[1907230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:56:02 ispc CRON[1907230]: pam_unix(cron:session): session closed for user root Dec 17 21:57:01 ispc CRON[1907269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:57:01 ispc CRON[1907269]: pam_unix(cron:session): session closed for user root Dec 17 21:57:48 ispc postfix/smtpd[1907307]: sql auxprop plugin using mysql engine Dec 17 21:57:49 ispc saslauthd[1907312]: pam_mysql - SELECT returned no result. Dec 17 21:57:49 ispc saslauthd[1907312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 21:57:49 ispc saslauthd[1907312]: do_auth : auth failure: [user=powerdown] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 21:58:01 ispc CRON[1907324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:58:02 ispc CRON[1907324]: pam_unix(cron:session): session closed for user root Dec 17 21:59:01 ispc CRON[1907363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 21:59:01 ispc CRON[1907363]: pam_unix(cron:session): session closed for user root Dec 17 22:00:01 ispc CRON[1907406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:00:01 ispc CRON[1907407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:00:01 ispc CRON[1907408]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:00:01 ispc CRON[1907409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:00:01 ispc CRON[1907410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:00:01 ispc CRON[1907411]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:00:01 ispc CRON[1907407]: pam_unix(cron:session): session closed for user root Dec 17 22:00:01 ispc CRON[1907408]: pam_unix(cron:session): session closed for user www-data Dec 17 22:00:01 ispc CRON[1907411]: pam_unix(cron:session): session closed for user getmail Dec 17 22:00:02 ispc CRON[1907410]: pam_unix(cron:session): session closed for user root Dec 17 22:00:02 ispc CRON[1907406]: pam_unix(cron:session): session closed for user root Dec 17 22:00:02 ispc CRON[1907409]: pam_unix(cron:session): session closed for user root Dec 17 22:01:01 ispc CRON[1907602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:01:02 ispc CRON[1907602]: pam_unix(cron:session): session closed for user root Dec 17 22:01:25 ispc postfix/smtpd[1907627]: sql auxprop plugin using mysql engine Dec 17 22:01:25 ispc CRON[1906403]: pam_unix(cron:session): session closed for user root Dec 17 22:01:45 ispc sshd[1907633]: Invalid user admin from 64.227.74.3 Dec 17 22:02:01 ispc CRON[1907635]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 22:02:01 ispc CRON[1907636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:02:02 ispc CRON[1907636]: pam_unix(cron:session): session closed for user root Dec 17 22:02:20 ispc sshd[1908157]: Invalid user admin from 64.227.74.3 Dec 17 22:02:54 ispc sshd[1908578]: Invalid user admin from 64.227.74.3 Dec 17 22:03:01 ispc CRON[1908664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:03:01 ispc CRON[1908664]: pam_unix(cron:session): session closed for user root Dec 17 22:03:02 ispc CRON[1907635]: pam_unix(cron:session): session closed for user logcheck Dec 17 22:03:07 ispc sshd[1908694]: Did not receive identification string from 45.140.17.97 Dec 17 22:03:13 ispc postfix/smtpd[1908697]: sql auxprop plugin using mysql engine Dec 17 22:03:22 ispc saslauthd[1908701]: pam_mysql - SELECT returned no result. Dec 17 22:03:22 ispc saslauthd[1908701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:03:22 ispc saslauthd[1908701]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:03:28 ispc sshd[1908702]: Invalid user admin from 64.227.74.3 Dec 17 22:03:28 ispc saslauthd[1908704]: pam_mysql - SELECT returned no result. Dec 17 22:03:28 ispc saslauthd[1908704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:03:28 ispc saslauthd[1908704]: do_auth : auth failure: [user=oracle@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 22:04:01 ispc CRON[1908712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:04:02 ispc sshd[1908711]: Invalid user admin from 64.227.74.3 Dec 17 22:04:03 ispc CRON[1908712]: pam_unix(cron:session): session closed for user root Dec 17 22:04:17 ispc sshd[1908729]: Did not receive identification string from 196.251.100.49 Dec 17 22:04:36 ispc sshd[1908733]: Invalid user admin from 64.227.74.3 Dec 17 22:05:01 ispc CRON[1908746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:05:01 ispc CRON[1908747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:05:01 ispc CRON[1908749]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:05:01 ispc CRON[1908748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:05:01 ispc CRON[1908747]: pam_unix(cron:session): session closed for user root Dec 17 22:05:01 ispc CRON[1908749]: pam_unix(cron:session): session closed for user getmail Dec 17 22:05:01 ispc CRON[1908746]: pam_unix(cron:session): session closed for user root Dec 17 22:05:36 ispc CRON[1908748]: pam_unix(cron:session): session closed for user root Dec 17 22:05:44 ispc postfix/smtpd[1908856]: sql auxprop plugin using mysql engine Dec 17 22:06:01 ispc CRON[1908863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:06:49 ispc sshd[1908893]: Invalid user tshombeknife from 120.48.125.223 Dec 17 22:07:01 ispc CRON[1908901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:07:02 ispc CRON[1908901]: pam_unix(cron:session): session closed for user root Dec 17 22:08:01 ispc CRON[1908950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:08:02 ispc CRON[1908950]: pam_unix(cron:session): session closed for user root Dec 17 22:09:01 ispc CRON[1908995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:09:01 ispc CRON[1908996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:09:01 ispc CRON[1908995]: pam_unix(cron:session): session closed for user root Dec 17 22:09:02 ispc CRON[1908996]: pam_unix(cron:session): session closed for user root Dec 17 22:09:20 ispc sshd[1909025]: Invalid user admin from 142.93.129.156 Dec 17 22:09:37 ispc postfix/smtpd[1909035]: sql auxprop plugin using mysql engine Dec 17 22:09:50 ispc sshd[1909042]: Invalid user admin from 142.93.129.156 Dec 17 22:10:01 ispc CRON[1909048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:10:01 ispc CRON[1909049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:10:01 ispc CRON[1909050]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:10:01 ispc CRON[1909051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:10:01 ispc CRON[1909052]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:10:01 ispc CRON[1909050]: pam_unix(cron:session): session closed for user www-data Dec 17 22:10:01 ispc CRON[1909049]: pam_unix(cron:session): session closed for user root Dec 17 22:10:01 ispc CRON[1909052]: pam_unix(cron:session): session closed for user getmail Dec 17 22:10:01 ispc CRON[1909051]: pam_unix(cron:session): session closed for user root Dec 17 22:10:02 ispc CRON[1909048]: pam_unix(cron:session): session closed for user root Dec 17 22:10:18 ispc sshd[1909134]: Invalid user admin from 142.93.129.156 Dec 17 22:10:46 ispc sshd[1909148]: Invalid user admin from 142.93.129.156 Dec 17 22:11:01 ispc CRON[1909155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:11:02 ispc CRON[1909155]: pam_unix(cron:session): session closed for user root Dec 17 22:11:15 ispc sshd[1909177]: Invalid user admin from 142.93.129.156 Dec 17 22:11:36 ispc postfix/smtpd[1909188]: sql auxprop plugin using mysql engine Dec 17 22:11:37 ispc saslauthd[1909190]: pam_mysql - SELECT returned no result. Dec 17 22:11:37 ispc saslauthd[1909190]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:11:37 ispc saslauthd[1909190]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:11:43 ispc sshd[1909191]: Invalid user admin from 142.93.129.156 Dec 17 22:12:01 ispc CRON[1909208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:12:01 ispc CRON[1909208]: pam_unix(cron:session): session closed for user root Dec 17 22:12:52 ispc saslauthd[1909247]: pam_mysql - SELECT returned no result. Dec 17 22:12:52 ispc saslauthd[1909247]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:12:52 ispc saslauthd[1909247]: do_auth : auth failure: [user=prime] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:13:01 ispc CRON[1909252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:13:02 ispc CRON[1909252]: pam_unix(cron:session): session closed for user root Dec 17 22:14:01 ispc CRON[1909289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:14:01 ispc CRON[1909289]: pam_unix(cron:session): session closed for user root Dec 17 22:15:01 ispc CRON[1909326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:15:01 ispc CRON[1909327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:15:01 ispc CRON[1909328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:15:01 ispc CRON[1909329]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:15:01 ispc CRON[1909327]: pam_unix(cron:session): session closed for user root Dec 17 22:15:01 ispc CRON[1909329]: pam_unix(cron:session): session closed for user getmail Dec 17 22:15:02 ispc CRON[1909326]: pam_unix(cron:session): session closed for user root Dec 17 22:15:02 ispc CRON[1909328]: pam_unix(cron:session): session closed for user root Dec 17 22:16:01 ispc CRON[1909429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:16:02 ispc CRON[1909429]: pam_unix(cron:session): session closed for user root Dec 17 22:17:01 ispc CRON[1909467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:17:03 ispc CRON[1909467]: pam_unix(cron:session): session closed for user root Dec 17 22:17:42 ispc sshd[1909494]: Did not receive identification string from 142.93.140.158 Dec 17 22:18:01 ispc CRON[1909511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:18:02 ispc CRON[1909511]: pam_unix(cron:session): session closed for user root Dec 17 22:19:01 ispc CRON[1909552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:19:02 ispc CRON[1909552]: pam_unix(cron:session): session closed for user root Dec 17 22:19:27 ispc postfix/smtpd[1909573]: sql auxprop plugin using mysql engine Dec 17 22:19:27 ispc saslauthd[1909576]: pam_mysql - SELECT returned no result. Dec 17 22:19:27 ispc saslauthd[1909576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:19:27 ispc saslauthd[1909576]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:19:42 ispc saslauthd[1909585]: pam_mysql - SELECT returned no result. Dec 17 22:19:42 ispc saslauthd[1909585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:19:42 ispc saslauthd[1909585]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:20:01 ispc CRON[1909596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:20:01 ispc CRON[1909597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:20:01 ispc CRON[1909598]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:20:01 ispc CRON[1909599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:20:01 ispc CRON[1909600]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:20:01 ispc CRON[1909598]: pam_unix(cron:session): session closed for user www-data Dec 17 22:20:01 ispc CRON[1909597]: pam_unix(cron:session): session closed for user root Dec 17 22:20:01 ispc CRON[1909600]: pam_unix(cron:session): session closed for user getmail Dec 17 22:20:02 ispc CRON[1909599]: pam_unix(cron:session): session closed for user root Dec 17 22:20:03 ispc CRON[1909596]: pam_unix(cron:session): session closed for user root Dec 17 22:20:37 ispc sshd[1909690]: Invalid user blceu from 211.57.200.145 Dec 17 22:21:01 ispc CRON[1909706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:21:01 ispc CRON[1909707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:21:01 ispc CRON[1909706]: pam_unix(cron:session): session closed for user root Dec 17 22:21:02 ispc CRON[1909707]: pam_unix(cron:session): session closed for user root Dec 17 22:21:37 ispc sshd[1909736]: Invalid user martof from 5.129.195.224 Dec 17 22:22:01 ispc CRON[1909749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:22:02 ispc CRON[1909749]: pam_unix(cron:session): session closed for user root Dec 17 22:22:39 ispc sshd[1909780]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 22:23:02 ispc CRON[1909800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:23:02 ispc CRON[1909800]: pam_unix(cron:session): session closed for user root Dec 17 22:23:21 ispc sshd[1909819]: Invalid user test from 221.151.181.65 Dec 17 22:24:01 ispc CRON[1909839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:24:02 ispc CRON[1909839]: pam_unix(cron:session): session closed for user root Dec 17 22:24:09 ispc sshd[1909854]: Invalid user admin from 142.93.140.158 Dec 17 22:24:43 ispc sshd[1909872]: Invalid user admin from 142.93.140.158 Dec 17 22:24:58 ispc sshd[1909883]: Did not receive identification string from 134.199.195.18 Dec 17 22:25:01 ispc CRON[1909884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:25:01 ispc CRON[1909886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:25:01 ispc CRON[1909887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:25:01 ispc CRON[1909885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:25:01 ispc CRON[1909885]: pam_unix(cron:session): session closed for user root Dec 17 22:25:01 ispc CRON[1909887]: pam_unix(cron:session): session closed for user getmail Dec 17 22:25:02 ispc CRON[1909886]: pam_unix(cron:session): session closed for user root Dec 17 22:25:03 ispc CRON[1909884]: pam_unix(cron:session): session closed for user root Dec 17 22:25:16 ispc sshd[1909968]: Invalid user martof from 185.208.181.153 Dec 17 22:25:18 ispc sshd[1909970]: Invalid user admin from 142.93.140.158 Dec 17 22:25:43 ispc postfix/smtpd[1909980]: sql auxprop plugin using mysql engine Dec 17 22:25:52 ispc sshd[1909987]: Invalid user admin from 142.93.140.158 Dec 17 22:26:01 ispc CRON[1909993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:26:02 ispc CRON[1909993]: pam_unix(cron:session): session closed for user root Dec 17 22:26:15 ispc CRON[1908863]: pam_unix(cron:session): session closed for user root Dec 17 22:26:15 ispc postfix/smtpd[1910012]: sql auxprop plugin using mysql engine Dec 17 22:26:25 ispc sshd[1910017]: Invalid user admin from 142.93.140.158 Dec 17 22:26:59 ispc sshd[1910020]: Invalid user admin from 142.93.140.158 Dec 17 22:27:01 ispc CRON[1910029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:27:02 ispc CRON[1910029]: pam_unix(cron:session): session closed for user root Dec 17 22:27:15 ispc sshd[1910040]: Invalid user ziplines from 5.133.121.104 Dec 17 22:27:52 ispc saslauthd[1910050]: pam_mysql - SELECT returned no result. Dec 17 22:27:52 ispc saslauthd[1910050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:27:52 ispc saslauthd[1910050]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:27:54 ispc saslauthd[1910051]: pam_mysql - SELECT returned no result. Dec 17 22:27:54 ispc saslauthd[1910051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:27:54 ispc saslauthd[1910051]: do_auth : auth failure: [user=primenet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:28:00 ispc sshd[1910052]: Invalid user ubuntu from 117.50.70.169 Dec 17 22:28:01 ispc CRON[1910059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:28:03 ispc CRON[1910059]: pam_unix(cron:session): session closed for user root Dec 17 22:28:14 ispc sshd[1910071]: Invalid user blceu from 5.133.121.104 Dec 17 22:28:42 ispc sshd[1910080]: Invalid user solana from 134.199.195.18 Dec 17 22:29:01 ispc CRON[1910085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:29:02 ispc CRON[1910085]: pam_unix(cron:session): session closed for user root Dec 17 22:29:47 ispc sshd[1910097]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 22:29:47 ispc sshd[1910097]: Invalid user ziplines from 114.7.163.154 Dec 17 22:30:01 ispc CRON[1910100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:30:01 ispc CRON[1910101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:30:01 ispc CRON[1910102]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:30:01 ispc CRON[1910103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:30:01 ispc CRON[1910104]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:30:01 ispc CRON[1910104]: pam_unix(cron:session): session closed for user getmail Dec 17 22:30:01 ispc CRON[1910102]: pam_unix(cron:session): session closed for user www-data Dec 17 22:30:01 ispc CRON[1910101]: pam_unix(cron:session): session closed for user root Dec 17 22:30:04 ispc CRON[1910100]: pam_unix(cron:session): session closed for user root Dec 17 22:30:49 ispc CRON[1910103]: pam_unix(cron:session): session closed for user root Dec 17 22:30:49 ispc sshd[1910295]: Invalid user sol from 134.199.195.18 Dec 17 22:31:01 ispc CRON[1910300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:32:01 ispc CRON[1910335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:32:03 ispc CRON[1910335]: pam_unix(cron:session): session closed for user root Dec 17 22:32:10 ispc postfix/smtpd[1910350]: sql auxprop plugin using mysql engine Dec 17 22:32:20 ispc postfix/smtpd[1910356]: sql auxprop plugin using mysql engine Dec 17 22:32:22 ispc saslauthd[1910357]: pam_mysql - SELECT returned no result. Dec 17 22:32:22 ispc saslauthd[1910357]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:32:22 ispc saslauthd[1910357]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:32:25 ispc saslauthd[1910362]: pam_mysql - SELECT returned no result. Dec 17 22:32:25 ispc saslauthd[1910362]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:32:25 ispc saslauthd[1910362]: do_auth : auth failure: [user=postmaster@pracavzdravotnictve.sk] [service=smtp] [realm=pracavzdravotnictve.sk] [mech=pam] [reason=PAM auth error] Dec 17 22:33:01 ispc CRON[1910390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:33:02 ispc sshd[1910392]: Invalid user sol from 134.199.195.18 Dec 17 22:33:02 ispc CRON[1910390]: pam_unix(cron:session): session closed for user root Dec 17 22:34:01 ispc CRON[1910431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:34:02 ispc CRON[1910431]: pam_unix(cron:session): session closed for user root Dec 17 22:35:01 ispc CRON[1910471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:35:01 ispc CRON[1910472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:35:01 ispc CRON[1910473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:35:01 ispc CRON[1910474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:35:01 ispc CRON[1910472]: pam_unix(cron:session): session closed for user root Dec 17 22:35:01 ispc CRON[1910474]: pam_unix(cron:session): session closed for user getmail Dec 17 22:35:02 ispc CRON[1910473]: pam_unix(cron:session): session closed for user root Dec 17 22:35:03 ispc CRON[1910471]: pam_unix(cron:session): session closed for user root Dec 17 22:35:06 ispc sshd[1910551]: Invalid user solana from 134.199.195.18 Dec 17 22:35:30 ispc sshd[1910562]: Invalid user test from 221.151.181.65 Dec 17 22:35:47 ispc postfix/smtpd[1910572]: sql auxprop plugin using mysql engine Dec 17 22:35:48 ispc saslauthd[1910575]: pam_mysql - SELECT returned no result. Dec 17 22:35:48 ispc saslauthd[1910575]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:35:48 ispc saslauthd[1910575]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:36:01 ispc CRON[1910584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:36:01 ispc CRON[1910584]: pam_unix(cron:session): session closed for user root Dec 17 22:36:46 ispc sshd[1910611]: Invalid user test from 221.151.181.65 Dec 17 22:37:01 ispc CRON[1910622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:37:02 ispc CRON[1910622]: pam_unix(cron:session): session closed for user root Dec 17 22:37:06 ispc sshd[1910633]: Invalid user fuck from 134.199.195.18 Dec 17 22:38:01 ispc CRON[1910669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:38:03 ispc CRON[1910669]: pam_unix(cron:session): session closed for user root Dec 17 22:38:47 ispc sshd[1910696]: Invalid user test from 221.151.181.65 Dec 17 22:39:01 ispc CRON[1910706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:39:01 ispc CRON[1910707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:39:01 ispc CRON[1910706]: pam_unix(cron:session): session closed for user root Dec 17 22:39:01 ispc CRON[1910707]: pam_unix(cron:session): session closed for user root Dec 17 22:39:16 ispc sshd[1910738]: Invalid user martof from 141.94.71.131 Dec 17 22:40:01 ispc CRON[1910761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:40:01 ispc CRON[1910762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:40:01 ispc CRON[1910763]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:40:01 ispc CRON[1910764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:40:01 ispc CRON[1910765]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:40:01 ispc CRON[1910762]: pam_unix(cron:session): session closed for user root Dec 17 22:40:01 ispc CRON[1910765]: pam_unix(cron:session): session closed for user getmail Dec 17 22:40:01 ispc CRON[1910763]: pam_unix(cron:session): session closed for user www-data Dec 17 22:40:02 ispc CRON[1910764]: pam_unix(cron:session): session closed for user root Dec 17 22:40:02 ispc CRON[1910761]: pam_unix(cron:session): session closed for user root Dec 17 22:41:01 ispc CRON[1910867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:41:02 ispc CRON[1910867]: pam_unix(cron:session): session closed for user root Dec 17 22:41:09 ispc sshd[1910886]: Invalid user sol from 134.199.195.18 Dec 17 22:42:01 ispc CRON[1910915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:42:01 ispc CRON[1910915]: pam_unix(cron:session): session closed for user root Dec 17 22:42:49 ispc postfix/smtpd[1910950]: sql auxprop plugin using mysql engine Dec 17 22:42:50 ispc saslauthd[1910956]: pam_mysql - SELECT returned no result. Dec 17 22:42:50 ispc saslauthd[1910956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:42:50 ispc saslauthd[1910956]: do_auth : auth failure: [user=primeos] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:43:01 ispc CRON[1910961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:43:02 ispc CRON[1910961]: pam_unix(cron:session): session closed for user root Dec 17 22:43:21 ispc saslauthd[1910980]: pam_mysql - SELECT returned no result. Dec 17 22:43:21 ispc saslauthd[1910980]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:43:21 ispc saslauthd[1910980]: do_auth : auth failure: [user=copier] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:43:37 ispc saslauthd[1910987]: pam_mysql - SELECT returned no result. Dec 17 22:43:37 ispc saslauthd[1910987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:43:37 ispc saslauthd[1910987]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:44:01 ispc CRON[1911001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:44:02 ispc CRON[1911001]: pam_unix(cron:session): session closed for user root Dec 17 22:44:14 ispc postfix/smtpd[1911017]: sql auxprop plugin using mysql engine Dec 17 22:44:40 ispc sshd[1911028]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 22:44:40 ispc sshd[1911028]: Invalid user blceu from 114.7.163.154 Dec 17 22:45:01 ispc CRON[1911042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:45:01 ispc CRON[1911043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:45:01 ispc CRON[1911044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:45:01 ispc CRON[1911045]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:45:01 ispc CRON[1911043]: pam_unix(cron:session): session closed for user root Dec 17 22:45:01 ispc CRON[1911045]: pam_unix(cron:session): session closed for user getmail Dec 17 22:45:02 ispc CRON[1911044]: pam_unix(cron:session): session closed for user root Dec 17 22:45:04 ispc CRON[1911042]: pam_unix(cron:session): session closed for user root Dec 17 22:45:13 ispc sshd[1911122]: Did not receive identification string from 41.203.222.206 Dec 17 22:46:01 ispc CRON[1911142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:46:01 ispc CRON[1911142]: pam_unix(cron:session): session closed for user root Dec 17 22:47:01 ispc CRON[1911177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:47:02 ispc CRON[1911177]: pam_unix(cron:session): session closed for user root Dec 17 22:48:01 ispc CRON[1911221]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:48:03 ispc CRON[1911221]: pam_unix(cron:session): session closed for user root Dec 17 22:49:01 ispc CRON[1911265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:49:02 ispc CRON[1911265]: pam_unix(cron:session): session closed for user root Dec 17 22:49:59 ispc sshd[1911300]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 22:50:01 ispc CRON[1911302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:50:01 ispc CRON[1911303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:50:01 ispc CRON[1911304]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 22:50:01 ispc CRON[1911305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:50:01 ispc CRON[1911306]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:50:02 ispc CRON[1911303]: pam_unix(cron:session): session closed for user root Dec 17 22:50:02 ispc CRON[1911304]: pam_unix(cron:session): session closed for user www-data Dec 17 22:50:02 ispc CRON[1911306]: pam_unix(cron:session): session closed for user getmail Dec 17 22:50:03 ispc CRON[1911305]: pam_unix(cron:session): session closed for user root Dec 17 22:50:04 ispc CRON[1911302]: pam_unix(cron:session): session closed for user root Dec 17 22:51:01 ispc CRON[1911406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:51:01 ispc CRON[1911406]: pam_unix(cron:session): session closed for user root Dec 17 22:51:12 ispc sshd[1911421]: Did not receive identification string from 134.199.172.157 Dec 17 22:51:14 ispc CRON[1910300]: pam_unix(cron:session): session closed for user root Dec 17 22:51:15 ispc postfix/smtpd[1911424]: sql auxprop plugin using mysql engine Dec 17 22:51:29 ispc sshd[1911429]: Did not receive identification string from 183.236.30.60 Dec 17 22:51:44 ispc sshd[1911431]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 22:52:01 ispc CRON[1911433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:52:03 ispc CRON[1911433]: pam_unix(cron:session): session closed for user root Dec 17 22:52:05 ispc saslauthd[1911446]: pam_mysql - SELECT returned no result. Dec 17 22:52:05 ispc saslauthd[1911446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:52:05 ispc saslauthd[1911446]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:52:37 ispc saslauthd[1911448]: pam_mysql - SELECT returned no result. Dec 17 22:52:37 ispc saslauthd[1911448]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:52:37 ispc saslauthd[1911448]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:52:38 ispc sshd[1911449]: Invalid user from 62.60.131.84 Dec 17 22:52:50 ispc sshd[1911462]: Invalid user klape from 103.164.20.29 Dec 17 22:52:52 ispc sshd[1911464]: Invalid user ubuntu from 103.164.20.29 Dec 17 22:53:01 ispc CRON[1911466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:53:02 ispc CRON[1911466]: pam_unix(cron:session): session closed for user root Dec 17 22:53:53 ispc saslauthd[1911478]: pam_mysql - SELECT returned no result. Dec 17 22:53:53 ispc saslauthd[1911478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:53:53 ispc saslauthd[1911478]: do_auth : auth failure: [user=support@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 22:53:57 ispc postfix/smtpd[1911479]: sql auxprop plugin using mysql engine Dec 17 22:54:01 ispc CRON[1911482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:54:02 ispc CRON[1911482]: pam_unix(cron:session): session closed for user root Dec 17 22:54:04 ispc sshd[1911493]: Invalid user solv from 134.199.172.157 Dec 17 22:55:01 ispc CRON[1911500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:55:01 ispc CRON[1911501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:55:01 ispc CRON[1911502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:55:01 ispc CRON[1911503]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 22:55:01 ispc CRON[1911501]: pam_unix(cron:session): session closed for user root Dec 17 22:55:01 ispc CRON[1911503]: pam_unix(cron:session): session closed for user getmail Dec 17 22:55:02 ispc CRON[1911500]: pam_unix(cron:session): session closed for user root Dec 17 22:55:32 ispc CRON[1911502]: pam_unix(cron:session): session closed for user root Dec 17 22:56:01 ispc CRON[1911612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:56:50 ispc sshd[1911642]: Invalid user solv from 134.199.172.157 Dec 17 22:57:01 ispc CRON[1911648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:57:01 ispc CRON[1911648]: pam_unix(cron:session): session closed for user root Dec 17 22:57:58 ispc sshd[1911685]: Invalid user klape from 36.50.177.171 Dec 17 22:57:59 ispc postfix/smtpd[1911698]: sql auxprop plugin using mysql engine Dec 17 22:58:00 ispc saslauthd[1911700]: pam_mysql - SELECT returned no result. Dec 17 22:58:00 ispc saslauthd[1911700]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 22:58:00 ispc saslauthd[1911700]: do_auth : auth failure: [user=prtgadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 22:58:00 ispc sshd[1911691]: Invalid user ubuntu from 36.50.177.171 Dec 17 22:58:01 ispc CRON[1911701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:58:02 ispc CRON[1911701]: pam_unix(cron:session): session closed for user root Dec 17 22:59:01 ispc CRON[1911738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 22:59:01 ispc CRON[1911738]: pam_unix(cron:session): session closed for user root Dec 17 22:59:03 ispc postfix/smtpd[1911755]: sql auxprop plugin using mysql engine Dec 17 22:59:35 ispc sshd[1911770]: Invalid user solv from 134.199.172.157 Dec 17 23:00:01 ispc CRON[1911788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:00:01 ispc CRON[1911789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:00:01 ispc CRON[1911790]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:00:01 ispc CRON[1911791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:00:01 ispc CRON[1911793]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:00:01 ispc CRON[1911792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:00:01 ispc CRON[1911790]: pam_unix(cron:session): session closed for user www-data Dec 17 23:00:01 ispc CRON[1911789]: pam_unix(cron:session): session closed for user root Dec 17 23:00:01 ispc CRON[1911793]: pam_unix(cron:session): session closed for user getmail Dec 17 23:00:02 ispc CRON[1911792]: pam_unix(cron:session): session closed for user root Dec 17 23:00:02 ispc CRON[1911788]: pam_unix(cron:session): session closed for user root Dec 17 23:00:02 ispc CRON[1911791]: pam_unix(cron:session): session closed for user root Dec 17 23:00:09 ispc postfix/smtpd[1911950]: sql auxprop plugin using mysql engine Dec 17 23:00:10 ispc saslauthd[1911952]: pam_mysql - SELECT returned no result. Dec 17 23:00:10 ispc saslauthd[1911952]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:00:10 ispc saslauthd[1911952]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:01:01 ispc CRON[1911976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:01:02 ispc CRON[1911976]: pam_unix(cron:session): session closed for user root Dec 17 23:02:01 ispc CRON[1912013]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 17 23:02:01 ispc CRON[1912014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:02:02 ispc CRON[1912014]: pam_unix(cron:session): session closed for user root Dec 17 23:02:09 ispc sshd[1912164]: Invalid user solv from 134.199.172.157 Dec 17 23:03:01 ispc CRON[1912873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:03:01 ispc CRON[1912873]: pam_unix(cron:session): session closed for user root Dec 17 23:03:12 ispc sshd[1912907]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:03:14 ispc sshd[1912909]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:03:14 ispc sshd[1912909]: Invalid user klape from 189.89.20.45 Dec 17 23:03:16 ispc sshd[1912911]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:03:16 ispc sshd[1912911]: Invalid user ubuntu from 189.89.20.45 Dec 17 23:03:33 ispc CRON[1912013]: pam_unix(cron:session): session closed for user logcheck Dec 17 23:03:37 ispc postfix/smtpd[1913103]: sql auxprop plugin using mysql engine Dec 17 23:04:01 ispc CRON[1913120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:04:01 ispc CRON[1913120]: pam_unix(cron:session): session closed for user root Dec 17 23:04:44 ispc sshd[1913147]: Invalid user solv from 134.199.172.157 Dec 17 23:05:01 ispc CRON[1913159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:05:01 ispc CRON[1913157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:05:01 ispc CRON[1913158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:05:01 ispc CRON[1913160]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:05:02 ispc CRON[1913158]: pam_unix(cron:session): session closed for user root Dec 17 23:05:02 ispc CRON[1913160]: pam_unix(cron:session): session closed for user getmail Dec 17 23:05:02 ispc CRON[1913159]: pam_unix(cron:session): session closed for user root Dec 17 23:05:02 ispc CRON[1913157]: pam_unix(cron:session): session closed for user root Dec 17 23:06:01 ispc CRON[1913254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:06:01 ispc CRON[1913254]: pam_unix(cron:session): session closed for user root Dec 17 23:06:17 ispc postfix/smtpd[1913273]: sql auxprop plugin using mysql engine Dec 17 23:07:02 ispc CRON[1913294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:07:02 ispc CRON[1913294]: pam_unix(cron:session): session closed for user root Dec 17 23:07:14 ispc sshd[1913311]: Invalid user solv from 134.199.172.157 Dec 17 23:07:16 ispc sshd[1913313]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:07:21 ispc sshd[1913325]: Invalid user martof from 211.57.200.145 Dec 17 23:07:50 ispc sshd[1913344]: Invalid user martof from 148.216.54.17 Dec 17 23:08:01 ispc CRON[1913354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:08:01 ispc CRON[1913354]: pam_unix(cron:session): session closed for user root Dec 17 23:08:14 ispc postfix/smtpd[1913369]: sql auxprop plugin using mysql engine Dec 17 23:08:15 ispc saslauthd[1913371]: pam_mysql - SELECT returned no result. Dec 17 23:08:15 ispc saslauthd[1913371]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:08:15 ispc saslauthd[1913371]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:09:01 ispc CRON[1913392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:09:01 ispc CRON[1913393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:09:02 ispc CRON[1913392]: pam_unix(cron:session): session closed for user root Dec 17 23:09:02 ispc CRON[1913393]: pam_unix(cron:session): session closed for user root Dec 17 23:10:01 ispc CRON[1913442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:10:01 ispc CRON[1913443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:10:01 ispc CRON[1913444]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:10:01 ispc CRON[1913445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:10:01 ispc CRON[1913446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:10:01 ispc CRON[1913444]: pam_unix(cron:session): session closed for user www-data Dec 17 23:10:01 ispc CRON[1913443]: pam_unix(cron:session): session closed for user root Dec 17 23:10:01 ispc CRON[1913446]: pam_unix(cron:session): session closed for user getmail Dec 17 23:10:01 ispc CRON[1913445]: pam_unix(cron:session): session closed for user root Dec 17 23:10:01 ispc CRON[1913442]: pam_unix(cron:session): session closed for user root Dec 17 23:11:01 ispc CRON[1913542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:11:02 ispc CRON[1913542]: pam_unix(cron:session): session closed for user root Dec 17 23:12:01 ispc CRON[1913578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:12:02 ispc CRON[1913578]: pam_unix(cron:session): session closed for user root Dec 17 23:13:00 ispc postfix/smtpd[1913621]: sql auxprop plugin using mysql engine Dec 17 23:13:01 ispc saslauthd[1913624]: pam_mysql - SELECT returned no result. Dec 17 23:13:01 ispc saslauthd[1913624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:13:01 ispc saslauthd[1913624]: do_auth : auth failure: [user=pw] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:13:01 ispc CRON[1913625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:13:02 ispc CRON[1913625]: pam_unix(cron:session): session closed for user root Dec 17 23:13:38 ispc sshd[1913652]: Invalid user martof from 221.156.137.103 Dec 17 23:14:01 ispc CRON[1913662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:14:01 ispc CRON[1913662]: pam_unix(cron:session): session closed for user root Dec 17 23:15:01 ispc CRON[1913699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:15:01 ispc CRON[1913701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:15:01 ispc CRON[1913700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:15:01 ispc CRON[1913702]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:15:01 ispc CRON[1913702]: pam_unix(cron:session): session closed for user getmail Dec 17 23:15:01 ispc CRON[1913700]: pam_unix(cron:session): session closed for user root Dec 17 23:15:01 ispc CRON[1913701]: pam_unix(cron:session): session closed for user root Dec 17 23:15:02 ispc CRON[1913699]: pam_unix(cron:session): session closed for user root Dec 17 23:16:01 ispc CRON[1913803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:16:01 ispc CRON[1913803]: pam_unix(cron:session): session closed for user root Dec 17 23:16:03 ispc sshd[1913814]: Invalid user blceu from 141.94.71.131 Dec 17 23:16:25 ispc CRON[1911612]: pam_unix(cron:session): session closed for user root Dec 17 23:16:25 ispc postfix/smtpd[1913827]: sql auxprop plugin using mysql engine Dec 17 23:16:27 ispc saslauthd[1913834]: pam_mysql - SELECT returned no result. Dec 17 23:16:27 ispc saslauthd[1913834]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:16:27 ispc saslauthd[1913834]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:17:01 ispc CRON[1913835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:17:02 ispc CRON[1913835]: pam_unix(cron:session): session closed for user root Dec 17 23:18:01 ispc CRON[1913858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:18:01 ispc CRON[1913858]: pam_unix(cron:session): session closed for user root Dec 17 23:19:01 ispc CRON[1913874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:19:02 ispc CRON[1913874]: pam_unix(cron:session): session closed for user root Dec 17 23:20:01 ispc CRON[1913890]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:20:01 ispc CRON[1913889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:20:01 ispc CRON[1913891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:20:01 ispc CRON[1913888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:20:01 ispc CRON[1913892]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:20:01 ispc CRON[1913890]: pam_unix(cron:session): session closed for user www-data Dec 17 23:20:01 ispc CRON[1913889]: pam_unix(cron:session): session closed for user root Dec 17 23:20:01 ispc CRON[1913892]: pam_unix(cron:session): session closed for user getmail Dec 17 23:20:02 ispc CRON[1913888]: pam_unix(cron:session): session closed for user root Dec 17 23:20:34 ispc CRON[1913891]: pam_unix(cron:session): session closed for user root Dec 17 23:21:01 ispc CRON[1914006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:21:01 ispc CRON[1914005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:21:01 ispc CRON[1914005]: pam_unix(cron:session): session closed for user root Dec 17 23:21:54 ispc sshd[1914002]: Invalid user lanovacentra from 165.210.33.193 Dec 17 23:22:01 ispc CRON[1914042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:22:01 ispc CRON[1914042]: pam_unix(cron:session): session closed for user root Dec 17 23:23:01 ispc CRON[1914089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:23:02 ispc CRON[1914089]: pam_unix(cron:session): session closed for user root Dec 17 23:24:01 ispc CRON[1914125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:24:02 ispc CRON[1914125]: pam_unix(cron:session): session closed for user root Dec 17 23:24:30 ispc postfix/smtpd[1914148]: sql auxprop plugin using mysql engine Dec 17 23:24:30 ispc saslauthd[1914151]: pam_mysql - SELECT returned no result. Dec 17 23:24:30 ispc saslauthd[1914151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:24:30 ispc saslauthd[1914151]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:25:01 ispc CRON[1914164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:25:01 ispc CRON[1914167]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:25:01 ispc CRON[1914165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:25:01 ispc CRON[1914166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:25:01 ispc CRON[1914165]: pam_unix(cron:session): session closed for user root Dec 17 23:25:01 ispc CRON[1914167]: pam_unix(cron:session): session closed for user getmail Dec 17 23:25:01 ispc CRON[1914164]: pam_unix(cron:session): session closed for user root Dec 17 23:25:02 ispc CRON[1914166]: pam_unix(cron:session): session closed for user root Dec 17 23:25:14 ispc sshd[1914244]: Invalid user test from 221.151.181.65 Dec 17 23:25:58 ispc saslauthd[1914264]: pam_mysql - SELECT returned no result. Dec 17 23:25:58 ispc saslauthd[1914264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:25:58 ispc saslauthd[1914264]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:26:01 ispc CRON[1914269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:26:01 ispc CRON[1914269]: pam_unix(cron:session): session closed for user root Dec 17 23:27:01 ispc CRON[1914307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:27:02 ispc CRON[1914307]: pam_unix(cron:session): session closed for user root Dec 17 23:27:56 ispc postfix/smtpd[1914345]: sql auxprop plugin using mysql engine Dec 17 23:27:57 ispc saslauthd[1914347]: pam_mysql - SELECT returned no result. Dec 17 23:27:57 ispc saslauthd[1914347]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:27:57 ispc saslauthd[1914347]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:28:01 ispc CRON[1914352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:28:01 ispc CRON[1914352]: pam_unix(cron:session): session closed for user root Dec 17 23:28:23 ispc postfix/smtpd[1914375]: sql auxprop plugin using mysql engine Dec 17 23:29:01 ispc CRON[1914390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:29:02 ispc CRON[1914390]: pam_unix(cron:session): session closed for user root Dec 17 23:29:09 ispc sshd[1914406]: Address 14.225.2.126 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:29:21 ispc postfix/smtpd[1914421]: sql auxprop plugin using mysql engine Dec 17 23:29:47 ispc sshd[1914441]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:30:01 ispc CRON[1914447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:30:01 ispc CRON[1914448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:30:01 ispc CRON[1914450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:30:01 ispc CRON[1914449]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:30:01 ispc CRON[1914451]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:30:01 ispc CRON[1914449]: pam_unix(cron:session): session closed for user www-data Dec 17 23:30:01 ispc CRON[1914448]: pam_unix(cron:session): session closed for user root Dec 17 23:30:01 ispc CRON[1914451]: pam_unix(cron:session): session closed for user getmail Dec 17 23:30:01 ispc CRON[1914450]: pam_unix(cron:session): session closed for user root Dec 17 23:30:01 ispc CRON[1914447]: pam_unix(cron:session): session closed for user root Dec 17 23:30:50 ispc sshd[1914546]: Invalid user anoraksro from 152.53.188.144 Dec 17 23:31:01 ispc CRON[1914552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:31:02 ispc CRON[1914552]: pam_unix(cron:session): session closed for user root Dec 17 23:32:01 ispc CRON[1914590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:32:02 ispc CRON[1914590]: pam_unix(cron:session): session closed for user root Dec 17 23:32:54 ispc postfix/smtpd[1914632]: sql auxprop plugin using mysql engine Dec 17 23:32:55 ispc saslauthd[1914635]: pam_mysql - SELECT returned no result. Dec 17 23:32:55 ispc saslauthd[1914635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:32:55 ispc saslauthd[1914635]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:32:56 ispc sshd[1914636]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 17 23:33:01 ispc CRON[1914642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:33:01 ispc CRON[1914642]: pam_unix(cron:session): session closed for user root Dec 17 23:33:58 ispc sshd[1914680]: Invalid user antiqkabinet from 152.53.188.144 Dec 17 23:34:01 ispc CRON[1914686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:34:02 ispc CRON[1914686]: pam_unix(cron:session): session closed for user root Dec 17 23:35:01 ispc CRON[1914723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:35:01 ispc CRON[1914724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:35:01 ispc CRON[1914725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:35:01 ispc CRON[1914726]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:35:01 ispc CRON[1914724]: pam_unix(cron:session): session closed for user root Dec 17 23:35:01 ispc CRON[1914726]: pam_unix(cron:session): session closed for user getmail Dec 17 23:35:01 ispc CRON[1914725]: pam_unix(cron:session): session closed for user root Dec 17 23:35:02 ispc CRON[1914723]: pam_unix(cron:session): session closed for user root Dec 17 23:36:01 ispc CRON[1914827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:36:02 ispc CRON[1914827]: pam_unix(cron:session): session closed for user root Dec 17 23:37:01 ispc CRON[1914864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:37:01 ispc CRON[1914864]: pam_unix(cron:session): session closed for user root Dec 17 23:38:01 ispc CRON[1914906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:38:03 ispc CRON[1914906]: pam_unix(cron:session): session closed for user root Dec 17 23:38:27 ispc postfix/smtpd[1914932]: sql auxprop plugin using mysql engine Dec 17 23:38:28 ispc postfix/smtpd[1914935]: sql auxprop plugin using mysql engine Dec 17 23:38:49 ispc postfix/smtpd[1914947]: sql auxprop plugin using mysql engine Dec 17 23:39:01 ispc CRON[1914952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:39:01 ispc CRON[1914953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:39:02 ispc CRON[1914953]: pam_unix(cron:session): session closed for user root Dec 17 23:39:02 ispc CRON[1914952]: pam_unix(cron:session): session closed for user root Dec 17 23:40:01 ispc CRON[1914998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:40:01 ispc CRON[1914999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:40:01 ispc CRON[1915000]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:40:01 ispc CRON[1915001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:40:01 ispc CRON[1915002]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:40:01 ispc CRON[1914999]: pam_unix(cron:session): session closed for user root Dec 17 23:40:01 ispc CRON[1915000]: pam_unix(cron:session): session closed for user www-data Dec 17 23:40:01 ispc CRON[1915002]: pam_unix(cron:session): session closed for user getmail Dec 17 23:40:01 ispc CRON[1915001]: pam_unix(cron:session): session closed for user root Dec 17 23:40:02 ispc CRON[1914998]: pam_unix(cron:session): session closed for user root Dec 17 23:40:51 ispc postfix/smtpd[1915099]: sql auxprop plugin using mysql engine Dec 17 23:40:52 ispc saslauthd[1915101]: pam_mysql - SELECT returned no result. Dec 17 23:40:52 ispc saslauthd[1915101]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:40:52 ispc saslauthd[1915101]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:41:01 ispc CRON[1915106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:41:02 ispc CRON[1915106]: pam_unix(cron:session): session closed for user root Dec 17 23:41:24 ispc CRON[1914006]: pam_unix(cron:session): session closed for user root Dec 17 23:42:01 ispc CRON[1915130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:42:01 ispc CRON[1915130]: pam_unix(cron:session): session closed for user root Dec 17 23:42:58 ispc saslauthd[1915153]: pam_mysql - SELECT returned no result. Dec 17 23:42:58 ispc saslauthd[1915153]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:42:58 ispc saslauthd[1915153]: do_auth : auth failure: [user=qpgmr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:43:01 ispc CRON[1915154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:43:02 ispc CRON[1915154]: pam_unix(cron:session): session closed for user root Dec 17 23:44:01 ispc CRON[1915171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:44:02 ispc CRON[1915171]: pam_unix(cron:session): session closed for user root Dec 17 23:44:40 ispc saslauthd[1915183]: pam_mysql - SELECT returned no result. Dec 17 23:44:40 ispc saslauthd[1915183]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:44:40 ispc saslauthd[1915183]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 17 23:45:01 ispc CRON[1915184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:45:01 ispc CRON[1915185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:45:01 ispc CRON[1915186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:45:01 ispc CRON[1915187]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:45:01 ispc CRON[1915185]: pam_unix(cron:session): session closed for user root Dec 17 23:45:01 ispc CRON[1915187]: pam_unix(cron:session): session closed for user getmail Dec 17 23:45:02 ispc CRON[1915184]: pam_unix(cron:session): session closed for user root Dec 17 23:45:44 ispc CRON[1915186]: pam_unix(cron:session): session closed for user root Dec 17 23:46:01 ispc CRON[1915372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:47:01 ispc CRON[1915405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:47:02 ispc CRON[1915405]: pam_unix(cron:session): session closed for user root Dec 17 23:47:58 ispc sshd[1915442]: Invalid user ubuntu from 117.50.70.169 Dec 17 23:48:01 ispc CRON[1915452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:48:02 ispc CRON[1915452]: pam_unix(cron:session): session closed for user root Dec 17 23:48:44 ispc postfix/smtpd[1915481]: sql auxprop plugin using mysql engine Dec 17 23:48:44 ispc saslauthd[1915484]: pam_mysql - SELECT returned no result. Dec 17 23:48:44 ispc saslauthd[1915484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:48:44 ispc saslauthd[1915484]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:48:48 ispc postfix/smtpd[1915489]: sql auxprop plugin using mysql engine Dec 17 23:48:48 ispc postfix/smtpd[1915490]: sql auxprop plugin using mysql engine Dec 17 23:49:01 ispc CRON[1915495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:49:01 ispc CRON[1915495]: pam_unix(cron:session): session closed for user root Dec 17 23:49:15 ispc sshd[1915511]: Did not receive identification string from 45.140.17.97 Dec 17 23:49:44 ispc sshd[1915525]: Invalid user martof from 175.125.92.77 Dec 17 23:50:01 ispc CRON[1915535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:50:01 ispc CRON[1915536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:50:01 ispc CRON[1915537]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 17 23:50:01 ispc CRON[1915538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:50:02 ispc CRON[1915539]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:50:02 ispc CRON[1915537]: pam_unix(cron:session): session closed for user www-data Dec 17 23:50:02 ispc CRON[1915536]: pam_unix(cron:session): session closed for user root Dec 17 23:50:02 ispc CRON[1915539]: pam_unix(cron:session): session closed for user getmail Dec 17 23:50:02 ispc CRON[1915538]: pam_unix(cron:session): session closed for user root Dec 17 23:50:03 ispc CRON[1915535]: pam_unix(cron:session): session closed for user root Dec 17 23:51:01 ispc CRON[1915640]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:51:03 ispc CRON[1915640]: pam_unix(cron:session): session closed for user root Dec 17 23:51:05 ispc sshd[1915651]: Invalid user blceu from 35.239.77.168 Dec 17 23:52:01 ispc CRON[1915673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:52:01 ispc CRON[1915673]: pam_unix(cron:session): session closed for user root Dec 17 23:53:01 ispc CRON[1915719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:53:02 ispc CRON[1915719]: pam_unix(cron:session): session closed for user root Dec 17 23:54:01 ispc CRON[1915758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:54:02 ispc CRON[1915758]: pam_unix(cron:session): session closed for user root Dec 17 23:55:01 ispc CRON[1915796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:55:01 ispc CRON[1915797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:55:01 ispc CRON[1915798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:55:01 ispc CRON[1915799]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 17 23:55:01 ispc CRON[1915797]: pam_unix(cron:session): session closed for user root Dec 17 23:55:01 ispc CRON[1915799]: pam_unix(cron:session): session closed for user getmail Dec 17 23:55:02 ispc CRON[1915798]: pam_unix(cron:session): session closed for user root Dec 17 23:55:03 ispc CRON[1915796]: pam_unix(cron:session): session closed for user root Dec 17 23:56:01 ispc CRON[1915897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:56:02 ispc CRON[1915897]: pam_unix(cron:session): session closed for user root Dec 17 23:56:42 ispc sshd[1915926]: Invalid user ziplines from 118.69.109.196 Dec 17 23:56:55 ispc postfix/smtpd[1915933]: sql auxprop plugin using mysql engine Dec 17 23:56:55 ispc saslauthd[1915937]: pam_mysql - SELECT returned no result. Dec 17 23:56:55 ispc saslauthd[1915937]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:56:55 ispc saslauthd[1915937]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:57:01 ispc CRON[1915941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:57:03 ispc CRON[1915941]: pam_unix(cron:session): session closed for user root Dec 17 23:58:01 ispc CRON[1915986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:58:01 ispc CRON[1915986]: pam_unix(cron:session): session closed for user root Dec 17 23:58:02 ispc saslauthd[1915997]: pam_mysql - SELECT returned no result. Dec 17 23:58:02 ispc saslauthd[1915997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:58:02 ispc saslauthd[1915997]: do_auth : auth failure: [user=qsecofr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:58:03 ispc saslauthd[1915998]: pam_mysql - SELECT returned no result. Dec 17 23:58:03 ispc saslauthd[1915998]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:58:03 ispc saslauthd[1915998]: do_auth : auth failure: [user=center] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 17 23:59:01 ispc CRON[1916024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 17 23:59:02 ispc CRON[1916024]: pam_unix(cron:session): session closed for user root Dec 17 23:59:14 ispc saslauthd[1916039]: pam_mysql - SELECT returned no result. Dec 17 23:59:14 ispc saslauthd[1916039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 17 23:59:14 ispc saslauthd[1916039]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:00:01 ispc CRON[1916061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:00:01 ispc CRON[1916062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:00:01 ispc CRON[1916063]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:00:01 ispc CRON[1916064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:00:01 ispc CRON[1916065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:00:01 ispc CRON[1916066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:00:01 ispc CRON[1916067]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:00:01 ispc CRON[1916063]: pam_unix(cron:session): session closed for user www-data Dec 18 00:00:01 ispc CRON[1916062]: pam_unix(cron:session): session closed for user root Dec 18 00:00:01 ispc CRON[1916065]: pam_unix(cron:session): session closed for user root Dec 18 00:00:01 ispc CRON[1916067]: pam_unix(cron:session): session closed for user getmail Dec 18 00:00:01 ispc CRON[1916066]: pam_unix(cron:session): session closed for user root Dec 18 00:00:02 ispc CRON[1916064]: pam_unix(cron:session): session closed for user root Dec 18 00:00:02 ispc CRON[1916061]: pam_unix(cron:session): session closed for user root Dec 18 00:00:06 ispc sshd[1916221]: Invalid user test from 221.151.181.65 Dec 18 00:01:01 ispc CRON[1916250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:01:02 ispc CRON[1916250]: pam_unix(cron:session): session closed for user root Dec 18 00:01:06 ispc postfix/smtpd[1916266]: sql auxprop plugin using mysql engine Dec 18 00:01:13 ispc postfix/smtpd[1916280]: sql auxprop plugin using mysql engine Dec 18 00:01:41 ispc sshd[1916293]: reverse mapping checking getaddrinfo for ip-81-26-205-105.digicom-al.net [81.26.205.105] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:01:41 ispc sshd[1916293]: Invalid user cyber from 81.26.205.105 Dec 18 00:01:51 ispc sshd[1916303]: Invalid user ziplines from 211.57.200.145 Dec 18 00:02:01 ispc CRON[1916309]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 00:02:01 ispc CRON[1916310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:02:02 ispc CRON[1916310]: pam_unix(cron:session): session closed for user root Dec 18 00:03:01 ispc CRON[1917186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:03:02 ispc CRON[1917186]: pam_unix(cron:session): session closed for user root Dec 18 00:03:24 ispc CRON[1916309]: pam_unix(cron:session): session closed for user logcheck Dec 18 00:03:30 ispc postfix/smtpd[1917390]: sql auxprop plugin using mysql engine Dec 18 00:04:01 ispc CRON[1917406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:04:02 ispc CRON[1917406]: pam_unix(cron:session): session closed for user root Dec 18 00:04:48 ispc postfix/smtpd[1917440]: sql auxprop plugin using mysql engine Dec 18 00:04:49 ispc saslauthd[1917443]: pam_mysql - SELECT returned no result. Dec 18 00:04:49 ispc saslauthd[1917443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:04:49 ispc saslauthd[1917443]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:05:01 ispc CRON[1917448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:05:01 ispc CRON[1917449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:05:01 ispc CRON[1917450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:05:01 ispc CRON[1917451]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:05:01 ispc CRON[1917449]: pam_unix(cron:session): session closed for user root Dec 18 00:05:01 ispc CRON[1917451]: pam_unix(cron:session): session closed for user getmail Dec 18 00:05:01 ispc CRON[1917450]: pam_unix(cron:session): session closed for user root Dec 18 00:05:01 ispc CRON[1917448]: pam_unix(cron:session): session closed for user root Dec 18 00:06:01 ispc CRON[1917551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:06:02 ispc CRON[1917551]: pam_unix(cron:session): session closed for user root Dec 18 00:06:25 ispc CRON[1915372]: pam_unix(cron:session): session closed for user root Dec 18 00:07:01 ispc CRON[1917578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:07:03 ispc CRON[1917578]: pam_unix(cron:session): session closed for user root Dec 18 00:07:29 ispc sshd[1917593]: Invalid user blceu from 165.227.38.205 Dec 18 00:07:29 ispc sshd[1917595]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:07:29 ispc sshd[1917595]: Invalid user admin from 2.57.121.112 Dec 18 00:08:01 ispc CRON[1917610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:08:02 ispc CRON[1917610]: pam_unix(cron:session): session closed for user root Dec 18 00:08:45 ispc sshd[1917622]: Invalid user lanovacentra from 35.239.77.168 Dec 18 00:09:01 ispc CRON[1917625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:09:01 ispc CRON[1917626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:09:01 ispc CRON[1917625]: pam_unix(cron:session): session closed for user root Dec 18 00:09:01 ispc CRON[1917626]: pam_unix(cron:session): session closed for user root Dec 18 00:10:01 ispc CRON[1917651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:10:01 ispc CRON[1917652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:10:01 ispc CRON[1917653]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:10:01 ispc CRON[1917654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:10:01 ispc CRON[1917655]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:10:02 ispc CRON[1917653]: pam_unix(cron:session): session closed for user www-data Dec 18 00:10:02 ispc CRON[1917652]: pam_unix(cron:session): session closed for user root Dec 18 00:10:02 ispc CRON[1917655]: pam_unix(cron:session): session closed for user getmail Dec 18 00:10:02 ispc CRON[1917651]: pam_unix(cron:session): session closed for user root Dec 18 00:10:29 ispc CRON[1917654]: pam_unix(cron:session): session closed for user root Dec 18 00:11:01 ispc CRON[1917769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:11:36 ispc sshd[1917794]: Invalid user blceu from 45.119.213.109 Dec 18 00:11:53 ispc postfix/smtpd[1917802]: sql auxprop plugin using mysql engine Dec 18 00:12:01 ispc CRON[1917808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:12:02 ispc CRON[1917808]: pam_unix(cron:session): session closed for user root Dec 18 00:12:53 ispc postfix/smtpd[1917849]: sql auxprop plugin using mysql engine Dec 18 00:12:54 ispc saslauthd[1917850]: pam_mysql - SELECT returned no result. Dec 18 00:12:54 ispc saslauthd[1917850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:12:54 ispc saslauthd[1917850]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:13:01 ispc CRON[1917857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:13:02 ispc CRON[1917857]: pam_unix(cron:session): session closed for user root Dec 18 00:13:05 ispc saslauthd[1917872]: pam_mysql - SELECT returned no result. Dec 18 00:13:05 ispc saslauthd[1917872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:13:05 ispc saslauthd[1917872]: do_auth : auth failure: [user=qserv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:13:47 ispc sshd[1917891]: Invalid user blceu from 175.125.92.77 Dec 18 00:14:01 ispc CRON[1917898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:14:02 ispc CRON[1917898]: pam_unix(cron:session): session closed for user root Dec 18 00:14:46 ispc sshd[1917926]: Invalid user ziplines from 175.125.92.77 Dec 18 00:15:01 ispc CRON[1917937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:15:01 ispc CRON[1917938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:15:01 ispc CRON[1917939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:15:01 ispc CRON[1917940]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:15:01 ispc CRON[1917938]: pam_unix(cron:session): session closed for user root Dec 18 00:15:01 ispc CRON[1917940]: pam_unix(cron:session): session closed for user getmail Dec 18 00:15:02 ispc CRON[1917939]: pam_unix(cron:session): session closed for user root Dec 18 00:15:03 ispc CRON[1917937]: pam_unix(cron:session): session closed for user root Dec 18 00:16:01 ispc CRON[1918038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:16:02 ispc CRON[1918038]: pam_unix(cron:session): session closed for user root Dec 18 00:16:53 ispc sshd[1918071]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:16:53 ispc sshd[1918071]: Invalid user martof from 114.7.163.154 Dec 18 00:17:01 ispc CRON[1918078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:17:01 ispc CRON[1918078]: pam_unix(cron:session): session closed for user root Dec 18 00:18:01 ispc CRON[1918122]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 00:18:01 ispc CRON[1918123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:18:03 ispc CRON[1918123]: pam_unix(cron:session): session closed for user root Dec 18 00:18:06 ispc CRON[1918122]: pam_unix(cron:session): session closed for user amavis Dec 18 00:18:07 ispc postfix/smtpd[1918149]: sql auxprop plugin using mysql engine Dec 18 00:18:40 ispc sshd[1918165]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:19:01 ispc CRON[1918176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:19:02 ispc CRON[1918176]: pam_unix(cron:session): session closed for user root Dec 18 00:20:01 ispc CRON[1918212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:20:01 ispc CRON[1918213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:20:01 ispc CRON[1918214]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:20:01 ispc CRON[1918215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:20:01 ispc CRON[1918216]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:20:01 ispc CRON[1918213]: pam_unix(cron:session): session closed for user root Dec 18 00:20:01 ispc CRON[1918214]: pam_unix(cron:session): session closed for user www-data Dec 18 00:20:01 ispc CRON[1918216]: pam_unix(cron:session): session closed for user getmail Dec 18 00:20:02 ispc CRON[1918215]: pam_unix(cron:session): session closed for user root Dec 18 00:20:02 ispc CRON[1918212]: pam_unix(cron:session): session closed for user root Dec 18 00:21:01 ispc CRON[1918319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:21:01 ispc CRON[1918320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:21:01 ispc CRON[1918319]: pam_unix(cron:session): session closed for user root Dec 18 00:21:02 ispc CRON[1918320]: pam_unix(cron:session): session closed for user root Dec 18 00:21:02 ispc postfix/smtpd[1918329]: sql auxprop plugin using mysql engine Dec 18 00:21:03 ispc saslauthd[1918336]: pam_mysql - SELECT returned no result. Dec 18 00:21:03 ispc saslauthd[1918336]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:21:03 ispc saslauthd[1918336]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:22:01 ispc CRON[1918366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:22:02 ispc CRON[1918366]: pam_unix(cron:session): session closed for user root Dec 18 00:22:59 ispc sshd[1918414]: Invalid user ziplines from 141.94.71.131 Dec 18 00:23:01 ispc CRON[1918417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:23:02 ispc CRON[1918417]: pam_unix(cron:session): session closed for user root Dec 18 00:23:32 ispc postfix/smtpd[1918440]: sql auxprop plugin using mysql engine Dec 18 00:24:01 ispc CRON[1918454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:24:04 ispc CRON[1918454]: pam_unix(cron:session): session closed for user root Dec 18 00:25:01 ispc CRON[1918490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:25:01 ispc CRON[1918491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:25:01 ispc CRON[1918492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:25:01 ispc CRON[1918493]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:25:01 ispc CRON[1918491]: pam_unix(cron:session): session closed for user root Dec 18 00:25:01 ispc CRON[1918493]: pam_unix(cron:session): session closed for user getmail Dec 18 00:25:02 ispc CRON[1918492]: pam_unix(cron:session): session closed for user root Dec 18 00:25:02 ispc CRON[1918490]: pam_unix(cron:session): session closed for user root Dec 18 00:25:08 ispc sshd[1918566]: Invalid user ziplines from 185.208.181.153 Dec 18 00:25:28 ispc sshd[1918576]: Invalid user ziplines from 221.156.137.103 Dec 18 00:25:55 ispc sshd[1918591]: Invalid user ziplines from 185.208.181.152 Dec 18 00:26:01 ispc CRON[1918599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:26:02 ispc CRON[1918599]: pam_unix(cron:session): session closed for user root Dec 18 00:26:44 ispc postfix/smtpd[1918628]: sql auxprop plugin using mysql engine Dec 18 00:27:01 ispc CRON[1918634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:27:02 ispc CRON[1918634]: pam_unix(cron:session): session closed for user root Dec 18 00:28:01 ispc CRON[1918685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:28:02 ispc CRON[1918685]: pam_unix(cron:session): session closed for user root Dec 18 00:28:14 ispc postfix/smtpd[1918700]: sql auxprop plugin using mysql engine Dec 18 00:28:15 ispc saslauthd[1918706]: pam_mysql - SELECT returned no result. Dec 18 00:28:15 ispc saslauthd[1918706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:28:15 ispc saslauthd[1918706]: do_auth : auth failure: [user=qsrv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:28:22 ispc sshd[1918707]: Invalid user blceu from 221.156.137.103 Dec 18 00:29:01 ispc CRON[1918727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:29:02 ispc CRON[1918727]: pam_unix(cron:session): session closed for user root Dec 18 00:29:12 ispc saslauthd[1918742]: pam_mysql - SELECT returned no result. Dec 18 00:29:12 ispc saslauthd[1918742]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:29:12 ispc saslauthd[1918742]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:30:01 ispc CRON[1918764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:30:01 ispc CRON[1918765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:30:01 ispc CRON[1918766]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:30:01 ispc CRON[1918767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:30:01 ispc CRON[1918768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:30:01 ispc CRON[1918769]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:30:01 ispc CRON[1918765]: pam_unix(cron:session): session closed for user root Dec 18 00:30:01 ispc CRON[1918766]: pam_unix(cron:session): session closed for user www-data Dec 18 00:30:01 ispc CRON[1918769]: pam_unix(cron:session): session closed for user getmail Dec 18 00:30:01 ispc CRON[1918768]: pam_unix(cron:session): session closed for user root Dec 18 00:30:02 ispc CRON[1918764]: pam_unix(cron:session): session closed for user root Dec 18 00:31:01 ispc CRON[1918994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:31:02 ispc CRON[1918994]: pam_unix(cron:session): session closed for user root Dec 18 00:31:27 ispc postfix/smtpd[1919016]: sql auxprop plugin using mysql engine Dec 18 00:31:27 ispc CRON[1917769]: pam_unix(cron:session): session closed for user root Dec 18 00:32:01 ispc CRON[1919020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:32:01 ispc CRON[1919020]: pam_unix(cron:session): session closed for user root Dec 18 00:32:31 ispc saslauthd[1919033]: pam_mysql - SELECT returned no result. Dec 18 00:32:31 ispc saslauthd[1919033]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:32:31 ispc saslauthd[1919033]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:33:02 ispc CRON[1919042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:33:03 ispc CRON[1919042]: pam_unix(cron:session): session closed for user root Dec 18 00:33:30 ispc sshd[1919055]: Invalid user anoraksro from 152.53.188.144 Dec 18 00:34:01 ispc CRON[1919058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:34:02 ispc CRON[1919058]: pam_unix(cron:session): session closed for user root Dec 18 00:34:39 ispc saslauthd[1919071]: pam_mysql - SELECT returned no result. Dec 18 00:34:39 ispc saslauthd[1919071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:34:39 ispc saslauthd[1919071]: do_auth : auth failure: [user=data@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 00:35:01 ispc CRON[1919072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:35:01 ispc CRON[1919073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:35:01 ispc CRON[1919074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:35:01 ispc CRON[1919075]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:35:01 ispc CRON[1919073]: pam_unix(cron:session): session closed for user root Dec 18 00:35:01 ispc CRON[1919075]: pam_unix(cron:session): session closed for user getmail Dec 18 00:35:03 ispc CRON[1919072]: pam_unix(cron:session): session closed for user root Dec 18 00:35:39 ispc CRON[1919074]: pam_unix(cron:session): session closed for user root Dec 18 00:36:01 ispc CRON[1919183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:36:40 ispc sshd[1919497]: Invalid user antiqkabinet from 152.53.188.144 Dec 18 00:37:01 ispc CRON[1919510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:37:01 ispc sshd[1919508]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:37:03 ispc CRON[1919510]: pam_unix(cron:session): session closed for user root Dec 18 00:37:32 ispc postfix/smtpd[1919533]: sql auxprop plugin using mysql engine Dec 18 00:37:32 ispc saslauthd[1919535]: pam_mysql - SELECT returned no result. Dec 18 00:37:32 ispc saslauthd[1919535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:37:32 ispc saslauthd[1919535]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:38:01 ispc CRON[1919564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:38:01 ispc CRON[1919564]: pam_unix(cron:session): session closed for user root Dec 18 00:38:19 ispc sshd[1919590]: Invalid user blceu from 148.216.54.17 Dec 18 00:39:01 ispc CRON[1919608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:39:01 ispc CRON[1919609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:39:02 ispc CRON[1919608]: pam_unix(cron:session): session closed for user root Dec 18 00:39:02 ispc CRON[1919609]: pam_unix(cron:session): session closed for user root Dec 18 00:40:01 ispc CRON[1919659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:40:01 ispc CRON[1919660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:40:01 ispc CRON[1919661]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:40:01 ispc CRON[1919662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:40:01 ispc CRON[1919663]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:40:02 ispc CRON[1919660]: pam_unix(cron:session): session closed for user root Dec 18 00:40:02 ispc CRON[1919661]: pam_unix(cron:session): session closed for user www-data Dec 18 00:40:02 ispc CRON[1919663]: pam_unix(cron:session): session closed for user getmail Dec 18 00:40:02 ispc CRON[1919662]: pam_unix(cron:session): session closed for user root Dec 18 00:40:03 ispc CRON[1919659]: pam_unix(cron:session): session closed for user root Dec 18 00:41:01 ispc CRON[1919761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:41:02 ispc CRON[1919761]: pam_unix(cron:session): session closed for user root Dec 18 00:42:01 ispc CRON[1919802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:42:01 ispc CRON[1919802]: pam_unix(cron:session): session closed for user root Dec 18 00:42:45 ispc sshd[1919830]: Invalid user martof from 52.232.19.79 Dec 18 00:43:01 ispc CRON[1919843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:43:02 ispc CRON[1919843]: pam_unix(cron:session): session closed for user root Dec 18 00:43:03 ispc sshd[1919858]: Did not receive identification string from 165.245.129.248 Dec 18 00:43:13 ispc postfix/smtpd[1919860]: sql auxprop plugin using mysql engine Dec 18 00:43:14 ispc saslauthd[1919866]: pam_mysql - SELECT returned no result. Dec 18 00:43:14 ispc saslauthd[1919866]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:43:14 ispc saslauthd[1919866]: do_auth : auth failure: [user=qsrvbas] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:43:49 ispc sshd[1919881]: Invalid user ziplines from 211.45.175.153 Dec 18 00:44:01 ispc CRON[1919887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:44:03 ispc CRON[1919887]: pam_unix(cron:session): session closed for user root Dec 18 00:45:01 ispc CRON[1919925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:45:01 ispc CRON[1919926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:45:01 ispc CRON[1919927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:45:01 ispc CRON[1919928]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:45:01 ispc CRON[1919926]: pam_unix(cron:session): session closed for user root Dec 18 00:45:01 ispc CRON[1919928]: pam_unix(cron:session): session closed for user getmail Dec 18 00:45:02 ispc CRON[1919927]: pam_unix(cron:session): session closed for user root Dec 18 00:45:02 ispc CRON[1919925]: pam_unix(cron:session): session closed for user root Dec 18 00:46:01 ispc CRON[1920027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:46:03 ispc CRON[1920027]: pam_unix(cron:session): session closed for user root Dec 18 00:46:06 ispc postfix/smtpd[1920038]: sql auxprop plugin using mysql engine Dec 18 00:46:06 ispc saslauthd[1920040]: pam_mysql - SELECT returned no result. Dec 18 00:46:06 ispc saslauthd[1920040]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:46:06 ispc saslauthd[1920040]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:46:16 ispc sshd[1920045]: Invalid user ubuntu from 165.245.129.248 Dec 18 00:47:01 ispc CRON[1920070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:47:02 ispc CRON[1920070]: pam_unix(cron:session): session closed for user root Dec 18 00:48:01 ispc CRON[1920118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:48:02 ispc CRON[1920118]: pam_unix(cron:session): session closed for user root Dec 18 00:48:25 ispc sshd[1920137]: Invalid user sol from 165.245.129.248 Dec 18 00:49:01 ispc CRON[1920168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:49:02 ispc CRON[1920168]: pam_unix(cron:session): session closed for user root Dec 18 00:50:01 ispc CRON[1920208]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 00:50:01 ispc CRON[1920209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:50:01 ispc CRON[1920210]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:50:01 ispc CRON[1920206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:50:01 ispc CRON[1920207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:50:01 ispc CRON[1920208]: pam_unix(cron:session): session closed for user www-data Dec 18 00:50:01 ispc CRON[1920207]: pam_unix(cron:session): session closed for user root Dec 18 00:50:01 ispc CRON[1920210]: pam_unix(cron:session): session closed for user getmail Dec 18 00:50:02 ispc CRON[1920209]: pam_unix(cron:session): session closed for user root Dec 18 00:50:02 ispc CRON[1920206]: pam_unix(cron:session): session closed for user root Dec 18 00:50:33 ispc sshd[1920298]: Invalid user solana from 165.245.129.248 Dec 18 00:50:41 ispc postfix/smtpd[1920304]: sql auxprop plugin using mysql engine Dec 18 00:50:41 ispc postfix/smtpd[1920307]: sql auxprop plugin using mysql engine Dec 18 00:51:01 ispc CRON[1920319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:51:02 ispc CRON[1920319]: pam_unix(cron:session): session closed for user root Dec 18 00:51:03 ispc sshd[1920330]: Invalid user ziplines from 52.232.19.79 Dec 18 00:51:32 ispc sshd[1920364]: Invalid user minecraft from 36.91.166.189 Dec 18 00:51:40 ispc sshd[1920366]: Invalid user dell from 36.91.166.189 Dec 18 00:51:56 ispc sshd[1920378]: Invalid user ossadm from 36.91.166.189 Dec 18 00:52:01 ispc CRON[1920390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:52:01 ispc CRON[1920391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:52:02 ispc CRON[1920391]: pam_unix(cron:session): session closed for user root Dec 18 00:52:05 ispc sshd[1920408]: Invalid user dspace from 36.91.166.189 Dec 18 00:52:12 ispc sshd[1920418]: Invalid user ftptest from 36.91.166.189 Dec 18 00:52:14 ispc sshd[1920420]: Invalid user dell from 36.91.166.189 Dec 18 00:52:41 ispc sshd[1920443]: Invalid user validator from 165.245.129.248 Dec 18 00:53:01 ispc CRON[1920461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:53:01 ispc CRON[1920461]: pam_unix(cron:session): session closed for user root Dec 18 00:54:01 ispc CRON[1920498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:54:03 ispc CRON[1920498]: pam_unix(cron:session): session closed for user root Dec 18 00:54:23 ispc sshd[1920520]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:54:37 ispc sshd[1920526]: Invalid user node from 165.245.129.248 Dec 18 00:54:49 ispc sshd[1920534]: Invalid user diamantdi from 35.239.77.168 Dec 18 00:54:51 ispc postfix/smtpd[1920536]: sql auxprop plugin using mysql engine Dec 18 00:54:52 ispc saslauthd[1920543]: pam_mysql - SELECT returned no result. Dec 18 00:54:52 ispc saslauthd[1920543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:54:52 ispc saslauthd[1920543]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:55:01 ispc CRON[1920545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:55:01 ispc CRON[1920546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:55:01 ispc CRON[1920547]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 00:55:01 ispc CRON[1920544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:55:01 ispc CRON[1920545]: pam_unix(cron:session): session closed for user root Dec 18 00:55:01 ispc CRON[1920547]: pam_unix(cron:session): session closed for user getmail Dec 18 00:55:01 ispc CRON[1920546]: pam_unix(cron:session): session closed for user root Dec 18 00:55:02 ispc CRON[1920544]: pam_unix(cron:session): session closed for user root Dec 18 00:55:19 ispc CRON[1920390]: pam_unix(cron:session): session closed for user root Dec 18 00:55:53 ispc sshd[1920643]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 00:55:53 ispc sshd[1920643]: Invalid user ziplines from 114.7.163.154 Dec 18 00:56:01 ispc CRON[1920655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:56:02 ispc CRON[1920655]: pam_unix(cron:session): session closed for user root Dec 18 00:56:31 ispc sshd[1920678]: Invalid user solv from 165.245.129.248 Dec 18 00:56:35 ispc CRON[1919183]: pam_unix(cron:session): session closed for user root Dec 18 00:56:35 ispc postfix/smtpd[1920689]: sql auxprop plugin using mysql engine Dec 18 00:56:56 ispc sshd[1920694]: Invalid user diamantdi from 36.134.126.74 Dec 18 00:57:01 ispc CRON[1920697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:57:01 ispc CRON[1920697]: pam_unix(cron:session): session closed for user root Dec 18 00:58:01 ispc CRON[1920720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:58:02 ispc CRON[1920720]: pam_unix(cron:session): session closed for user root Dec 18 00:58:17 ispc sshd[1920734]: Invalid user ubuntu from 67.205.163.146 Dec 18 00:58:18 ispc sshd[1920736]: Invalid user klape from 67.205.163.146 Dec 18 00:58:18 ispc saslauthd[1920739]: pam_mysql - SELECT returned no result. Dec 18 00:58:18 ispc saslauthd[1920739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 00:58:18 ispc saslauthd[1920739]: do_auth : auth failure: [user=qsvr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 00:58:59 ispc CRON[1918767]: pam_unix(cron:session): session closed for user root Dec 18 00:59:01 ispc CRON[1920746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 00:59:02 ispc CRON[1920746]: pam_unix(cron:session): session closed for user root Dec 18 01:00:01 ispc CRON[1920757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:00:01 ispc CRON[1920758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:00:01 ispc CRON[1920759]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:00:01 ispc CRON[1920760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:00:01 ispc CRON[1920761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:00:01 ispc CRON[1920762]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:00:02 ispc CRON[1920758]: pam_unix(cron:session): session closed for user root Dec 18 01:00:02 ispc CRON[1920759]: pam_unix(cron:session): session closed for user www-data Dec 18 01:00:02 ispc CRON[1920762]: pam_unix(cron:session): session closed for user getmail Dec 18 01:00:02 ispc CRON[1920760]: pam_unix(cron:session): session closed for user root Dec 18 01:00:03 ispc CRON[1920757]: pam_unix(cron:session): session closed for user root Dec 18 01:00:20 ispc CRON[1920761]: pam_unix(cron:session): session closed for user root Dec 18 01:01:01 ispc CRON[1921054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:01:02 ispc CRON[1921054]: pam_unix(cron:session): session closed for user root Dec 18 01:02:01 ispc CRON[1921067]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 01:02:01 ispc CRON[1921068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:02:02 ispc CRON[1921068]: pam_unix(cron:session): session closed for user root Dec 18 01:03:01 ispc CRON[1921922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:03:01 ispc CRON[1921922]: pam_unix(cron:session): session closed for user root Dec 18 01:03:20 ispc CRON[1921067]: pam_unix(cron:session): session closed for user logcheck Dec 18 01:03:28 ispc postfix/smtpd[1922116]: sql auxprop plugin using mysql engine Dec 18 01:03:32 ispc saslauthd[1922120]: pam_mysql - SELECT returned no result. Dec 18 01:03:32 ispc saslauthd[1922120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:03:32 ispc saslauthd[1922120]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:04:01 ispc CRON[1922123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:04:03 ispc CRON[1922123]: pam_unix(cron:session): session closed for user root Dec 18 01:05:01 ispc CRON[1922139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:05:01 ispc CRON[1922141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:05:01 ispc CRON[1922140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:05:01 ispc CRON[1922142]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:05:01 ispc CRON[1922140]: pam_unix(cron:session): session closed for user root Dec 18 01:05:01 ispc CRON[1922142]: pam_unix(cron:session): session closed for user getmail Dec 18 01:05:02 ispc CRON[1922139]: pam_unix(cron:session): session closed for user root Dec 18 01:05:05 ispc CRON[1922141]: pam_unix(cron:session): session closed for user root Dec 18 01:05:50 ispc saslauthd[1922263]: pam_mysql - SELECT returned no result. Dec 18 01:05:50 ispc saslauthd[1922263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:05:50 ispc saslauthd[1922263]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:06:01 ispc CRON[1922264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:06:02 ispc CRON[1922264]: pam_unix(cron:session): session closed for user root Dec 18 01:07:01 ispc CRON[1922278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:07:01 ispc CRON[1922278]: pam_unix(cron:session): session closed for user root Dec 18 01:08:01 ispc CRON[1922301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:08:02 ispc CRON[1922301]: pam_unix(cron:session): session closed for user root Dec 18 01:08:16 ispc postfix/smtpd[1922314]: sql auxprop plugin using mysql engine Dec 18 01:09:01 ispc CRON[1922322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:09:01 ispc CRON[1922321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:09:01 ispc CRON[1922321]: pam_unix(cron:session): session closed for user root Dec 18 01:09:03 ispc CRON[1922322]: pam_unix(cron:session): session closed for user root Dec 18 01:10:01 ispc CRON[1922347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:10:01 ispc CRON[1922348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:10:01 ispc CRON[1922349]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:10:01 ispc CRON[1922351]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:10:01 ispc CRON[1922350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:10:01 ispc CRON[1922348]: pam_unix(cron:session): session closed for user root Dec 18 01:10:01 ispc CRON[1922349]: pam_unix(cron:session): session closed for user www-data Dec 18 01:10:01 ispc CRON[1922351]: pam_unix(cron:session): session closed for user getmail Dec 18 01:10:01 ispc CRON[1922347]: pam_unix(cron:session): session closed for user root Dec 18 01:10:07 ispc CRON[1922350]: pam_unix(cron:session): session closed for user root Dec 18 01:10:39 ispc sshd[1922470]: Invalid user martof from 211.45.175.153 Dec 18 01:11:01 ispc CRON[1922472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:11:02 ispc CRON[1922472]: pam_unix(cron:session): session closed for user root Dec 18 01:11:18 ispc sshd[1922484]: Invalid user martof from 103.100.209.172 Dec 18 01:12:01 ispc CRON[1922486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:12:03 ispc CRON[1922486]: pam_unix(cron:session): session closed for user root Dec 18 01:12:40 ispc saslauthd[1922500]: pam_mysql - SELECT returned no result. Dec 18 01:12:40 ispc saslauthd[1922500]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:12:40 ispc saslauthd[1922500]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:12:42 ispc saslauthd[1922501]: pam_mysql - SELECT returned no result. Dec 18 01:12:42 ispc saslauthd[1922501]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:12:42 ispc saslauthd[1922501]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:13:01 ispc CRON[1922512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:13:02 ispc CRON[1922512]: pam_unix(cron:session): session closed for user root Dec 18 01:13:10 ispc saslauthd[1922524]: pam_mysql - SELECT returned no result. Dec 18 01:13:10 ispc saslauthd[1922524]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:13:10 ispc saslauthd[1922524]: do_auth : auth failure: [user=qsysopr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:13:15 ispc sshd[1922525]: Invalid user martof from 51.79.36.60 Dec 18 01:14:01 ispc CRON[1922534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:14:01 ispc sshd[1922532]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 01:14:01 ispc sshd[1922532]: Invalid user user from 2.57.121.25 Dec 18 01:14:02 ispc CRON[1922534]: pam_unix(cron:session): session closed for user root Dec 18 01:15:01 ispc CRON[1922552]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:15:01 ispc CRON[1922551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:15:01 ispc CRON[1922549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:15:01 ispc CRON[1922550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:15:01 ispc CRON[1922550]: pam_unix(cron:session): session closed for user root Dec 18 01:15:01 ispc CRON[1922552]: pam_unix(cron:session): session closed for user getmail Dec 18 01:15:02 ispc CRON[1922549]: pam_unix(cron:session): session closed for user root Dec 18 01:15:16 ispc CRON[1922551]: pam_unix(cron:session): session closed for user root Dec 18 01:16:01 ispc CRON[1922752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:16:02 ispc CRON[1922752]: pam_unix(cron:session): session closed for user root Dec 18 01:17:01 ispc CRON[1922764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:17:02 ispc CRON[1922764]: pam_unix(cron:session): session closed for user root Dec 18 01:17:20 ispc sshd[1922776]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 01:17:54 ispc postfix/smtpd[1922784]: sql auxprop plugin using mysql engine Dec 18 01:18:01 ispc CRON[1922791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:18:02 ispc CRON[1922791]: pam_unix(cron:session): session closed for user root Dec 18 01:18:44 ispc sshd[1922804]: Did not receive identification string from 206.189.98.228 Dec 18 01:19:01 ispc CRON[1922807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:19:02 ispc CRON[1922807]: pam_unix(cron:session): session closed for user root Dec 18 01:20:01 ispc CRON[1922824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:20:01 ispc CRON[1922823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:20:01 ispc CRON[1922825]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:20:01 ispc CRON[1922826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:20:01 ispc CRON[1922827]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:20:01 ispc CRON[1922825]: pam_unix(cron:session): session closed for user www-data Dec 18 01:20:01 ispc CRON[1922824]: pam_unix(cron:session): session closed for user root Dec 18 01:20:01 ispc CRON[1922827]: pam_unix(cron:session): session closed for user getmail Dec 18 01:20:02 ispc CRON[1922823]: pam_unix(cron:session): session closed for user root Dec 18 01:20:45 ispc CRON[1922826]: pam_unix(cron:session): session closed for user root Dec 18 01:21:01 ispc CRON[1922933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:21:01 ispc CRON[1922934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:21:01 ispc CRON[1922933]: pam_unix(cron:session): session closed for user root Dec 18 01:21:28 ispc saslauthd[1922961]: pam_mysql - SELECT returned no result. Dec 18 01:21:28 ispc saslauthd[1922961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:21:28 ispc saslauthd[1922961]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:22:01 ispc CRON[1922978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:22:01 ispc CRON[1922978]: pam_unix(cron:session): session closed for user root Dec 18 01:23:01 ispc CRON[1923024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:23:02 ispc postfix/smtpd[1923031]: sql auxprop plugin using mysql engine Dec 18 01:23:02 ispc CRON[1923024]: pam_unix(cron:session): session closed for user root Dec 18 01:24:01 ispc CRON[1923067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:24:02 ispc CRON[1923067]: pam_unix(cron:session): session closed for user root Dec 18 01:24:14 ispc sshd[1923086]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 01:24:14 ispc sshd[1923086]: Invalid user martof from 193.110.157.47 Dec 18 01:24:38 ispc sshd[1923102]: Invalid user klape from 103.164.20.29 Dec 18 01:24:40 ispc sshd[1923104]: Invalid user ubuntu from 103.164.20.29 Dec 18 01:25:01 ispc CRON[1923114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:25:01 ispc CRON[1923115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:25:01 ispc CRON[1923116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:25:01 ispc CRON[1923117]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:25:01 ispc CRON[1923115]: pam_unix(cron:session): session closed for user root Dec 18 01:25:01 ispc CRON[1923117]: pam_unix(cron:session): session closed for user getmail Dec 18 01:25:01 ispc CRON[1923116]: pam_unix(cron:session): session closed for user root Dec 18 01:25:02 ispc CRON[1923114]: pam_unix(cron:session): session closed for user root Dec 18 01:25:06 ispc sshd[1923195]: Did not receive identification string from 206.189.98.228 Dec 18 01:25:44 ispc sshd[1923216]: Did not receive identification string from 206.189.98.228 Dec 18 01:25:45 ispc sshd[1923217]: Invalid user admin from 206.189.98.228 Dec 18 01:26:01 ispc CRON[1923224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:26:02 ispc CRON[1923224]: pam_unix(cron:session): session closed for user root Dec 18 01:26:16 ispc sshd[1923243]: Invalid user admin from 206.189.98.228 Dec 18 01:26:36 ispc postfix/smtpd[1923254]: sql auxprop plugin using mysql engine Dec 18 01:26:37 ispc saslauthd[1923257]: pam_mysql - SELECT returned no result. Dec 18 01:26:37 ispc saslauthd[1923257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:26:37 ispc saslauthd[1923257]: do_auth : auth failure: [user=account@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 01:26:44 ispc sshd[1923258]: Invalid user admin from 206.189.98.228 Dec 18 01:27:01 ispc CRON[1923268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:27:01 ispc CRON[1923268]: pam_unix(cron:session): session closed for user root Dec 18 01:27:14 ispc sshd[1923283]: Invalid user admin from 206.189.98.228 Dec 18 01:27:25 ispc saslauthd[1923293]: pam_mysql - SELECT returned no result. Dec 18 01:27:25 ispc saslauthd[1923293]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:27:25 ispc saslauthd[1923293]: do_auth : auth failure: [user=questra] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:27:43 ispc sshd[1923298]: Invalid user admin from 206.189.98.228 Dec 18 01:28:01 ispc CRON[1923319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:28:02 ispc CRON[1923319]: pam_unix(cron:session): session closed for user root Dec 18 01:28:11 ispc sshd[1923334]: Invalid user admin from 206.189.98.228 Dec 18 01:28:19 ispc sshd[1923346]: Invalid user ziplines from 103.100.209.172 Dec 18 01:28:33 ispc sshd[1923352]: Invalid user tshombeknife from 175.125.95.234 Dec 18 01:29:01 ispc CRON[1923366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:29:02 ispc CRON[1923366]: pam_unix(cron:session): session closed for user root Dec 18 01:30:01 ispc CRON[1923407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:30:01 ispc CRON[1923408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:30:01 ispc CRON[1923409]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:30:01 ispc CRON[1923410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:30:01 ispc CRON[1923408]: pam_unix(cron:session): session closed for user root Dec 18 01:30:01 ispc CRON[1923411]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:30:01 ispc CRON[1923409]: pam_unix(cron:session): session closed for user www-data Dec 18 01:30:01 ispc CRON[1923411]: pam_unix(cron:session): session closed for user getmail Dec 18 01:30:01 ispc CRON[1923410]: pam_unix(cron:session): session closed for user root Dec 18 01:30:01 ispc CRON[1923407]: pam_unix(cron:session): session closed for user root Dec 18 01:30:28 ispc postfix/smtpd[1923498]: sql auxprop plugin using mysql engine Dec 18 01:30:29 ispc saslauthd[1923500]: pam_mysql - SELECT returned no result. Dec 18 01:30:29 ispc saslauthd[1923500]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:30:29 ispc saslauthd[1923500]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:31:01 ispc CRON[1923513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:31:01 ispc CRON[1923513]: pam_unix(cron:session): session closed for user root Dec 18 01:32:01 ispc CRON[1923550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:32:02 ispc CRON[1923550]: pam_unix(cron:session): session closed for user root Dec 18 01:32:47 ispc sshd[1923578]: Invalid user racingkennel from 185.12.204.239 Dec 18 01:32:50 ispc sshd[1923591]: Invalid user blceu from 5.129.195.224 Dec 18 01:33:01 ispc CRON[1923597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:33:02 ispc CRON[1923597]: pam_unix(cron:session): session closed for user root Dec 18 01:33:20 ispc sshd[1923616]: Did not receive identification string from 87.236.176.227 Dec 18 01:34:01 ispc CRON[1923635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:34:01 ispc CRON[1923635]: pam_unix(cron:session): session closed for user root Dec 18 01:35:01 ispc CRON[1923676]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:35:01 ispc CRON[1923673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:35:01 ispc CRON[1923674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:35:01 ispc CRON[1923675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:35:01 ispc CRON[1923674]: pam_unix(cron:session): session closed for user root Dec 18 01:35:01 ispc CRON[1923676]: pam_unix(cron:session): session closed for user getmail Dec 18 01:35:01 ispc CRON[1923675]: pam_unix(cron:session): session closed for user root Dec 18 01:35:02 ispc CRON[1923673]: pam_unix(cron:session): session closed for user root Dec 18 01:36:01 ispc CRON[1923774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:36:01 ispc CRON[1923774]: pam_unix(cron:session): session closed for user root Dec 18 01:36:50 ispc sshd[1923809]: Invalid user anoraksro from 152.53.188.144 Dec 18 01:37:01 ispc CRON[1923819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:37:02 ispc CRON[1923819]: pam_unix(cron:session): session closed for user root Dec 18 01:37:56 ispc sshd[1923855]: Invalid user blceu from 52.232.19.79 Dec 18 01:38:01 ispc CRON[1923864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:38:01 ispc CRON[1923864]: pam_unix(cron:session): session closed for user root Dec 18 01:39:01 ispc CRON[1923901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:39:01 ispc CRON[1923900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:39:01 ispc CRON[1923900]: pam_unix(cron:session): session closed for user root Dec 18 01:39:01 ispc CRON[1923901]: pam_unix(cron:session): session closed for user root Dec 18 01:39:10 ispc postfix/smtpd[1923923]: sql auxprop plugin using mysql engine Dec 18 01:39:10 ispc saslauthd[1923926]: pam_mysql - SELECT returned no result. Dec 18 01:39:10 ispc saslauthd[1923926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:39:10 ispc saslauthd[1923926]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:39:15 ispc saslauthd[1923931]: pam_mysql - SELECT returned no result. Dec 18 01:39:15 ispc saslauthd[1923931]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:39:15 ispc saslauthd[1923931]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:40:00 ispc sshd[1923948]: Invalid user antiqkabinet from 152.53.188.144 Dec 18 01:40:01 ispc CRON[1923955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:40:01 ispc CRON[1923956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:40:01 ispc CRON[1923958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:40:01 ispc CRON[1923957]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:40:01 ispc CRON[1923959]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:40:01 ispc CRON[1923956]: pam_unix(cron:session): session closed for user root Dec 18 01:40:01 ispc CRON[1923957]: pam_unix(cron:session): session closed for user www-data Dec 18 01:40:01 ispc CRON[1923959]: pam_unix(cron:session): session closed for user getmail Dec 18 01:40:02 ispc CRON[1923958]: pam_unix(cron:session): session closed for user root Dec 18 01:40:02 ispc CRON[1923955]: pam_unix(cron:session): session closed for user root Dec 18 01:41:01 ispc CRON[1924058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:41:01 ispc CRON[1924058]: pam_unix(cron:session): session closed for user root Dec 18 01:41:12 ispc postfix/smtpd[1924075]: sql auxprop plugin using mysql engine Dec 18 01:41:12 ispc CRON[1922934]: pam_unix(cron:session): session closed for user root Dec 18 01:42:01 ispc CRON[1924089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:42:01 ispc CRON[1924089]: pam_unix(cron:session): session closed for user root Dec 18 01:42:31 ispc saslauthd[1924106]: pam_mysql - SELECT returned no result. Dec 18 01:42:31 ispc saslauthd[1924106]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:42:31 ispc saslauthd[1924106]: do_auth : auth failure: [user=quser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:43:01 ispc CRON[1924117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:43:02 ispc CRON[1924117]: pam_unix(cron:session): session closed for user root Dec 18 01:43:29 ispc postfix/smtpd[1924130]: sql auxprop plugin using mysql engine Dec 18 01:44:01 ispc CRON[1924142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:44:02 ispc CRON[1924142]: pam_unix(cron:session): session closed for user root Dec 18 01:45:01 ispc CRON[1924156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:45:01 ispc CRON[1924157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:45:01 ispc CRON[1924158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:45:01 ispc CRON[1924159]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:45:01 ispc CRON[1924157]: pam_unix(cron:session): session closed for user root Dec 18 01:45:01 ispc CRON[1924159]: pam_unix(cron:session): session closed for user getmail Dec 18 01:45:01 ispc postfix/smtpd[1924208]: sql auxprop plugin using mysql engine Dec 18 01:45:01 ispc CRON[1924156]: pam_unix(cron:session): session closed for user root Dec 18 01:45:32 ispc CRON[1924158]: pam_unix(cron:session): session closed for user root Dec 18 01:45:37 ispc sshd[1924348]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 01:46:01 ispc CRON[1924350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:46:53 ispc sshd[1924379]: Did not receive identification string from 142.93.232.62 Dec 18 01:47:01 ispc CRON[1924385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:47:01 ispc CRON[1924385]: pam_unix(cron:session): session closed for user root Dec 18 01:47:20 ispc sshd[1924404]: Invalid user blceu from 211.45.175.153 Dec 18 01:47:50 ispc sshd[1924423]: Invalid user matlbula from 51.159.18.215 Dec 18 01:48:01 ispc CRON[1924432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:48:01 ispc CRON[1924432]: pam_unix(cron:session): session closed for user root Dec 18 01:48:08 ispc postfix/smtpd[1924447]: sql auxprop plugin using mysql engine Dec 18 01:48:09 ispc saslauthd[1924449]: pam_mysql - SELECT returned no result. Dec 18 01:48:09 ispc saslauthd[1924449]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:48:09 ispc saslauthd[1924449]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:49:01 ispc CRON[1924473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:49:02 ispc CRON[1924473]: pam_unix(cron:session): session closed for user root Dec 18 01:50:01 ispc CRON[1924509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:50:01 ispc CRON[1924510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:50:01 ispc CRON[1924511]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 01:50:01 ispc CRON[1924512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:50:01 ispc CRON[1924513]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:50:01 ispc CRON[1924510]: pam_unix(cron:session): session closed for user root Dec 18 01:50:01 ispc CRON[1924513]: pam_unix(cron:session): session closed for user getmail Dec 18 01:50:01 ispc CRON[1924511]: pam_unix(cron:session): session closed for user www-data Dec 18 01:50:01 ispc CRON[1924512]: pam_unix(cron:session): session closed for user root Dec 18 01:50:01 ispc CRON[1924509]: pam_unix(cron:session): session closed for user root Dec 18 01:50:28 ispc sshd[1924595]: Did not receive identification string from 183.236.30.60 Dec 18 01:50:57 ispc sshd[1924610]: Invalid user ziplines from 148.216.54.17 Dec 18 01:51:01 ispc CRON[1924616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:51:02 ispc CRON[1924616]: pam_unix(cron:session): session closed for user root Dec 18 01:52:01 ispc CRON[1924652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:52:02 ispc CRON[1924652]: pam_unix(cron:session): session closed for user root Dec 18 01:52:29 ispc postfix/smtpd[1924676]: sql auxprop plugin using mysql engine Dec 18 01:52:58 ispc sshd[1924699]: Invalid user blceu from 185.208.181.153 Dec 18 01:52:58 ispc sshd[1924697]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 01:53:01 ispc CRON[1924701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:53:01 ispc CRON[1924701]: pam_unix(cron:session): session closed for user root Dec 18 01:53:01 ispc sshd[1924712]: Did not receive identification string from 80.94.92.182 Dec 18 01:53:02 ispc postfix/smtpd[1924717]: sql auxprop plugin using mysql engine Dec 18 01:53:35 ispc sshd[1924732]: Invalid user martof from 221.156.137.103 Dec 18 01:54:01 ispc CRON[1924752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:54:01 ispc CRON[1924752]: pam_unix(cron:session): session closed for user root Dec 18 01:54:48 ispc sshd[1924786]: Invalid user klape from 36.50.177.171 Dec 18 01:54:50 ispc sshd[1924788]: Invalid user ubuntu from 36.50.177.171 Dec 18 01:55:01 ispc CRON[1924796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:55:01 ispc CRON[1924795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:55:01 ispc CRON[1924794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:55:01 ispc CRON[1924797]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 01:55:01 ispc CRON[1924795]: pam_unix(cron:session): session closed for user root Dec 18 01:55:01 ispc CRON[1924797]: pam_unix(cron:session): session closed for user getmail Dec 18 01:55:02 ispc CRON[1924796]: pam_unix(cron:session): session closed for user root Dec 18 01:55:02 ispc CRON[1924794]: pam_unix(cron:session): session closed for user root Dec 18 01:56:01 ispc CRON[1924900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:56:02 ispc CRON[1924900]: pam_unix(cron:session): session closed for user root Dec 18 01:57:01 ispc CRON[1924938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:57:02 ispc CRON[1924938]: pam_unix(cron:session): session closed for user root Dec 18 01:57:27 ispc postfix/smtpd[1924961]: sql auxprop plugin using mysql engine Dec 18 01:57:28 ispc saslauthd[1924964]: pam_mysql - SELECT returned no result. Dec 18 01:57:28 ispc saslauthd[1924964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:57:28 ispc saslauthd[1924964]: do_auth : auth failure: [user=rainer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:58:01 ispc CRON[1924990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:58:01 ispc CRON[1924990]: pam_unix(cron:session): session closed for user root Dec 18 01:58:27 ispc saslauthd[1925018]: pam_mysql - SELECT returned no result. Dec 18 01:58:27 ispc saslauthd[1925018]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 01:58:27 ispc saslauthd[1925018]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 01:58:39 ispc sshd[1925023]: Invalid user martof from 165.227.38.205 Dec 18 01:59:01 ispc CRON[1925033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 01:59:02 ispc CRON[1925033]: pam_unix(cron:session): session closed for user root Dec 18 02:00:01 ispc CRON[1925074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:00:01 ispc CRON[1925076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:00:01 ispc CRON[1925077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:00:01 ispc CRON[1925078]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:00:01 ispc CRON[1925073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:00:01 ispc CRON[1925075]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:00:01 ispc CRON[1925074]: pam_unix(cron:session): session closed for user root Dec 18 02:00:01 ispc CRON[1925078]: pam_unix(cron:session): session closed for user getmail Dec 18 02:00:01 ispc CRON[1925075]: pam_unix(cron:session): session closed for user www-data Dec 18 02:00:01 ispc CRON[1925077]: pam_unix(cron:session): session closed for user root Dec 18 02:00:01 ispc CRON[1925073]: pam_unix(cron:session): session closed for user root Dec 18 02:00:02 ispc su[1925246]: Successful su for root by root Dec 18 02:00:02 ispc su[1925246]: + ??? root:root Dec 18 02:00:02 ispc su[1925246]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:02 ispc su[1925246]: pam_unix(su:session): session closed for user root Dec 18 02:00:02 ispc su[1925251]: Successful su for root by root Dec 18 02:00:02 ispc su[1925251]: + ??? root:root Dec 18 02:00:02 ispc su[1925251]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:02 ispc su[1925251]: pam_unix(su:session): session closed for user root Dec 18 02:00:02 ispc su[1925254]: Successful su for root by root Dec 18 02:00:02 ispc su[1925254]: + ??? root:root Dec 18 02:00:02 ispc su[1925254]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:02 ispc su[1925254]: pam_unix(su:session): session closed for user root Dec 18 02:00:02 ispc su[1925260]: Successful su for root by root Dec 18 02:00:02 ispc su[1925260]: + ??? root:root Dec 18 02:00:02 ispc su[1925260]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:02 ispc su[1925260]: pam_unix(su:session): session closed for user root Dec 18 02:00:02 ispc su[1925263]: Successful su for root by root Dec 18 02:00:02 ispc su[1925263]: + ??? root:root Dec 18 02:00:02 ispc su[1925263]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:03 ispc su[1925263]: pam_unix(su:session): session closed for user root Dec 18 02:00:03 ispc su[1925269]: Successful su for root by root Dec 18 02:00:03 ispc su[1925269]: + ??? root:root Dec 18 02:00:03 ispc su[1925269]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:03 ispc su[1925269]: pam_unix(su:session): session closed for user root Dec 18 02:00:03 ispc su[1925272]: Successful su for root by root Dec 18 02:00:03 ispc su[1925272]: + ??? root:root Dec 18 02:00:03 ispc su[1925272]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:06 ispc su[1925272]: pam_unix(su:session): session closed for user root Dec 18 02:00:06 ispc su[1925278]: Successful su for root by root Dec 18 02:00:06 ispc su[1925278]: + ??? root:root Dec 18 02:00:06 ispc su[1925278]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:06 ispc su[1925278]: pam_unix(su:session): session closed for user root Dec 18 02:00:06 ispc su[1925281]: Successful su for root by root Dec 18 02:00:06 ispc su[1925281]: + ??? root:root Dec 18 02:00:06 ispc su[1925281]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:07 ispc su[1925281]: pam_unix(su:session): session closed for user root Dec 18 02:00:07 ispc su[1925287]: Successful su for root by root Dec 18 02:00:07 ispc su[1925287]: + ??? root:root Dec 18 02:00:07 ispc su[1925287]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:07 ispc su[1925287]: pam_unix(su:session): session closed for user root Dec 18 02:00:07 ispc su[1925290]: Successful su for root by root Dec 18 02:00:07 ispc su[1925290]: + ??? root:root Dec 18 02:00:07 ispc su[1925290]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:09 ispc su[1925290]: pam_unix(su:session): session closed for user root Dec 18 02:00:09 ispc su[1925297]: Successful su for root by root Dec 18 02:00:09 ispc su[1925297]: + ??? root:root Dec 18 02:00:09 ispc su[1925297]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:09 ispc su[1925297]: pam_unix(su:session): session closed for user root Dec 18 02:00:09 ispc su[1925300]: Successful su for root by root Dec 18 02:00:09 ispc su[1925300]: + ??? root:root Dec 18 02:00:09 ispc su[1925300]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:09 ispc su[1925300]: pam_unix(su:session): session closed for user root Dec 18 02:00:09 ispc su[1925307]: Successful su for root by root Dec 18 02:00:09 ispc su[1925307]: + ??? root:root Dec 18 02:00:09 ispc su[1925307]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:09 ispc su[1925307]: pam_unix(su:session): session closed for user root Dec 18 02:00:09 ispc su[1925313]: Successful su for root by root Dec 18 02:00:09 ispc su[1925313]: + ??? root:root Dec 18 02:00:09 ispc su[1925313]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:16 ispc su[1925313]: pam_unix(su:session): session closed for user root Dec 18 02:00:16 ispc su[1925319]: Successful su for root by root Dec 18 02:00:16 ispc su[1925319]: + ??? root:root Dec 18 02:00:16 ispc su[1925319]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:16 ispc su[1925319]: pam_unix(su:session): session closed for user root Dec 18 02:00:16 ispc su[1925322]: Successful su for root by root Dec 18 02:00:16 ispc su[1925322]: + ??? root:root Dec 18 02:00:16 ispc su[1925322]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:19 ispc su[1925322]: pam_unix(su:session): session closed for user root Dec 18 02:00:19 ispc su[1925328]: Successful su for root by root Dec 18 02:00:19 ispc su[1925328]: + ??? root:root Dec 18 02:00:19 ispc su[1925328]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:19 ispc su[1925328]: pam_unix(su:session): session closed for user root Dec 18 02:00:19 ispc su[1925331]: Successful su for root by root Dec 18 02:00:19 ispc su[1925331]: + ??? root:root Dec 18 02:00:19 ispc su[1925331]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:36 ispc su[1925331]: pam_unix(su:session): session closed for user root Dec 18 02:00:36 ispc su[1925346]: Successful su for root by root Dec 18 02:00:36 ispc su[1925346]: + ??? root:root Dec 18 02:00:36 ispc su[1925346]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:36 ispc su[1925346]: pam_unix(su:session): session closed for user root Dec 18 02:00:36 ispc su[1925350]: Successful su for root by root Dec 18 02:00:36 ispc su[1925350]: + ??? root:root Dec 18 02:00:36 ispc su[1925350]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:37 ispc su[1925350]: pam_unix(su:session): session closed for user root Dec 18 02:00:37 ispc su[1925356]: Successful su for root by root Dec 18 02:00:37 ispc su[1925356]: + ??? root:root Dec 18 02:00:37 ispc su[1925356]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:37 ispc su[1925356]: pam_unix(su:session): session closed for user root Dec 18 02:00:37 ispc su[1925359]: Successful su for root by root Dec 18 02:00:37 ispc su[1925359]: + ??? root:root Dec 18 02:00:37 ispc su[1925359]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:39 ispc su[1925359]: pam_unix(su:session): session closed for user root Dec 18 02:00:39 ispc su[1925365]: Successful su for root by root Dec 18 02:00:39 ispc su[1925365]: + ??? root:root Dec 18 02:00:39 ispc su[1925365]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:00:39 ispc su[1925365]: pam_unix(su:session): session closed for user root Dec 18 02:00:39 ispc su[1925368]: Successful su for root by root Dec 18 02:00:39 ispc su[1925368]: + ??? root:root Dec 18 02:00:39 ispc su[1925368]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:01:01 ispc CRON[1925386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:01:03 ispc CRON[1925386]: pam_unix(cron:session): session closed for user root Dec 18 02:01:31 ispc sshd[1925405]: Invalid user ziplines from 51.79.36.60 Dec 18 02:02:01 ispc CRON[1925421]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 02:02:01 ispc CRON[1925422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:02:01 ispc CRON[1925422]: pam_unix(cron:session): session closed for user root Dec 18 02:03:01 ispc CRON[1926389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:03:02 ispc CRON[1926389]: pam_unix(cron:session): session closed for user root Dec 18 02:03:10 ispc CRON[1925421]: pam_unix(cron:session): session closed for user logcheck Dec 18 02:03:17 ispc postfix/smtpd[1926508]: sql auxprop plugin using mysql engine Dec 18 02:03:21 ispc postfix/smtpd[1926513]: sql auxprop plugin using mysql engine Dec 18 02:03:48 ispc sshd[1926539]: Invalid user sol from 80.94.92.182 Dec 18 02:04:01 ispc CRON[1926555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:04:01 ispc CRON[1926555]: pam_unix(cron:session): session closed for user root Dec 18 02:04:57 ispc sshd[1926590]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:04:57 ispc sshd[1926590]: Invalid user admin from 2.57.121.112 Dec 18 02:05:01 ispc CRON[1926597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:05:01 ispc CRON[1926599]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:05:01 ispc CRON[1926596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:05:01 ispc CRON[1926598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:05:01 ispc CRON[1926597]: pam_unix(cron:session): session closed for user root Dec 18 02:05:01 ispc CRON[1926599]: pam_unix(cron:session): session closed for user getmail Dec 18 02:05:02 ispc CRON[1926596]: pam_unix(cron:session): session closed for user root Dec 18 02:05:02 ispc CRON[1926598]: pam_unix(cron:session): session closed for user root Dec 18 02:05:34 ispc sshd[1926686]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:34 ispc sshd[1926688]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:35 ispc sshd[1926690]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:36 ispc postfix/smtpd[1926694]: sql auxprop plugin using mysql engine Dec 18 02:05:36 ispc sshd[1926692]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:37 ispc sshd[1926696]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:38 ispc sshd[1926698]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:38 ispc sshd[1926704]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:39 ispc sshd[1926706]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:40 ispc sshd[1926708]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:40 ispc su[1925368]: pam_unix(su:session): session closed for user root Dec 18 02:05:40 ispc su[1926713]: Successful su for root by root Dec 18 02:05:40 ispc su[1926713]: + ??? root:root Dec 18 02:05:40 ispc su[1926713]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:40 ispc su[1926713]: pam_unix(su:session): session closed for user root Dec 18 02:05:40 ispc su[1926717]: Successful su for root by root Dec 18 02:05:40 ispc su[1926717]: + ??? root:root Dec 18 02:05:40 ispc su[1926717]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:40 ispc sshd[1926710]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:41 ispc sshd[1926721]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:42 ispc sshd[1926723]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:43 ispc sshd[1926725]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:43 ispc su[1926717]: pam_unix(su:session): session closed for user root Dec 18 02:05:43 ispc su[1926731]: Successful su for root by root Dec 18 02:05:43 ispc su[1926731]: + ??? root:root Dec 18 02:05:43 ispc su[1926731]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:44 ispc sshd[1926727]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:44 ispc su[1926731]: pam_unix(su:session): session closed for user root Dec 18 02:05:44 ispc su[1926734]: Successful su for root by root Dec 18 02:05:44 ispc su[1926734]: + ??? root:root Dec 18 02:05:44 ispc su[1926734]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:44 ispc sshd[1926736]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:45 ispc sshd[1926740]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:46 ispc sshd[1926742]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:46 ispc su[1926734]: pam_unix(su:session): session closed for user root Dec 18 02:05:46 ispc su[1926748]: Successful su for root by root Dec 18 02:05:46 ispc su[1926748]: + ??? root:root Dec 18 02:05:47 ispc sshd[1926744]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:47 ispc su[1926748]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:47 ispc su[1926748]: pam_unix(su:session): session closed for user root Dec 18 02:05:47 ispc su[1926752]: Successful su for root by root Dec 18 02:05:47 ispc su[1926752]: + ??? root:root Dec 18 02:05:47 ispc su[1926752]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:47 ispc su[1926752]: pam_unix(su:session): session closed for user root Dec 18 02:05:47 ispc su[1926763]: Successful su for root by root Dec 18 02:05:47 ispc su[1926763]: + ??? root:root Dec 18 02:05:47 ispc su[1926763]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:48 ispc su[1926763]: pam_unix(su:session): session closed for user root Dec 18 02:05:48 ispc su[1926766]: Successful su for root by root Dec 18 02:05:48 ispc su[1926766]: + ??? root:root Dec 18 02:05:48 ispc su[1926766]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:48 ispc sshd[1926750]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:48 ispc sshd[1926750]: Invalid user Antminer from 179.43.184.242 Dec 18 02:05:49 ispc sshd[1926770]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:49 ispc sshd[1926770]: Invalid user Antminer from 179.43.184.242 Dec 18 02:05:49 ispc su[1926766]: pam_unix(su:session): session closed for user root Dec 18 02:05:50 ispc su[1926776]: Successful su for root by root Dec 18 02:05:50 ispc su[1926776]: + ??? root:root Dec 18 02:05:50 ispc su[1926776]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:50 ispc su[1926776]: pam_unix(su:session): session closed for user root Dec 18 02:05:50 ispc su[1926779]: Successful su for root by root Dec 18 02:05:50 ispc su[1926779]: + ??? root:root Dec 18 02:05:50 ispc su[1926779]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:05:50 ispc sshd[1926772]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:51 ispc sshd[1926783]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:51 ispc sshd[1926785]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:52 ispc sshd[1926787]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:52 ispc sshd[1926789]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:53 ispc sshd[1926791]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:53 ispc sshd[1926791]: Invalid user admin from 179.43.184.242 Dec 18 02:05:53 ispc sshd[1926793]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:05:53 ispc sshd[1926793]: Invalid user baikal from 179.43.184.242 Dec 18 02:06:01 ispc CRON[1926799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:06:01 ispc CRON[1926799]: pam_unix(cron:session): session closed for user root Dec 18 02:06:01 ispc su[1926779]: pam_unix(su:session): session closed for user root Dec 18 02:06:01 ispc su[1926812]: Successful su for root by root Dec 18 02:06:01 ispc su[1926812]: + ??? root:root Dec 18 02:06:01 ispc su[1926812]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:02 ispc su[1926812]: pam_unix(su:session): session closed for user root Dec 18 02:06:02 ispc su[1926815]: Successful su for root by root Dec 18 02:06:02 ispc su[1926815]: + ??? root:root Dec 18 02:06:02 ispc su[1926815]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:27 ispc su[1926815]: pam_unix(su:session): session closed for user root Dec 18 02:06:27 ispc su[1926833]: Successful su for root by root Dec 18 02:06:27 ispc su[1926833]: + ??? root:root Dec 18 02:06:27 ispc su[1926833]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:28 ispc su[1926833]: pam_unix(su:session): session closed for user root Dec 18 02:06:28 ispc su[1926836]: Successful su for root by root Dec 18 02:06:28 ispc su[1926836]: + ??? root:root Dec 18 02:06:28 ispc su[1926836]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:28 ispc postfix/smtpd[1926843]: sql auxprop plugin using mysql engine Dec 18 02:06:28 ispc CRON[1924350]: pam_unix(cron:session): session closed for user root Dec 18 02:06:28 ispc su[1926836]: pam_unix(su:session): session closed for user root Dec 18 02:06:28 ispc su[1926848]: Successful su for root by root Dec 18 02:06:28 ispc su[1926848]: + ??? root:root Dec 18 02:06:29 ispc su[1926848]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:29 ispc su[1926848]: pam_unix(su:session): session closed for user root Dec 18 02:06:29 ispc su[1926851]: Successful su for root by root Dec 18 02:06:29 ispc su[1926851]: + ??? root:root Dec 18 02:06:29 ispc su[1926851]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:06:48 ispc saslauthd[1926857]: pam_mysql - SELECT returned no result. Dec 18 02:06:48 ispc saslauthd[1926857]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:06:48 ispc saslauthd[1926857]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:07:01 ispc CRON[1926859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:07:02 ispc CRON[1926859]: pam_unix(cron:session): session closed for user root Dec 18 02:08:01 ispc CRON[1926882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:08:01 ispc postfix/smtpd[1926894]: sql auxprop plugin using mysql engine Dec 18 02:08:02 ispc CRON[1926882]: pam_unix(cron:session): session closed for user root Dec 18 02:09:01 ispc CRON[1926898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:09:01 ispc CRON[1926899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:09:01 ispc CRON[1926898]: pam_unix(cron:session): session closed for user root Dec 18 02:09:01 ispc CRON[1926899]: pam_unix(cron:session): session closed for user root Dec 18 02:09:07 ispc sshd[1926923]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:09:08 ispc sshd[1926925]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:09:08 ispc sshd[1926925]: Invalid user klape from 189.89.20.45 Dec 18 02:09:10 ispc sshd[1926927]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:09:10 ispc sshd[1926927]: Invalid user ubuntu from 189.89.20.45 Dec 18 02:09:22 ispc su[1926851]: pam_unix(su:session): session closed for user root Dec 18 02:09:22 ispc su[1926932]: Successful su for root by root Dec 18 02:09:22 ispc su[1926932]: + ??? root:root Dec 18 02:09:22 ispc su[1926932]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:09:22 ispc su[1926932]: pam_unix(su:session): session closed for user root Dec 18 02:09:22 ispc su[1926936]: Successful su for root by root Dec 18 02:09:22 ispc su[1926936]: + ??? root:root Dec 18 02:09:22 ispc su[1926936]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:10:01 ispc CRON[1926944]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:10:01 ispc CRON[1926941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:10:01 ispc CRON[1926942]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:10:01 ispc CRON[1926943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:10:01 ispc CRON[1926940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:10:01 ispc CRON[1926942]: pam_unix(cron:session): session closed for user www-data Dec 18 02:10:01 ispc CRON[1926941]: pam_unix(cron:session): session closed for user root Dec 18 02:10:01 ispc CRON[1926944]: pam_unix(cron:session): session closed for user getmail Dec 18 02:10:02 ispc CRON[1926940]: pam_unix(cron:session): session closed for user root Dec 18 02:10:37 ispc CRON[1926943]: pam_unix(cron:session): session closed for user root Dec 18 02:11:01 ispc CRON[1927054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:11:05 ispc sshd[1927062]: Invalid user solana from 80.94.92.182 Dec 18 02:11:15 ispc sshd[1927072]: Invalid user anoraksro from 185.12.204.239 Dec 18 02:11:16 ispc su[1926936]: pam_unix(su:session): session closed for user root Dec 18 02:11:16 ispc su[1927076]: Successful su for root by root Dec 18 02:11:16 ispc su[1927076]: + ??? root:root Dec 18 02:11:16 ispc su[1927076]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:16 ispc su[1927076]: pam_unix(su:session): session closed for user root Dec 18 02:11:16 ispc su[1927079]: Successful su for root by root Dec 18 02:11:16 ispc su[1927079]: + ??? root:root Dec 18 02:11:16 ispc su[1927079]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:18 ispc su[1927079]: pam_unix(su:session): session closed for user root Dec 18 02:11:18 ispc su[1927085]: Successful su for root by root Dec 18 02:11:18 ispc su[1927085]: + ??? root:root Dec 18 02:11:18 ispc su[1927085]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:18 ispc su[1927085]: pam_unix(su:session): session closed for user root Dec 18 02:11:18 ispc su[1927088]: Successful su for root by root Dec 18 02:11:18 ispc su[1927088]: + ??? root:root Dec 18 02:11:18 ispc su[1927088]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:33 ispc postfix/smtpd[1927100]: sql auxprop plugin using mysql engine Dec 18 02:11:34 ispc su[1927088]: pam_unix(su:session): session closed for user root Dec 18 02:11:34 ispc su[1927104]: Successful su for root by root Dec 18 02:11:34 ispc su[1927104]: + ??? root:root Dec 18 02:11:34 ispc su[1927104]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:34 ispc su[1927104]: pam_unix(su:session): session closed for user root Dec 18 02:11:34 ispc su[1927107]: Successful su for root by root Dec 18 02:11:34 ispc su[1927107]: + ??? root:root Dec 18 02:11:34 ispc su[1927107]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:37 ispc su[1927107]: pam_unix(su:session): session closed for user root Dec 18 02:11:37 ispc su[1927113]: Successful su for root by root Dec 18 02:11:37 ispc su[1927113]: + ??? root:root Dec 18 02:11:37 ispc su[1927113]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:37 ispc su[1927113]: pam_unix(su:session): session closed for user root Dec 18 02:11:37 ispc su[1927116]: Successful su for root by root Dec 18 02:11:37 ispc su[1927116]: + ??? root:root Dec 18 02:11:37 ispc su[1927116]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:39 ispc su[1927116]: pam_unix(su:session): session closed for user root Dec 18 02:11:39 ispc su[1927122]: Successful su for root by root Dec 18 02:11:39 ispc su[1927122]: + ??? root:root Dec 18 02:11:39 ispc su[1927122]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:39 ispc su[1927122]: pam_unix(su:session): session closed for user root Dec 18 02:11:39 ispc su[1927125]: Successful su for root by root Dec 18 02:11:39 ispc su[1927125]: + ??? root:root Dec 18 02:11:39 ispc su[1927125]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:44 ispc su[1927125]: pam_unix(su:session): session closed for user root Dec 18 02:11:44 ispc su[1927137]: Successful su for root by root Dec 18 02:11:44 ispc su[1927137]: + ??? root:root Dec 18 02:11:44 ispc su[1927137]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:44 ispc su[1927137]: pam_unix(su:session): session closed for user root Dec 18 02:11:44 ispc su[1927140]: Successful su for root by root Dec 18 02:11:44 ispc su[1927140]: + ??? root:root Dec 18 02:11:44 ispc su[1927140]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:45 ispc su[1927140]: pam_unix(su:session): session closed for user root Dec 18 02:11:45 ispc su[1927146]: Successful su for root by root Dec 18 02:11:45 ispc su[1927146]: + ??? root:root Dec 18 02:11:45 ispc su[1927146]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:45 ispc su[1927146]: pam_unix(su:session): session closed for user root Dec 18 02:11:45 ispc su[1927149]: Successful su for root by root Dec 18 02:11:45 ispc su[1927149]: + ??? root:root Dec 18 02:11:45 ispc su[1927149]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:46 ispc su[1927149]: pam_unix(su:session): session closed for user root Dec 18 02:11:46 ispc su[1927155]: Successful su for root by root Dec 18 02:11:46 ispc su[1927155]: + ??? root:root Dec 18 02:11:46 ispc su[1927155]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:46 ispc su[1927155]: pam_unix(su:session): session closed for user root Dec 18 02:11:46 ispc su[1927158]: Successful su for root by root Dec 18 02:11:46 ispc su[1927158]: + ??? root:root Dec 18 02:11:46 ispc su[1927158]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:47 ispc su[1927158]: pam_unix(su:session): session closed for user root Dec 18 02:11:47 ispc su[1927164]: Successful su for root by root Dec 18 02:11:47 ispc su[1927164]: + ??? root:root Dec 18 02:11:47 ispc su[1927164]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:47 ispc su[1927164]: pam_unix(su:session): session closed for user root Dec 18 02:11:47 ispc su[1927167]: Successful su for root by root Dec 18 02:11:47 ispc su[1927167]: + ??? root:root Dec 18 02:11:47 ispc su[1927167]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:52 ispc su[1927167]: pam_unix(su:session): session closed for user root Dec 18 02:11:52 ispc su[1927174]: Successful su for root by root Dec 18 02:11:52 ispc su[1927174]: + ??? root:root Dec 18 02:11:52 ispc su[1927174]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:52 ispc su[1927174]: pam_unix(su:session): session closed for user root Dec 18 02:11:52 ispc su[1927177]: Successful su for root by root Dec 18 02:11:52 ispc su[1927177]: + ??? root:root Dec 18 02:11:52 ispc su[1927177]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:54 ispc su[1927177]: pam_unix(su:session): session closed for user root Dec 18 02:11:54 ispc su[1927187]: Successful su for root by root Dec 18 02:11:54 ispc su[1927187]: + ??? root:root Dec 18 02:11:54 ispc su[1927187]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:11:54 ispc su[1927187]: pam_unix(su:session): session closed for user root Dec 18 02:11:54 ispc su[1927190]: Successful su for root by root Dec 18 02:11:54 ispc su[1927190]: + ??? root:root Dec 18 02:11:54 ispc su[1927190]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:01 ispc su[1927190]: pam_unix(su:session): session closed for user root Dec 18 02:12:01 ispc su[1927196]: Successful su for root by root Dec 18 02:12:01 ispc su[1927196]: + ??? root:root Dec 18 02:12:01 ispc su[1927196]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:01 ispc su[1927196]: pam_unix(su:session): session closed for user root Dec 18 02:12:01 ispc su[1927199]: Successful su for root by root Dec 18 02:12:01 ispc su[1927199]: + ??? root:root Dec 18 02:12:01 ispc su[1927199]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:01 ispc su[1927199]: pam_unix(su:session): session closed for user root Dec 18 02:12:01 ispc su[1927205]: Successful su for root by root Dec 18 02:12:01 ispc su[1927205]: + ??? root:root Dec 18 02:12:01 ispc su[1927205]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:01 ispc su[1927205]: pam_unix(su:session): session closed for user root Dec 18 02:12:01 ispc CRON[1927207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:12:01 ispc su[1927210]: Successful su for root by root Dec 18 02:12:01 ispc su[1927210]: + ??? root:root Dec 18 02:12:01 ispc su[1927210]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:02 ispc CRON[1927207]: pam_unix(cron:session): session closed for user root Dec 18 02:12:04 ispc su[1927210]: pam_unix(su:session): session closed for user root Dec 18 02:12:04 ispc su[1927229]: Successful su for root by root Dec 18 02:12:04 ispc su[1927229]: + ??? root:root Dec 18 02:12:04 ispc su[1927229]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:04 ispc su[1927229]: pam_unix(su:session): session closed for user root Dec 18 02:12:04 ispc su[1927232]: Successful su for root by root Dec 18 02:12:04 ispc su[1927232]: + ??? root:root Dec 18 02:12:04 ispc su[1927232]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:05 ispc su[1927232]: pam_unix(su:session): session closed for user root Dec 18 02:12:05 ispc su[1927238]: Successful su for root by root Dec 18 02:12:05 ispc su[1927238]: + ??? root:root Dec 18 02:12:05 ispc su[1927238]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:05 ispc su[1927238]: pam_unix(su:session): session closed for user root Dec 18 02:12:05 ispc su[1927241]: Successful su for root by root Dec 18 02:12:05 ispc su[1927241]: + ??? root:root Dec 18 02:12:05 ispc su[1927241]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:17 ispc sshd[1927245]: Invalid user user from 36.37.244.244 Dec 18 02:12:23 ispc su[1927241]: pam_unix(su:session): session closed for user root Dec 18 02:12:23 ispc su[1927257]: Successful su for root by root Dec 18 02:12:23 ispc su[1927257]: + ??? root:root Dec 18 02:12:23 ispc su[1927257]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:23 ispc su[1927257]: pam_unix(su:session): session closed for user root Dec 18 02:12:23 ispc su[1927260]: Successful su for root by root Dec 18 02:12:23 ispc su[1927260]: + ??? root:root Dec 18 02:12:23 ispc su[1927260]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:12:28 ispc postfix/smtpd[1927265]: sql auxprop plugin using mysql engine Dec 18 02:12:28 ispc postfix/smtpd[1927267]: sql auxprop plugin using mysql engine Dec 18 02:12:28 ispc saslauthd[1927268]: pam_mysql - SELECT returned no result. Dec 18 02:12:28 ispc saslauthd[1927268]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:12:28 ispc saslauthd[1927268]: do_auth : auth failure: [user=rapport] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:12:29 ispc saslauthd[1927269]: pam_mysql - SELECT returned no result. Dec 18 02:12:29 ispc saslauthd[1927269]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:12:29 ispc saslauthd[1927269]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:13:01 ispc CRON[1927292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:13:01 ispc CRON[1927292]: pam_unix(cron:session): session closed for user root Dec 18 02:14:01 ispc CRON[1927329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:14:02 ispc CRON[1927329]: pam_unix(cron:session): session closed for user root Dec 18 02:14:13 ispc su[1927260]: pam_unix(su:session): session closed for user root Dec 18 02:14:13 ispc su[1927346]: Successful su for root by root Dec 18 02:14:13 ispc su[1927346]: + ??? root:root Dec 18 02:14:13 ispc su[1927346]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:13 ispc su[1927346]: pam_unix(su:session): session closed for user root Dec 18 02:14:13 ispc su[1927349]: Successful su for root by root Dec 18 02:14:13 ispc su[1927349]: + ??? root:root Dec 18 02:14:13 ispc su[1927349]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:15 ispc su[1927349]: pam_unix(su:session): session closed for user root Dec 18 02:14:15 ispc su[1927359]: Successful su for root by root Dec 18 02:14:15 ispc su[1927359]: + ??? root:root Dec 18 02:14:15 ispc su[1927359]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:16 ispc su[1927359]: pam_unix(su:session): session closed for user root Dec 18 02:14:16 ispc su[1927362]: Successful su for root by root Dec 18 02:14:16 ispc su[1927362]: + ??? root:root Dec 18 02:14:16 ispc su[1927362]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:29 ispc su[1927362]: pam_unix(su:session): session closed for user root Dec 18 02:14:29 ispc su[1927375]: Successful su for root by root Dec 18 02:14:29 ispc su[1927375]: + ??? root:root Dec 18 02:14:29 ispc su[1927375]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:29 ispc su[1927375]: pam_unix(su:session): session closed for user root Dec 18 02:14:29 ispc su[1927378]: Successful su for root by root Dec 18 02:14:29 ispc su[1927378]: + ??? root:root Dec 18 02:14:29 ispc su[1927378]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:30 ispc su[1927378]: pam_unix(su:session): session closed for user root Dec 18 02:14:30 ispc su[1927384]: Successful su for root by root Dec 18 02:14:30 ispc su[1927384]: + ??? root:root Dec 18 02:14:30 ispc su[1927384]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:30 ispc su[1927384]: pam_unix(su:session): session closed for user root Dec 18 02:14:30 ispc su[1927387]: Successful su for root by root Dec 18 02:14:30 ispc su[1927387]: + ??? root:root Dec 18 02:14:30 ispc su[1927387]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:31 ispc su[1927387]: pam_unix(su:session): session closed for user root Dec 18 02:14:31 ispc su[1927393]: Successful su for root by root Dec 18 02:14:31 ispc su[1927393]: + ??? root:root Dec 18 02:14:31 ispc su[1927393]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:31 ispc su[1927393]: pam_unix(su:session): session closed for user root Dec 18 02:14:31 ispc su[1927396]: Successful su for root by root Dec 18 02:14:31 ispc su[1927396]: + ??? root:root Dec 18 02:14:31 ispc su[1927396]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:32 ispc su[1927396]: pam_unix(su:session): session closed for user root Dec 18 02:14:32 ispc su[1927402]: Successful su for root by root Dec 18 02:14:32 ispc su[1927402]: + ??? root:root Dec 18 02:14:32 ispc su[1927402]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:32 ispc su[1927402]: pam_unix(su:session): session closed for user root Dec 18 02:14:32 ispc su[1927405]: Successful su for root by root Dec 18 02:14:32 ispc su[1927405]: + ??? root:root Dec 18 02:14:32 ispc su[1927405]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:36 ispc su[1927405]: pam_unix(su:session): session closed for user root Dec 18 02:14:36 ispc su[1927415]: Successful su for root by root Dec 18 02:14:36 ispc su[1927415]: + ??? root:root Dec 18 02:14:37 ispc su[1927415]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:37 ispc su[1927415]: pam_unix(su:session): session closed for user root Dec 18 02:14:37 ispc su[1927418]: Successful su for root by root Dec 18 02:14:37 ispc su[1927418]: + ??? root:root Dec 18 02:14:37 ispc su[1927418]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:38 ispc su[1927418]: pam_unix(su:session): session closed for user root Dec 18 02:14:38 ispc su[1927424]: Successful su for root by root Dec 18 02:14:38 ispc su[1927424]: + ??? root:root Dec 18 02:14:38 ispc su[1927424]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:38 ispc su[1927424]: pam_unix(su:session): session closed for user root Dec 18 02:14:38 ispc su[1927427]: Successful su for root by root Dec 18 02:14:38 ispc su[1927427]: + ??? root:root Dec 18 02:14:38 ispc su[1927427]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:14:58 ispc sshd[1927439]: Did not receive identification string from 167.99.44.14 Dec 18 02:15:00 ispc su[1927427]: pam_unix(su:session): session closed for user root Dec 18 02:15:00 ispc su[1927442]: Successful su for root by root Dec 18 02:15:00 ispc su[1927442]: + ??? root:root Dec 18 02:15:00 ispc su[1927442]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:00 ispc su[1927442]: pam_unix(su:session): session closed for user root Dec 18 02:15:00 ispc su[1927445]: Successful su for root by root Dec 18 02:15:00 ispc su[1927445]: + ??? root:root Dec 18 02:15:00 ispc su[1927445]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:00 ispc su[1927445]: pam_unix(su:session): session closed for user root Dec 18 02:15:00 ispc su[1927451]: Successful su for root by root Dec 18 02:15:00 ispc su[1927451]: + ??? root:root Dec 18 02:15:00 ispc su[1927451]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:01 ispc su[1927451]: pam_unix(su:session): session closed for user root Dec 18 02:15:01 ispc su[1927454]: Successful su for root by root Dec 18 02:15:01 ispc su[1927454]: + ??? root:root Dec 18 02:15:01 ispc su[1927454]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:01 ispc CRON[1927461]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:15:01 ispc CRON[1927458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:15:01 ispc CRON[1927459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:15:01 ispc CRON[1927460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:15:01 ispc CRON[1927459]: pam_unix(cron:session): session closed for user root Dec 18 02:15:01 ispc CRON[1927461]: pam_unix(cron:session): session closed for user getmail Dec 18 02:15:02 ispc CRON[1927460]: pam_unix(cron:session): session closed for user root Dec 18 02:15:03 ispc CRON[1927458]: pam_unix(cron:session): session closed for user root Dec 18 02:15:07 ispc su[1927454]: pam_unix(su:session): session closed for user root Dec 18 02:15:07 ispc su[1927540]: Successful su for root by root Dec 18 02:15:07 ispc su[1927540]: + ??? root:root Dec 18 02:15:07 ispc su[1927540]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:07 ispc su[1927540]: pam_unix(su:session): session closed for user root Dec 18 02:15:07 ispc su[1927543]: Successful su for root by root Dec 18 02:15:07 ispc su[1927543]: + ??? root:root Dec 18 02:15:07 ispc su[1927543]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:09 ispc su[1927543]: pam_unix(su:session): session closed for user root Dec 18 02:15:09 ispc su[1927549]: Successful su for root by root Dec 18 02:15:09 ispc su[1927549]: + ??? root:root Dec 18 02:15:09 ispc su[1927549]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:09 ispc su[1927549]: pam_unix(su:session): session closed for user root Dec 18 02:15:09 ispc su[1927552]: Successful su for root by root Dec 18 02:15:09 ispc su[1927552]: + ??? root:root Dec 18 02:15:09 ispc su[1927552]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:14 ispc sshd[1927556]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:15:14 ispc sshd[1927556]: Invalid user ziplines from 193.110.157.47 Dec 18 02:15:17 ispc su[1927552]: pam_unix(su:session): session closed for user root Dec 18 02:15:17 ispc su[1927564]: Successful su for root by root Dec 18 02:15:17 ispc su[1927564]: + ??? root:root Dec 18 02:15:17 ispc su[1927564]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:17 ispc su[1927564]: pam_unix(su:session): session closed for user root Dec 18 02:15:17 ispc su[1927567]: Successful su for root by root Dec 18 02:15:17 ispc su[1927567]: + ??? root:root Dec 18 02:15:17 ispc su[1927567]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:18 ispc su[1927567]: pam_unix(su:session): session closed for user root Dec 18 02:15:18 ispc su[1927573]: Successful su for root by root Dec 18 02:15:18 ispc su[1927573]: + ??? root:root Dec 18 02:15:18 ispc su[1927573]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:18 ispc su[1927573]: pam_unix(su:session): session closed for user root Dec 18 02:15:18 ispc su[1927576]: Successful su for root by root Dec 18 02:15:18 ispc su[1927576]: + ??? root:root Dec 18 02:15:18 ispc su[1927576]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:35 ispc su[1927576]: pam_unix(su:session): session closed for user root Dec 18 02:15:35 ispc su[1927586]: Successful su for root by root Dec 18 02:15:35 ispc su[1927586]: + ??? root:root Dec 18 02:15:35 ispc su[1927586]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:35 ispc su[1927586]: pam_unix(su:session): session closed for user root Dec 18 02:15:35 ispc su[1927589]: Successful su for root by root Dec 18 02:15:35 ispc su[1927589]: + ??? root:root Dec 18 02:15:35 ispc su[1927589]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:36 ispc su[1927589]: pam_unix(su:session): session closed for user root Dec 18 02:15:36 ispc su[1927595]: Successful su for root by root Dec 18 02:15:36 ispc su[1927595]: + ??? root:root Dec 18 02:15:36 ispc su[1927595]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:36 ispc su[1927595]: pam_unix(su:session): session closed for user root Dec 18 02:15:36 ispc su[1927598]: Successful su for root by root Dec 18 02:15:36 ispc su[1927598]: + ??? root:root Dec 18 02:15:36 ispc su[1927598]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:36 ispc postfix/smtpd[1927603]: sql auxprop plugin using mysql engine Dec 18 02:15:37 ispc su[1927598]: pam_unix(su:session): session closed for user root Dec 18 02:15:37 ispc su[1927608]: Successful su for root by root Dec 18 02:15:37 ispc su[1927608]: + ??? root:root Dec 18 02:15:37 ispc su[1927608]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:37 ispc su[1927608]: pam_unix(su:session): session closed for user root Dec 18 02:15:37 ispc su[1927615]: Successful su for root by root Dec 18 02:15:37 ispc su[1927615]: + ??? root:root Dec 18 02:15:37 ispc saslauthd[1927613]: pam_mysql - SELECT returned no result. Dec 18 02:15:37 ispc saslauthd[1927613]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:15:37 ispc saslauthd[1927613]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:15:37 ispc su[1927615]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:40 ispc su[1927615]: pam_unix(su:session): session closed for user root Dec 18 02:15:40 ispc su[1927621]: Successful su for root by root Dec 18 02:15:40 ispc su[1927621]: + ??? root:root Dec 18 02:15:40 ispc su[1927621]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:15:40 ispc su[1927621]: pam_unix(su:session): session closed for user root Dec 18 02:15:40 ispc su[1927624]: Successful su for root by root Dec 18 02:15:40 ispc su[1927624]: + ??? root:root Dec 18 02:15:40 ispc su[1927624]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:01 ispc CRON[1927639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:16:02 ispc CRON[1927639]: pam_unix(cron:session): session closed for user root Dec 18 02:16:07 ispc su[1927624]: pam_unix(su:session): session closed for user root Dec 18 02:16:07 ispc su[1927652]: Successful su for root by root Dec 18 02:16:07 ispc su[1927652]: + ??? root:root Dec 18 02:16:07 ispc su[1927652]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:08 ispc su[1927652]: pam_unix(su:session): session closed for user root Dec 18 02:16:08 ispc su[1927659]: Successful su for root by root Dec 18 02:16:08 ispc su[1927659]: + ??? root:root Dec 18 02:16:08 ispc su[1927659]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:09 ispc su[1927659]: pam_unix(su:session): session closed for user root Dec 18 02:16:09 ispc su[1927665]: Successful su for root by root Dec 18 02:16:09 ispc su[1927665]: + ??? root:root Dec 18 02:16:09 ispc su[1927665]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:09 ispc su[1927665]: pam_unix(su:session): session closed for user root Dec 18 02:16:09 ispc su[1927668]: Successful su for root by root Dec 18 02:16:09 ispc su[1927668]: + ??? root:root Dec 18 02:16:09 ispc su[1927668]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927668]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927674]: Successful su for root by root Dec 18 02:16:10 ispc su[1927674]: + ??? root:root Dec 18 02:16:10 ispc su[1927674]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927674]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927677]: Successful su for root by root Dec 18 02:16:10 ispc su[1927677]: + ??? root:root Dec 18 02:16:10 ispc su[1927677]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927677]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927683]: Successful su for root by root Dec 18 02:16:10 ispc su[1927683]: + ??? root:root Dec 18 02:16:10 ispc su[1927683]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927683]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927686]: Successful su for root by root Dec 18 02:16:10 ispc su[1927686]: + ??? root:root Dec 18 02:16:10 ispc su[1927686]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927686]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927692]: Successful su for root by root Dec 18 02:16:10 ispc su[1927692]: + ??? root:root Dec 18 02:16:10 ispc su[1927692]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927692]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927695]: Successful su for root by root Dec 18 02:16:10 ispc su[1927695]: + ??? root:root Dec 18 02:16:10 ispc su[1927695]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:10 ispc su[1927695]: pam_unix(su:session): session closed for user root Dec 18 02:16:10 ispc su[1927701]: Successful su for root by root Dec 18 02:16:10 ispc su[1927701]: + ??? root:root Dec 18 02:16:10 ispc su[1927701]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:11 ispc su[1927701]: pam_unix(su:session): session closed for user root Dec 18 02:16:11 ispc su[1927704]: Successful su for root by root Dec 18 02:16:11 ispc su[1927704]: + ??? root:root Dec 18 02:16:11 ispc su[1927704]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:11 ispc su[1927704]: pam_unix(su:session): session closed for user root Dec 18 02:16:11 ispc su[1927710]: Successful su for root by root Dec 18 02:16:11 ispc su[1927710]: + ??? root:root Dec 18 02:16:11 ispc su[1927710]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:11 ispc su[1927710]: pam_unix(su:session): session closed for user root Dec 18 02:16:11 ispc su[1927713]: Successful su for root by root Dec 18 02:16:11 ispc su[1927713]: + ??? root:root Dec 18 02:16:11 ispc su[1927713]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:12 ispc su[1927713]: pam_unix(su:session): session closed for user root Dec 18 02:16:12 ispc su[1927721]: Successful su for root by root Dec 18 02:16:12 ispc su[1927721]: + ??? root:root Dec 18 02:16:12 ispc su[1927721]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:12 ispc su[1927721]: pam_unix(su:session): session closed for user root Dec 18 02:16:12 ispc su[1927724]: Successful su for root by root Dec 18 02:16:12 ispc su[1927724]: + ??? root:root Dec 18 02:16:12 ispc su[1927724]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:13 ispc su[1927724]: pam_unix(su:session): session closed for user root Dec 18 02:16:13 ispc su[1927730]: Successful su for root by root Dec 18 02:16:13 ispc su[1927730]: + ??? root:root Dec 18 02:16:13 ispc su[1927730]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:13 ispc su[1927730]: pam_unix(su:session): session closed for user root Dec 18 02:16:13 ispc su[1927733]: Successful su for root by root Dec 18 02:16:13 ispc su[1927733]: + ??? root:root Dec 18 02:16:13 ispc su[1927733]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:13 ispc su[1927733]: pam_unix(su:session): session closed for user root Dec 18 02:16:13 ispc su[1927739]: Successful su for root by root Dec 18 02:16:13 ispc su[1927739]: + ??? root:root Dec 18 02:16:13 ispc su[1927739]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:13 ispc su[1927739]: pam_unix(su:session): session closed for user root Dec 18 02:16:13 ispc su[1927743]: Successful su for root by root Dec 18 02:16:13 ispc su[1927743]: + ??? root:root Dec 18 02:16:13 ispc su[1927743]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:14 ispc su[1927743]: pam_unix(su:session): session closed for user root Dec 18 02:16:14 ispc su[1927750]: Successful su for root by root Dec 18 02:16:14 ispc su[1927750]: + ??? root:root Dec 18 02:16:14 ispc su[1927750]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:15 ispc su[1927750]: pam_unix(su:session): session closed for user root Dec 18 02:16:15 ispc su[1927753]: Successful su for root by root Dec 18 02:16:15 ispc su[1927753]: + ??? root:root Dec 18 02:16:15 ispc su[1927753]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:15 ispc sshd[1927741]: Invalid user alfa from 217.60.38.20 Dec 18 02:16:17 ispc su[1927753]: pam_unix(su:session): session closed for user root Dec 18 02:16:17 ispc su[1927759]: Successful su for root by root Dec 18 02:16:17 ispc su[1927759]: + ??? root:root Dec 18 02:16:17 ispc su[1927759]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:17 ispc su[1927759]: pam_unix(su:session): session closed for user root Dec 18 02:16:17 ispc su[1927762]: Successful su for root by root Dec 18 02:16:17 ispc su[1927762]: + ??? root:root Dec 18 02:16:17 ispc su[1927762]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:17 ispc su[1927762]: pam_unix(su:session): session closed for user root Dec 18 02:16:17 ispc su[1927768]: Successful su for root by root Dec 18 02:16:17 ispc su[1927768]: + ??? root:root Dec 18 02:16:17 ispc su[1927768]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:17 ispc su[1927768]: pam_unix(su:session): session closed for user root Dec 18 02:16:17 ispc su[1927771]: Successful su for root by root Dec 18 02:16:17 ispc su[1927771]: + ??? root:root Dec 18 02:16:17 ispc su[1927771]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:20 ispc su[1927771]: pam_unix(su:session): session closed for user root Dec 18 02:16:20 ispc su[1927781]: Successful su for root by root Dec 18 02:16:20 ispc su[1927781]: + ??? root:root Dec 18 02:16:20 ispc su[1927781]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:20 ispc su[1927781]: pam_unix(su:session): session closed for user root Dec 18 02:16:20 ispc su[1927784]: Successful su for root by root Dec 18 02:16:20 ispc su[1927784]: + ??? root:root Dec 18 02:16:20 ispc su[1927784]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:37 ispc su[1927784]: pam_unix(su:session): session closed for user root Dec 18 02:16:37 ispc su[1927794]: Successful su for root by root Dec 18 02:16:37 ispc su[1927794]: + ??? root:root Dec 18 02:16:37 ispc su[1927794]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:37 ispc su[1927794]: pam_unix(su:session): session closed for user root Dec 18 02:16:37 ispc su[1927797]: Successful su for root by root Dec 18 02:16:37 ispc su[1927797]: + ??? root:root Dec 18 02:16:37 ispc su[1927797]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:41 ispc su[1927797]: pam_unix(su:session): session closed for user root Dec 18 02:16:41 ispc su[1927809]: Successful su for root by root Dec 18 02:16:41 ispc su[1927809]: + ??? root:root Dec 18 02:16:41 ispc su[1927809]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:41 ispc su[1927809]: pam_unix(su:session): session closed for user root Dec 18 02:16:41 ispc su[1927812]: Successful su for root by root Dec 18 02:16:41 ispc su[1927812]: + ??? root:root Dec 18 02:16:41 ispc su[1927812]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:43 ispc su[1927812]: pam_unix(su:session): session closed for user root Dec 18 02:16:43 ispc su[1927818]: Successful su for root by root Dec 18 02:16:43 ispc su[1927818]: + ??? root:root Dec 18 02:16:43 ispc su[1927818]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:43 ispc su[1927818]: pam_unix(su:session): session closed for user root Dec 18 02:16:43 ispc su[1927821]: Successful su for root by root Dec 18 02:16:43 ispc su[1927821]: + ??? root:root Dec 18 02:16:43 ispc su[1927821]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:43 ispc su[1927821]: pam_unix(su:session): session closed for user root Dec 18 02:16:43 ispc su[1927827]: Successful su for root by root Dec 18 02:16:43 ispc su[1927827]: + ??? root:root Dec 18 02:16:43 ispc su[1927827]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:44 ispc su[1927827]: pam_unix(su:session): session closed for user root Dec 18 02:16:44 ispc su[1927830]: Successful su for root by root Dec 18 02:16:44 ispc su[1927830]: + ??? root:root Dec 18 02:16:44 ispc su[1927830]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:50 ispc su[1927830]: pam_unix(su:session): session closed for user root Dec 18 02:16:50 ispc su[1927840]: Successful su for root by root Dec 18 02:16:50 ispc su[1927840]: + ??? root:root Dec 18 02:16:50 ispc su[1927840]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:50 ispc su[1927840]: pam_unix(su:session): session closed for user root Dec 18 02:16:50 ispc su[1927843]: Successful su for root by root Dec 18 02:16:50 ispc su[1927843]: + ??? root:root Dec 18 02:16:50 ispc su[1927843]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:53 ispc su[1927843]: pam_unix(su:session): session closed for user root Dec 18 02:16:53 ispc su[1927849]: Successful su for root by root Dec 18 02:16:53 ispc su[1927849]: + ??? root:root Dec 18 02:16:53 ispc su[1927849]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:53 ispc su[1927849]: pam_unix(su:session): session closed for user root Dec 18 02:16:53 ispc su[1927852]: Successful su for root by root Dec 18 02:16:53 ispc su[1927852]: + ??? root:root Dec 18 02:16:53 ispc su[1927852]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:54 ispc su[1927852]: pam_unix(su:session): session closed for user root Dec 18 02:16:54 ispc su[1927858]: Successful su for root by root Dec 18 02:16:54 ispc su[1927858]: + ??? root:root Dec 18 02:16:54 ispc su[1927858]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:54 ispc su[1927858]: pam_unix(su:session): session closed for user root Dec 18 02:16:54 ispc su[1927861]: Successful su for root by root Dec 18 02:16:54 ispc su[1927861]: + ??? root:root Dec 18 02:16:54 ispc su[1927861]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:58 ispc su[1927861]: pam_unix(su:session): session closed for user root Dec 18 02:16:58 ispc su[1927867]: Successful su for root by root Dec 18 02:16:58 ispc su[1927867]: + ??? root:root Dec 18 02:16:58 ispc su[1927867]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:58 ispc su[1927867]: pam_unix(su:session): session closed for user root Dec 18 02:16:58 ispc su[1927870]: Successful su for root by root Dec 18 02:16:58 ispc su[1927870]: + ??? root:root Dec 18 02:16:58 ispc su[1927870]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:59 ispc su[1927870]: pam_unix(su:session): session closed for user root Dec 18 02:16:59 ispc su[1927876]: Successful su for root by root Dec 18 02:16:59 ispc su[1927876]: + ??? root:root Dec 18 02:16:59 ispc su[1927876]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:16:59 ispc su[1927876]: pam_unix(su:session): session closed for user root Dec 18 02:16:59 ispc su[1927879]: Successful su for root by root Dec 18 02:16:59 ispc su[1927879]: + ??? root:root Dec 18 02:16:59 ispc su[1927879]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:17:01 ispc CRON[1927889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:17:01 ispc CRON[1927889]: pam_unix(cron:session): session closed for user root Dec 18 02:17:37 ispc su[1927879]: pam_unix(su:session): session closed for user root Dec 18 02:17:37 ispc su[1927914]: Successful su for root by root Dec 18 02:17:37 ispc su[1927914]: + ??? root:root Dec 18 02:17:37 ispc su[1927914]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:17:37 ispc su[1927914]: pam_unix(su:session): session closed for user root Dec 18 02:17:37 ispc su[1927917]: Successful su for root by root Dec 18 02:17:37 ispc su[1927917]: + ??? root:root Dec 18 02:17:37 ispc su[1927917]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:17:38 ispc sshd[1927921]: Invalid user admin from 167.99.44.14 Dec 18 02:18:00 ispc su[1927917]: pam_unix(su:session): session closed for user root Dec 18 02:18:00 ispc su[1927942]: Successful su for root by root Dec 18 02:18:00 ispc su[1927942]: + ??? root:root Dec 18 02:18:00 ispc su[1927942]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:00 ispc su[1927942]: pam_unix(su:session): session closed for user root Dec 18 02:18:00 ispc su[1927945]: Successful su for root by root Dec 18 02:18:00 ispc su[1927945]: + ??? root:root Dec 18 02:18:00 ispc su[1927945]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:01 ispc CRON[1927953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:18:02 ispc CRON[1927953]: pam_unix(cron:session): session closed for user root Dec 18 02:18:02 ispc su[1927945]: pam_unix(su:session): session closed for user root Dec 18 02:18:02 ispc su[1927966]: Successful su for root by root Dec 18 02:18:02 ispc su[1927966]: + ??? root:root Dec 18 02:18:02 ispc su[1927966]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:02 ispc su[1927966]: pam_unix(su:session): session closed for user root Dec 18 02:18:02 ispc su[1927969]: Successful su for root by root Dec 18 02:18:02 ispc su[1927969]: + ??? root:root Dec 18 02:18:02 ispc su[1927969]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:03 ispc su[1927969]: pam_unix(su:session): session closed for user root Dec 18 02:18:03 ispc su[1927975]: Successful su for root by root Dec 18 02:18:03 ispc su[1927975]: + ??? root:root Dec 18 02:18:03 ispc su[1927975]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:03 ispc su[1927975]: pam_unix(su:session): session closed for user root Dec 18 02:18:03 ispc su[1927978]: Successful su for root by root Dec 18 02:18:03 ispc su[1927978]: + ??? root:root Dec 18 02:18:03 ispc su[1927978]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:04 ispc su[1927978]: pam_unix(su:session): session closed for user root Dec 18 02:18:04 ispc su[1927984]: Successful su for root by root Dec 18 02:18:04 ispc su[1927984]: + ??? root:root Dec 18 02:18:04 ispc su[1927984]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:04 ispc su[1927984]: pam_unix(su:session): session closed for user root Dec 18 02:18:04 ispc su[1927987]: Successful su for root by root Dec 18 02:18:04 ispc su[1927987]: + ??? root:root Dec 18 02:18:04 ispc su[1927987]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:20 ispc su[1927987]: pam_unix(su:session): session closed for user root Dec 18 02:18:20 ispc su[1928004]: Successful su for root by root Dec 18 02:18:20 ispc su[1928004]: + ??? root:root Dec 18 02:18:20 ispc su[1928004]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:21 ispc su[1928004]: pam_unix(su:session): session closed for user root Dec 18 02:18:21 ispc su[1928007]: Successful su for root by root Dec 18 02:18:21 ispc su[1928007]: + ??? root:root Dec 18 02:18:21 ispc su[1928007]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:26 ispc sshd[1928011]: Invalid user admin from 167.99.44.14 Dec 18 02:18:27 ispc su[1928007]: pam_unix(su:session): session closed for user root Dec 18 02:18:27 ispc su[1928015]: Successful su for root by root Dec 18 02:18:27 ispc su[1928015]: + ??? root:root Dec 18 02:18:27 ispc su[1928015]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:27 ispc su[1928015]: pam_unix(su:session): session closed for user root Dec 18 02:18:27 ispc su[1928018]: Successful su for root by root Dec 18 02:18:27 ispc su[1928018]: + ??? root:root Dec 18 02:18:27 ispc su[1928018]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:28 ispc su[1928018]: pam_unix(su:session): session closed for user root Dec 18 02:18:28 ispc su[1928024]: Successful su for root by root Dec 18 02:18:28 ispc su[1928024]: + ??? root:root Dec 18 02:18:28 ispc su[1928024]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:28 ispc su[1928024]: pam_unix(su:session): session closed for user root Dec 18 02:18:28 ispc su[1928027]: Successful su for root by root Dec 18 02:18:28 ispc su[1928027]: + ??? root:root Dec 18 02:18:28 ispc su[1928027]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:28 ispc su[1928027]: pam_unix(su:session): session closed for user root Dec 18 02:18:28 ispc su[1928033]: Successful su for root by root Dec 18 02:18:28 ispc su[1928033]: + ??? root:root Dec 18 02:18:28 ispc su[1928033]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:28 ispc su[1928033]: pam_unix(su:session): session closed for user root Dec 18 02:18:28 ispc su[1928036]: Successful su for root by root Dec 18 02:18:28 ispc su[1928036]: + ??? root:root Dec 18 02:18:28 ispc su[1928036]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:29 ispc su[1928036]: pam_unix(su:session): session closed for user root Dec 18 02:18:29 ispc su[1928042]: Successful su for root by root Dec 18 02:18:29 ispc su[1928042]: + ??? root:root Dec 18 02:18:29 ispc su[1928042]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:29 ispc su[1928042]: pam_unix(su:session): session closed for user root Dec 18 02:18:29 ispc su[1928045]: Successful su for root by root Dec 18 02:18:29 ispc su[1928045]: + ??? root:root Dec 18 02:18:29 ispc su[1928045]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:33 ispc su[1928045]: pam_unix(su:session): session closed for user root Dec 18 02:18:33 ispc su[1928057]: Successful su for root by root Dec 18 02:18:33 ispc su[1928057]: + ??? root:root Dec 18 02:18:33 ispc su[1928057]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:33 ispc su[1928057]: pam_unix(su:session): session closed for user root Dec 18 02:18:33 ispc su[1928060]: Successful su for root by root Dec 18 02:18:33 ispc su[1928060]: + ??? root:root Dec 18 02:18:33 ispc su[1928060]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:33 ispc su[1928060]: pam_unix(su:session): session closed for user root Dec 18 02:18:33 ispc su[1928066]: Successful su for root by root Dec 18 02:18:33 ispc su[1928066]: + ??? root:root Dec 18 02:18:33 ispc su[1928066]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:33 ispc su[1928066]: pam_unix(su:session): session closed for user root Dec 18 02:18:33 ispc su[1928069]: Successful su for root by root Dec 18 02:18:33 ispc su[1928069]: + ??? root:root Dec 18 02:18:33 ispc su[1928069]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:40 ispc su[1928069]: pam_unix(su:session): session closed for user root Dec 18 02:18:40 ispc su[1928075]: Successful su for root by root Dec 18 02:18:40 ispc su[1928075]: + ??? root:root Dec 18 02:18:40 ispc su[1928075]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:40 ispc su[1928075]: pam_unix(su:session): session closed for user root Dec 18 02:18:40 ispc su[1928078]: Successful su for root by root Dec 18 02:18:40 ispc su[1928078]: + ??? root:root Dec 18 02:18:40 ispc su[1928078]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:46 ispc sshd[1928086]: Invalid user solv from 80.94.92.182 Dec 18 02:18:47 ispc su[1928078]: pam_unix(su:session): session closed for user root Dec 18 02:18:47 ispc su[1928090]: Successful su for root by root Dec 18 02:18:47 ispc su[1928090]: + ??? root:root Dec 18 02:18:47 ispc su[1928090]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:18:47 ispc su[1928090]: pam_unix(su:session): session closed for user root Dec 18 02:18:47 ispc su[1928093]: Successful su for root by root Dec 18 02:18:47 ispc su[1928093]: + ??? root:root Dec 18 02:18:47 ispc su[1928093]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:01 ispc CRON[1928105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:19:02 ispc CRON[1928105]: pam_unix(cron:session): session closed for user root Dec 18 02:19:05 ispc su[1928093]: pam_unix(su:session): session closed for user root Dec 18 02:19:05 ispc su[1928118]: Successful su for root by root Dec 18 02:19:05 ispc su[1928118]: + ??? root:root Dec 18 02:19:05 ispc su[1928118]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:05 ispc su[1928118]: pam_unix(su:session): session closed for user root Dec 18 02:19:05 ispc su[1928121]: Successful su for root by root Dec 18 02:19:05 ispc su[1928121]: + ??? root:root Dec 18 02:19:05 ispc su[1928121]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:07 ispc su[1928121]: pam_unix(su:session): session closed for user root Dec 18 02:19:07 ispc su[1928127]: Successful su for root by root Dec 18 02:19:07 ispc su[1928127]: + ??? root:root Dec 18 02:19:07 ispc su[1928127]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:07 ispc su[1928127]: pam_unix(su:session): session closed for user root Dec 18 02:19:07 ispc su[1928130]: Successful su for root by root Dec 18 02:19:07 ispc su[1928130]: + ??? root:root Dec 18 02:19:07 ispc su[1928130]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:11 ispc su[1928130]: pam_unix(su:session): session closed for user root Dec 18 02:19:11 ispc su[1928136]: Successful su for root by root Dec 18 02:19:11 ispc su[1928136]: + ??? root:root Dec 18 02:19:11 ispc su[1928136]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:11 ispc su[1928136]: pam_unix(su:session): session closed for user root Dec 18 02:19:11 ispc su[1928140]: Successful su for root by root Dec 18 02:19:11 ispc su[1928140]: + ??? root:root Dec 18 02:19:11 ispc su[1928140]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:11 ispc su[1928140]: pam_unix(su:session): session closed for user root Dec 18 02:19:11 ispc su[1928149]: Successful su for root by root Dec 18 02:19:11 ispc su[1928149]: + ??? root:root Dec 18 02:19:11 ispc su[1928149]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:12 ispc su[1928149]: pam_unix(su:session): session closed for user root Dec 18 02:19:12 ispc su[1928152]: Successful su for root by root Dec 18 02:19:12 ispc su[1928152]: + ??? root:root Dec 18 02:19:12 ispc su[1928152]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:12 ispc su[1928152]: pam_unix(su:session): session closed for user root Dec 18 02:19:12 ispc su[1928158]: Successful su for root by root Dec 18 02:19:12 ispc su[1928158]: + ??? root:root Dec 18 02:19:12 ispc su[1928158]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:12 ispc su[1928158]: pam_unix(su:session): session closed for user root Dec 18 02:19:12 ispc su[1928161]: Successful su for root by root Dec 18 02:19:12 ispc su[1928161]: + ??? root:root Dec 18 02:19:12 ispc su[1928161]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:12 ispc su[1928161]: pam_unix(su:session): session closed for user root Dec 18 02:19:12 ispc su[1928167]: Successful su for root by root Dec 18 02:19:12 ispc su[1928167]: + ??? root:root Dec 18 02:19:12 ispc su[1928167]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:13 ispc su[1928167]: pam_unix(su:session): session closed for user root Dec 18 02:19:13 ispc su[1928170]: Successful su for root by root Dec 18 02:19:13 ispc su[1928170]: + ??? root:root Dec 18 02:19:13 ispc su[1928170]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:16 ispc sshd[1928174]: Invalid user admin from 167.99.44.14 Dec 18 02:19:16 ispc sshd[1928176]: Invalid user blceu from 139.59.66.222 Dec 18 02:19:28 ispc su[1928170]: pam_unix(su:session): session closed for user root Dec 18 02:19:28 ispc su[1928184]: Successful su for root by root Dec 18 02:19:28 ispc su[1928184]: + ??? root:root Dec 18 02:19:28 ispc su[1928184]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:28 ispc su[1928184]: pam_unix(su:session): session closed for user root Dec 18 02:19:28 ispc su[1928187]: Successful su for root by root Dec 18 02:19:28 ispc su[1928187]: + ??? root:root Dec 18 02:19:28 ispc su[1928187]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:28 ispc su[1928187]: pam_unix(su:session): session closed for user root Dec 18 02:19:28 ispc su[1928193]: Successful su for root by root Dec 18 02:19:28 ispc su[1928193]: + ??? root:root Dec 18 02:19:28 ispc su[1928193]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:28 ispc su[1928193]: pam_unix(su:session): session closed for user root Dec 18 02:19:28 ispc su[1928196]: Successful su for root by root Dec 18 02:19:28 ispc su[1928196]: + ??? root:root Dec 18 02:19:28 ispc su[1928196]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:32 ispc su[1928196]: pam_unix(su:session): session closed for user root Dec 18 02:19:32 ispc su[1928208]: Successful su for root by root Dec 18 02:19:32 ispc su[1928208]: + ??? root:root Dec 18 02:19:32 ispc su[1928208]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:32 ispc su[1928208]: pam_unix(su:session): session closed for user root Dec 18 02:19:32 ispc su[1928211]: Successful su for root by root Dec 18 02:19:32 ispc su[1928211]: + ??? root:root Dec 18 02:19:32 ispc su[1928211]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:32 ispc su[1928211]: pam_unix(su:session): session closed for user root Dec 18 02:19:33 ispc su[1928217]: Successful su for root by root Dec 18 02:19:33 ispc su[1928217]: + ??? root:root Dec 18 02:19:33 ispc su[1928217]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:33 ispc su[1928217]: pam_unix(su:session): session closed for user root Dec 18 02:19:33 ispc su[1928220]: Successful su for root by root Dec 18 02:19:33 ispc su[1928220]: + ??? root:root Dec 18 02:19:33 ispc su[1928220]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:39 ispc su[1928220]: pam_unix(su:session): session closed for user root Dec 18 02:19:39 ispc su[1928228]: Successful su for root by root Dec 18 02:19:39 ispc su[1928228]: + ??? root:root Dec 18 02:19:39 ispc su[1928228]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:39 ispc su[1928228]: pam_unix(su:session): session closed for user root Dec 18 02:19:39 ispc su[1928231]: Successful su for root by root Dec 18 02:19:39 ispc su[1928231]: + ??? root:root Dec 18 02:19:39 ispc su[1928231]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:46 ispc su[1928231]: pam_unix(su:session): session closed for user root Dec 18 02:19:46 ispc su[1928241]: Successful su for root by root Dec 18 02:19:46 ispc su[1928241]: + ??? root:root Dec 18 02:19:46 ispc su[1928241]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:46 ispc su[1928241]: pam_unix(su:session): session closed for user root Dec 18 02:19:46 ispc su[1928244]: Successful su for root by root Dec 18 02:19:46 ispc su[1928244]: + ??? root:root Dec 18 02:19:46 ispc su[1928244]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:19:52 ispc su[1928244]: pam_unix(su:session): session closed for user root Dec 18 02:19:54 ispc su[1928339]: Successful su for root by root Dec 18 02:19:54 ispc su[1928339]: + ??? root:root Dec 18 02:19:54 ispc su[1928339]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:20:01 ispc CRON[1928345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:20:01 ispc CRON[1928346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:20:01 ispc CRON[1928347]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:20:01 ispc CRON[1928348]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:20:01 ispc CRON[1928349]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:20:01 ispc CRON[1928346]: pam_unix(cron:session): session closed for user root Dec 18 02:20:01 ispc CRON[1928349]: pam_unix(cron:session): session closed for user getmail Dec 18 02:20:01 ispc CRON[1928347]: pam_unix(cron:session): session closed for user www-data Dec 18 02:20:02 ispc CRON[1928345]: pam_unix(cron:session): session closed for user root Dec 18 02:20:02 ispc CRON[1928348]: pam_unix(cron:session): session closed for user root Dec 18 02:20:02 ispc su[1928339]: pam_unix(su:session): session closed for user root Dec 18 02:20:02 ispc su[1928430]: Successful su for root by root Dec 18 02:20:02 ispc su[1928430]: + ??? root:root Dec 18 02:20:02 ispc su[1928430]: pam_unix(su:session): session opened for user root by (uid=0) Dec 18 02:20:04 ispc sshd[1928432]: Invalid user admin from 167.99.44.14 Dec 18 02:20:28 ispc postfix/smtpd[1928443]: sql auxprop plugin using mysql engine Dec 18 02:20:29 ispc saslauthd[1928446]: pam_mysql - SELECT returned no result. Dec 18 02:20:29 ispc saslauthd[1928446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:20:29 ispc saslauthd[1928446]: do_auth : auth failure: [user=access@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 02:20:51 ispc sshd[1928459]: Invalid user admin from 167.99.44.14 Dec 18 02:21:01 ispc CRON[1928465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:21:01 ispc CRON[1928466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:21:01 ispc CRON[1928465]: pam_unix(cron:session): session closed for user root Dec 18 02:21:02 ispc CRON[1928466]: pam_unix(cron:session): session closed for user root Dec 18 02:21:35 ispc sshd[1928496]: Invalid user admin from 167.99.44.14 Dec 18 02:22:01 ispc CRON[1928513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:22:01 ispc CRON[1928513]: pam_unix(cron:session): session closed for user root Dec 18 02:23:01 ispc CRON[1928558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:23:02 ispc CRON[1928558]: pam_unix(cron:session): session closed for user root Dec 18 02:24:01 ispc CRON[1928597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:24:02 ispc CRON[1928597]: pam_unix(cron:session): session closed for user root Dec 18 02:24:21 ispc postfix/smtpd[1928620]: sql auxprop plugin using mysql engine Dec 18 02:24:22 ispc saslauthd[1928623]: pam_mysql - SELECT returned no result. Dec 18 02:24:22 ispc saslauthd[1928623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:24:22 ispc saslauthd[1928623]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:25:01 ispc CRON[1928646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:25:01 ispc CRON[1928645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:25:01 ispc CRON[1928647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:25:01 ispc CRON[1928648]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:25:01 ispc CRON[1928646]: pam_unix(cron:session): session closed for user root Dec 18 02:25:01 ispc CRON[1928648]: pam_unix(cron:session): session closed for user getmail Dec 18 02:25:02 ispc CRON[1928645]: pam_unix(cron:session): session closed for user root Dec 18 02:25:02 ispc CRON[1928647]: pam_unix(cron:session): session closed for user root Dec 18 02:25:36 ispc sshd[1928740]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:26:01 ispc CRON[1928753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:26:02 ispc CRON[1928753]: pam_unix(cron:session): session closed for user root Dec 18 02:26:27 ispc sshd[1928772]: Invalid user sol from 80.94.92.182 Dec 18 02:27:01 ispc CRON[1928790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:27:01 ispc CRON[1928790]: pam_unix(cron:session): session closed for user root Dec 18 02:27:25 ispc postfix/smtpd[1928811]: sql auxprop plugin using mysql engine Dec 18 02:27:26 ispc saslauthd[1928813]: pam_mysql - SELECT returned no result. Dec 18 02:27:26 ispc saslauthd[1928813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:27:26 ispc saslauthd[1928813]: do_auth : auth failure: [user=video] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:27:32 ispc saslauthd[1928818]: pam_mysql - SELECT returned no result. Dec 18 02:27:32 ispc saslauthd[1928818]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:27:32 ispc saslauthd[1928818]: do_auth : auth failure: [user=rcust] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:28:00 ispc postfix/smtpd[1928842]: sql auxprop plugin using mysql engine Dec 18 02:28:01 ispc sshd[1928840]: Invalid user martof from 175.125.92.77 Dec 18 02:28:01 ispc CRON[1928844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:28:02 ispc CRON[1928844]: pam_unix(cron:session): session closed for user root Dec 18 02:29:01 ispc CRON[1928884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:29:02 ispc CRON[1928884]: pam_unix(cron:session): session closed for user root Dec 18 02:29:10 ispc sshd[1928900]: Invalid user ziplines from 139.59.66.222 Dec 18 02:30:01 ispc CRON[1928926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:30:01 ispc CRON[1928930]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:30:01 ispc CRON[1928929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:30:01 ispc CRON[1928927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:30:01 ispc CRON[1928928]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:30:01 ispc CRON[1928928]: pam_unix(cron:session): session closed for user www-data Dec 18 02:30:01 ispc CRON[1928927]: pam_unix(cron:session): session closed for user root Dec 18 02:30:01 ispc CRON[1928930]: pam_unix(cron:session): session closed for user getmail Dec 18 02:30:01 ispc CRON[1928929]: pam_unix(cron:session): session closed for user root Dec 18 02:30:01 ispc CRON[1928926]: pam_unix(cron:session): session closed for user root Dec 18 02:31:01 ispc CRON[1929029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:31:02 ispc CRON[1929029]: pam_unix(cron:session): session closed for user root Dec 18 02:31:31 ispc postfix/smtpd[1929057]: sql auxprop plugin using mysql engine Dec 18 02:31:31 ispc CRON[1927054]: pam_unix(cron:session): session closed for user root Dec 18 02:32:01 ispc CRON[1929060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:32:02 ispc CRON[1929060]: pam_unix(cron:session): session closed for user root Dec 18 02:32:21 ispc sshd[1929072]: Invalid user blceu from 103.100.209.172 Dec 18 02:33:01 ispc CRON[1929086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:33:01 ispc CRON[1929086]: pam_unix(cron:session): session closed for user root Dec 18 02:33:09 ispc saslauthd[1929099]: pam_mysql - SELECT returned no result. Dec 18 02:33:09 ispc saslauthd[1929099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:33:09 ispc saslauthd[1929099]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:34:01 ispc CRON[1929106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:34:02 ispc CRON[1929106]: pam_unix(cron:session): session closed for user root Dec 18 02:35:01 ispc CRON[1929121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:35:01 ispc CRON[1929122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:35:01 ispc CRON[1929123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:35:01 ispc CRON[1929124]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:35:01 ispc CRON[1929122]: pam_unix(cron:session): session closed for user root Dec 18 02:35:01 ispc CRON[1929124]: pam_unix(cron:session): session closed for user getmail Dec 18 02:35:02 ispc CRON[1929121]: pam_unix(cron:session): session closed for user root Dec 18 02:35:30 ispc sshd[1929231]: Did not receive identification string from 134.122.54.69 Dec 18 02:35:39 ispc CRON[1929123]: pam_unix(cron:session): session closed for user root Dec 18 02:36:01 ispc CRON[1929232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:36:12 ispc sshd[1929248]: Invalid user ziplines from 5.129.195.224 Dec 18 02:36:26 ispc sshd[1929256]: Invalid user admin from 134.122.54.69 Dec 18 02:37:01 ispc CRON[1929270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:37:01 ispc CRON[1929270]: pam_unix(cron:session): session closed for user root Dec 18 02:37:05 ispc sshd[1929285]: Invalid user admin from 134.122.54.69 Dec 18 02:37:44 ispc sshd[1929305]: Invalid user admin from 134.122.54.69 Dec 18 02:37:49 ispc postfix/smtpd[1929311]: sql auxprop plugin using mysql engine Dec 18 02:38:01 ispc CRON[1929321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:38:01 ispc CRON[1929321]: pam_unix(cron:session): session closed for user root Dec 18 02:38:23 ispc sshd[1929345]: Invalid user admin from 134.122.54.69 Dec 18 02:39:01 ispc sshd[1929364]: Invalid user admin from 134.122.54.69 Dec 18 02:39:01 ispc CRON[1929367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:39:01 ispc CRON[1929366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:39:02 ispc CRON[1929366]: pam_unix(cron:session): session closed for user root Dec 18 02:39:02 ispc CRON[1929367]: pam_unix(cron:session): session closed for user root Dec 18 02:39:38 ispc sshd[1929406]: Invalid user admin from 134.122.54.69 Dec 18 02:40:01 ispc CRON[1929426]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:40:01 ispc CRON[1929422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:40:01 ispc CRON[1929423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:40:01 ispc CRON[1929424]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:40:01 ispc CRON[1929425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:40:01 ispc CRON[1929424]: pam_unix(cron:session): session closed for user www-data Dec 18 02:40:01 ispc CRON[1929423]: pam_unix(cron:session): session closed for user root Dec 18 02:40:01 ispc CRON[1929426]: pam_unix(cron:session): session closed for user getmail Dec 18 02:40:01 ispc CRON[1929425]: pam_unix(cron:session): session closed for user root Dec 18 02:40:02 ispc CRON[1929422]: pam_unix(cron:session): session closed for user root Dec 18 02:41:01 ispc CRON[1929529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:41:01 ispc CRON[1929529]: pam_unix(cron:session): session closed for user root Dec 18 02:41:25 ispc postfix/smtpd[1929549]: sql auxprop plugin using mysql engine Dec 18 02:41:26 ispc saslauthd[1929552]: pam_mysql - SELECT returned no result. Dec 18 02:41:26 ispc saslauthd[1929552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:41:26 ispc saslauthd[1929552]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:42:01 ispc CRON[1929572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:42:02 ispc CRON[1929572]: pam_unix(cron:session): session closed for user root Dec 18 02:42:37 ispc saslauthd[1929595]: pam_mysql - SELECT returned no result. Dec 18 02:42:37 ispc saslauthd[1929595]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:42:37 ispc saslauthd[1929595]: do_auth : auth failure: [user=rdc123] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:43:01 ispc CRON[1929616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:43:02 ispc CRON[1929616]: pam_unix(cron:session): session closed for user root Dec 18 02:43:05 ispc sshd[1929627]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 02:44:01 ispc CRON[1929653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:44:01 ispc CRON[1929653]: pam_unix(cron:session): session closed for user root Dec 18 02:45:01 ispc CRON[1929695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:45:01 ispc CRON[1929696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:45:01 ispc CRON[1929697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:45:01 ispc CRON[1929698]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:45:01 ispc CRON[1929696]: pam_unix(cron:session): session closed for user root Dec 18 02:45:01 ispc CRON[1929698]: pam_unix(cron:session): session closed for user getmail Dec 18 02:45:02 ispc CRON[1929695]: pam_unix(cron:session): session closed for user root Dec 18 02:45:03 ispc CRON[1929697]: pam_unix(cron:session): session closed for user root Dec 18 02:45:49 ispc postfix/smtpd[1929792]: sql auxprop plugin using mysql engine Dec 18 02:45:49 ispc saslauthd[1929798]: pam_mysql - SELECT returned no result. Dec 18 02:45:49 ispc saslauthd[1929798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:45:49 ispc saslauthd[1929798]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:46:01 ispc CRON[1929804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:46:02 ispc CRON[1929804]: pam_unix(cron:session): session closed for user root Dec 18 02:47:01 ispc CRON[1929844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:47:01 ispc CRON[1929844]: pam_unix(cron:session): session closed for user root Dec 18 02:48:01 ispc CRON[1929892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:48:02 ispc CRON[1929892]: pam_unix(cron:session): session closed for user root Dec 18 02:48:56 ispc postfix/smtpd[1929926]: sql auxprop plugin using mysql engine Dec 18 02:49:01 ispc CRON[1929928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:49:02 ispc CRON[1929928]: pam_unix(cron:session): session closed for user root Dec 18 02:49:44 ispc postfix/smtpd[1929961]: sql auxprop plugin using mysql engine Dec 18 02:50:01 ispc CRON[1929967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:50:01 ispc CRON[1929969]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 02:50:01 ispc CRON[1929968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:50:01 ispc CRON[1929971]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:50:01 ispc CRON[1929970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:50:01 ispc CRON[1929968]: pam_unix(cron:session): session closed for user root Dec 18 02:50:01 ispc CRON[1929969]: pam_unix(cron:session): session closed for user www-data Dec 18 02:50:01 ispc CRON[1929971]: pam_unix(cron:session): session closed for user getmail Dec 18 02:50:01 ispc CRON[1929970]: pam_unix(cron:session): session closed for user root Dec 18 02:50:02 ispc CRON[1929967]: pam_unix(cron:session): session closed for user root Dec 18 02:50:02 ispc postfix/smtpd[1930045]: sql auxprop plugin using mysql engine Dec 18 02:50:03 ispc saslauthd[1930047]: pam_mysql - SELECT returned no result. Dec 18 02:50:03 ispc saslauthd[1930047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:50:03 ispc saslauthd[1930047]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:51:01 ispc CRON[1930077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:51:02 ispc CRON[1930077]: pam_unix(cron:session): session closed for user root Dec 18 02:52:01 ispc CRON[1930116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:52:01 ispc CRON[1930116]: pam_unix(cron:session): session closed for user root Dec 18 02:52:42 ispc sshd[1930145]: Invalid user blceu from 175.125.92.77 Dec 18 02:53:01 ispc CRON[1930167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:53:02 ispc CRON[1930167]: pam_unix(cron:session): session closed for user root Dec 18 02:53:31 ispc sshd[1930194]: Invalid user blceu from 51.79.36.60 Dec 18 02:53:41 ispc sshd[1930201]: Invalid user ziplines from 175.125.92.77 Dec 18 02:53:54 ispc sshd[1930216]: Bad protocol version identification 'GET / HTTP/1.1' from 64.62.156.202 Dec 18 02:54:01 ispc CRON[1930222]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:54:02 ispc CRON[1930222]: pam_unix(cron:session): session closed for user root Dec 18 02:54:46 ispc sshd[1930251]: Invalid user martof from 139.59.66.222 Dec 18 02:55:01 ispc CRON[1930261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:55:01 ispc CRON[1930262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:55:01 ispc CRON[1930263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:55:01 ispc CRON[1930264]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 02:55:01 ispc CRON[1930262]: pam_unix(cron:session): session closed for user root Dec 18 02:55:01 ispc CRON[1930264]: pam_unix(cron:session): session closed for user getmail Dec 18 02:55:01 ispc CRON[1930263]: pam_unix(cron:session): session closed for user root Dec 18 02:55:02 ispc CRON[1930261]: pam_unix(cron:session): session closed for user root Dec 18 02:55:28 ispc sshd[1930346]: Invalid user tshombeknife from 185.12.204.239 Dec 18 02:56:01 ispc CRON[1930367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:56:03 ispc CRON[1930367]: pam_unix(cron:session): session closed for user root Dec 18 02:56:08 ispc sshd[1930378]: Invalid user admin from 211.57.200.145 Dec 18 02:56:18 ispc CRON[1929232]: pam_unix(cron:session): session closed for user root Dec 18 02:56:18 ispc postfix/smtpd[1930387]: sql auxprop plugin using mysql engine Dec 18 02:57:01 ispc CRON[1930395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:57:02 ispc CRON[1930395]: pam_unix(cron:session): session closed for user root Dec 18 02:57:40 ispc saslauthd[1930408]: pam_mysql - SELECT returned no result. Dec 18 02:57:40 ispc saslauthd[1930408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:57:40 ispc saslauthd[1930408]: do_auth : auth failure: [user=read] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:58:01 ispc CRON[1930417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:58:03 ispc CRON[1930417]: pam_unix(cron:session): session closed for user root Dec 18 02:58:37 ispc saslauthd[1930434]: pam_mysql - SELECT returned no result. Dec 18 02:58:37 ispc saslauthd[1930434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 02:58:37 ispc saslauthd[1930434]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 02:59:01 ispc CRON[1930435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 02:59:02 ispc CRON[1930435]: pam_unix(cron:session): session closed for user root Dec 18 02:59:25 ispc sshd[1930449]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:00:01 ispc CRON[1930455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:00:01 ispc CRON[1930456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:00:01 ispc CRON[1930457]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:00:01 ispc CRON[1930458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:00:01 ispc CRON[1930459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:00:01 ispc CRON[1930460]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:00:01 ispc CRON[1930457]: pam_unix(cron:session): session closed for user www-data Dec 18 03:00:01 ispc CRON[1930456]: pam_unix(cron:session): session closed for user root Dec 18 03:00:01 ispc CRON[1930460]: pam_unix(cron:session): session closed for user getmail Dec 18 03:00:03 ispc CRON[1930458]: pam_unix(cron:session): session closed for user root Dec 18 03:00:04 ispc CRON[1930455]: pam_unix(cron:session): session closed for user root Dec 18 03:00:17 ispc sshd[1930719]: Invalid user martof from 103.77.207.53 Dec 18 03:00:56 ispc CRON[1930459]: pam_unix(cron:session): session closed for user root Dec 18 03:01:01 ispc CRON[1930731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:02:01 ispc CRON[1930770]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 03:02:01 ispc CRON[1930771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:02:02 ispc CRON[1930771]: pam_unix(cron:session): session closed for user root Dec 18 03:03:01 ispc CRON[1931534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:03:02 ispc CRON[1931534]: pam_unix(cron:session): session closed for user root Dec 18 03:03:46 ispc CRON[1930770]: pam_unix(cron:session): session closed for user logcheck Dec 18 03:03:52 ispc postfix/smtpd[1931875]: sql auxprop plugin using mysql engine Dec 18 03:04:01 ispc CRON[1931885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:04:01 ispc CRON[1931885]: pam_unix(cron:session): session closed for user root Dec 18 03:05:02 ispc CRON[1931926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:05:02 ispc CRON[1931927]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:05:02 ispc CRON[1931925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:05:02 ispc CRON[1931924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:05:02 ispc CRON[1931925]: pam_unix(cron:session): session closed for user root Dec 18 03:05:02 ispc CRON[1931927]: pam_unix(cron:session): session closed for user getmail Dec 18 03:05:02 ispc CRON[1931926]: pam_unix(cron:session): session closed for user root Dec 18 03:05:02 ispc CRON[1931924]: pam_unix(cron:session): session closed for user root Dec 18 03:05:59 ispc sshd[1932023]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:06:01 ispc CRON[1932025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:06:02 ispc CRON[1932025]: pam_unix(cron:session): session closed for user root Dec 18 03:06:45 ispc postfix/smtpd[1932056]: sql auxprop plugin using mysql engine Dec 18 03:06:45 ispc saslauthd[1932059]: pam_mysql - SELECT returned no result. Dec 18 03:06:45 ispc saslauthd[1932059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:06:45 ispc saslauthd[1932059]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:06:56 ispc sshd[1932064]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:07:01 ispc CRON[1932067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:07:02 ispc CRON[1932067]: pam_unix(cron:session): session closed for user root Dec 18 03:08:01 ispc CRON[1932115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:08:01 ispc CRON[1932115]: pam_unix(cron:session): session closed for user root Dec 18 03:08:36 ispc sshd[1932146]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:08:36 ispc sshd[1932146]: Invalid user user from 2.57.121.25 Dec 18 03:09:01 ispc CRON[1932159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:09:01 ispc CRON[1932160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:09:01 ispc CRON[1932159]: pam_unix(cron:session): session closed for user root Dec 18 03:09:02 ispc CRON[1932160]: pam_unix(cron:session): session closed for user root Dec 18 03:10:01 ispc CRON[1932209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:10:01 ispc CRON[1932208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:10:01 ispc CRON[1932212]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:10:01 ispc CRON[1932210]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:10:01 ispc CRON[1932211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:10:01 ispc CRON[1932210]: pam_unix(cron:session): session closed for user www-data Dec 18 03:10:01 ispc CRON[1932209]: pam_unix(cron:session): session closed for user root Dec 18 03:10:01 ispc CRON[1932212]: pam_unix(cron:session): session closed for user getmail Dec 18 03:10:01 ispc CRON[1932208]: pam_unix(cron:session): session closed for user root Dec 18 03:10:01 ispc CRON[1932211]: pam_unix(cron:session): session closed for user root Dec 18 03:10:07 ispc sshd[1932290]: Invalid user blceu from 103.110.84.105 Dec 18 03:11:01 ispc CRON[1932316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:11:03 ispc CRON[1932316]: pam_unix(cron:session): session closed for user root Dec 18 03:11:32 ispc sshd[1932335]: Invalid user blceu from 36.134.126.74 Dec 18 03:12:01 ispc CRON[1932355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:12:01 ispc CRON[1932355]: pam_unix(cron:session): session closed for user root Dec 18 03:12:35 ispc sshd[1932380]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:12:49 ispc postfix/smtpd[1932393]: sql auxprop plugin using mysql engine Dec 18 03:12:51 ispc saslauthd[1932395]: pam_mysql - SELECT returned no result. Dec 18 03:12:51 ispc saslauthd[1932395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:12:51 ispc saslauthd[1932395]: do_auth : auth failure: [user=readonly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:13:01 ispc CRON[1932401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:13:03 ispc CRON[1932401]: pam_unix(cron:session): session closed for user root Dec 18 03:14:01 ispc CRON[1932441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:14:01 ispc CRON[1932441]: pam_unix(cron:session): session closed for user root Dec 18 03:14:10 ispc saslauthd[1932456]: pam_mysql - SELECT returned no result. Dec 18 03:14:10 ispc saslauthd[1932456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:14:10 ispc saslauthd[1932456]: do_auth : auth failure: [user=demo@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 03:15:01 ispc CRON[1932480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:15:01 ispc CRON[1932479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:15:01 ispc CRON[1932481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:15:01 ispc CRON[1932482]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:15:01 ispc CRON[1932480]: pam_unix(cron:session): session closed for user root Dec 18 03:15:01 ispc CRON[1932482]: pam_unix(cron:session): session closed for user getmail Dec 18 03:15:02 ispc CRON[1932481]: pam_unix(cron:session): session closed for user root Dec 18 03:15:02 ispc CRON[1932479]: pam_unix(cron:session): session closed for user root Dec 18 03:15:27 ispc saslauthd[1932569]: pam_mysql - SELECT returned no result. Dec 18 03:15:27 ispc saslauthd[1932569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:15:27 ispc saslauthd[1932569]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:16:01 ispc CRON[1932585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:16:02 ispc CRON[1932585]: pam_unix(cron:session): session closed for user root Dec 18 03:17:01 ispc CRON[1932622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:17:02 ispc CRON[1932622]: pam_unix(cron:session): session closed for user root Dec 18 03:17:02 ispc sshd[1932620]: Invalid user admin from 142.93.232.62 Dec 18 03:17:04 ispc postfix/smtpd[1932633]: sql auxprop plugin using mysql engine Dec 18 03:18:01 ispc CRON[1932665]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 03:18:01 ispc CRON[1932666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:18:01 ispc CRON[1932666]: pam_unix(cron:session): session closed for user root Dec 18 03:18:06 ispc CRON[1932665]: pam_unix(cron:session): session closed for user amavis Dec 18 03:18:09 ispc postfix/smtpd[1932694]: sql auxprop plugin using mysql engine Dec 18 03:18:15 ispc sshd[1932702]: Invalid user admin from 142.93.232.62 Dec 18 03:19:01 ispc CRON[1932721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:19:02 ispc CRON[1932721]: pam_unix(cron:session): session closed for user root Dec 18 03:19:08 ispc postfix/smtpd[1932736]: sql auxprop plugin using mysql engine Dec 18 03:19:09 ispc saslauthd[1932738]: pam_mysql - SELECT returned no result. Dec 18 03:19:09 ispc saslauthd[1932738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:19:09 ispc saslauthd[1932738]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:19:28 ispc sshd[1932747]: Invalid user admin from 142.93.232.62 Dec 18 03:20:01 ispc CRON[1932763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:20:01 ispc CRON[1932765]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:20:01 ispc CRON[1932764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:20:01 ispc CRON[1932766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:20:01 ispc CRON[1932765]: pam_unix(cron:session): session closed for user www-data Dec 18 03:20:01 ispc CRON[1932767]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:20:01 ispc CRON[1932764]: pam_unix(cron:session): session closed for user root Dec 18 03:20:01 ispc CRON[1932767]: pam_unix(cron:session): session closed for user getmail Dec 18 03:20:02 ispc CRON[1932766]: pam_unix(cron:session): session closed for user root Dec 18 03:20:04 ispc CRON[1932763]: pam_unix(cron:session): session closed for user root Dec 18 03:20:39 ispc sshd[1932859]: Invalid user martof from 51.79.36.60 Dec 18 03:20:39 ispc sshd[1932861]: Invalid user admin from 142.93.232.62 Dec 18 03:21:01 ispc CRON[1932871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:21:01 ispc CRON[1932872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:21:01 ispc CRON[1932871]: pam_unix(cron:session): session closed for user root Dec 18 03:21:02 ispc CRON[1932872]: pam_unix(cron:session): session closed for user root Dec 18 03:21:36 ispc postfix/smtpd[1932899]: sql auxprop plugin using mysql engine Dec 18 03:21:36 ispc CRON[1930731]: pam_unix(cron:session): session closed for user root Dec 18 03:21:50 ispc sshd[1932905]: Invalid user admin from 142.93.232.62 Dec 18 03:22:01 ispc CRON[1932908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:22:02 ispc CRON[1932908]: pam_unix(cron:session): session closed for user root Dec 18 03:23:00 ispc sshd[1932930]: Invalid user admin from 142.93.232.62 Dec 18 03:23:01 ispc CRON[1932932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:23:02 ispc CRON[1932932]: pam_unix(cron:session): session closed for user root Dec 18 03:23:06 ispc postfix/smtpd[1932950]: sql auxprop plugin using mysql engine Dec 18 03:23:32 ispc saslauthd[1932955]: pam_mysql - SELECT returned no result. Dec 18 03:23:32 ispc saslauthd[1932955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:23:32 ispc saslauthd[1932955]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:24:01 ispc CRON[1932960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:24:02 ispc CRON[1932960]: pam_unix(cron:session): session closed for user root Dec 18 03:24:11 ispc postfix/smtpd[1932972]: sql auxprop plugin using mysql engine Dec 18 03:25:02 ispc CRON[1932977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:25:02 ispc CRON[1932978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:25:02 ispc CRON[1932979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:25:02 ispc CRON[1932980]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:25:02 ispc CRON[1932978]: pam_unix(cron:session): session closed for user root Dec 18 03:25:02 ispc CRON[1932980]: pam_unix(cron:session): session closed for user getmail Dec 18 03:25:03 ispc CRON[1932977]: pam_unix(cron:session): session closed for user root Dec 18 03:25:04 ispc sshd[1933057]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:25:42 ispc CRON[1932979]: pam_unix(cron:session): session closed for user root Dec 18 03:26:01 ispc CRON[1933095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:26:35 ispc sshd[1933119]: Did not receive identification string from 45.82.78.107 Dec 18 03:27:01 ispc CRON[1933131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:27:03 ispc CRON[1933131]: pam_unix(cron:session): session closed for user root Dec 18 03:27:54 ispc postfix/smtpd[1933166]: sql auxprop plugin using mysql engine Dec 18 03:27:55 ispc saslauthd[1933168]: pam_mysql - SELECT returned no result. Dec 18 03:27:55 ispc saslauthd[1933168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:27:55 ispc saslauthd[1933168]: do_auth : auth failure: [user=recover] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:28:01 ispc CRON[1933178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:28:02 ispc CRON[1933178]: pam_unix(cron:session): session closed for user root Dec 18 03:28:14 ispc sshd[1933195]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 03:28:14 ispc sshd[1933195]: Invalid user admin from 2.57.121.112 Dec 18 03:29:01 ispc sshd[1933218]: Invalid user matlbula from 185.12.204.239 Dec 18 03:29:01 ispc CRON[1933220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:29:02 ispc CRON[1933220]: pam_unix(cron:session): session closed for user root Dec 18 03:30:01 ispc CRON[1933257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:30:01 ispc CRON[1933258]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:30:01 ispc CRON[1933260]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:30:01 ispc CRON[1933259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:30:01 ispc CRON[1933256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:30:01 ispc CRON[1933258]: pam_unix(cron:session): session closed for user www-data Dec 18 03:30:01 ispc CRON[1933257]: pam_unix(cron:session): session closed for user root Dec 18 03:30:01 ispc CRON[1933260]: pam_unix(cron:session): session closed for user getmail Dec 18 03:30:02 ispc CRON[1933259]: pam_unix(cron:session): session closed for user root Dec 18 03:30:03 ispc CRON[1933256]: pam_unix(cron:session): session closed for user root Dec 18 03:31:01 ispc CRON[1933354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:31:01 ispc CRON[1933354]: pam_unix(cron:session): session closed for user root Dec 18 03:31:34 ispc postfix/smtpd[1933378]: sql auxprop plugin using mysql engine Dec 18 03:31:35 ispc saslauthd[1933381]: pam_mysql - SELECT returned no result. Dec 18 03:31:35 ispc saslauthd[1933381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:31:35 ispc saslauthd[1933381]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:32:01 ispc CRON[1933392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:32:03 ispc CRON[1933392]: pam_unix(cron:session): session closed for user root Dec 18 03:33:01 ispc CRON[1933434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:33:02 ispc CRON[1933434]: pam_unix(cron:session): session closed for user root Dec 18 03:33:24 ispc sshd[1933454]: Invalid user martof from 141.94.71.131 Dec 18 03:34:01 ispc CRON[1933474]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:34:02 ispc CRON[1933474]: pam_unix(cron:session): session closed for user root Dec 18 03:35:01 ispc CRON[1933506]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:35:01 ispc CRON[1933507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:35:01 ispc CRON[1933508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:35:01 ispc CRON[1933509]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:35:01 ispc CRON[1933507]: pam_unix(cron:session): session closed for user root Dec 18 03:35:01 ispc CRON[1933509]: pam_unix(cron:session): session closed for user getmail Dec 18 03:35:02 ispc CRON[1933508]: pam_unix(cron:session): session closed for user root Dec 18 03:35:03 ispc CRON[1933506]: pam_unix(cron:session): session closed for user root Dec 18 03:35:39 ispc sshd[1933600]: Invalid user martof from 5.129.195.224 Dec 18 03:36:01 ispc CRON[1933610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:36:03 ispc CRON[1933610]: pam_unix(cron:session): session closed for user root Dec 18 03:37:01 ispc CRON[1933645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:37:01 ispc CRON[1933645]: pam_unix(cron:session): session closed for user root Dec 18 03:37:11 ispc sshd[1933660]: Invalid user martof from 148.216.54.17 Dec 18 03:38:01 ispc CRON[1933703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:38:02 ispc CRON[1933703]: pam_unix(cron:session): session closed for user root Dec 18 03:39:01 ispc CRON[1933741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:39:01 ispc CRON[1933742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:39:01 ispc CRON[1933741]: pam_unix(cron:session): session closed for user root Dec 18 03:39:02 ispc CRON[1933742]: pam_unix(cron:session): session closed for user root Dec 18 03:40:01 ispc CRON[1933789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:40:01 ispc CRON[1933790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:40:01 ispc CRON[1933791]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:40:01 ispc CRON[1933792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:40:01 ispc CRON[1933793]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:40:01 ispc CRON[1933790]: pam_unix(cron:session): session closed for user root Dec 18 03:40:01 ispc CRON[1933791]: pam_unix(cron:session): session closed for user www-data Dec 18 03:40:01 ispc CRON[1933793]: pam_unix(cron:session): session closed for user getmail Dec 18 03:40:02 ispc CRON[1933792]: pam_unix(cron:session): session closed for user root Dec 18 03:40:02 ispc CRON[1933789]: pam_unix(cron:session): session closed for user root Dec 18 03:40:03 ispc sshd[1933867]: Invalid user racingkennel from 185.12.204.239 Dec 18 03:40:08 ispc postfix/smtpd[1933873]: sql auxprop plugin using mysql engine Dec 18 03:40:08 ispc saslauthd[1933876]: pam_mysql - SELECT returned no result. Dec 18 03:40:08 ispc saslauthd[1933876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:40:08 ispc saslauthd[1933876]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:41:01 ispc CRON[1933899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:41:02 ispc CRON[1933899]: pam_unix(cron:session): session closed for user root Dec 18 03:41:51 ispc postfix/smtpd[1933932]: sql auxprop plugin using mysql engine Dec 18 03:42:01 ispc CRON[1933938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:42:02 ispc CRON[1933938]: pam_unix(cron:session): session closed for user root Dec 18 03:42:27 ispc postfix/smtpd[1933961]: sql auxprop plugin using mysql engine Dec 18 03:42:28 ispc saslauthd[1933963]: pam_mysql - SELECT returned no result. Dec 18 03:42:28 ispc saslauthd[1933963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:42:28 ispc saslauthd[1933963]: do_auth : auth failure: [user=debbie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:42:45 ispc sshd[1933973]: Invalid user admin from 211.57.200.145 Dec 18 03:43:01 ispc CRON[1933995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:43:02 ispc CRON[1933995]: pam_unix(cron:session): session closed for user root Dec 18 03:43:04 ispc saslauthd[1934008]: pam_mysql - SELECT returned no result. Dec 18 03:43:04 ispc saslauthd[1934008]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:43:04 ispc saslauthd[1934008]: do_auth : auth failure: [user=redline] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:44:01 ispc CRON[1934037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:44:01 ispc CRON[1934037]: pam_unix(cron:session): session closed for user root Dec 18 03:45:01 ispc CRON[1934073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:45:01 ispc CRON[1934074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:45:01 ispc CRON[1934075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:45:01 ispc CRON[1934076]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:45:01 ispc CRON[1934074]: pam_unix(cron:session): session closed for user root Dec 18 03:45:01 ispc CRON[1934076]: pam_unix(cron:session): session closed for user getmail Dec 18 03:45:02 ispc CRON[1934075]: pam_unix(cron:session): session closed for user root Dec 18 03:45:04 ispc CRON[1934073]: pam_unix(cron:session): session closed for user root Dec 18 03:46:01 ispc CRON[1934170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:46:02 ispc CRON[1934170]: pam_unix(cron:session): session closed for user root Dec 18 03:46:42 ispc postfix/smtpd[1934201]: sql auxprop plugin using mysql engine Dec 18 03:46:42 ispc CRON[1933095]: pam_unix(cron:session): session closed for user root Dec 18 03:47:01 ispc CRON[1934205]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:47:02 ispc CRON[1934205]: pam_unix(cron:session): session closed for user root Dec 18 03:47:27 ispc su[1928430]: pam_unix(su:session): session closed for user root Dec 18 03:47:27 ispc CRON[1925076]: pam_unix(cron:session): session closed for user root Dec 18 03:47:29 ispc postfix/smtpd[1934257]: sql auxprop plugin using mysql engine Dec 18 03:48:01 ispc CRON[1934269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:48:02 ispc CRON[1934269]: pam_unix(cron:session): session closed for user root Dec 18 03:48:42 ispc saslauthd[1934284]: pam_mysql - SELECT returned no result. Dec 18 03:48:42 ispc saslauthd[1934284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:48:42 ispc saslauthd[1934284]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:49:01 ispc CRON[1934285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:49:03 ispc CRON[1934285]: pam_unix(cron:session): session closed for user root Dec 18 03:50:01 ispc CRON[1934297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:50:01 ispc CRON[1934298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:50:01 ispc CRON[1934299]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 03:50:01 ispc CRON[1934300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:50:01 ispc CRON[1934301]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:50:01 ispc CRON[1934299]: pam_unix(cron:session): session closed for user www-data Dec 18 03:50:01 ispc CRON[1934298]: pam_unix(cron:session): session closed for user root Dec 18 03:50:01 ispc CRON[1934301]: pam_unix(cron:session): session closed for user getmail Dec 18 03:50:01 ispc CRON[1934297]: pam_unix(cron:session): session closed for user root Dec 18 03:50:41 ispc CRON[1934300]: pam_unix(cron:session): session closed for user root Dec 18 03:51:01 ispc CRON[1934408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:51:39 ispc sshd[1934436]: Did not receive identification string from 45.140.17.97 Dec 18 03:52:01 ispc CRON[1934446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:52:01 ispc CRON[1934447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:52:02 ispc CRON[1934447]: pam_unix(cron:session): session closed for user root Dec 18 03:52:54 ispc saslauthd[1934493]: pam_mysql - SELECT returned no result. Dec 18 03:52:54 ispc saslauthd[1934493]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:52:54 ispc saslauthd[1934493]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:53:01 ispc CRON[1934498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:53:02 ispc CRON[1934498]: pam_unix(cron:session): session closed for user root Dec 18 03:54:01 ispc CRON[1934535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:54:01 ispc CRON[1934535]: pam_unix(cron:session): session closed for user root Dec 18 03:55:02 ispc CRON[1934573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:55:02 ispc CRON[1934574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:55:02 ispc CRON[1934575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:55:02 ispc CRON[1934576]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 03:55:02 ispc CRON[1934574]: pam_unix(cron:session): session closed for user root Dec 18 03:55:02 ispc CRON[1934576]: pam_unix(cron:session): session closed for user getmail Dec 18 03:55:02 ispc CRON[1934575]: pam_unix(cron:session): session closed for user root Dec 18 03:55:03 ispc CRON[1934573]: pam_unix(cron:session): session closed for user root Dec 18 03:55:19 ispc CRON[1934446]: pam_unix(cron:session): session closed for user root Dec 18 03:56:01 ispc CRON[1934674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:56:02 ispc CRON[1934674]: pam_unix(cron:session): session closed for user root Dec 18 03:56:55 ispc sshd[1934708]: Invalid user klape from 103.164.20.29 Dec 18 03:56:57 ispc sshd[1934710]: Invalid user ubuntu from 103.164.20.29 Dec 18 03:57:01 ispc CRON[1934712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:57:01 ispc CRON[1934712]: pam_unix(cron:session): session closed for user root Dec 18 03:57:05 ispc postfix/smtpd[1934727]: sql auxprop plugin using mysql engine Dec 18 03:57:06 ispc saslauthd[1934730]: pam_mysql - SELECT returned no result. Dec 18 03:57:06 ispc saslauthd[1934730]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:57:06 ispc saslauthd[1934730]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:58:01 ispc CRON[1934766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:58:02 ispc CRON[1934766]: pam_unix(cron:session): session closed for user root Dec 18 03:58:05 ispc saslauthd[1934777]: pam_mysql - SELECT returned no result. Dec 18 03:58:05 ispc saslauthd[1934777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 03:58:05 ispc saslauthd[1934777]: do_auth : auth failure: [user=replication-receiver] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 03:59:01 ispc CRON[1934803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 03:59:03 ispc CRON[1934803]: pam_unix(cron:session): session closed for user root Dec 18 04:00:01 ispc CRON[1934841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:00:01 ispc CRON[1934842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:00:01 ispc CRON[1934843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:00:01 ispc CRON[1934844]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:00:01 ispc CRON[1934838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:00:01 ispc CRON[1934839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:00:01 ispc CRON[1934840]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:00:01 ispc CRON[1934839]: pam_unix(cron:session): session closed for user root Dec 18 04:00:01 ispc CRON[1934840]: pam_unix(cron:session): session closed for user www-data Dec 18 04:00:01 ispc CRON[1934842]: pam_unix(cron:session): session closed for user root Dec 18 04:00:01 ispc CRON[1934844]: pam_unix(cron:session): session closed for user getmail Dec 18 04:00:02 ispc CRON[1934838]: pam_unix(cron:session): session closed for user root Dec 18 04:00:03 ispc CRON[1934841]: pam_unix(cron:session): session closed for user root Dec 18 04:00:03 ispc CRON[1934843]: pam_unix(cron:session): session closed for user root Dec 18 04:01:01 ispc CRON[1935024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:01:01 ispc CRON[1935025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:01:01 ispc CRON[1935025]: pam_unix(cron:session): session closed for user root Dec 18 04:02:01 ispc CRON[1935647]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 04:02:01 ispc CRON[1935648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:02:02 ispc CRON[1935648]: pam_unix(cron:session): session closed for user root Dec 18 04:03:01 ispc CRON[1936856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:03:02 ispc CRON[1936856]: pam_unix(cron:session): session closed for user root Dec 18 04:03:06 ispc CRON[1935647]: pam_unix(cron:session): session closed for user logcheck Dec 18 04:03:12 ispc postfix/smtpd[1936930]: sql auxprop plugin using mysql engine Dec 18 04:04:01 ispc CRON[1937026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:04:03 ispc CRON[1937026]: pam_unix(cron:session): session closed for user root Dec 18 04:04:06 ispc su[1937102]: Successful su for amavis by root Dec 18 04:04:06 ispc su[1937102]: + ??? root:amavis Dec 18 04:04:06 ispc su[1937102]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 18 04:04:41 ispc postfix/smtpd[1937126]: sql auxprop plugin using mysql engine Dec 18 04:04:59 ispc postfix/smtpd[1937140]: sql auxprop plugin using mysql engine Dec 18 04:05:01 ispc CRON[1937150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:05:01 ispc CRON[1937151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:05:01 ispc CRON[1937152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:05:01 ispc CRON[1937153]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:05:01 ispc CRON[1937151]: pam_unix(cron:session): session closed for user root Dec 18 04:05:01 ispc CRON[1937153]: pam_unix(cron:session): session closed for user getmail Dec 18 04:05:02 ispc CRON[1937152]: pam_unix(cron:session): session closed for user root Dec 18 04:05:02 ispc CRON[1937150]: pam_unix(cron:session): session closed for user root Dec 18 04:05:09 ispc su[1937102]: pam_unix(su:session): session closed for user amavis Dec 18 04:05:27 ispc saslauthd[1937343]: pam_mysql - SELECT returned no result. Dec 18 04:05:27 ispc saslauthd[1937343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:05:27 ispc saslauthd[1937343]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:05:59 ispc postfix/smtpd[1937357]: sql auxprop plugin using mysql engine Dec 18 04:06:02 ispc CRON[1937362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:06:02 ispc CRON[1937362]: pam_unix(cron:session): session closed for user root Dec 18 04:07:01 ispc CRON[1937401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:07:02 ispc CRON[1937401]: pam_unix(cron:session): session closed for user root Dec 18 04:07:04 ispc saslauthd[1937413]: pam_mysql - SELECT returned no result. Dec 18 04:07:04 ispc saslauthd[1937413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:07:04 ispc saslauthd[1937413]: do_auth : auth failure: [user=luck@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 04:07:09 ispc sshd[1937414]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:08:01 ispc CRON[1937702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:08:01 ispc CRON[1937702]: pam_unix(cron:session): session closed for user root Dec 18 04:08:01 ispc CRON[1935024]: pam_unix(cron:session): session closed for user root Dec 18 04:08:22 ispc sshd[1937867]: Invalid user ziplines from 51.79.36.60 Dec 18 04:09:01 ispc CRON[1937887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:09:01 ispc CRON[1937888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:09:02 ispc CRON[1937887]: pam_unix(cron:session): session closed for user root Dec 18 04:09:02 ispc CRON[1937888]: pam_unix(cron:session): session closed for user root Dec 18 04:10:01 ispc CRON[1937933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:10:01 ispc CRON[1937934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:10:01 ispc CRON[1937935]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:10:01 ispc CRON[1937936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:10:01 ispc CRON[1937937]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:10:01 ispc CRON[1937935]: pam_unix(cron:session): session closed for user www-data Dec 18 04:10:01 ispc CRON[1937934]: pam_unix(cron:session): session closed for user root Dec 18 04:10:01 ispc CRON[1937937]: pam_unix(cron:session): session closed for user getmail Dec 18 04:10:01 ispc CRON[1937936]: pam_unix(cron:session): session closed for user root Dec 18 04:10:02 ispc CRON[1937933]: pam_unix(cron:session): session closed for user root Dec 18 04:11:01 ispc CRON[1938051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:11:01 ispc CRON[1938051]: pam_unix(cron:session): session closed for user root Dec 18 04:11:24 ispc CRON[1934408]: pam_unix(cron:session): session closed for user root Dec 18 04:11:24 ispc postfix/smtpd[1938074]: sql auxprop plugin using mysql engine Dec 18 04:12:01 ispc CRON[1938082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:12:01 ispc sshd[1938080]: Invalid user ziplines from 103.110.84.105 Dec 18 04:12:01 ispc CRON[1938082]: pam_unix(cron:session): session closed for user root Dec 18 04:12:20 ispc sshd[1938094]: Invalid user ziplines from 213.199.57.249 Dec 18 04:13:01 ispc CRON[1938104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:13:02 ispc CRON[1938104]: pam_unix(cron:session): session closed for user root Dec 18 04:13:15 ispc saslauthd[1938118]: pam_mysql - SELECT returned no result. Dec 18 04:13:15 ispc saslauthd[1938118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:13:15 ispc saslauthd[1938118]: do_auth : auth failure: [user=replicator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:13:45 ispc postfix/smtpd[1938121]: sql auxprop plugin using mysql engine Dec 18 04:13:48 ispc sshd[1938124]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:13:48 ispc sshd[1938124]: Invalid user blceu from 193.110.157.47 Dec 18 04:13:57 ispc saslauthd[1938126]: pam_mysql - SELECT returned no result. Dec 18 04:13:57 ispc saslauthd[1938126]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:13:57 ispc saslauthd[1938126]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:14:01 ispc CRON[1938127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:14:02 ispc CRON[1938127]: pam_unix(cron:session): session closed for user root Dec 18 04:14:13 ispc sshd[1938139]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:14:27 ispc sshd[1938141]: Invalid user blceu from 141.94.71.131 Dec 18 04:15:01 ispc CRON[1938147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:15:01 ispc CRON[1938148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:15:01 ispc CRON[1938149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:15:01 ispc CRON[1938150]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:15:01 ispc CRON[1938148]: pam_unix(cron:session): session closed for user root Dec 18 04:15:01 ispc CRON[1938150]: pam_unix(cron:session): session closed for user getmail Dec 18 04:15:02 ispc CRON[1938147]: pam_unix(cron:session): session closed for user root Dec 18 04:15:36 ispc sshd[1938335]: Invalid user anoraksro from 185.12.204.239 Dec 18 04:16:01 ispc CRON[1938344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:16:02 ispc CRON[1938344]: pam_unix(cron:session): session closed for user root Dec 18 04:16:03 ispc CRON[1938149]: pam_unix(cron:session): session closed for user root Dec 18 04:17:01 ispc CRON[1938356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:18:01 ispc CRON[1938398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:18:02 ispc CRON[1938398]: pam_unix(cron:session): session closed for user root Dec 18 04:19:01 ispc CRON[1938497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:19:02 ispc CRON[1938497]: pam_unix(cron:session): session closed for user root Dec 18 04:20:01 ispc CRON[1938536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:20:01 ispc CRON[1938537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:20:01 ispc CRON[1938538]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:20:01 ispc CRON[1938539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:20:01 ispc CRON[1938540]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:20:01 ispc CRON[1938538]: pam_unix(cron:session): session closed for user www-data Dec 18 04:20:01 ispc CRON[1938537]: pam_unix(cron:session): session closed for user root Dec 18 04:20:01 ispc CRON[1938540]: pam_unix(cron:session): session closed for user getmail Dec 18 04:20:02 ispc CRON[1938539]: pam_unix(cron:session): session closed for user root Dec 18 04:20:02 ispc CRON[1938536]: pam_unix(cron:session): session closed for user root Dec 18 04:21:01 ispc CRON[1938638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:21:01 ispc CRON[1938639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:21:01 ispc CRON[1938638]: pam_unix(cron:session): session closed for user root Dec 18 04:21:01 ispc CRON[1938639]: pam_unix(cron:session): session closed for user root Dec 18 04:21:28 ispc sshd[1938661]: Invalid user martof from 103.100.209.172 Dec 18 04:22:01 ispc CRON[1938682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:22:02 ispc CRON[1938682]: pam_unix(cron:session): session closed for user root Dec 18 04:22:18 ispc postfix/smtpd[1938698]: sql auxprop plugin using mysql engine Dec 18 04:22:19 ispc saslauthd[1938704]: pam_mysql - SELECT returned no result. Dec 18 04:22:19 ispc saslauthd[1938704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:22:19 ispc saslauthd[1938704]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:23:01 ispc CRON[1938731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:23:02 ispc CRON[1938731]: pam_unix(cron:session): session closed for user root Dec 18 04:24:01 ispc CRON[1938768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:24:02 ispc CRON[1938768]: pam_unix(cron:session): session closed for user root Dec 18 04:25:01 ispc CRON[1938802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:25:01 ispc CRON[1938803]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:25:01 ispc CRON[1938801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:25:01 ispc CRON[1938800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:25:01 ispc CRON[1938801]: pam_unix(cron:session): session closed for user root Dec 18 04:25:01 ispc CRON[1938803]: pam_unix(cron:session): session closed for user getmail Dec 18 04:25:01 ispc CRON[1938802]: pam_unix(cron:session): session closed for user root Dec 18 04:25:03 ispc CRON[1938800]: pam_unix(cron:session): session closed for user root Dec 18 04:26:01 ispc CRON[1938901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:26:02 ispc CRON[1938901]: pam_unix(cron:session): session closed for user root Dec 18 04:26:22 ispc postfix/smtpd[1938925]: sql auxprop plugin using mysql engine Dec 18 04:26:23 ispc saslauthd[1938928]: pam_mysql - SELECT returned no result. Dec 18 04:26:23 ispc saslauthd[1938928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:26:23 ispc saslauthd[1938928]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:27:01 ispc CRON[1938943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:27:02 ispc CRON[1938943]: pam_unix(cron:session): session closed for user root Dec 18 04:27:46 ispc sshd[1938977]: Invalid user blceu from 139.59.66.222 Dec 18 04:27:56 ispc sshd[1938988]: Invalid user martof from 213.199.57.249 Dec 18 04:28:01 ispc CRON[1938994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:28:02 ispc CRON[1938994]: pam_unix(cron:session): session closed for user root Dec 18 04:28:22 ispc postfix/smtpd[1939015]: sql auxprop plugin using mysql engine Dec 18 04:28:24 ispc saslauthd[1939021]: pam_mysql - SELECT returned no result. Dec 18 04:28:24 ispc saslauthd[1939021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:28:24 ispc saslauthd[1939021]: do_auth : auth failure: [user=restoreonly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:29:01 ispc CRON[1939038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:29:02 ispc CRON[1939038]: pam_unix(cron:session): session closed for user root Dec 18 04:29:59 ispc sshd[1939075]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:29:59 ispc sshd[1939075]: Invalid user user from 2.57.121.25 Dec 18 04:30:01 ispc CRON[1939079]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:30:01 ispc CRON[1939077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:30:01 ispc CRON[1939081]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:30:01 ispc CRON[1939078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:30:01 ispc CRON[1939080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:30:01 ispc CRON[1939078]: pam_unix(cron:session): session closed for user root Dec 18 04:30:01 ispc CRON[1939079]: pam_unix(cron:session): session closed for user www-data Dec 18 04:30:01 ispc CRON[1939081]: pam_unix(cron:session): session closed for user getmail Dec 18 04:30:02 ispc CRON[1939080]: pam_unix(cron:session): session closed for user root Dec 18 04:30:02 ispc CRON[1939077]: pam_unix(cron:session): session closed for user root Dec 18 04:30:47 ispc postfix/smtpd[1939175]: sql auxprop plugin using mysql engine Dec 18 04:30:47 ispc saslauthd[1939177]: pam_mysql - SELECT returned no result. Dec 18 04:30:47 ispc saslauthd[1939177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:30:47 ispc saslauthd[1939177]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:31:01 ispc CRON[1939184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:31:02 ispc CRON[1939184]: pam_unix(cron:session): session closed for user root Dec 18 04:32:01 ispc sshd[1939226]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:32:01 ispc CRON[1939228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:32:02 ispc CRON[1939228]: pam_unix(cron:session): session closed for user root Dec 18 04:32:31 ispc sshd[1939248]: Invalid user from 160.187.174.22 Dec 18 04:33:01 ispc CRON[1939273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:33:02 ispc CRON[1939273]: pam_unix(cron:session): session closed for user root Dec 18 04:33:56 ispc sshd[1939305]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:34:01 ispc CRON[1939307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:34:03 ispc CRON[1939307]: pam_unix(cron:session): session closed for user root Dec 18 04:35:01 ispc CRON[1939344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:35:01 ispc CRON[1939345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:35:01 ispc CRON[1939346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:35:01 ispc CRON[1939347]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:35:01 ispc CRON[1939345]: pam_unix(cron:session): session closed for user root Dec 18 04:35:01 ispc CRON[1939347]: pam_unix(cron:session): session closed for user getmail Dec 18 04:35:01 ispc CRON[1939344]: pam_unix(cron:session): session closed for user root Dec 18 04:35:02 ispc CRON[1939346]: pam_unix(cron:session): session closed for user root Dec 18 04:36:01 ispc CRON[1939449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:36:02 ispc CRON[1939449]: pam_unix(cron:session): session closed for user root Dec 18 04:36:51 ispc sshd[1939481]: Invalid user admin from 211.57.200.145 Dec 18 04:37:01 ispc CRON[1939487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:37:02 ispc CRON[1939487]: pam_unix(cron:session): session closed for user root Dec 18 04:37:26 ispc CRON[1938356]: pam_unix(cron:session): session closed for user root Dec 18 04:37:26 ispc postfix/smtpd[1939511]: sql auxprop plugin using mysql engine Dec 18 04:37:56 ispc postfix/smtpd[1939521]: sql auxprop plugin using mysql engine Dec 18 04:37:57 ispc sshd[1939519]: Invalid user ziplines from 139.59.66.222 Dec 18 04:38:01 ispc CRON[1939530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:38:02 ispc CRON[1939530]: pam_unix(cron:session): session closed for user root Dec 18 04:39:01 ispc CRON[1939545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:39:01 ispc CRON[1939546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:39:01 ispc CRON[1939545]: pam_unix(cron:session): session closed for user root Dec 18 04:39:02 ispc CRON[1939546]: pam_unix(cron:session): session closed for user root Dec 18 04:39:15 ispc saslauthd[1939571]: pam_mysql - SELECT returned no result. Dec 18 04:39:15 ispc saslauthd[1939571]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:39:15 ispc saslauthd[1939571]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:39:55 ispc sshd[1939522]: Invalid user ubuntu from 117.50.70.169 Dec 18 04:40:01 ispc CRON[1939573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:40:01 ispc CRON[1939574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:40:01 ispc CRON[1939575]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:40:01 ispc CRON[1939576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:40:01 ispc CRON[1939577]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:40:01 ispc CRON[1939575]: pam_unix(cron:session): session closed for user www-data Dec 18 04:40:01 ispc CRON[1939574]: pam_unix(cron:session): session closed for user root Dec 18 04:40:01 ispc CRON[1939577]: pam_unix(cron:session): session closed for user getmail Dec 18 04:40:02 ispc CRON[1939573]: pam_unix(cron:session): session closed for user root Dec 18 04:40:33 ispc sshd[1939685]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:40:36 ispc CRON[1939576]: pam_unix(cron:session): session closed for user root Dec 18 04:41:01 ispc CRON[1939687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:41:17 ispc sshd[1939703]: Invalid user ziplines from 103.100.209.172 Dec 18 04:41:35 ispc sshd[1939713]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:41:43 ispc sshd[1939716]: Invalid user martof from 103.110.84.105 Dec 18 04:42:01 ispc CRON[1939727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:42:02 ispc CRON[1939727]: pam_unix(cron:session): session closed for user root Dec 18 04:43:01 ispc CRON[1939772]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:43:01 ispc CRON[1939772]: pam_unix(cron:session): session closed for user root Dec 18 04:43:18 ispc postfix/smtpd[1939791]: sql auxprop plugin using mysql engine Dec 18 04:43:19 ispc saslauthd[1939793]: pam_mysql - SELECT returned no result. Dec 18 04:43:19 ispc saslauthd[1939793]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:43:19 ispc saslauthd[1939793]: do_auth : auth failure: [user=ripeop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:44:01 ispc CRON[1939812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:44:01 ispc CRON[1939812]: pam_unix(cron:session): session closed for user root Dec 18 04:45:01 ispc CRON[1939851]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:45:01 ispc CRON[1939848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:45:01 ispc CRON[1939850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:45:01 ispc CRON[1939849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:45:01 ispc CRON[1939849]: pam_unix(cron:session): session closed for user root Dec 18 04:45:01 ispc CRON[1939851]: pam_unix(cron:session): session closed for user getmail Dec 18 04:45:02 ispc CRON[1939848]: pam_unix(cron:session): session closed for user root Dec 18 04:45:02 ispc CRON[1939850]: pam_unix(cron:session): session closed for user root Dec 18 04:46:01 ispc CRON[1939953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:46:01 ispc CRON[1939953]: pam_unix(cron:session): session closed for user root Dec 18 04:47:01 ispc CRON[1939988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:47:02 ispc CRON[1939988]: pam_unix(cron:session): session closed for user root Dec 18 04:47:16 ispc postfix/smtpd[1940004]: sql auxprop plugin using mysql engine Dec 18 04:47:17 ispc saslauthd[1940007]: pam_mysql - SELECT returned no result. Dec 18 04:47:17 ispc saslauthd[1940007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:47:17 ispc saslauthd[1940007]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:48:01 ispc CRON[1940039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:48:03 ispc CRON[1940039]: pam_unix(cron:session): session closed for user root Dec 18 04:48:07 ispc sshd[1940050]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:48:07 ispc sshd[1940050]: Invalid user admin from 2.57.121.112 Dec 18 04:49:01 ispc CRON[1940076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:49:02 ispc CRON[1940076]: pam_unix(cron:session): session closed for user root Dec 18 04:49:57 ispc sshd[1940111]: Invalid user klape from 36.50.177.171 Dec 18 04:50:01 ispc CRON[1940115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:50:01 ispc CRON[1940116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:50:01 ispc CRON[1940117]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 04:50:01 ispc CRON[1940118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:50:01 ispc CRON[1940119]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:50:01 ispc CRON[1940117]: pam_unix(cron:session): session closed for user www-data Dec 18 04:50:01 ispc CRON[1940116]: pam_unix(cron:session): session closed for user root Dec 18 04:50:01 ispc CRON[1940119]: pam_unix(cron:session): session closed for user getmail Dec 18 04:50:02 ispc sshd[1940113]: Invalid user ubuntu from 36.50.177.171 Dec 18 04:50:02 ispc CRON[1940118]: pam_unix(cron:session): session closed for user root Dec 18 04:50:02 ispc CRON[1940115]: pam_unix(cron:session): session closed for user root Dec 18 04:51:01 ispc CRON[1940219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:51:02 ispc CRON[1940219]: pam_unix(cron:session): session closed for user root Dec 18 04:52:01 ispc CRON[1940255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:52:02 ispc CRON[1940255]: pam_unix(cron:session): session closed for user root Dec 18 04:52:21 ispc sshd[1940274]: Invalid user ziplines from 103.77.207.53 Dec 18 04:53:01 ispc CRON[1940304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:53:02 ispc CRON[1940304]: pam_unix(cron:session): session closed for user root Dec 18 04:54:01 ispc CRON[1940344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:54:01 ispc CRON[1940344]: pam_unix(cron:session): session closed for user root Dec 18 04:55:01 ispc CRON[1940382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:55:01 ispc CRON[1940383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:55:01 ispc CRON[1940384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:55:01 ispc CRON[1940385]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 04:55:01 ispc CRON[1940383]: pam_unix(cron:session): session closed for user root Dec 18 04:55:01 ispc CRON[1940385]: pam_unix(cron:session): session closed for user getmail Dec 18 04:55:02 ispc CRON[1940384]: pam_unix(cron:session): session closed for user root Dec 18 04:55:03 ispc CRON[1940382]: pam_unix(cron:session): session closed for user root Dec 18 04:55:39 ispc postfix/smtpd[1940476]: sql auxprop plugin using mysql engine Dec 18 04:55:40 ispc saslauthd[1940479]: pam_mysql - SELECT returned no result. Dec 18 04:55:40 ispc saslauthd[1940479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:55:40 ispc saslauthd[1940479]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:56:01 ispc CRON[1940489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:56:02 ispc CRON[1940489]: pam_unix(cron:session): session closed for user root Dec 18 04:56:05 ispc sshd[1940500]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:57:01 ispc CRON[1940531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:57:02 ispc CRON[1940531]: pam_unix(cron:session): session closed for user root Dec 18 04:57:24 ispc postfix/smtpd[1940552]: sql auxprop plugin using mysql engine Dec 18 04:57:25 ispc saslauthd[1940554]: pam_mysql - SELECT returned no result. Dec 18 04:57:25 ispc saslauthd[1940554]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:57:25 ispc saslauthd[1940554]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:58:01 ispc CRON[1940580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:58:02 ispc CRON[1940580]: pam_unix(cron:session): session closed for user root Dec 18 04:58:09 ispc saslauthd[1940596]: pam_mysql - SELECT returned no result. Dec 18 04:58:09 ispc saslauthd[1940596]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:58:09 ispc saslauthd[1940596]: do_auth : auth failure: [user=rje] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 04:59:01 ispc CRON[1940618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 04:59:02 ispc CRON[1940618]: pam_unix(cron:session): session closed for user root Dec 18 04:59:28 ispc sshd[1940637]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 04:59:51 ispc postfix/smtpd[1940653]: sql auxprop plugin using mysql engine Dec 18 04:59:58 ispc saslauthd[1940659]: pam_mysql - SELECT returned no result. Dec 18 04:59:58 ispc saslauthd[1940659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 04:59:58 ispc saslauthd[1940659]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:00:01 ispc CRON[1940660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:00:01 ispc CRON[1940661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:00:01 ispc CRON[1940662]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:00:01 ispc CRON[1940663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:00:01 ispc CRON[1940664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:00:01 ispc CRON[1940665]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:00:01 ispc CRON[1940662]: pam_unix(cron:session): session closed for user www-data Dec 18 05:00:01 ispc CRON[1940661]: pam_unix(cron:session): session closed for user root Dec 18 05:00:01 ispc CRON[1940665]: pam_unix(cron:session): session closed for user getmail Dec 18 05:00:02 ispc CRON[1940664]: pam_unix(cron:session): session closed for user root Dec 18 05:00:03 ispc CRON[1940663]: pam_unix(cron:session): session closed for user root Dec 18 05:00:03 ispc CRON[1940660]: pam_unix(cron:session): session closed for user root Dec 18 05:00:10 ispc sshd[1940821]: Invalid user blceu from 51.79.36.60 Dec 18 05:00:35 ispc saslauthd[1940837]: pam_mysql - SELECT returned no result. Dec 18 05:00:35 ispc saslauthd[1940837]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:00:35 ispc saslauthd[1940837]: do_auth : auth failure: [user=client@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 05:01:01 ispc CRON[1940851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:01:02 ispc CRON[1940851]: pam_unix(cron:session): session closed for user root Dec 18 05:01:18 ispc CRON[1939687]: pam_unix(cron:session): session closed for user root Dec 18 05:02:01 ispc CRON[1940872]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 05:02:01 ispc CRON[1940873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:02:02 ispc CRON[1940873]: pam_unix(cron:session): session closed for user root Dec 18 05:02:08 ispc postfix/smtpd[1940985]: sql auxprop plugin using mysql engine Dec 18 05:02:50 ispc CRON[1940872]: pam_unix(cron:session): session closed for user logcheck Dec 18 05:02:58 ispc postfix/smtpd[1941922]: sql auxprop plugin using mysql engine Dec 18 05:03:01 ispc CRON[1941926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:03:02 ispc CRON[1941926]: pam_unix(cron:session): session closed for user root Dec 18 05:03:28 ispc sshd[1941940]: Invalid user martof from 139.59.66.222 Dec 18 05:03:59 ispc saslauthd[1941953]: pam_mysql - SELECT returned no result. Dec 18 05:03:59 ispc saslauthd[1941953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:03:59 ispc saslauthd[1941953]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:04:01 ispc CRON[1941954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:04:02 ispc CRON[1941954]: pam_unix(cron:session): session closed for user root Dec 18 05:05:01 ispc CRON[1941971]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:05:01 ispc CRON[1941968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:05:01 ispc CRON[1941970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:05:01 ispc CRON[1941969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:05:01 ispc CRON[1941969]: pam_unix(cron:session): session closed for user root Dec 18 05:05:01 ispc CRON[1941971]: pam_unix(cron:session): session closed for user getmail Dec 18 05:05:02 ispc CRON[1941968]: pam_unix(cron:session): session closed for user root Dec 18 05:05:27 ispc CRON[1941970]: pam_unix(cron:session): session closed for user root Dec 18 05:06:00 ispc sshd[1942077]: Invalid user martof from 175.125.92.77 Dec 18 05:06:01 ispc CRON[1942079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:07:01 ispc CRON[1942113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:07:02 ispc CRON[1942113]: pam_unix(cron:session): session closed for user root Dec 18 05:07:52 ispc sshd[1942148]: Invalid user blceu from 175.125.95.234 Dec 18 05:08:01 ispc CRON[1942159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:08:01 ispc CRON[1942159]: pam_unix(cron:session): session closed for user root Dec 18 05:09:01 ispc CRON[1942196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:09:01 ispc CRON[1942197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:09:01 ispc CRON[1942196]: pam_unix(cron:session): session closed for user root Dec 18 05:09:02 ispc CRON[1942197]: pam_unix(cron:session): session closed for user root Dec 18 05:10:01 ispc CRON[1942246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:10:01 ispc CRON[1942247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:10:01 ispc CRON[1942248]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:10:01 ispc CRON[1942249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:10:01 ispc CRON[1942250]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:10:01 ispc CRON[1942247]: pam_unix(cron:session): session closed for user root Dec 18 05:10:01 ispc CRON[1942248]: pam_unix(cron:session): session closed for user www-data Dec 18 05:10:01 ispc CRON[1942250]: pam_unix(cron:session): session closed for user getmail Dec 18 05:10:01 ispc CRON[1942249]: pam_unix(cron:session): session closed for user root Dec 18 05:10:02 ispc CRON[1942246]: pam_unix(cron:session): session closed for user root Dec 18 05:11:01 ispc CRON[1942349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:11:01 ispc CRON[1942349]: pam_unix(cron:session): session closed for user root Dec 18 05:12:01 ispc CRON[1942386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:12:02 ispc CRON[1942386]: pam_unix(cron:session): session closed for user root Dec 18 05:12:35 ispc postfix/smtpd[1942412]: sql auxprop plugin using mysql engine Dec 18 05:12:36 ispc saslauthd[1942415]: pam_mysql - SELECT returned no result. Dec 18 05:12:36 ispc saslauthd[1942415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:12:36 ispc saslauthd[1942415]: do_auth : auth failure: [user=ro] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:12:39 ispc saslauthd[1942416]: pam_mysql - SELECT returned no result. Dec 18 05:12:39 ispc saslauthd[1942416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:12:39 ispc saslauthd[1942416]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:12:51 ispc sshd[1942427]: Invalid user ziplines from 211.45.175.153 Dec 18 05:13:01 ispc CRON[1942433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:13:02 ispc CRON[1942433]: pam_unix(cron:session): session closed for user root Dec 18 05:14:01 ispc CRON[1942472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:14:02 ispc CRON[1942472]: pam_unix(cron:session): session closed for user root Dec 18 05:14:58 ispc sshd[1942507]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 05:14:59 ispc sshd[1942509]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 05:14:59 ispc sshd[1942509]: Invalid user klape from 189.89.20.45 Dec 18 05:15:01 ispc CRON[1942513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:15:01 ispc CRON[1942514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:15:01 ispc CRON[1942515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:15:01 ispc CRON[1942516]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:15:01 ispc CRON[1942514]: pam_unix(cron:session): session closed for user root Dec 18 05:15:01 ispc CRON[1942516]: pam_unix(cron:session): session closed for user getmail Dec 18 05:15:01 ispc sshd[1942511]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 05:15:01 ispc sshd[1942511]: Invalid user ubuntu from 189.89.20.45 Dec 18 05:15:01 ispc CRON[1942515]: pam_unix(cron:session): session closed for user root Dec 18 05:15:03 ispc CRON[1942513]: pam_unix(cron:session): session closed for user root Dec 18 05:16:01 ispc CRON[1942613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:16:01 ispc CRON[1942613]: pam_unix(cron:session): session closed for user root Dec 18 05:17:01 ispc CRON[1942654]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:17:01 ispc CRON[1942655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:17:02 ispc CRON[1942655]: pam_unix(cron:session): session closed for user root Dec 18 05:17:03 ispc CRON[1942654]: pam_unix(cron:session): session closed for user www-data Dec 18 05:17:05 ispc sshd[1942669]: Invalid user blceu from 148.216.54.17 Dec 18 05:18:01 ispc CRON[1942697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:18:01 ispc CRON[1942697]: pam_unix(cron:session): session closed for user root Dec 18 05:19:01 ispc CRON[1942735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:19:01 ispc CRON[1942735]: pam_unix(cron:session): session closed for user root Dec 18 05:20:01 ispc CRON[1942779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:20:01 ispc CRON[1942781]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:20:01 ispc CRON[1942782]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:20:01 ispc CRON[1942783]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:20:01 ispc CRON[1942780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:20:01 ispc CRON[1942780]: pam_unix(cron:session): session closed for user root Dec 18 05:20:01 ispc CRON[1942781]: pam_unix(cron:session): session closed for user www-data Dec 18 05:20:01 ispc CRON[1942783]: pam_unix(cron:session): session closed for user getmail Dec 18 05:20:02 ispc CRON[1942782]: pam_unix(cron:session): session closed for user root Dec 18 05:20:02 ispc CRON[1942779]: pam_unix(cron:session): session closed for user root Dec 18 05:21:00 ispc postfix/smtpd[1942882]: sql auxprop plugin using mysql engine Dec 18 05:21:00 ispc saslauthd[1942885]: pam_mysql - SELECT returned no result. Dec 18 05:21:00 ispc saslauthd[1942885]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:21:00 ispc saslauthd[1942885]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:21:01 ispc CRON[1942886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:21:01 ispc CRON[1942887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:21:01 ispc CRON[1942886]: pam_unix(cron:session): session closed for user root Dec 18 05:21:01 ispc CRON[1942887]: pam_unix(cron:session): session closed for user root Dec 18 05:22:01 ispc CRON[1942927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:22:02 ispc CRON[1942927]: pam_unix(cron:session): session closed for user root Dec 18 05:22:24 ispc sshd[1942948]: Did not receive identification string from 159.65.195.182 Dec 18 05:22:28 ispc sshd[1942953]: Did not receive identification string from 206.189.105.163 Dec 18 05:23:01 ispc CRON[1942973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:23:01 ispc CRON[1942973]: pam_unix(cron:session): session closed for user root Dec 18 05:23:13 ispc sshd[1942988]: Invalid user admin from 159.65.195.182 Dec 18 05:23:55 ispc sshd[1943012]: Invalid user admin from 159.65.195.182 Dec 18 05:24:01 ispc CRON[1943019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:24:02 ispc CRON[1943019]: pam_unix(cron:session): session closed for user root Dec 18 05:24:38 ispc sshd[1943044]: Invalid user admin from 159.65.195.182 Dec 18 05:25:01 ispc CRON[1943061]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:25:01 ispc CRON[1943059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:25:01 ispc CRON[1943062]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:25:01 ispc CRON[1943060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:25:01 ispc CRON[1943060]: pam_unix(cron:session): session closed for user root Dec 18 05:25:01 ispc CRON[1943062]: pam_unix(cron:session): session closed for user getmail Dec 18 05:25:02 ispc CRON[1943061]: pam_unix(cron:session): session closed for user root Dec 18 05:25:02 ispc CRON[1943059]: pam_unix(cron:session): session closed for user root Dec 18 05:25:22 ispc sshd[1943142]: Invalid user admin from 159.65.195.182 Dec 18 05:26:01 ispc CRON[1943169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:26:01 ispc CRON[1943169]: pam_unix(cron:session): session closed for user root Dec 18 05:26:01 ispc sshd[1943163]: Invalid user admin from 159.65.195.182 Dec 18 05:26:21 ispc sshd[1943188]: Did not receive identification string from 64.227.64.110 Dec 18 05:26:31 ispc postfix/smtpd[1943191]: sql auxprop plugin using mysql engine Dec 18 05:26:31 ispc CRON[1942079]: pam_unix(cron:session): session closed for user root Dec 18 05:26:39 ispc sshd[1943197]: Invalid user admin from 159.65.195.182 Dec 18 05:27:01 ispc CRON[1943206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:27:01 ispc CRON[1943205]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:27:01 ispc CRON[1943206]: pam_unix(cron:session): session closed for user root Dec 18 05:27:17 ispc sshd[1943224]: Invalid user admin from 64.227.64.110 Dec 18 05:27:22 ispc saslauthd[1943227]: pam_mysql - SELECT returned no result. Dec 18 05:27:22 ispc saslauthd[1943227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:27:22 ispc saslauthd[1943227]: do_auth : auth failure: [user=role] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:27:51 ispc sshd[1943235]: Invalid user admin from 64.227.64.110 Dec 18 05:28:01 ispc CRON[1943242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:28:02 ispc CRON[1943242]: pam_unix(cron:session): session closed for user root Dec 18 05:28:10 ispc CRON[1943205]: pam_unix(cron:session): session closed for user www-data Dec 18 05:28:14 ispc postfix/smtpd[1943261]: sql auxprop plugin using mysql engine Dec 18 05:28:14 ispc postfix/smtpd[1943262]: sql auxprop plugin using mysql engine Dec 18 05:28:24 ispc sshd[1943264]: Invalid user admin from 64.227.64.110 Dec 18 05:28:56 ispc sshd[1943269]: Invalid user admin from 64.227.64.110 Dec 18 05:29:01 ispc CRON[1943271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:29:02 ispc CRON[1943271]: pam_unix(cron:session): session closed for user root Dec 18 05:29:23 ispc saslauthd[1943284]: pam_mysql - SELECT returned no result. Dec 18 05:29:23 ispc saslauthd[1943284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:29:23 ispc saslauthd[1943284]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:29:27 ispc sshd[1943285]: Invalid user admin from 64.227.64.110 Dec 18 05:29:31 ispc sshd[1943287]: Invalid user ziplines from 141.94.71.131 Dec 18 05:29:58 ispc sshd[1943289]: Invalid user admin from 64.227.64.110 Dec 18 05:30:01 ispc CRON[1943298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:30:01 ispc CRON[1943299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:30:01 ispc CRON[1943300]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:30:01 ispc CRON[1943301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:30:01 ispc CRON[1943302]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:30:01 ispc CRON[1943300]: pam_unix(cron:session): session closed for user www-data Dec 18 05:30:01 ispc CRON[1943299]: pam_unix(cron:session): session closed for user root Dec 18 05:30:01 ispc CRON[1943302]: pam_unix(cron:session): session closed for user getmail Dec 18 05:30:02 ispc CRON[1943298]: pam_unix(cron:session): session closed for user root Dec 18 05:30:27 ispc sshd[1943484]: Invalid user blceu from 175.125.92.77 Dec 18 05:30:57 ispc CRON[1943301]: pam_unix(cron:session): session closed for user root Dec 18 05:31:01 ispc CRON[1943489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:31:25 ispc sshd[1943509]: Invalid user ziplines from 175.125.92.77 Dec 18 05:32:01 ispc CRON[1943524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:32:02 ispc CRON[1943524]: pam_unix(cron:session): session closed for user root Dec 18 05:33:01 ispc CRON[1943566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:33:02 ispc CRON[1943566]: pam_unix(cron:session): session closed for user root Dec 18 05:33:28 ispc postfix/smtpd[1943589]: sql auxprop plugin using mysql engine Dec 18 05:33:28 ispc saslauthd[1943591]: pam_mysql - SELECT returned no result. Dec 18 05:33:28 ispc saslauthd[1943591]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:33:28 ispc saslauthd[1943591]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:33:52 ispc sshd[1943604]: Did not receive identification string from 45.140.17.97 Dec 18 05:34:01 ispc CRON[1943609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:34:02 ispc CRON[1943609]: pam_unix(cron:session): session closed for user root Dec 18 05:34:22 ispc sshd[1943628]: Invalid user test from 62.84.181.22 Dec 18 05:35:01 ispc CRON[1943649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:35:01 ispc CRON[1943650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:35:01 ispc CRON[1943651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:35:01 ispc CRON[1943652]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:35:01 ispc CRON[1943650]: pam_unix(cron:session): session closed for user root Dec 18 05:35:01 ispc CRON[1943652]: pam_unix(cron:session): session closed for user getmail Dec 18 05:35:01 ispc CRON[1943651]: pam_unix(cron:session): session closed for user root Dec 18 05:35:01 ispc CRON[1943649]: pam_unix(cron:session): session closed for user root Dec 18 05:36:01 ispc CRON[1943745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:36:02 ispc CRON[1943745]: pam_unix(cron:session): session closed for user root Dec 18 05:37:01 ispc CRON[1943785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:37:01 ispc CRON[1943785]: pam_unix(cron:session): session closed for user root Dec 18 05:37:32 ispc postfix/smtpd[1943810]: sql auxprop plugin using mysql engine Dec 18 05:37:33 ispc saslauthd[1943813]: pam_mysql - SELECT returned no result. Dec 18 05:37:33 ispc saslauthd[1943813]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:37:33 ispc saslauthd[1943813]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:38:01 ispc CRON[1943836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:38:02 ispc CRON[1943836]: pam_unix(cron:session): session closed for user root Dec 18 05:38:03 ispc sshd[1943826]: Invalid user NL5xUDpV2xRa from 111.61.105.100 Dec 18 05:39:01 ispc CRON[1943876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:39:01 ispc CRON[1943875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:39:01 ispc CRON[1943875]: pam_unix(cron:session): session closed for user root Dec 18 05:39:02 ispc CRON[1943876]: pam_unix(cron:session): session closed for user root Dec 18 05:40:01 ispc CRON[1943926]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:40:01 ispc CRON[1943922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:40:01 ispc CRON[1943923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:40:01 ispc CRON[1943924]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:40:01 ispc CRON[1943925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:40:01 ispc CRON[1943924]: pam_unix(cron:session): session closed for user www-data Dec 18 05:40:01 ispc CRON[1943926]: pam_unix(cron:session): session closed for user getmail Dec 18 05:40:01 ispc CRON[1943923]: pam_unix(cron:session): session closed for user root Dec 18 05:40:01 ispc CRON[1943925]: pam_unix(cron:session): session closed for user root Dec 18 05:40:02 ispc CRON[1943922]: pam_unix(cron:session): session closed for user root Dec 18 05:40:46 ispc sshd[1944023]: Invalid user martof from 211.45.175.153 Dec 18 05:41:01 ispc CRON[1944034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:41:02 ispc CRON[1944034]: pam_unix(cron:session): session closed for user root Dec 18 05:41:33 ispc postfix/smtpd[1944058]: sql auxprop plugin using mysql engine Dec 18 05:42:01 ispc CRON[1944074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:42:01 ispc CRON[1944074]: pam_unix(cron:session): session closed for user root Dec 18 05:42:12 ispc saslauthd[1944089]: pam_mysql - SELECT returned no result. Dec 18 05:42:12 ispc saslauthd[1944089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:42:12 ispc saslauthd[1944089]: do_auth : auth failure: [user=role1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:42:37 ispc sshd[1944098]: Invalid user blceu from 103.77.207.53 Dec 18 05:43:01 ispc CRON[1944125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:43:02 ispc CRON[1944125]: pam_unix(cron:session): session closed for user root Dec 18 05:44:01 ispc CRON[1944160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:44:02 ispc CRON[1944160]: pam_unix(cron:session): session closed for user root Dec 18 05:45:01 ispc CRON[1944196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:45:01 ispc CRON[1944197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:45:01 ispc CRON[1944198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:45:01 ispc CRON[1944199]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:45:01 ispc CRON[1944197]: pam_unix(cron:session): session closed for user root Dec 18 05:45:01 ispc CRON[1944199]: pam_unix(cron:session): session closed for user getmail Dec 18 05:45:01 ispc CRON[1944196]: pam_unix(cron:session): session closed for user root Dec 18 05:45:01 ispc CRON[1944198]: pam_unix(cron:session): session closed for user root Dec 18 05:45:34 ispc postfix/smtpd[1944285]: sql auxprop plugin using mysql engine Dec 18 05:45:35 ispc saslauthd[1944288]: pam_mysql - SELECT returned no result. Dec 18 05:45:35 ispc saslauthd[1944288]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:45:35 ispc saslauthd[1944288]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:46:01 ispc CRON[1944302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:46:02 ispc CRON[1944302]: pam_unix(cron:session): session closed for user root Dec 18 05:47:01 ispc CRON[1944337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:47:01 ispc CRON[1944337]: pam_unix(cron:session): session closed for user root Dec 18 05:48:01 ispc CRON[1944388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:48:02 ispc CRON[1944388]: pam_unix(cron:session): session closed for user root Dec 18 05:48:42 ispc sshd[1944417]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 05:48:42 ispc sshd[1944417]: Invalid user user from 2.57.121.25 Dec 18 05:49:01 ispc CRON[1944429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:49:02 ispc CRON[1944429]: pam_unix(cron:session): session closed for user root Dec 18 05:50:01 ispc CRON[1944469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:50:01 ispc CRON[1944470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:50:01 ispc CRON[1944471]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 05:50:01 ispc CRON[1944473]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:50:01 ispc CRON[1944472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:50:01 ispc CRON[1944470]: pam_unix(cron:session): session closed for user root Dec 18 05:50:01 ispc CRON[1944471]: pam_unix(cron:session): session closed for user www-data Dec 18 05:50:01 ispc CRON[1944473]: pam_unix(cron:session): session closed for user getmail Dec 18 05:50:01 ispc CRON[1944472]: pam_unix(cron:session): session closed for user root Dec 18 05:50:02 ispc CRON[1944469]: pam_unix(cron:session): session closed for user root Dec 18 05:50:50 ispc postfix/smtpd[1944569]: sql auxprop plugin using mysql engine Dec 18 05:51:01 ispc CRON[1944576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:51:02 ispc CRON[1944576]: pam_unix(cron:session): session closed for user root Dec 18 05:51:36 ispc CRON[1943489]: pam_unix(cron:session): session closed for user root Dec 18 05:51:39 ispc postfix/smtpd[1944606]: sql auxprop plugin using mysql engine Dec 18 05:52:01 ispc postfix/smtpd[1944609]: sql auxprop plugin using mysql engine Dec 18 05:52:01 ispc CRON[1944612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:52:02 ispc saslauthd[1944619]: pam_mysql - SELECT returned no result. Dec 18 05:52:02 ispc saslauthd[1944619]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:52:02 ispc saslauthd[1944619]: do_auth : auth failure: [user=root@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 05:52:02 ispc CRON[1944612]: pam_unix(cron:session): session closed for user root Dec 18 05:52:50 ispc postfix/smtpd[1944640]: sql auxprop plugin using mysql engine Dec 18 05:53:01 ispc CRON[1944641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:53:04 ispc CRON[1944641]: pam_unix(cron:session): session closed for user root Dec 18 05:53:56 ispc postfix/smtpd[1944653]: sql auxprop plugin using mysql engine Dec 18 05:53:58 ispc saslauthd[1944656]: pam_mysql - SELECT returned no result. Dec 18 05:53:58 ispc saslauthd[1944656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:53:58 ispc saslauthd[1944656]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:54:01 ispc CRON[1944657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:54:03 ispc CRON[1944657]: pam_unix(cron:session): session closed for user root Dec 18 05:54:20 ispc sshd[1944668]: Invalid user blceu from 103.100.209.172 Dec 18 05:55:01 ispc CRON[1944679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:55:01 ispc CRON[1944678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:55:01 ispc CRON[1944680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:55:01 ispc CRON[1944681]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 05:55:01 ispc CRON[1944679]: pam_unix(cron:session): session closed for user root Dec 18 05:55:01 ispc CRON[1944681]: pam_unix(cron:session): session closed for user getmail Dec 18 05:55:02 ispc CRON[1944678]: pam_unix(cron:session): session closed for user root Dec 18 05:55:39 ispc CRON[1944680]: pam_unix(cron:session): session closed for user root Dec 18 05:56:01 ispc CRON[1944792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:57:00 ispc postfix/smtpd[1944824]: sql auxprop plugin using mysql engine Dec 18 05:57:01 ispc saslauthd[1944826]: pam_mysql - SELECT returned no result. Dec 18 05:57:01 ispc saslauthd[1944826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 05:57:01 ispc saslauthd[1944826]: do_auth : auth failure: [user=roo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 05:57:01 ispc CRON[1944827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:57:02 ispc CRON[1944827]: pam_unix(cron:session): session closed for user root Dec 18 05:58:01 ispc CRON[1944874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:58:02 ispc CRON[1944874]: pam_unix(cron:session): session closed for user root Dec 18 05:59:01 ispc CRON[1944914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 05:59:01 ispc CRON[1944914]: pam_unix(cron:session): session closed for user root Dec 18 05:59:27 ispc sshd[1944936]: Invalid user martof from 103.77.207.53 Dec 18 06:00:01 ispc CRON[1944963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:00:01 ispc CRON[1944964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:00:01 ispc CRON[1944965]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:00:01 ispc CRON[1944967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:00:01 ispc CRON[1944966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:00:01 ispc CRON[1944968]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:00:01 ispc CRON[1944965]: pam_unix(cron:session): session closed for user www-data Dec 18 06:00:01 ispc CRON[1944968]: pam_unix(cron:session): session closed for user getmail Dec 18 06:00:01 ispc CRON[1944964]: pam_unix(cron:session): session closed for user root Dec 18 06:00:01 ispc CRON[1944967]: pam_unix(cron:session): session closed for user root Dec 18 06:00:02 ispc CRON[1944963]: pam_unix(cron:session): session closed for user root Dec 18 06:00:02 ispc CRON[1944966]: pam_unix(cron:session): session closed for user root Dec 18 06:00:20 ispc postfix/smtpd[1945128]: sql auxprop plugin using mysql engine Dec 18 06:00:27 ispc postfix/smtpd[1945130]: sql auxprop plugin using mysql engine Dec 18 06:00:31 ispc sshd[1945135]: Invalid user hyundaicz from 114.246.241.87 Dec 18 06:01:01 ispc CRON[1945154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:01:01 ispc CRON[1945154]: pam_unix(cron:session): session closed for user root Dec 18 06:01:41 ispc sshd[1945180]: Invalid user blceu from 8.133.194.64 Dec 18 06:01:42 ispc postfix/smtpd[1945186]: sql auxprop plugin using mysql engine Dec 18 06:02:01 ispc CRON[1945200]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 06:02:01 ispc CRON[1945201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:02:02 ispc CRON[1945201]: pam_unix(cron:session): session closed for user root Dec 18 06:02:24 ispc postfix/smtpd[1945557]: sql auxprop plugin using mysql engine Dec 18 06:02:24 ispc saslauthd[1945560]: pam_mysql - SELECT returned no result. Dec 18 06:02:24 ispc saslauthd[1945560]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:02:24 ispc saslauthd[1945560]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:03:01 ispc CRON[1945997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:03:01 ispc CRON[1945997]: pam_unix(cron:session): session closed for user root Dec 18 06:03:45 ispc CRON[1945200]: pam_unix(cron:session): session closed for user logcheck Dec 18 06:03:53 ispc postfix/smtpd[1946296]: sql auxprop plugin using mysql engine Dec 18 06:04:01 ispc CRON[1946304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:04:01 ispc CRON[1946304]: pam_unix(cron:session): session closed for user root Dec 18 06:05:01 ispc CRON[1946340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:05:01 ispc CRON[1946341]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:05:01 ispc CRON[1946339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:05:01 ispc CRON[1946342]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:05:01 ispc CRON[1946340]: pam_unix(cron:session): session closed for user root Dec 18 06:05:01 ispc CRON[1946342]: pam_unix(cron:session): session closed for user getmail Dec 18 06:05:01 ispc CRON[1946341]: pam_unix(cron:session): session closed for user root Dec 18 06:05:02 ispc CRON[1946339]: pam_unix(cron:session): session closed for user root Dec 18 06:06:01 ispc CRON[1946439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:06:02 ispc CRON[1946439]: pam_unix(cron:session): session closed for user root Dec 18 06:06:22 ispc sshd[1946458]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:06:36 ispc sshd[1946468]: Invalid user blceu from 213.199.57.249 Dec 18 06:06:38 ispc sshd[1946470]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:06:38 ispc sshd[1946470]: Invalid user ziplines from 103.146.203.212 Dec 18 06:06:52 ispc sshd[1946476]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:06:52 ispc sshd[1946476]: Invalid user admin from 2.57.121.112 Dec 18 06:07:01 ispc CRON[1946483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:07:02 ispc CRON[1946483]: pam_unix(cron:session): session closed for user root Dec 18 06:07:02 ispc postfix/smtpd[1946498]: sql auxprop plugin using mysql engine Dec 18 06:07:03 ispc saslauthd[1946501]: pam_mysql - SELECT returned no result. Dec 18 06:07:03 ispc saslauthd[1946501]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:07:03 ispc saslauthd[1946501]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:07:30 ispc sshd[1946510]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:08:01 ispc CRON[1946533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:08:01 ispc CRON[1946533]: pam_unix(cron:session): session closed for user root Dec 18 06:08:19 ispc postfix/smtpd[1946552]: sql auxprop plugin using mysql engine Dec 18 06:08:54 ispc sshd[1946571]: Invalid user tshombeknife from 114.246.241.87 Dec 18 06:09:01 ispc CRON[1946578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:09:01 ispc CRON[1946579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:09:01 ispc CRON[1946578]: pam_unix(cron:session): session closed for user root Dec 18 06:09:02 ispc CRON[1946579]: pam_unix(cron:session): session closed for user root Dec 18 06:10:01 ispc CRON[1946627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:10:01 ispc CRON[1946628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:10:01 ispc CRON[1946629]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:10:01 ispc CRON[1946630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:10:01 ispc CRON[1946631]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:10:01 ispc CRON[1946628]: pam_unix(cron:session): session closed for user root Dec 18 06:10:01 ispc CRON[1946629]: pam_unix(cron:session): session closed for user www-data Dec 18 06:10:01 ispc CRON[1946631]: pam_unix(cron:session): session closed for user getmail Dec 18 06:10:01 ispc CRON[1946630]: pam_unix(cron:session): session closed for user root Dec 18 06:10:01 ispc CRON[1946627]: pam_unix(cron:session): session closed for user root Dec 18 06:10:33 ispc postfix/smtpd[1946717]: sql auxprop plugin using mysql engine Dec 18 06:10:33 ispc saslauthd[1946719]: pam_mysql - SELECT returned no result. Dec 18 06:10:33 ispc saslauthd[1946719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:10:33 ispc saslauthd[1946719]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:11:01 ispc CRON[1946732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:11:02 ispc CRON[1946732]: pam_unix(cron:session): session closed for user root Dec 18 06:11:48 ispc saslauthd[1946766]: pam_mysql - SELECT returned no result. Dec 18 06:11:48 ispc saslauthd[1946766]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:11:48 ispc saslauthd[1946766]: do_auth : auth failure: [user=rsadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:12:01 ispc CRON[1946771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:12:02 ispc CRON[1946771]: pam_unix(cron:session): session closed for user root Dec 18 06:12:32 ispc saslauthd[1946795]: pam_mysql - SELECT returned no result. Dec 18 06:12:32 ispc saslauthd[1946795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:12:32 ispc saslauthd[1946795]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:12:41 ispc sshd[1946800]: Did not receive identification string from 175.6.5.200 Dec 18 06:13:01 ispc CRON[1946817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:13:02 ispc CRON[1946817]: pam_unix(cron:session): session closed for user root Dec 18 06:13:49 ispc postfix/smtpd[1946849]: sql auxprop plugin using mysql engine Dec 18 06:14:01 ispc CRON[1946855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:14:01 ispc CRON[1946855]: pam_unix(cron:session): session closed for user root Dec 18 06:14:19 ispc sshd[1946874]: Did not receive identification string from 175.6.5.200 Dec 18 06:14:52 ispc sshd[1946890]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:15:01 ispc CRON[1946896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:15:01 ispc CRON[1946897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:15:01 ispc CRON[1946898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:15:01 ispc CRON[1946899]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:15:01 ispc CRON[1946897]: pam_unix(cron:session): session closed for user root Dec 18 06:15:01 ispc CRON[1946899]: pam_unix(cron:session): session closed for user getmail Dec 18 06:15:02 ispc CRON[1946898]: pam_unix(cron:session): session closed for user root Dec 18 06:15:02 ispc CRON[1946896]: pam_unix(cron:session): session closed for user root Dec 18 06:15:05 ispc sshd[1946972]: Invalid user zetyun from 175.6.5.200 Dec 18 06:15:08 ispc sshd[1946974]: Invalid user paas from 175.6.5.200 Dec 18 06:15:11 ispc sshd[1946980]: Invalid user paas from 175.6.5.200 Dec 18 06:15:13 ispc sshd[1946982]: Invalid user paas from 175.6.5.200 Dec 18 06:15:15 ispc sshd[1946984]: Invalid user paas from 175.6.5.200 Dec 18 06:15:18 ispc sshd[1946986]: Invalid user paas from 175.6.5.200 Dec 18 06:16:01 ispc CRON[1947016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:16:02 ispc CRON[1947016]: pam_unix(cron:session): session closed for user root Dec 18 06:16:18 ispc postfix/smtpd[1947033]: sql auxprop plugin using mysql engine Dec 18 06:16:18 ispc CRON[1944792]: pam_unix(cron:session): session closed for user root Dec 18 06:17:01 ispc CRON[1947039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:17:02 ispc CRON[1947039]: pam_unix(cron:session): session closed for user root Dec 18 06:18:01 ispc CRON[1947063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:18:01 ispc CRON[1947062]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 06:18:01 ispc CRON[1947063]: pam_unix(cron:session): session closed for user root Dec 18 06:18:05 ispc CRON[1947062]: pam_unix(cron:session): session closed for user amavis Dec 18 06:18:06 ispc postfix/smtpd[1947087]: sql auxprop plugin using mysql engine Dec 18 06:18:14 ispc sshd[1947092]: Invalid user blceu from 211.45.175.153 Dec 18 06:18:31 ispc sshd[1947097]: Invalid user from 8.217.149.108 Dec 18 06:18:40 ispc saslauthd[1947100]: pam_mysql - SELECT returned no result. Dec 18 06:18:40 ispc saslauthd[1947100]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:18:40 ispc saslauthd[1947100]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:19:01 ispc CRON[1947101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:19:02 ispc CRON[1947101]: pam_unix(cron:session): session closed for user root Dec 18 06:20:01 ispc CRON[1947115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:20:01 ispc CRON[1947116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:20:01 ispc CRON[1947117]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:20:01 ispc CRON[1947118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:20:01 ispc CRON[1947119]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:20:01 ispc CRON[1947116]: pam_unix(cron:session): session closed for user root Dec 18 06:20:01 ispc CRON[1947117]: pam_unix(cron:session): session closed for user www-data Dec 18 06:20:01 ispc CRON[1947119]: pam_unix(cron:session): session closed for user getmail Dec 18 06:20:02 ispc CRON[1947115]: pam_unix(cron:session): session closed for user root Dec 18 06:20:48 ispc CRON[1947118]: pam_unix(cron:session): session closed for user root Dec 18 06:21:01 ispc CRON[1947229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:21:01 ispc CRON[1947230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:21:01 ispc CRON[1947229]: pam_unix(cron:session): session closed for user root Dec 18 06:22:01 ispc CRON[1947264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:22:02 ispc CRON[1947264]: pam_unix(cron:session): session closed for user root Dec 18 06:23:01 ispc CRON[1947314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:23:01 ispc CRON[1947314]: pam_unix(cron:session): session closed for user root Dec 18 06:23:42 ispc sshd[1947341]: Invalid user ziplines from 103.77.207.53 Dec 18 06:24:01 ispc CRON[1947352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:24:02 ispc CRON[1947352]: pam_unix(cron:session): session closed for user root Dec 18 06:24:15 ispc sshd[1947368]: Invalid user blceu from 220.196.191.58 Dec 18 06:24:36 ispc sshd[1947384]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:24:36 ispc sshd[1947384]: Invalid user martof from 103.146.203.212 Dec 18 06:24:36 ispc sshd[1947378]: Invalid user anoraksro from 106.12.215.233 Dec 18 06:25:01 ispc CRON[1947395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:25:01 ispc CRON[1947396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:25:01 ispc CRON[1947397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:25:01 ispc CRON[1947398]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:25:02 ispc CRON[1947396]: pam_unix(cron:session): session closed for user root Dec 18 06:25:02 ispc CRON[1947398]: pam_unix(cron:session): session closed for user getmail Dec 18 06:25:02 ispc CRON[1947397]: pam_unix(cron:session): session closed for user root Dec 18 06:25:03 ispc CRON[1947395]: pam_unix(cron:session): session closed for user root Dec 18 06:26:01 ispc CRON[1947495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:26:02 ispc CRON[1947495]: pam_unix(cron:session): session closed for user root Dec 18 06:26:37 ispc postfix/smtpd[1947523]: sql auxprop plugin using mysql engine Dec 18 06:26:38 ispc postfix/smtpd[1947527]: sql auxprop plugin using mysql engine Dec 18 06:26:38 ispc saslauthd[1947526]: pam_mysql - SELECT returned no result. Dec 18 06:26:38 ispc saslauthd[1947526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:26:38 ispc saslauthd[1947526]: do_auth : auth failure: [user=rw] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:26:39 ispc saslauthd[1947528]: pam_mysql - SELECT returned no result. Dec 18 06:26:39 ispc saslauthd[1947528]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:26:39 ispc saslauthd[1947528]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:27:01 ispc CRON[1947537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:27:01 ispc CRON[1947537]: pam_unix(cron:session): session closed for user root Dec 18 06:28:01 ispc CRON[1947581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:28:02 ispc CRON[1947581]: pam_unix(cron:session): session closed for user root Dec 18 06:29:01 ispc CRON[1947621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:29:02 ispc CRON[1947621]: pam_unix(cron:session): session closed for user root Dec 18 06:29:41 ispc sshd[1947649]: Invalid user klape from 103.164.20.29 Dec 18 06:29:43 ispc sshd[1947655]: Invalid user ubuntu from 103.164.20.29 Dec 18 06:30:01 ispc CRON[1947666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:30:01 ispc CRON[1947667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:30:01 ispc CRON[1947668]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:30:01 ispc CRON[1947669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:30:01 ispc CRON[1947670]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:30:01 ispc CRON[1947667]: pam_unix(cron:session): session closed for user root Dec 18 06:30:01 ispc CRON[1947668]: pam_unix(cron:session): session closed for user www-data Dec 18 06:30:01 ispc CRON[1947670]: pam_unix(cron:session): session closed for user getmail Dec 18 06:30:02 ispc CRON[1947666]: pam_unix(cron:session): session closed for user root Dec 18 06:30:02 ispc CRON[1947669]: pam_unix(cron:session): session closed for user root Dec 18 06:31:01 ispc CRON[1947766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:31:02 ispc CRON[1947766]: pam_unix(cron:session): session closed for user root Dec 18 06:32:01 ispc CRON[1947804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:32:02 ispc CRON[1947804]: pam_unix(cron:session): session closed for user root Dec 18 06:32:22 ispc sshd[1947827]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:33:01 ispc CRON[1947856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:33:02 ispc CRON[1947856]: pam_unix(cron:session): session closed for user root Dec 18 06:33:25 ispc postfix/smtpd[1947881]: sql auxprop plugin using mysql engine Dec 18 06:34:01 ispc CRON[1947902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:34:02 ispc CRON[1947902]: pam_unix(cron:session): session closed for user root Dec 18 06:34:22 ispc sshd[1947921]: Invalid user ziplines from 148.216.54.17 Dec 18 06:34:38 ispc postfix/smtpd[1947937]: sql auxprop plugin using mysql engine Dec 18 06:34:38 ispc saslauthd[1947939]: pam_mysql - SELECT returned no result. Dec 18 06:34:38 ispc saslauthd[1947939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:34:38 ispc saslauthd[1947939]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:35:01 ispc CRON[1947948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:35:01 ispc CRON[1947949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:35:01 ispc CRON[1947950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:35:01 ispc CRON[1947951]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:35:01 ispc CRON[1947949]: pam_unix(cron:session): session closed for user root Dec 18 06:35:01 ispc CRON[1947951]: pam_unix(cron:session): session closed for user getmail Dec 18 06:35:01 ispc CRON[1947948]: pam_unix(cron:session): session closed for user root Dec 18 06:35:02 ispc CRON[1947950]: pam_unix(cron:session): session closed for user root Dec 18 06:36:01 ispc CRON[1948049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:36:01 ispc CRON[1948049]: pam_unix(cron:session): session closed for user root Dec 18 06:36:04 ispc postfix/smtpd[1948060]: sql auxprop plugin using mysql engine Dec 18 06:36:52 ispc postfix/smtpd[1948084]: sql auxprop plugin using mysql engine Dec 18 06:36:52 ispc postfix/smtpd[1948086]: sql auxprop plugin using mysql engine Dec 18 06:37:01 ispc CRON[1948091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:37:02 ispc CRON[1948091]: pam_unix(cron:session): session closed for user root Dec 18 06:38:01 ispc CRON[1948143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:38:02 ispc CRON[1948143]: pam_unix(cron:session): session closed for user root Dec 18 06:39:01 ispc CRON[1948180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:39:01 ispc CRON[1948181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:39:01 ispc CRON[1948180]: pam_unix(cron:session): session closed for user root Dec 18 06:39:02 ispc CRON[1948181]: pam_unix(cron:session): session closed for user root Dec 18 06:40:01 ispc CRON[1948234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:40:01 ispc CRON[1948235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:40:01 ispc CRON[1948236]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:40:01 ispc CRON[1948237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:40:01 ispc CRON[1948238]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:40:01 ispc CRON[1948235]: pam_unix(cron:session): session closed for user root Dec 18 06:40:01 ispc CRON[1948236]: pam_unix(cron:session): session closed for user www-data Dec 18 06:40:01 ispc CRON[1948238]: pam_unix(cron:session): session closed for user getmail Dec 18 06:40:02 ispc CRON[1948237]: pam_unix(cron:session): session closed for user root Dec 18 06:40:02 ispc CRON[1948234]: pam_unix(cron:session): session closed for user root Dec 18 06:40:37 ispc postfix/smtpd[1948326]: sql auxprop plugin using mysql engine Dec 18 06:40:38 ispc saslauthd[1948329]: pam_mysql - SELECT returned no result. Dec 18 06:40:38 ispc saslauthd[1948329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:40:38 ispc saslauthd[1948329]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:41:01 ispc CRON[1948343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:41:02 ispc CRON[1948343]: pam_unix(cron:session): session closed for user root Dec 18 06:41:19 ispc CRON[1947230]: pam_unix(cron:session): session closed for user root Dec 18 06:41:25 ispc saslauthd[1948362]: pam_mysql - SELECT returned no result. Dec 18 06:41:25 ispc saslauthd[1948362]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:41:25 ispc saslauthd[1948362]: do_auth : auth failure: [user=rwa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:41:55 ispc postfix/smtpd[1948363]: sql auxprop plugin using mysql engine Dec 18 06:42:01 ispc CRON[1948366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:42:03 ispc CRON[1948366]: pam_unix(cron:session): session closed for user root Dec 18 06:42:42 ispc saslauthd[1948378]: pam_mysql - SELECT returned no result. Dec 18 06:42:42 ispc saslauthd[1948378]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:42:42 ispc saslauthd[1948378]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:43:01 ispc CRON[1948387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:43:02 ispc CRON[1948387]: pam_unix(cron:session): session closed for user root Dec 18 06:43:30 ispc saslauthd[1948400]: pam_mysql - SELECT returned no result. Dec 18 06:43:30 ispc saslauthd[1948400]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:43:30 ispc saslauthd[1948400]: do_auth : auth failure: [user=webmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 06:44:01 ispc CRON[1948403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:44:03 ispc CRON[1948403]: pam_unix(cron:session): session closed for user root Dec 18 06:45:01 ispc CRON[1948417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:45:01 ispc CRON[1948418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:45:01 ispc CRON[1948419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:45:01 ispc CRON[1948420]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:45:01 ispc CRON[1948418]: pam_unix(cron:session): session closed for user root Dec 18 06:45:01 ispc CRON[1948420]: pam_unix(cron:session): session closed for user getmail Dec 18 06:45:02 ispc CRON[1948417]: pam_unix(cron:session): session closed for user root Dec 18 06:46:01 ispc CRON[1948607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:46:01 ispc CRON[1948607]: pam_unix(cron:session): session closed for user root Dec 18 06:46:02 ispc CRON[1948419]: pam_unix(cron:session): session closed for user root Dec 18 06:47:01 ispc CRON[1948620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:48:01 ispc CRON[1948665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:48:02 ispc CRON[1948665]: pam_unix(cron:session): session closed for user root Dec 18 06:48:17 ispc sshd[1948684]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 06:48:17 ispc sshd[1948684]: Invalid user blceu from 103.146.203.212 Dec 18 06:49:01 ispc CRON[1948704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:49:02 ispc CRON[1948704]: pam_unix(cron:session): session closed for user root Dec 18 06:49:27 ispc sshd[1948730]: Invalid user matlbula from 35.239.77.168 Dec 18 06:50:01 ispc CRON[1948745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:50:01 ispc CRON[1948746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:50:01 ispc CRON[1948747]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 06:50:01 ispc CRON[1948748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:50:01 ispc CRON[1948749]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:50:01 ispc CRON[1948747]: pam_unix(cron:session): session closed for user www-data Dec 18 06:50:01 ispc CRON[1948746]: pam_unix(cron:session): session closed for user root Dec 18 06:50:01 ispc CRON[1948749]: pam_unix(cron:session): session closed for user getmail Dec 18 06:50:03 ispc CRON[1948748]: pam_unix(cron:session): session closed for user root Dec 18 06:50:03 ispc CRON[1948745]: pam_unix(cron:session): session closed for user root Dec 18 06:50:35 ispc postfix/smtpd[1948842]: sql auxprop plugin using mysql engine Dec 18 06:50:36 ispc saslauthd[1948845]: pam_mysql - SELECT returned no result. Dec 18 06:50:36 ispc saslauthd[1948845]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:50:36 ispc saslauthd[1948845]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:51:01 ispc CRON[1948856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:51:02 ispc CRON[1948856]: pam_unix(cron:session): session closed for user root Dec 18 06:51:30 ispc sshd[1948882]: Invalid user blceu from 5.129.195.224 Dec 18 06:51:56 ispc sshd[1948893]: Invalid user blceu from 203.146.21.153 Dec 18 06:52:01 ispc CRON[1948899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:52:01 ispc CRON[1948900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:52:02 ispc CRON[1948900]: pam_unix(cron:session): session closed for user root Dec 18 06:53:01 ispc CRON[1948949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:53:02 ispc CRON[1948949]: pam_unix(cron:session): session closed for user root Dec 18 06:54:01 ispc CRON[1948984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:54:01 ispc CRON[1948984]: pam_unix(cron:session): session closed for user root Dec 18 06:55:01 ispc CRON[1949027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:55:01 ispc CRON[1949028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:55:01 ispc CRON[1949029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:55:01 ispc CRON[1949030]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 06:55:01 ispc CRON[1949030]: pam_unix(cron:session): session closed for user getmail Dec 18 06:55:01 ispc CRON[1949028]: pam_unix(cron:session): session closed for user root Dec 18 06:55:02 ispc CRON[1949029]: pam_unix(cron:session): session closed for user root Dec 18 06:55:02 ispc CRON[1949027]: pam_unix(cron:session): session closed for user root Dec 18 06:55:18 ispc CRON[1948899]: pam_unix(cron:session): session closed for user root Dec 18 06:56:01 ispc CRON[1949129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:56:01 ispc CRON[1949129]: pam_unix(cron:session): session closed for user root Dec 18 06:56:13 ispc postfix/smtpd[1949144]: sql auxprop plugin using mysql engine Dec 18 06:56:14 ispc saslauthd[1949147]: pam_mysql - SELECT returned no result. Dec 18 06:56:14 ispc saslauthd[1949147]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 06:56:14 ispc saslauthd[1949147]: do_auth : auth failure: [user=s1stem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 06:57:01 ispc CRON[1949172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:57:02 ispc CRON[1949172]: pam_unix(cron:session): session closed for user root Dec 18 06:57:15 ispc sshd[1949188]: Invalid user ziplines from 185.181.182.252 Dec 18 06:58:01 ispc CRON[1949220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:58:02 ispc CRON[1949220]: pam_unix(cron:session): session closed for user root Dec 18 06:59:01 ispc CRON[1949253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 06:59:02 ispc CRON[1949253]: pam_unix(cron:session): session closed for user root Dec 18 07:00:01 ispc CRON[1949288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:00:01 ispc CRON[1949289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:00:01 ispc CRON[1949290]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:00:01 ispc CRON[1949291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:00:01 ispc CRON[1949292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:00:01 ispc CRON[1949293]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:00:01 ispc CRON[1949290]: pam_unix(cron:session): session closed for user www-data Dec 18 07:00:01 ispc CRON[1949289]: pam_unix(cron:session): session closed for user root Dec 18 07:00:01 ispc CRON[1949293]: pam_unix(cron:session): session closed for user getmail Dec 18 07:00:02 ispc CRON[1949292]: pam_unix(cron:session): session closed for user root Dec 18 07:00:02 ispc CRON[1949291]: pam_unix(cron:session): session closed for user root Dec 18 07:00:03 ispc CRON[1949288]: pam_unix(cron:session): session closed for user root Dec 18 07:00:43 ispc sshd[1949461]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:00:43 ispc sshd[1949461]: Invalid user martof from 157.245.115.125 Dec 18 07:01:01 ispc CRON[1949472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:01:02 ispc CRON[1949472]: pam_unix(cron:session): session closed for user root Dec 18 07:01:07 ispc postfix/smtpd[1949488]: sql auxprop plugin using mysql engine Dec 18 07:01:07 ispc saslauthd[1949491]: pam_mysql - SELECT returned no result. Dec 18 07:01:07 ispc saslauthd[1949491]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:01:07 ispc saslauthd[1949491]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:01:20 ispc sshd[1949496]: Did not receive identification string from 163.179.63.235 Dec 18 07:02:01 ispc CRON[1949515]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 07:02:01 ispc CRON[1949516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:02:02 ispc CRON[1949516]: pam_unix(cron:session): session closed for user root Dec 18 07:03:01 ispc CRON[1950304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:03:02 ispc CRON[1950304]: pam_unix(cron:session): session closed for user root Dec 18 07:03:33 ispc sshd[1950525]: Invalid user martof from 203.146.21.153 Dec 18 07:03:37 ispc CRON[1949515]: pam_unix(cron:session): session closed for user logcheck Dec 18 07:03:42 ispc postfix/smtpd[1950601]: sql auxprop plugin using mysql engine Dec 18 07:04:01 ispc CRON[1950613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:04:02 ispc CRON[1950613]: pam_unix(cron:session): session closed for user root Dec 18 07:05:01 ispc CRON[1950652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:05:01 ispc CRON[1950653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:05:01 ispc CRON[1950654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:05:01 ispc CRON[1950655]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:05:01 ispc CRON[1950653]: pam_unix(cron:session): session closed for user root Dec 18 07:05:01 ispc CRON[1950655]: pam_unix(cron:session): session closed for user getmail Dec 18 07:05:01 ispc CRON[1950654]: pam_unix(cron:session): session closed for user root Dec 18 07:05:01 ispc CRON[1950652]: pam_unix(cron:session): session closed for user root Dec 18 07:06:01 ispc CRON[1950755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:06:02 ispc CRON[1950755]: pam_unix(cron:session): session closed for user root Dec 18 07:06:06 ispc sshd[1950767]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:06:06 ispc sshd[1950767]: Invalid user user from 2.57.121.25 Dec 18 07:06:54 ispc postfix/smtpd[1950791]: sql auxprop plugin using mysql engine Dec 18 07:07:01 ispc CRON[1950798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:07:02 ispc CRON[1950798]: pam_unix(cron:session): session closed for user root Dec 18 07:07:28 ispc postfix/smtpd[1950823]: sql auxprop plugin using mysql engine Dec 18 07:07:28 ispc CRON[1948620]: pam_unix(cron:session): session closed for user root Dec 18 07:08:01 ispc CRON[1950835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:08:02 ispc CRON[1950835]: pam_unix(cron:session): session closed for user root Dec 18 07:09:01 ispc CRON[1950851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:09:01 ispc CRON[1950852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:09:02 ispc CRON[1950851]: pam_unix(cron:session): session closed for user root Dec 18 07:09:03 ispc CRON[1950852]: pam_unix(cron:session): session closed for user root Dec 18 07:10:01 ispc CRON[1950875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:10:01 ispc CRON[1950876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:10:01 ispc CRON[1950877]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:10:01 ispc CRON[1950878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:10:01 ispc CRON[1950879]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:10:02 ispc CRON[1950876]: pam_unix(cron:session): session closed for user root Dec 18 07:10:02 ispc CRON[1950879]: pam_unix(cron:session): session closed for user getmail Dec 18 07:10:02 ispc CRON[1950877]: pam_unix(cron:session): session closed for user www-data Dec 18 07:10:02 ispc CRON[1950875]: pam_unix(cron:session): session closed for user root Dec 18 07:10:33 ispc CRON[1950878]: pam_unix(cron:session): session closed for user root Dec 18 07:11:01 ispc CRON[1950988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:11:07 ispc saslauthd[1951001]: pam_mysql - SELECT returned no result. Dec 18 07:11:07 ispc saslauthd[1951001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:11:07 ispc saslauthd[1951001]: do_auth : auth failure: [user=sa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:12:01 ispc CRON[1951027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:12:01 ispc CRON[1951027]: pam_unix(cron:session): session closed for user root Dec 18 07:13:01 ispc CRON[1951076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:13:02 ispc CRON[1951076]: pam_unix(cron:session): session closed for user root Dec 18 07:13:42 ispc sshd[1951109]: Invalid user blceu from 103.77.207.53 Dec 18 07:14:01 ispc CRON[1951125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:14:02 ispc CRON[1951125]: pam_unix(cron:session): session closed for user root Dec 18 07:14:10 ispc postfix/smtpd[1951140]: sql auxprop plugin using mysql engine Dec 18 07:14:11 ispc saslauthd[1951142]: pam_mysql - SELECT returned no result. Dec 18 07:14:11 ispc saslauthd[1951142]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:14:11 ispc saslauthd[1951142]: do_auth : auth failure: [user=desk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:15:01 ispc CRON[1951164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:15:01 ispc CRON[1951165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:15:01 ispc CRON[1951166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:15:01 ispc CRON[1951167]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:15:01 ispc CRON[1951165]: pam_unix(cron:session): session closed for user root Dec 18 07:15:01 ispc CRON[1951167]: pam_unix(cron:session): session closed for user getmail Dec 18 07:15:01 ispc CRON[1951166]: pam_unix(cron:session): session closed for user root Dec 18 07:15:02 ispc CRON[1951164]: pam_unix(cron:session): session closed for user root Dec 18 07:15:07 ispc saslauthd[1951244]: pam_mysql - SELECT returned no result. Dec 18 07:15:07 ispc saslauthd[1951244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:15:07 ispc saslauthd[1951244]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:16:01 ispc CRON[1951265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:16:02 ispc CRON[1951265]: pam_unix(cron:session): session closed for user root Dec 18 07:16:17 ispc sshd[1951285]: Did not receive identification string from 45.140.17.97 Dec 18 07:16:37 ispc sshd[1951290]: Invalid user ziplines from 203.146.21.153 Dec 18 07:17:01 ispc CRON[1951306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:17:02 ispc CRON[1951306]: pam_unix(cron:session): session closed for user root Dec 18 07:18:01 ispc CRON[1951350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:18:02 ispc CRON[1951350]: pam_unix(cron:session): session closed for user root Dec 18 07:19:01 ispc CRON[1951387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:19:02 ispc CRON[1951387]: pam_unix(cron:session): session closed for user root Dec 18 07:20:01 ispc CRON[1951424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:20:01 ispc CRON[1951425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:20:01 ispc CRON[1951426]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:20:01 ispc CRON[1951427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:20:01 ispc CRON[1951428]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:20:01 ispc CRON[1951426]: pam_unix(cron:session): session closed for user www-data Dec 18 07:20:01 ispc CRON[1951425]: pam_unix(cron:session): session closed for user root Dec 18 07:20:01 ispc CRON[1951428]: pam_unix(cron:session): session closed for user getmail Dec 18 07:20:01 ispc CRON[1951427]: pam_unix(cron:session): session closed for user root Dec 18 07:20:01 ispc CRON[1951424]: pam_unix(cron:session): session closed for user root Dec 18 07:21:01 ispc CRON[1951541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:21:01 ispc CRON[1951542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:21:02 ispc CRON[1951541]: pam_unix(cron:session): session closed for user root Dec 18 07:21:02 ispc CRON[1951542]: pam_unix(cron:session): session closed for user root Dec 18 07:21:40 ispc postfix/smtpd[1951571]: sql auxprop plugin using mysql engine Dec 18 07:21:41 ispc saslauthd[1951574]: pam_mysql - SELECT returned no result. Dec 18 07:21:41 ispc saslauthd[1951574]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:21:41 ispc saslauthd[1951574]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:22:01 ispc CRON[1951584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:22:02 ispc CRON[1951584]: pam_unix(cron:session): session closed for user root Dec 18 07:23:01 ispc CRON[1951631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:23:02 ispc CRON[1951631]: pam_unix(cron:session): session closed for user root Dec 18 07:23:23 ispc postfix/smtpd[1951650]: sql auxprop plugin using mysql engine Dec 18 07:24:01 ispc CRON[1951668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:24:02 ispc CRON[1951668]: pam_unix(cron:session): session closed for user root Dec 18 07:24:09 ispc sshd[1951683]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:24:09 ispc sshd[1951683]: Invalid user admin from 2.57.121.112 Dec 18 07:24:43 ispc sshd[1951705]: Invalid user martof from 222.236.46.74 Dec 18 07:25:01 ispc CRON[1951716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:25:01 ispc CRON[1951718]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:25:01 ispc CRON[1951715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:25:01 ispc CRON[1951717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:25:02 ispc CRON[1951718]: pam_unix(cron:session): session closed for user getmail Dec 18 07:25:02 ispc CRON[1951716]: pam_unix(cron:session): session closed for user root Dec 18 07:25:02 ispc CRON[1951717]: pam_unix(cron:session): session closed for user root Dec 18 07:25:03 ispc CRON[1951715]: pam_unix(cron:session): session closed for user root Dec 18 07:25:52 ispc postfix/smtpd[1951813]: sql auxprop plugin using mysql engine Dec 18 07:25:53 ispc saslauthd[1951815]: pam_mysql - SELECT returned no result. Dec 18 07:25:53 ispc saslauthd[1951815]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:25:53 ispc saslauthd[1951815]: do_auth : auth failure: [user=sadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:26:01 ispc CRON[1951820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:26:02 ispc CRON[1951820]: pam_unix(cron:session): session closed for user root Dec 18 07:26:06 ispc sshd[1951836]: Did not receive identification string from 167.172.33.45 Dec 18 07:26:44 ispc sshd[1951849]: Invalid user ftp from 45.119.213.109 Dec 18 07:27:01 ispc CRON[1951859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:27:02 ispc CRON[1951859]: pam_unix(cron:session): session closed for user root Dec 18 07:27:31 ispc saslauthd[1951884]: pam_mysql - SELECT returned no result. Dec 18 07:27:31 ispc saslauthd[1951884]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:27:31 ispc saslauthd[1951884]: do_auth : auth failure: [user=finance] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:27:33 ispc sshd[1951885]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:27:33 ispc sshd[1951885]: Invalid user martof from 193.110.157.47 Dec 18 07:28:01 ispc CRON[1951910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:28:01 ispc CRON[1951910]: pam_unix(cron:session): session closed for user root Dec 18 07:28:02 ispc saslauthd[1951921]: pam_mysql - SELECT returned no result. Dec 18 07:28:02 ispc saslauthd[1951921]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:28:02 ispc saslauthd[1951921]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:29:01 ispc CRON[1951951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:29:02 ispc CRON[1951951]: pam_unix(cron:session): session closed for user root Dec 18 07:29:55 ispc sshd[1951986]: Invalid user ftp from 45.119.213.109 Dec 18 07:30:01 ispc CRON[1951994]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:30:01 ispc CRON[1951995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:30:01 ispc CRON[1951996]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:30:01 ispc CRON[1951992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:30:01 ispc CRON[1951993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:30:01 ispc CRON[1951994]: pam_unix(cron:session): session closed for user www-data Dec 18 07:30:01 ispc CRON[1951993]: pam_unix(cron:session): session closed for user root Dec 18 07:30:01 ispc CRON[1951996]: pam_unix(cron:session): session closed for user getmail Dec 18 07:30:02 ispc CRON[1951995]: pam_unix(cron:session): session closed for user root Dec 18 07:30:02 ispc CRON[1951992]: pam_unix(cron:session): session closed for user root Dec 18 07:31:01 ispc CRON[1952096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:31:02 ispc CRON[1952096]: pam_unix(cron:session): session closed for user root Dec 18 07:31:23 ispc CRON[1950988]: pam_unix(cron:session): session closed for user root Dec 18 07:31:23 ispc postfix/smtpd[1952121]: sql auxprop plugin using mysql engine Dec 18 07:31:36 ispc postfix/smtpd[1952126]: sql auxprop plugin using mysql engine Dec 18 07:32:01 ispc CRON[1952133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:32:03 ispc CRON[1952133]: pam_unix(cron:session): session closed for user root Dec 18 07:32:03 ispc sshd[1952140]: Invalid user blceu from 211.57.200.145 Dec 18 07:33:01 ispc CRON[1952158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:33:03 ispc CRON[1952158]: pam_unix(cron:session): session closed for user root Dec 18 07:34:01 ispc CRON[1952175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:34:01 ispc CRON[1952175]: pam_unix(cron:session): session closed for user root Dec 18 07:34:15 ispc sshd[1952190]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:34:22 ispc saslauthd[1952194]: pam_mysql - SELECT returned no result. Dec 18 07:34:22 ispc saslauthd[1952194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:34:22 ispc saslauthd[1952194]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:35:01 ispc CRON[1952202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:35:02 ispc CRON[1952203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:35:02 ispc CRON[1952204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:35:02 ispc CRON[1952205]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:35:02 ispc CRON[1952203]: pam_unix(cron:session): session closed for user root Dec 18 07:35:02 ispc CRON[1952205]: pam_unix(cron:session): session closed for user getmail Dec 18 07:35:03 ispc CRON[1952202]: pam_unix(cron:session): session closed for user root Dec 18 07:35:43 ispc CRON[1952204]: pam_unix(cron:session): session closed for user root Dec 18 07:36:01 ispc CRON[1952317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:36:42 ispc sshd[1952345]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:37:01 ispc CRON[1952355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:37:02 ispc CRON[1952355]: pam_unix(cron:session): session closed for user root Dec 18 07:38:01 ispc CRON[1952402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:38:02 ispc CRON[1952402]: pam_unix(cron:session): session closed for user root Dec 18 07:39:01 ispc CRON[1952444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:39:01 ispc CRON[1952445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:39:01 ispc CRON[1952444]: pam_unix(cron:session): session closed for user root Dec 18 07:39:01 ispc CRON[1952445]: pam_unix(cron:session): session closed for user root Dec 18 07:39:31 ispc sshd[1952478]: Invalid user admin from 167.172.33.45 Dec 18 07:39:46 ispc postfix/smtpd[1952484]: sql auxprop plugin using mysql engine Dec 18 07:39:47 ispc saslauthd[1952487]: pam_mysql - SELECT returned no result. Dec 18 07:39:47 ispc saslauthd[1952487]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:39:47 ispc saslauthd[1952487]: do_auth : auth failure: [user=postmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 07:40:01 ispc CRON[1952498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:40:01 ispc CRON[1952499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:40:01 ispc CRON[1952500]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:40:01 ispc CRON[1952501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:40:01 ispc CRON[1952502]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:40:01 ispc CRON[1952500]: pam_unix(cron:session): session closed for user www-data Dec 18 07:40:01 ispc CRON[1952499]: pam_unix(cron:session): session closed for user root Dec 18 07:40:02 ispc CRON[1952502]: pam_unix(cron:session): session closed for user getmail Dec 18 07:40:02 ispc CRON[1952501]: pam_unix(cron:session): session closed for user root Dec 18 07:40:03 ispc CRON[1952498]: pam_unix(cron:session): session closed for user root Dec 18 07:40:07 ispc sshd[1952576]: Invalid user admin from 167.172.33.45 Dec 18 07:40:42 ispc sshd[1952594]: Invalid user admin from 167.172.33.45 Dec 18 07:40:43 ispc saslauthd[1952596]: pam_mysql - SELECT returned no result. Dec 18 07:40:43 ispc saslauthd[1952596]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:40:43 ispc saslauthd[1952596]: do_auth : auth failure: [user=satan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:41:01 ispc CRON[1952601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:41:02 ispc CRON[1952601]: pam_unix(cron:session): session closed for user root Dec 18 07:41:05 ispc saslauthd[1952616]: pam_mysql - SELECT returned no result. Dec 18 07:41:05 ispc saslauthd[1952616]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:41:05 ispc saslauthd[1952616]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:41:17 ispc sshd[1952622]: Invalid user admin from 167.172.33.45 Dec 18 07:41:51 ispc sshd[1952636]: Invalid user admin from 167.172.33.45 Dec 18 07:42:01 ispc CRON[1952642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:42:02 ispc CRON[1952642]: pam_unix(cron:session): session closed for user root Dec 18 07:42:25 ispc sshd[1952666]: Invalid user admin from 167.172.33.45 Dec 18 07:43:01 ispc CRON[1952696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:43:03 ispc CRON[1952696]: pam_unix(cron:session): session closed for user root Dec 18 07:44:01 ispc CRON[1952734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:44:02 ispc CRON[1952734]: pam_unix(cron:session): session closed for user root Dec 18 07:44:16 ispc sshd[1952749]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:44:33 ispc sshd[1952757]: Invalid user klape from 36.50.177.171 Dec 18 07:44:33 ispc sshd[1952763]: Invalid user ubuntu from 36.50.177.171 Dec 18 07:45:01 ispc CRON[1952778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:45:01 ispc CRON[1952779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:45:01 ispc CRON[1952780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:45:01 ispc CRON[1952781]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:45:01 ispc CRON[1952779]: pam_unix(cron:session): session closed for user root Dec 18 07:45:01 ispc CRON[1952781]: pam_unix(cron:session): session closed for user getmail Dec 18 07:45:02 ispc CRON[1952778]: pam_unix(cron:session): session closed for user root Dec 18 07:45:02 ispc CRON[1952780]: pam_unix(cron:session): session closed for user root Dec 18 07:46:01 ispc CRON[1952880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:46:02 ispc CRON[1952880]: pam_unix(cron:session): session closed for user root Dec 18 07:47:01 ispc CRON[1952913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:47:02 ispc CRON[1952913]: pam_unix(cron:session): session closed for user root Dec 18 07:47:50 ispc postfix/smtpd[1952948]: sql auxprop plugin using mysql engine Dec 18 07:47:50 ispc saslauthd[1952950]: pam_mysql - SELECT returned no result. Dec 18 07:47:50 ispc saslauthd[1952950]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:47:50 ispc saslauthd[1952950]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:48:01 ispc CRON[1952959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:48:02 ispc CRON[1952959]: pam_unix(cron:session): session closed for user root Dec 18 07:48:27 ispc saslauthd[1952984]: pam_mysql - SELECT returned no result. Dec 18 07:48:27 ispc saslauthd[1952984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:48:27 ispc saslauthd[1952984]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:49:01 ispc CRON[1952998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:49:02 ispc CRON[1952998]: pam_unix(cron:session): session closed for user root Dec 18 07:50:01 ispc CRON[1953034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:50:01 ispc CRON[1953035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:50:01 ispc CRON[1953036]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 07:50:01 ispc CRON[1953037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:50:01 ispc CRON[1953038]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:50:01 ispc CRON[1953035]: pam_unix(cron:session): session closed for user root Dec 18 07:50:01 ispc CRON[1953036]: pam_unix(cron:session): session closed for user www-data Dec 18 07:50:01 ispc CRON[1953038]: pam_unix(cron:session): session closed for user getmail Dec 18 07:50:02 ispc CRON[1953037]: pam_unix(cron:session): session closed for user root Dec 18 07:50:03 ispc CRON[1953034]: pam_unix(cron:session): session closed for user root Dec 18 07:51:01 ispc CRON[1953139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:51:01 ispc CRON[1953139]: pam_unix(cron:session): session closed for user root Dec 18 07:52:01 ispc CRON[1953175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:52:03 ispc CRON[1953175]: pam_unix(cron:session): session closed for user root Dec 18 07:53:01 ispc CRON[1953217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:53:02 ispc CRON[1953217]: pam_unix(cron:session): session closed for user root Dec 18 07:54:01 ispc CRON[1953255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:54:02 ispc CRON[1953255]: pam_unix(cron:session): session closed for user root Dec 18 07:55:01 ispc CRON[1953292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:55:01 ispc CRON[1953294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:55:01 ispc CRON[1953293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:55:01 ispc CRON[1953295]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 07:55:01 ispc CRON[1953293]: pam_unix(cron:session): session closed for user root Dec 18 07:55:01 ispc CRON[1953295]: pam_unix(cron:session): session closed for user getmail Dec 18 07:55:02 ispc postfix/smtpd[1953319]: sql auxprop plugin using mysql engine Dec 18 07:55:02 ispc CRON[1953294]: pam_unix(cron:session): session closed for user root Dec 18 07:55:02 ispc saslauthd[1953346]: pam_mysql - SELECT returned no result. Dec 18 07:55:02 ispc saslauthd[1953346]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:55:02 ispc saslauthd[1953346]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:55:03 ispc CRON[1953292]: pam_unix(cron:session): session closed for user root Dec 18 07:55:40 ispc saslauthd[1953393]: pam_mysql - SELECT returned no result. Dec 18 07:55:40 ispc saslauthd[1953393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 07:55:40 ispc saslauthd[1953393]: do_auth : auth failure: [user=savelogs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 07:56:01 ispc CRON[1953404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:56:02 ispc CRON[1953404]: pam_unix(cron:session): session closed for user root Dec 18 07:56:28 ispc CRON[1952317]: pam_unix(cron:session): session closed for user root Dec 18 07:57:01 ispc CRON[1953434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:57:02 ispc CRON[1953434]: pam_unix(cron:session): session closed for user root Dec 18 07:58:01 ispc CRON[1953457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:58:02 ispc CRON[1953457]: pam_unix(cron:session): session closed for user root Dec 18 07:58:35 ispc sshd[1953469]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 07:58:35 ispc sshd[1953469]: Invalid user ziplines from 103.146.203.212 Dec 18 07:59:01 ispc CRON[1953473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 07:59:02 ispc CRON[1953473]: pam_unix(cron:session): session closed for user root Dec 18 08:00:01 ispc CRON[1953490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:00:01 ispc CRON[1953491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:00:01 ispc CRON[1953492]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:00:01 ispc CRON[1953493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:00:01 ispc CRON[1953494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:00:01 ispc CRON[1953495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:00:01 ispc CRON[1953496]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:00:01 ispc CRON[1953492]: pam_unix(cron:session): session closed for user www-data Dec 18 08:00:01 ispc CRON[1953491]: pam_unix(cron:session): session closed for user root Dec 18 08:00:01 ispc CRON[1953494]: pam_unix(cron:session): session closed for user root Dec 18 08:00:01 ispc CRON[1953496]: pam_unix(cron:session): session closed for user getmail Dec 18 08:00:02 ispc CRON[1953490]: pam_unix(cron:session): session closed for user root Dec 18 08:00:03 ispc CRON[1953493]: pam_unix(cron:session): session closed for user root Dec 18 08:00:57 ispc CRON[1953495]: pam_unix(cron:session): session closed for user root Dec 18 08:01:01 ispc CRON[1953761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:02:01 ispc CRON[1953794]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 08:02:01 ispc CRON[1953795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:02:02 ispc CRON[1953795]: pam_unix(cron:session): session closed for user root Dec 18 08:02:08 ispc postfix/smtpd[1953944]: sql auxprop plugin using mysql engine Dec 18 08:02:09 ispc saslauthd[1953955]: pam_mysql - SELECT returned no result. Dec 18 08:02:09 ispc saslauthd[1953955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:02:09 ispc saslauthd[1953955]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:03:01 ispc CRON[1954673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:03:02 ispc CRON[1954673]: pam_unix(cron:session): session closed for user root Dec 18 08:03:11 ispc sshd[1954690]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:03:23 ispc CRON[1953794]: pam_unix(cron:session): session closed for user logcheck Dec 18 08:03:31 ispc postfix/smtpd[1954881]: sql auxprop plugin using mysql engine Dec 18 08:03:37 ispc sshd[1954891]: Invalid user matlbula from 35.239.77.168 Dec 18 08:04:01 ispc CRON[1954901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:04:02 ispc CRON[1954901]: pam_unix(cron:session): session closed for user root Dec 18 08:05:01 ispc CRON[1954939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:05:01 ispc CRON[1954940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:05:01 ispc CRON[1954941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:05:01 ispc CRON[1954942]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:05:01 ispc CRON[1954940]: pam_unix(cron:session): session closed for user root Dec 18 08:05:01 ispc CRON[1954942]: pam_unix(cron:session): session closed for user getmail Dec 18 08:05:02 ispc CRON[1954939]: pam_unix(cron:session): session closed for user root Dec 18 08:05:02 ispc CRON[1954941]: pam_unix(cron:session): session closed for user root Dec 18 08:05:06 ispc sshd[1955015]: Did not receive identification string from 134.209.203.60 Dec 18 08:05:31 ispc sshd[1955028]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:05:31 ispc sshd[1955028]: Invalid user blceu from 157.245.115.125 Dec 18 08:05:51 ispc sshd[1955034]: Invalid user admin from 134.209.203.60 Dec 18 08:06:01 ispc CRON[1955044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:06:01 ispc CRON[1955044]: pam_unix(cron:session): session closed for user root Dec 18 08:06:36 ispc sshd[1955069]: Invalid user admin from 134.209.203.60 Dec 18 08:07:01 ispc CRON[1955080]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:07:03 ispc CRON[1955080]: pam_unix(cron:session): session closed for user root Dec 18 08:07:20 ispc sshd[1955099]: Invalid user admin from 134.209.203.60 Dec 18 08:08:01 ispc CRON[1955135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:08:01 ispc CRON[1955135]: pam_unix(cron:session): session closed for user root Dec 18 08:08:02 ispc sshd[1955128]: Invalid user admin from 134.209.203.60 Dec 18 08:08:38 ispc postfix/smtpd[1955164]: sql auxprop plugin using mysql engine Dec 18 08:08:39 ispc saslauthd[1955168]: pam_mysql - SELECT returned no result. Dec 18 08:08:39 ispc saslauthd[1955168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:08:39 ispc saslauthd[1955168]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:08:42 ispc sshd[1955167]: Invalid user admin from 134.209.203.60 Dec 18 08:09:01 ispc CRON[1955182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:09:01 ispc CRON[1955181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:09:01 ispc CRON[1955181]: pam_unix(cron:session): session closed for user root Dec 18 08:09:02 ispc CRON[1955182]: pam_unix(cron:session): session closed for user root Dec 18 08:09:21 ispc sshd[1955211]: Invalid user admin from 134.209.203.60 Dec 18 08:10:01 ispc CRON[1955239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:10:01 ispc CRON[1955236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:10:01 ispc CRON[1955240]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:10:01 ispc CRON[1955237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:10:01 ispc CRON[1955238]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:10:01 ispc CRON[1955238]: pam_unix(cron:session): session closed for user www-data Dec 18 08:10:01 ispc CRON[1955240]: pam_unix(cron:session): session closed for user getmail Dec 18 08:10:01 ispc CRON[1955237]: pam_unix(cron:session): session closed for user root Dec 18 08:10:01 ispc CRON[1955239]: pam_unix(cron:session): session closed for user root Dec 18 08:10:02 ispc CRON[1955236]: pam_unix(cron:session): session closed for user root Dec 18 08:10:25 ispc postfix/smtpd[1955323]: sql auxprop plugin using mysql engine Dec 18 08:10:33 ispc saslauthd[1955335]: pam_mysql - SELECT returned no result. Dec 18 08:10:33 ispc saslauthd[1955335]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:10:33 ispc saslauthd[1955335]: do_auth : auth failure: [user=scott] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:10:33 ispc postfix/smtpd[1955336]: sql auxprop plugin using mysql engine Dec 18 08:11:01 ispc CRON[1955361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:11:02 ispc CRON[1955361]: pam_unix(cron:session): session closed for user root Dec 18 08:12:01 ispc CRON[1955403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:12:02 ispc CRON[1955403]: pam_unix(cron:session): session closed for user root Dec 18 08:12:09 ispc sshd[1955414]: Invalid user ubuntu from 117.50.70.169 Dec 18 08:12:20 ispc postfix/smtpd[1955420]: sql auxprop plugin using mysql engine Dec 18 08:13:01 ispc CRON[1955448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:13:01 ispc CRON[1955448]: pam_unix(cron:session): session closed for user root Dec 18 08:14:01 ispc CRON[1955483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:14:03 ispc CRON[1955483]: pam_unix(cron:session): session closed for user root Dec 18 08:15:01 ispc postfix/smtpd[1955518]: sql auxprop plugin using mysql engine Dec 18 08:15:01 ispc CRON[1955520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:15:01 ispc CRON[1955522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:15:01 ispc CRON[1955523]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:15:01 ispc CRON[1955521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:15:01 ispc CRON[1955523]: pam_unix(cron:session): session closed for user getmail Dec 18 08:15:01 ispc CRON[1955521]: pam_unix(cron:session): session closed for user root Dec 18 08:15:01 ispc saslauthd[1955557]: pam_mysql - SELECT returned no result. Dec 18 08:15:01 ispc saslauthd[1955557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:15:01 ispc saslauthd[1955557]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:15:01 ispc CRON[1955522]: pam_unix(cron:session): session closed for user root Dec 18 08:15:02 ispc CRON[1955520]: pam_unix(cron:session): session closed for user root Dec 18 08:16:01 ispc CRON[1955628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:16:01 ispc CRON[1955628]: pam_unix(cron:session): session closed for user root Dec 18 08:16:46 ispc sshd[1955656]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:16:46 ispc sshd[1955656]: Invalid user martof from 103.146.203.212 Dec 18 08:17:01 ispc CRON[1955673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:17:02 ispc CRON[1955673]: pam_unix(cron:session): session closed for user root Dec 18 08:18:01 ispc CRON[1955714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:18:01 ispc CRON[1955714]: pam_unix(cron:session): session closed for user root Dec 18 08:19:01 ispc CRON[1955752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:19:01 ispc CRON[1955752]: pam_unix(cron:session): session closed for user root Dec 18 08:19:06 ispc sshd[1955763]: Invalid user martof from 211.57.200.145 Dec 18 08:20:01 ispc CRON[1955792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:20:01 ispc CRON[1955793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:20:01 ispc CRON[1955795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:20:01 ispc CRON[1955796]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:20:01 ispc CRON[1955794]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:20:02 ispc CRON[1955793]: pam_unix(cron:session): session closed for user root Dec 18 08:20:02 ispc CRON[1955794]: pam_unix(cron:session): session closed for user www-data Dec 18 08:20:02 ispc CRON[1955796]: pam_unix(cron:session): session closed for user getmail Dec 18 08:20:02 ispc CRON[1955795]: pam_unix(cron:session): session closed for user root Dec 18 08:20:03 ispc CRON[1955792]: pam_unix(cron:session): session closed for user root Dec 18 08:20:17 ispc sshd[1955875]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:20:17 ispc sshd[1955875]: Invalid user ziplines from 193.110.157.47 Dec 18 08:20:19 ispc sshd[1955881]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:20:19 ispc sshd[1955881]: Invalid user ziplines from 157.245.115.125 Dec 18 08:20:35 ispc sshd[1955887]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:20:37 ispc sshd[1955889]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:20:37 ispc sshd[1955889]: Invalid user klape from 189.89.20.45 Dec 18 08:20:39 ispc sshd[1955895]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:20:39 ispc sshd[1955895]: Invalid user ubuntu from 189.89.20.45 Dec 18 08:21:01 ispc CRON[1955905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:21:01 ispc CRON[1955906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:21:01 ispc CRON[1955905]: pam_unix(cron:session): session closed for user root Dec 18 08:21:02 ispc CRON[1955906]: pam_unix(cron:session): session closed for user root Dec 18 08:21:27 ispc postfix/smtpd[1955927]: sql auxprop plugin using mysql engine Dec 18 08:21:28 ispc saslauthd[1955930]: pam_mysql - SELECT returned no result. Dec 18 08:21:28 ispc saslauthd[1955930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:21:28 ispc saslauthd[1955930]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:21:31 ispc saslauthd[1955935]: pam_mysql - SELECT returned no result. Dec 18 08:21:31 ispc saslauthd[1955935]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:21:31 ispc saslauthd[1955935]: do_auth : auth failure: [user=copier] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:21:41 ispc postfix/smtpd[1955936]: sql auxprop plugin using mysql engine Dec 18 08:21:44 ispc CRON[1953761]: pam_unix(cron:session): session closed for user root Dec 18 08:22:01 ispc CRON[1955943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:22:07 ispc CRON[1955943]: pam_unix(cron:session): session closed for user root Dec 18 08:22:21 ispc sshd[1955955]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:22:21 ispc sshd[1955955]: Invalid user user from 2.57.121.25 Dec 18 08:23:01 ispc CRON[1955972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:23:16 ispc sshd[1955990]: Invalid user blceu from 103.110.84.105 Dec 18 08:24:01 ispc CRON[1956013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:24:02 ispc CRON[1956013]: pam_unix(cron:session): session closed for user root Dec 18 08:25:01 ispc CRON[1956055]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:25:01 ispc CRON[1956053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:25:01 ispc CRON[1956054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:25:01 ispc CRON[1956052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:25:01 ispc CRON[1956053]: pam_unix(cron:session): session closed for user root Dec 18 08:25:01 ispc CRON[1956055]: pam_unix(cron:session): session closed for user getmail Dec 18 08:25:02 ispc CRON[1956054]: pam_unix(cron:session): session closed for user root Dec 18 08:25:03 ispc CRON[1956052]: pam_unix(cron:session): session closed for user root Dec 18 08:25:28 ispc postfix/smtpd[1956140]: sql auxprop plugin using mysql engine Dec 18 08:25:30 ispc saslauthd[1956143]: pam_mysql - SELECT returned no result. Dec 18 08:25:30 ispc saslauthd[1956143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:25:30 ispc saslauthd[1956143]: do_auth : auth failure: [user=secofr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:26:01 ispc CRON[1956157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:26:02 ispc CRON[1956157]: pam_unix(cron:session): session closed for user root Dec 18 08:27:01 ispc CRON[1956195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:27:02 ispc CRON[1956195]: pam_unix(cron:session): session closed for user root Dec 18 08:27:56 ispc postfix/smtpd[1956236]: sql auxprop plugin using mysql engine Dec 18 08:27:56 ispc saslauthd[1956238]: pam_mysql - SELECT returned no result. Dec 18 08:27:56 ispc saslauthd[1956238]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:27:56 ispc saslauthd[1956238]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:28:01 ispc CRON[1956243]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:28:01 ispc CRON[1956243]: pam_unix(cron:session): session closed for user root Dec 18 08:28:22 ispc saslauthd[1956264]: pam_mysql - SELECT returned no result. Dec 18 08:28:22 ispc saslauthd[1956264]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:28:22 ispc saslauthd[1956264]: do_auth : auth failure: [user=web@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 08:29:01 ispc CRON[1956281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:29:01 ispc CRON[1956281]: pam_unix(cron:session): session closed for user root Dec 18 08:30:01 ispc CRON[1956323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:30:01 ispc CRON[1956324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:30:01 ispc CRON[1956325]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:30:01 ispc CRON[1956326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:30:01 ispc CRON[1956327]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:30:01 ispc CRON[1956325]: pam_unix(cron:session): session closed for user www-data Dec 18 08:30:01 ispc CRON[1956324]: pam_unix(cron:session): session closed for user root Dec 18 08:30:01 ispc CRON[1956327]: pam_unix(cron:session): session closed for user getmail Dec 18 08:30:02 ispc CRON[1956326]: pam_unix(cron:session): session closed for user root Dec 18 08:30:02 ispc CRON[1956323]: pam_unix(cron:session): session closed for user root Dec 18 08:31:01 ispc CRON[1956425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:31:01 ispc CRON[1956425]: pam_unix(cron:session): session closed for user root Dec 18 08:32:01 ispc CRON[1956462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:32:02 ispc CRON[1956462]: pam_unix(cron:session): session closed for user root Dec 18 08:33:01 ispc CRON[1956508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:33:01 ispc CRON[1956508]: pam_unix(cron:session): session closed for user root Dec 18 08:34:01 ispc CRON[1956550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:34:02 ispc CRON[1956550]: pam_unix(cron:session): session closed for user root Dec 18 08:34:40 ispc postfix/smtpd[1956573]: sql auxprop plugin using mysql engine Dec 18 08:34:41 ispc saslauthd[1956576]: pam_mysql - SELECT returned no result. Dec 18 08:34:41 ispc saslauthd[1956576]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:34:41 ispc saslauthd[1956576]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:35:01 ispc CRON[1956585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:35:01 ispc CRON[1956588]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:35:01 ispc CRON[1956586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:35:01 ispc CRON[1956587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:35:01 ispc CRON[1956586]: pam_unix(cron:session): session closed for user root Dec 18 08:35:01 ispc CRON[1956588]: pam_unix(cron:session): session closed for user getmail Dec 18 08:35:02 ispc CRON[1956587]: pam_unix(cron:session): session closed for user root Dec 18 08:35:02 ispc CRON[1956585]: pam_unix(cron:session): session closed for user root Dec 18 08:36:01 ispc CRON[1956687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:36:01 ispc CRON[1956687]: pam_unix(cron:session): session closed for user root Dec 18 08:37:01 ispc CRON[1956722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:37:02 ispc CRON[1956722]: pam_unix(cron:session): session closed for user root Dec 18 08:37:56 ispc sshd[1956760]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:37:56 ispc sshd[1956760]: Invalid user ubuntu from 119.53.253.2 Dec 18 08:38:01 ispc CRON[1956770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:38:02 ispc CRON[1956770]: pam_unix(cron:session): session closed for user root Dec 18 08:39:01 ispc CRON[1956807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:39:01 ispc CRON[1956808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:39:01 ispc CRON[1956807]: pam_unix(cron:session): session closed for user root Dec 18 08:39:01 ispc CRON[1956808]: pam_unix(cron:session): session closed for user root Dec 18 08:40:01 ispc CRON[1956856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:40:01 ispc CRON[1956858]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:40:01 ispc CRON[1956859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:40:01 ispc CRON[1956860]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:40:01 ispc CRON[1956857]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:40:01 ispc CRON[1956858]: pam_unix(cron:session): session closed for user www-data Dec 18 08:40:01 ispc CRON[1956857]: pam_unix(cron:session): session closed for user root Dec 18 08:40:01 ispc CRON[1956860]: pam_unix(cron:session): session closed for user getmail Dec 18 08:40:02 ispc CRON[1956859]: pam_unix(cron:session): session closed for user root Dec 18 08:40:02 ispc CRON[1956856]: pam_unix(cron:session): session closed for user root Dec 18 08:40:21 ispc postfix/smtpd[1956942]: sql auxprop plugin using mysql engine Dec 18 08:40:22 ispc saslauthd[1956945]: pam_mysql - SELECT returned no result. Dec 18 08:40:22 ispc saslauthd[1956945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:40:22 ispc saslauthd[1956945]: do_auth : auth failure: [user=security] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:40:56 ispc sshd[1956958]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:40:56 ispc sshd[1956958]: Invalid user blceu from 103.146.203.212 Dec 18 08:41:01 ispc CRON[1956970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:41:02 ispc CRON[1956970]: pam_unix(cron:session): session closed for user root Dec 18 08:41:24 ispc saslauthd[1956991]: pam_mysql - SELECT returned no result. Dec 18 08:41:24 ispc saslauthd[1956991]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:41:24 ispc saslauthd[1956991]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:42:01 ispc CRON[1957008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:42:01 ispc CRON[1957008]: pam_unix(cron:session): session closed for user root Dec 18 08:42:33 ispc saslauthd[1957032]: pam_mysql - SELECT returned no result. Dec 18 08:42:33 ispc saslauthd[1957032]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:42:33 ispc saslauthd[1957032]: do_auth : auth failure: [user=abuse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:43:01 ispc CRON[1957053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:43:07 ispc CRON[1957053]: pam_unix(cron:session): session closed for user root Dec 18 08:43:21 ispc CRON[1955972]: pam_unix(cron:session): session closed for user root Dec 18 08:44:01 ispc CRON[1957076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:44:02 ispc CRON[1957076]: pam_unix(cron:session): session closed for user root Dec 18 08:45:01 ispc CRON[1957091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:45:01 ispc CRON[1957092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:45:01 ispc CRON[1957093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:45:01 ispc CRON[1957094]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:45:01 ispc CRON[1957092]: pam_unix(cron:session): session closed for user root Dec 18 08:45:01 ispc CRON[1957094]: pam_unix(cron:session): session closed for user getmail Dec 18 08:45:02 ispc CRON[1957091]: pam_unix(cron:session): session closed for user root Dec 18 08:45:15 ispc sshd[1957278]: Invalid user ziplines from 51.77.203.224 Dec 18 08:45:48 ispc CRON[1957093]: pam_unix(cron:session): session closed for user root Dec 18 08:46:01 ispc CRON[1957282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:47:01 ispc CRON[1957323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:47:02 ispc CRON[1957323]: pam_unix(cron:session): session closed for user root Dec 18 08:48:01 ispc CRON[1957365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:48:01 ispc CRON[1957365]: pam_unix(cron:session): session closed for user root Dec 18 08:48:12 ispc postfix/smtpd[1957381]: sql auxprop plugin using mysql engine Dec 18 08:48:12 ispc saslauthd[1957383]: pam_mysql - SELECT returned no result. Dec 18 08:48:12 ispc saslauthd[1957383]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:48:12 ispc saslauthd[1957383]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:49:01 ispc CRON[1957407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:49:02 ispc CRON[1957407]: pam_unix(cron:session): session closed for user root Dec 18 08:49:52 ispc sshd[1957439]: Did not receive identification string from 47.250.81.7 Dec 18 08:49:53 ispc sshd[1957440]: Invalid user from 47.250.81.7 Dec 18 08:50:01 ispc CRON[1957449]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:50:01 ispc CRON[1957450]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:50:01 ispc CRON[1957448]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 08:50:01 ispc CRON[1957446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:50:01 ispc CRON[1957447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:50:01 ispc CRON[1957447]: pam_unix(cron:session): session closed for user root Dec 18 08:50:01 ispc CRON[1957448]: pam_unix(cron:session): session closed for user www-data Dec 18 08:50:01 ispc CRON[1957450]: pam_unix(cron:session): session closed for user getmail Dec 18 08:50:01 ispc CRON[1957449]: pam_unix(cron:session): session closed for user root Dec 18 08:50:03 ispc CRON[1957446]: pam_unix(cron:session): session closed for user root Dec 18 08:51:01 ispc CRON[1957551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:51:01 ispc CRON[1957551]: pam_unix(cron:session): session closed for user root Dec 18 08:52:01 ispc CRON[1957591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:52:02 ispc CRON[1957591]: pam_unix(cron:session): session closed for user root Dec 18 08:52:49 ispc sshd[1957631]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 08:53:01 ispc CRON[1957644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:53:02 ispc CRON[1957644]: pam_unix(cron:session): session closed for user root Dec 18 08:53:55 ispc sshd[1957683]: Did not receive identification string from 64.227.74.41 Dec 18 08:54:01 ispc CRON[1957685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:54:02 ispc CRON[1957685]: pam_unix(cron:session): session closed for user root Dec 18 08:54:56 ispc postfix/smtpd[1957721]: sql auxprop plugin using mysql engine Dec 18 08:54:57 ispc saslauthd[1957724]: pam_mysql - SELECT returned no result. Dec 18 08:54:57 ispc saslauthd[1957724]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:54:57 ispc saslauthd[1957724]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:55:01 ispc CRON[1957725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:55:01 ispc CRON[1957726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:55:01 ispc CRON[1957727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:55:01 ispc CRON[1957728]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 08:55:01 ispc CRON[1957726]: pam_unix(cron:session): session closed for user root Dec 18 08:55:01 ispc CRON[1957728]: pam_unix(cron:session): session closed for user getmail Dec 18 08:55:02 ispc CRON[1957727]: pam_unix(cron:session): session closed for user root Dec 18 08:55:02 ispc CRON[1957725]: pam_unix(cron:session): session closed for user root Dec 18 08:55:07 ispc saslauthd[1957805]: pam_mysql - SELECT returned no result. Dec 18 08:55:07 ispc saslauthd[1957805]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:55:07 ispc saslauthd[1957805]: do_auth : auth failure: [user=center] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:55:18 ispc saslauthd[1957812]: pam_mysql - SELECT returned no result. Dec 18 08:55:18 ispc saslauthd[1957812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 08:55:18 ispc saslauthd[1957812]: do_auth : auth failure: [user=sedacm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 08:55:35 ispc sshd[1957817]: Invalid user blceu from 203.146.21.153 Dec 18 08:56:01 ispc CRON[1957834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:56:01 ispc CRON[1957834]: pam_unix(cron:session): session closed for user root Dec 18 08:57:01 ispc CRON[1957881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:57:02 ispc CRON[1957881]: pam_unix(cron:session): session closed for user root Dec 18 08:58:01 ispc CRON[1957928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:58:01 ispc CRON[1957928]: pam_unix(cron:session): session closed for user root Dec 18 08:58:48 ispc sshd[1957962]: Did not receive identification string from 45.140.17.97 Dec 18 08:58:48 ispc postfix/smtpd[1957963]: sql auxprop plugin using mysql engine Dec 18 08:58:57 ispc sshd[1957967]: Invalid user blceu from 202.46.29.79 Dec 18 08:59:01 ispc CRON[1957975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 08:59:02 ispc CRON[1957975]: pam_unix(cron:session): session closed for user root Dec 18 08:59:03 ispc sshd[1957973]: Invalid user blceu from 106.12.215.233 Dec 18 09:00:01 ispc CRON[1958019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:00:01 ispc CRON[1958015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:00:01 ispc CRON[1958016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:00:01 ispc CRON[1958017]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:00:01 ispc CRON[1958018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:00:01 ispc CRON[1958020]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:00:01 ispc CRON[1958017]: pam_unix(cron:session): session closed for user www-data Dec 18 09:00:01 ispc CRON[1958016]: pam_unix(cron:session): session closed for user root Dec 18 09:00:01 ispc CRON[1958020]: pam_unix(cron:session): session closed for user getmail Dec 18 09:00:02 ispc CRON[1958019]: pam_unix(cron:session): session closed for user root Dec 18 09:00:02 ispc CRON[1958015]: pam_unix(cron:session): session closed for user root Dec 18 09:00:02 ispc CRON[1958018]: pam_unix(cron:session): session closed for user root Dec 18 09:00:58 ispc sshd[1958197]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:01:01 ispc CRON[1958203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:01:02 ispc CRON[1958203]: pam_unix(cron:session): session closed for user root Dec 18 09:01:39 ispc postfix/smtpd[1958231]: sql auxprop plugin using mysql engine Dec 18 09:01:39 ispc saslauthd[1958237]: pam_mysql - SELECT returned no result. Dec 18 09:01:39 ispc saslauthd[1958237]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:01:39 ispc saslauthd[1958237]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:01:48 ispc sshd[1958240]: Invalid user klape from 103.164.20.29 Dec 18 09:01:49 ispc sshd[1958242]: Invalid user ubuntu from 103.164.20.29 Dec 18 09:02:01 ispc CRON[1958253]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 09:02:01 ispc CRON[1958254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:02:01 ispc CRON[1958254]: pam_unix(cron:session): session closed for user root Dec 18 09:02:47 ispc sshd[1958901]: Invalid user blceu from 51.77.203.224 Dec 18 09:03:01 ispc CRON[1959074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:03:02 ispc CRON[1959074]: pam_unix(cron:session): session closed for user root Dec 18 09:03:32 ispc CRON[1958253]: pam_unix(cron:session): session closed for user logcheck Dec 18 09:03:38 ispc postfix/smtpd[1959341]: sql auxprop plugin using mysql engine Dec 18 09:04:01 ispc CRON[1959359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:04:01 ispc CRON[1959359]: pam_unix(cron:session): session closed for user root Dec 18 09:04:35 ispc sshd[1959384]: Invalid user martof from 141.94.71.131 Dec 18 09:05:01 ispc CRON[1959395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:05:01 ispc CRON[1959394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:05:01 ispc CRON[1959396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:05:01 ispc CRON[1959397]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:05:01 ispc CRON[1959395]: pam_unix(cron:session): session closed for user root Dec 18 09:05:01 ispc CRON[1959397]: pam_unix(cron:session): session closed for user getmail Dec 18 09:05:02 ispc CRON[1959394]: pam_unix(cron:session): session closed for user root Dec 18 09:05:02 ispc CRON[1959396]: pam_unix(cron:session): session closed for user root Dec 18 09:05:21 ispc sshd[1959479]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:06:01 ispc CRON[1959502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:06:02 ispc CRON[1959502]: pam_unix(cron:session): session closed for user root Dec 18 09:06:22 ispc postfix/smtpd[1959525]: sql auxprop plugin using mysql engine Dec 18 09:06:22 ispc CRON[1957282]: pam_unix(cron:session): session closed for user root Dec 18 09:07:01 ispc CRON[1959533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:07:03 ispc CRON[1959533]: pam_unix(cron:session): session closed for user root Dec 18 09:07:24 ispc sshd[1959545]: Invalid user martof from 203.146.21.153 Dec 18 09:07:44 ispc sshd[1959549]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:08:01 ispc CRON[1959564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:08:01 ispc CRON[1959564]: pam_unix(cron:session): session closed for user root Dec 18 09:08:20 ispc saslauthd[1959577]: pam_mysql - SELECT returned no result. Dec 18 09:08:20 ispc saslauthd[1959577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:08:20 ispc saslauthd[1959577]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:08:40 ispc sshd[1959584]: Invalid user admin from 195.96.138.145 Dec 18 09:09:01 ispc CRON[1959587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:09:01 ispc CRON[1959588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:09:01 ispc CRON[1959587]: pam_unix(cron:session): session closed for user root Dec 18 09:09:02 ispc CRON[1959588]: pam_unix(cron:session): session closed for user root Dec 18 09:09:11 ispc sshd[1959611]: Invalid user admin from 211.110.229.128 Dec 18 09:10:01 ispc CRON[1959619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:10:01 ispc CRON[1959617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:10:01 ispc CRON[1959616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:10:01 ispc CRON[1959620]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:10:01 ispc CRON[1959618]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:10:01 ispc CRON[1959617]: pam_unix(cron:session): session closed for user root Dec 18 09:10:01 ispc CRON[1959618]: pam_unix(cron:session): session closed for user www-data Dec 18 09:10:01 ispc CRON[1959620]: pam_unix(cron:session): session closed for user getmail Dec 18 09:10:02 ispc CRON[1959616]: pam_unix(cron:session): session closed for user root Dec 18 09:10:10 ispc saslauthd[1959726]: pam_mysql - SELECT returned no result. Dec 18 09:10:10 ispc saslauthd[1959726]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:10:10 ispc saslauthd[1959726]: do_auth : auth failure: [user=service] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:10:35 ispc CRON[1959619]: pam_unix(cron:session): session closed for user root Dec 18 09:11:01 ispc CRON[1959730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:11:29 ispc sshd[1959752]: Bad protocol version identification '\026\003\001' from 184.105.247.252 Dec 18 09:12:01 ispc CRON[1959769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:12:01 ispc CRON[1959769]: pam_unix(cron:session): session closed for user root Dec 18 09:13:01 ispc CRON[1959813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:13:02 ispc CRON[1959813]: pam_unix(cron:session): session closed for user root Dec 18 09:13:40 ispc sshd[1959843]: Invalid user ziplines from 211.57.200.145 Dec 18 09:14:01 ispc postfix/smtpd[1959853]: sql auxprop plugin using mysql engine Dec 18 09:14:01 ispc CRON[1959855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:14:02 ispc CRON[1959855]: pam_unix(cron:session): session closed for user root Dec 18 09:15:01 ispc CRON[1959898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:15:01 ispc CRON[1959899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:15:01 ispc CRON[1959900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:15:01 ispc CRON[1959901]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:15:01 ispc CRON[1959899]: pam_unix(cron:session): session closed for user root Dec 18 09:15:01 ispc CRON[1959901]: pam_unix(cron:session): session closed for user getmail Dec 18 09:15:02 ispc postfix/smtpd[1959941]: sql auxprop plugin using mysql engine Dec 18 09:15:02 ispc CRON[1959900]: pam_unix(cron:session): session closed for user root Dec 18 09:15:02 ispc CRON[1959898]: pam_unix(cron:session): session closed for user root Dec 18 09:15:02 ispc saslauthd[1959976]: pam_mysql - SELECT returned no result. Dec 18 09:15:02 ispc saslauthd[1959976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:15:02 ispc saslauthd[1959976]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:15:18 ispc sshd[1959981]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:16:01 ispc CRON[1960006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:16:01 ispc CRON[1960006]: pam_unix(cron:session): session closed for user root Dec 18 09:16:59 ispc postfix/smtpd[1960042]: sql auxprop plugin using mysql engine Dec 18 09:17:00 ispc saslauthd[1960044]: pam_mysql - SELECT returned no result. Dec 18 09:17:00 ispc saslauthd[1960044]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:17:00 ispc saslauthd[1960044]: do_auth : auth failure: [user=admin1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 09:17:01 ispc CRON[1960049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:17:02 ispc CRON[1960049]: pam_unix(cron:session): session closed for user root Dec 18 09:18:01 ispc CRON[1960093]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 09:18:01 ispc CRON[1960094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:18:02 ispc CRON[1960094]: pam_unix(cron:session): session closed for user root Dec 18 09:18:05 ispc CRON[1960093]: pam_unix(cron:session): session closed for user amavis Dec 18 09:18:07 ispc postfix/smtpd[1960123]: sql auxprop plugin using mysql engine Dec 18 09:19:01 ispc CRON[1960152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:19:02 ispc CRON[1960152]: pam_unix(cron:session): session closed for user root Dec 18 09:20:01 ispc CRON[1960189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:20:01 ispc CRON[1960190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:20:01 ispc CRON[1960191]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:20:01 ispc CRON[1960192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:20:01 ispc CRON[1960193]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:20:02 ispc CRON[1960190]: pam_unix(cron:session): session closed for user root Dec 18 09:20:02 ispc CRON[1960191]: pam_unix(cron:session): session closed for user www-data Dec 18 09:20:02 ispc CRON[1960193]: pam_unix(cron:session): session closed for user getmail Dec 18 09:20:03 ispc CRON[1960192]: pam_unix(cron:session): session closed for user root Dec 18 09:20:03 ispc CRON[1960189]: pam_unix(cron:session): session closed for user root Dec 18 09:20:43 ispc sshd[1960285]: Invalid user ziplines from 203.146.21.153 Dec 18 09:21:01 ispc CRON[1960302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:21:01 ispc CRON[1960301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:21:02 ispc CRON[1960301]: pam_unix(cron:session): session closed for user root Dec 18 09:21:02 ispc CRON[1960302]: pam_unix(cron:session): session closed for user root Dec 18 09:21:45 ispc postfix/smtpd[1960335]: sql auxprop plugin using mysql engine Dec 18 09:21:45 ispc saslauthd[1960338]: pam_mysql - SELECT returned no result. Dec 18 09:21:45 ispc saslauthd[1960338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:21:45 ispc saslauthd[1960338]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:22:01 ispc CRON[1960350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:22:02 ispc CRON[1960350]: pam_unix(cron:session): session closed for user root Dec 18 09:22:53 ispc sshd[1960395]: Invalid user martof from 202.46.29.79 Dec 18 09:23:01 ispc CRON[1960401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:23:01 ispc CRON[1960401]: pam_unix(cron:session): session closed for user root Dec 18 09:24:01 ispc CRON[1960440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:24:02 ispc CRON[1960440]: pam_unix(cron:session): session closed for user root Dec 18 09:24:35 ispc postfix/smtpd[1960467]: sql auxprop plugin using mysql engine Dec 18 09:24:36 ispc saslauthd[1960473]: pam_mysql - SELECT returned no result. Dec 18 09:24:36 ispc saslauthd[1960473]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:24:36 ispc saslauthd[1960473]: do_auth : auth failure: [user=servlet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:24:37 ispc sshd[1960471]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:37 ispc sshd[1960469]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:37 ispc sshd[1960469]: Invalid user user from 27.79.5.120 Dec 18 09:24:39 ispc sshd[1960474]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:42 ispc sshd[1960480]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:42 ispc sshd[1960480]: Invalid user admin from 171.243.149.52 Dec 18 09:24:42 ispc sshd[1960476]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:42 ispc sshd[1960476]: Invalid user 1234 from 27.79.5.120 Dec 18 09:24:43 ispc sshd[1960478]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:43 ispc sshd[1960478]: Invalid user admin from 171.243.149.52 Dec 18 09:24:45 ispc sshd[1960486]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:24:45 ispc sshd[1960486]: Invalid user squid from 171.243.149.52 Dec 18 09:25:00 ispc sshd[1960496]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:01 ispc CRON[1960503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:25:01 ispc CRON[1960504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:25:01 ispc CRON[1960505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:25:01 ispc CRON[1960506]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:25:01 ispc CRON[1960504]: pam_unix(cron:session): session closed for user root Dec 18 09:25:01 ispc CRON[1960506]: pam_unix(cron:session): session closed for user getmail Dec 18 09:25:01 ispc sshd[1960494]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:01 ispc CRON[1960505]: pam_unix(cron:session): session closed for user root Dec 18 09:25:02 ispc CRON[1960503]: pam_unix(cron:session): session closed for user root Dec 18 09:25:08 ispc sshd[1960488]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:08 ispc sshd[1960488]: Invalid user guest from 27.79.5.120 Dec 18 09:25:09 ispc sshd[1960581]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:09 ispc sshd[1960581]: Invalid user config from 171.243.149.52 Dec 18 09:25:18 ispc sshd[1960585]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:23 ispc sshd[1960603]: Did not receive identification string from 194.0.234.20 Dec 18 09:25:23 ispc sshd[1960583]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:23 ispc sshd[1960583]: Invalid user user from 27.79.5.120 Dec 18 09:25:24 ispc sshd[1960591]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:24 ispc sshd[1960591]: Invalid user admin from 27.79.5.120 Dec 18 09:25:24 ispc sshd[1960601]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:24 ispc sshd[1960601]: Invalid user ubnt from 171.243.149.52 Dec 18 09:25:25 ispc sshd[1960595]: Address 27.79.5.120 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:25 ispc sshd[1960595]: Invalid user support from 27.79.5.120 Dec 18 09:25:36 ispc sshd[1960593]: Address 171.243.149.52 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:25:36 ispc sshd[1960593]: Invalid user nikita from 171.243.149.52 Dec 18 09:26:01 ispc CRON[1960634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:26:02 ispc CRON[1960634]: pam_unix(cron:session): session closed for user root Dec 18 09:26:29 ispc sshd[1960660]: Invalid user ziplines from 103.110.84.105 Dec 18 09:27:01 ispc CRON[1960676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:27:02 ispc CRON[1960676]: pam_unix(cron:session): session closed for user root Dec 18 09:28:01 ispc CRON[1960723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:28:01 ispc CRON[1960723]: pam_unix(cron:session): session closed for user root Dec 18 09:28:34 ispc postfix/smtpd[1960753]: sql auxprop plugin using mysql engine Dec 18 09:28:34 ispc saslauthd[1960756]: pam_mysql - SELECT returned no result. Dec 18 09:28:34 ispc saslauthd[1960756]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:28:34 ispc saslauthd[1960756]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:28:48 ispc saslauthd[1960761]: pam_mysql - SELECT returned no result. Dec 18 09:28:48 ispc saslauthd[1960761]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:28:48 ispc saslauthd[1960761]: do_auth : auth failure: [user=mail] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:29:01 ispc CRON[1960768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:29:02 ispc CRON[1960768]: pam_unix(cron:session): session closed for user root Dec 18 09:30:01 ispc CRON[1960810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:30:01 ispc CRON[1960811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:30:01 ispc CRON[1960812]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:30:01 ispc CRON[1960813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:30:01 ispc CRON[1960814]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:30:01 ispc CRON[1960812]: pam_unix(cron:session): session closed for user www-data Dec 18 09:30:01 ispc CRON[1960811]: pam_unix(cron:session): session closed for user root Dec 18 09:30:01 ispc CRON[1960814]: pam_unix(cron:session): session closed for user getmail Dec 18 09:30:02 ispc CRON[1960813]: pam_unix(cron:session): session closed for user root Dec 18 09:30:02 ispc CRON[1960810]: pam_unix(cron:session): session closed for user root Dec 18 09:31:01 ispc CRON[1960914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:31:03 ispc CRON[1960914]: pam_unix(cron:session): session closed for user root Dec 18 09:31:25 ispc postfix/smtpd[1960938]: sql auxprop plugin using mysql engine Dec 18 09:31:25 ispc CRON[1959730]: pam_unix(cron:session): session closed for user root Dec 18 09:32:01 ispc CRON[1960944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:32:01 ispc CRON[1960944]: pam_unix(cron:session): session closed for user root Dec 18 09:33:01 ispc CRON[1960969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:33:02 ispc CRON[1960969]: pam_unix(cron:session): session closed for user root Dec 18 09:33:24 ispc sshd[1960983]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 09:33:24 ispc sshd[1960983]: Invalid user blceu from 103.28.37.227 Dec 18 09:34:01 ispc CRON[1960985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:34:02 ispc CRON[1960985]: pam_unix(cron:session): session closed for user root Dec 18 09:35:01 ispc CRON[1961005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:35:01 ispc CRON[1961006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:35:01 ispc CRON[1961007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:35:01 ispc CRON[1961008]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:35:01 ispc CRON[1961006]: pam_unix(cron:session): session closed for user root Dec 18 09:35:01 ispc CRON[1961008]: pam_unix(cron:session): session closed for user getmail Dec 18 09:35:04 ispc CRON[1961005]: pam_unix(cron:session): session closed for user root Dec 18 09:35:34 ispc saslauthd[1961118]: pam_mysql - SELECT returned no result. Dec 18 09:35:34 ispc saslauthd[1961118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:35:34 ispc saslauthd[1961118]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:35:37 ispc CRON[1961007]: pam_unix(cron:session): session closed for user root Dec 18 09:36:01 ispc CRON[1961120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:37:01 ispc CRON[1961157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:37:02 ispc CRON[1961157]: pam_unix(cron:session): session closed for user root Dec 18 09:37:46 ispc sshd[1961190]: Invalid user admin from 64.227.74.41 Dec 18 09:38:01 ispc CRON[1961213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:38:02 ispc CRON[1961213]: pam_unix(cron:session): session closed for user root Dec 18 09:38:18 ispc postfix/smtpd[1961232]: sql auxprop plugin using mysql engine Dec 18 09:38:25 ispc postfix/smtpd[1961243]: sql auxprop plugin using mysql engine Dec 18 09:38:30 ispc sshd[1961253]: Invalid user admin from 64.227.74.41 Dec 18 09:39:01 ispc CRON[1961269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:39:01 ispc CRON[1961270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:39:01 ispc CRON[1961269]: pam_unix(cron:session): session closed for user root Dec 18 09:39:02 ispc CRON[1961270]: pam_unix(cron:session): session closed for user root Dec 18 09:39:15 ispc sshd[1961295]: Invalid user admin from 64.227.74.41 Dec 18 09:39:59 ispc sshd[1961318]: Invalid user admin from 64.227.74.41 Dec 18 09:40:01 ispc CRON[1961320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:40:01 ispc CRON[1961321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:40:01 ispc CRON[1961322]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:40:01 ispc CRON[1961323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:40:01 ispc CRON[1961324]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:40:01 ispc CRON[1961322]: pam_unix(cron:session): session closed for user www-data Dec 18 09:40:01 ispc CRON[1961321]: pam_unix(cron:session): session closed for user root Dec 18 09:40:01 ispc CRON[1961324]: pam_unix(cron:session): session closed for user getmail Dec 18 09:40:02 ispc CRON[1961320]: pam_unix(cron:session): session closed for user root Dec 18 09:40:02 ispc CRON[1961323]: pam_unix(cron:session): session closed for user root Dec 18 09:40:10 ispc postfix/smtpd[1961402]: sql auxprop plugin using mysql engine Dec 18 09:40:11 ispc saslauthd[1961404]: pam_mysql - SELECT returned no result. Dec 18 09:40:11 ispc saslauthd[1961404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:40:11 ispc saslauthd[1961404]: do_auth : auth failure: [user=setpriv] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:40:45 ispc sshd[1961418]: Invalid user admin from 64.227.74.41 Dec 18 09:40:49 ispc sshd[1961425]: Invalid user ziplines from 202.46.29.79 Dec 18 09:41:01 ispc CRON[1961431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:41:02 ispc CRON[1961431]: pam_unix(cron:session): session closed for user root Dec 18 09:41:30 ispc sshd[1961456]: Invalid user admin from 64.227.74.41 Dec 18 09:42:01 ispc CRON[1961476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:42:01 ispc CRON[1961476]: pam_unix(cron:session): session closed for user root Dec 18 09:42:07 ispc postfix/smtpd[1961487]: sql auxprop plugin using mysql engine Dec 18 09:42:08 ispc saslauthd[1961489]: pam_mysql - SELECT returned no result. Dec 18 09:42:08 ispc saslauthd[1961489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:42:08 ispc saslauthd[1961489]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:43:01 ispc CRON[1961524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:43:03 ispc CRON[1961524]: pam_unix(cron:session): session closed for user root Dec 18 09:44:01 ispc CRON[1961555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:44:01 ispc CRON[1961555]: pam_unix(cron:session): session closed for user root Dec 18 09:45:01 ispc CRON[1961600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:45:01 ispc CRON[1961601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:45:01 ispc CRON[1961599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:45:01 ispc CRON[1961602]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:45:02 ispc CRON[1961600]: pam_unix(cron:session): session closed for user root Dec 18 09:45:02 ispc CRON[1961602]: pam_unix(cron:session): session closed for user getmail Dec 18 09:45:02 ispc CRON[1961601]: pam_unix(cron:session): session closed for user root Dec 18 09:45:04 ispc CRON[1961599]: pam_unix(cron:session): session closed for user root Dec 18 09:45:17 ispc sshd[1961681]: Invalid user ubuntu from 117.50.70.169 Dec 18 09:45:45 ispc sshd[1961698]: Invalid user ziplines from 211.45.175.153 Dec 18 09:45:47 ispc sshd[1961700]: Did not receive identification string from 178.128.242.48 Dec 18 09:46:01 ispc CRON[1961705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:46:02 ispc CRON[1961705]: pam_unix(cron:session): session closed for user root Dec 18 09:47:01 ispc CRON[1961740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:47:02 ispc CRON[1961740]: pam_unix(cron:session): session closed for user root Dec 18 09:48:01 ispc CRON[1961790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:48:02 ispc CRON[1961790]: pam_unix(cron:session): session closed for user root Dec 18 09:48:42 ispc postfix/smtpd[1961822]: sql auxprop plugin using mysql engine Dec 18 09:48:42 ispc saslauthd[1961825]: pam_mysql - SELECT returned no result. Dec 18 09:48:42 ispc saslauthd[1961825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:48:42 ispc saslauthd[1961825]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:49:01 ispc CRON[1961834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:49:01 ispc CRON[1961834]: pam_unix(cron:session): session closed for user root Dec 18 09:49:33 ispc sshd[1961861]: Invalid user martof from 51.77.203.224 Dec 18 09:50:01 ispc CRON[1961878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:50:01 ispc CRON[1961879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:50:01 ispc CRON[1961880]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 09:50:01 ispc CRON[1961881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:50:01 ispc CRON[1961882]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:50:01 ispc CRON[1961880]: pam_unix(cron:session): session closed for user www-data Dec 18 09:50:01 ispc CRON[1961882]: pam_unix(cron:session): session closed for user getmail Dec 18 09:50:01 ispc CRON[1961879]: pam_unix(cron:session): session closed for user root Dec 18 09:50:02 ispc CRON[1961881]: pam_unix(cron:session): session closed for user root Dec 18 09:50:02 ispc CRON[1961878]: pam_unix(cron:session): session closed for user root Dec 18 09:50:21 ispc sshd[1961964]: Invalid user blceu from 141.94.71.131 Dec 18 09:51:01 ispc CRON[1961984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:51:02 ispc CRON[1961984]: pam_unix(cron:session): session closed for user root Dec 18 09:51:13 ispc sshd[1961999]: Invalid user blceu from 211.57.200.145 Dec 18 09:52:01 ispc CRON[1962026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:52:01 ispc CRON[1962027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:52:02 ispc CRON[1962027]: pam_unix(cron:session): session closed for user root Dec 18 09:53:01 ispc CRON[1962076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:53:02 ispc CRON[1962076]: pam_unix(cron:session): session closed for user root Dec 18 09:54:01 ispc CRON[1962122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:54:02 ispc CRON[1962122]: pam_unix(cron:session): session closed for user root Dec 18 09:55:00 ispc postfix/smtpd[1962160]: sql auxprop plugin using mysql engine Dec 18 09:55:01 ispc saslauthd[1962167]: pam_mysql - SELECT returned no result. Dec 18 09:55:01 ispc saslauthd[1962167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:55:01 ispc saslauthd[1962167]: do_auth : auth failure: [user=setup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:55:01 ispc CRON[1962168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:55:01 ispc CRON[1962169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:55:01 ispc CRON[1962170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:55:01 ispc CRON[1962171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 09:55:01 ispc CRON[1962169]: pam_unix(cron:session): session closed for user root Dec 18 09:55:01 ispc CRON[1962171]: pam_unix(cron:session): session closed for user getmail Dec 18 09:55:02 ispc CRON[1962170]: pam_unix(cron:session): session closed for user root Dec 18 09:55:02 ispc CRON[1962168]: pam_unix(cron:session): session closed for user root Dec 18 09:55:15 ispc saslauthd[1962248]: pam_mysql - SELECT returned no result. Dec 18 09:55:15 ispc saslauthd[1962248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:55:15 ispc saslauthd[1962248]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:55:19 ispc CRON[1962026]: pam_unix(cron:session): session closed for user root Dec 18 09:56:01 ispc CRON[1962275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:56:01 ispc CRON[1962275]: pam_unix(cron:session): session closed for user root Dec 18 09:56:20 ispc CRON[1961120]: pam_unix(cron:session): session closed for user root Dec 18 09:57:01 ispc CRON[1962306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:57:02 ispc CRON[1962306]: pam_unix(cron:session): session closed for user root Dec 18 09:57:14 ispc sshd[1962319]: Invalid user martof from 103.110.84.105 Dec 18 09:57:26 ispc saslauthd[1962323]: pam_mysql - SELECT returned no result. Dec 18 09:57:26 ispc saslauthd[1962323]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 09:57:26 ispc saslauthd[1962323]: do_auth : auth failure: [user=reception] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 09:58:01 ispc CRON[1962338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:58:02 ispc CRON[1962338]: pam_unix(cron:session): session closed for user root Dec 18 09:59:01 ispc CRON[1962354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 09:59:02 ispc CRON[1962354]: pam_unix(cron:session): session closed for user root Dec 18 10:00:01 ispc CRON[1962373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:00:01 ispc CRON[1962374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:00:01 ispc CRON[1962375]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:00:01 ispc CRON[1962376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:00:01 ispc CRON[1962377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:00:01 ispc CRON[1962378]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:00:01 ispc CRON[1962375]: pam_unix(cron:session): session closed for user www-data Dec 18 10:00:01 ispc CRON[1962374]: pam_unix(cron:session): session closed for user root Dec 18 10:00:01 ispc CRON[1962378]: pam_unix(cron:session): session closed for user getmail Dec 18 10:00:02 ispc CRON[1962373]: pam_unix(cron:session): session closed for user root Dec 18 10:00:02 ispc CRON[1962376]: pam_unix(cron:session): session closed for user root Dec 18 10:00:18 ispc sshd[1962640]: Invalid user admin from 178.128.242.48 Dec 18 10:00:44 ispc CRON[1962377]: pam_unix(cron:session): session closed for user root Dec 18 10:00:57 ispc sshd[1962644]: Invalid user admin from 178.128.242.48 Dec 18 10:01:01 ispc CRON[1962646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:01:34 ispc sshd[1962667]: Invalid user admin from 178.128.242.48 Dec 18 10:01:39 ispc saslauthd[1962673]: pam_mysql - SELECT returned no result. Dec 18 10:01:39 ispc saslauthd[1962673]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:01:39 ispc saslauthd[1962673]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:02:01 ispc CRON[1962683]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 10:02:01 ispc CRON[1962684]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:02:02 ispc CRON[1962684]: pam_unix(cron:session): session closed for user root Dec 18 10:02:09 ispc sshd[1962795]: Invalid user admin from 178.128.242.48 Dec 18 10:02:22 ispc saslauthd[1963103]: pam_mysql - SELECT returned no result. Dec 18 10:02:22 ispc saslauthd[1963103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:02:22 ispc saslauthd[1963103]: do_auth : auth failure: [user=video] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:02:42 ispc sshd[1963522]: Invalid user admin from 178.128.242.48 Dec 18 10:03:01 ispc CRON[1963617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:03:02 ispc CRON[1963617]: pam_unix(cron:session): session closed for user root Dec 18 10:03:07 ispc CRON[1962683]: pam_unix(cron:session): session closed for user logcheck Dec 18 10:03:14 ispc postfix/smtpd[1963759]: sql auxprop plugin using mysql engine Dec 18 10:03:15 ispc sshd[1963761]: Invalid user admin from 178.128.242.48 Dec 18 10:04:01 ispc CRON[1963796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:04:02 ispc CRON[1963796]: pam_unix(cron:session): session closed for user root Dec 18 10:04:36 ispc postfix/smtpd[1963820]: sql auxprop plugin using mysql engine Dec 18 10:05:01 ispc CRON[1963837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:05:01 ispc CRON[1963838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:05:01 ispc CRON[1963839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:05:01 ispc CRON[1963840]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:05:01 ispc CRON[1963838]: pam_unix(cron:session): session closed for user root Dec 18 10:05:01 ispc CRON[1963840]: pam_unix(cron:session): session closed for user getmail Dec 18 10:05:02 ispc CRON[1963839]: pam_unix(cron:session): session closed for user root Dec 18 10:05:03 ispc CRON[1963837]: pam_unix(cron:session): session closed for user root Dec 18 10:05:28 ispc postfix/smtpd[1963923]: sql auxprop plugin using mysql engine Dec 18 10:05:29 ispc saslauthd[1963929]: pam_mysql - SELECT returned no result. Dec 18 10:05:29 ispc saslauthd[1963929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:05:29 ispc saslauthd[1963929]: do_auth : auth failure: [user=test1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 10:06:01 ispc CRON[1963942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:06:02 ispc CRON[1963942]: pam_unix(cron:session): session closed for user root Dec 18 10:06:48 ispc sshd[1963970]: Invalid user blceu from 222.236.46.74 Dec 18 10:07:01 ispc CRON[1963976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:07:02 ispc CRON[1963976]: pam_unix(cron:session): session closed for user root Dec 18 10:08:01 ispc CRON[1964022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:08:02 ispc CRON[1964022]: pam_unix(cron:session): session closed for user root Dec 18 10:08:13 ispc postfix/smtpd[1964037]: sql auxprop plugin using mysql engine Dec 18 10:08:13 ispc saslauthd[1964039]: pam_mysql - SELECT returned no result. Dec 18 10:08:13 ispc saslauthd[1964039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:08:13 ispc saslauthd[1964039]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:09:01 ispc CRON[1964064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:09:01 ispc CRON[1964065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:09:02 ispc CRON[1964064]: pam_unix(cron:session): session closed for user root Dec 18 10:09:02 ispc CRON[1964065]: pam_unix(cron:session): session closed for user root Dec 18 10:09:57 ispc postfix/smtpd[1964107]: sql auxprop plugin using mysql engine Dec 18 10:09:58 ispc saslauthd[1964113]: pam_mysql - SELECT returned no result. Dec 18 10:09:58 ispc saslauthd[1964113]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:09:58 ispc saslauthd[1964113]: do_auth : auth failure: [user=shutdown] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:10:01 ispc CRON[1964114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:10:01 ispc CRON[1964115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:10:01 ispc CRON[1964116]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:10:01 ispc CRON[1964117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:10:01 ispc CRON[1964118]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:10:01 ispc CRON[1964116]: pam_unix(cron:session): session closed for user www-data Dec 18 10:10:01 ispc CRON[1964115]: pam_unix(cron:session): session closed for user root Dec 18 10:10:01 ispc CRON[1964118]: pam_unix(cron:session): session closed for user getmail Dec 18 10:10:01 ispc CRON[1964117]: pam_unix(cron:session): session closed for user root Dec 18 10:10:02 ispc CRON[1964114]: pam_unix(cron:session): session closed for user root Dec 18 10:10:30 ispc sshd[1964208]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:10:55 ispc sshd[1964219]: Invalid user martof from 51.91.247.10 Dec 18 10:11:01 ispc CRON[1964225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:11:01 ispc CRON[1964225]: pam_unix(cron:session): session closed for user root Dec 18 10:12:01 ispc CRON[1964261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:12:02 ispc CRON[1964261]: pam_unix(cron:session): session closed for user root Dec 18 10:12:36 ispc sshd[1964285]: Invalid user admin from 211.110.229.128 Dec 18 10:13:01 ispc CRON[1964306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:13:01 ispc CRON[1964306]: pam_unix(cron:session): session closed for user root Dec 18 10:13:32 ispc sshd[1964330]: Invalid user martof from 211.45.175.153 Dec 18 10:14:01 ispc CRON[1964344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:14:02 ispc CRON[1964344]: pam_unix(cron:session): session closed for user root Dec 18 10:14:12 ispc postfix/smtpd[1964359]: sql auxprop plugin using mysql engine Dec 18 10:14:38 ispc postfix/smtpd[1964370]: sql auxprop plugin using mysql engine Dec 18 10:14:39 ispc saslauthd[1964372]: pam_mysql - SELECT returned no result. Dec 18 10:14:39 ispc saslauthd[1964372]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:14:39 ispc saslauthd[1964372]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:15:01 ispc CRON[1964386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:15:01 ispc CRON[1964387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:15:01 ispc CRON[1964388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:15:01 ispc CRON[1964389]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:15:01 ispc CRON[1964387]: pam_unix(cron:session): session closed for user root Dec 18 10:15:02 ispc CRON[1964389]: pam_unix(cron:session): session closed for user getmail Dec 18 10:15:02 ispc CRON[1964388]: pam_unix(cron:session): session closed for user root Dec 18 10:15:02 ispc CRON[1964386]: pam_unix(cron:session): session closed for user root Dec 18 10:16:01 ispc CRON[1964484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:16:02 ispc CRON[1964484]: pam_unix(cron:session): session closed for user root Dec 18 10:16:56 ispc sshd[1964520]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:16:56 ispc sshd[1964520]: Invalid user blceu from 193.110.157.47 Dec 18 10:17:01 ispc CRON[1964522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:17:02 ispc CRON[1964522]: pam_unix(cron:session): session closed for user root Dec 18 10:18:01 ispc CRON[1964570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:18:01 ispc CRON[1964570]: pam_unix(cron:session): session closed for user root Dec 18 10:19:01 ispc CRON[1964608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:19:02 ispc CRON[1964608]: pam_unix(cron:session): session closed for user root Dec 18 10:20:01 ispc CRON[1964649]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:20:01 ispc CRON[1964650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:20:01 ispc CRON[1964651]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:20:01 ispc CRON[1964652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:20:01 ispc CRON[1964653]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:20:01 ispc CRON[1964651]: pam_unix(cron:session): session closed for user www-data Dec 18 10:20:01 ispc CRON[1964650]: pam_unix(cron:session): session closed for user root Dec 18 10:20:01 ispc CRON[1964653]: pam_unix(cron:session): session closed for user getmail Dec 18 10:20:01 ispc CRON[1964652]: pam_unix(cron:session): session closed for user root Dec 18 10:20:01 ispc CRON[1964649]: pam_unix(cron:session): session closed for user root Dec 18 10:21:01 ispc CRON[1964752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:21:01 ispc CRON[1964753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:21:01 ispc CRON[1964752]: pam_unix(cron:session): session closed for user root Dec 18 10:21:02 ispc CRON[1964753]: pam_unix(cron:session): session closed for user root Dec 18 10:21:05 ispc postfix/smtpd[1964768]: sql auxprop plugin using mysql engine Dec 18 10:21:06 ispc saslauthd[1964771]: pam_mysql - SELECT returned no result. Dec 18 10:21:06 ispc saslauthd[1964771]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:21:06 ispc saslauthd[1964771]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:21:30 ispc CRON[1962646]: pam_unix(cron:session): session closed for user root Dec 18 10:22:01 ispc CRON[1964788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:22:02 ispc CRON[1964788]: pam_unix(cron:session): session closed for user root Dec 18 10:23:01 ispc CRON[1964811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:23:02 ispc CRON[1964811]: pam_unix(cron:session): session closed for user root Dec 18 10:24:01 ispc CRON[1964826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:24:02 ispc CRON[1964826]: pam_unix(cron:session): session closed for user root Dec 18 10:25:01 ispc CRON[1964842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:25:01 ispc CRON[1964843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:25:01 ispc CRON[1964844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:25:01 ispc CRON[1964845]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:25:01 ispc CRON[1964843]: pam_unix(cron:session): session closed for user root Dec 18 10:25:01 ispc CRON[1964845]: pam_unix(cron:session): session closed for user getmail Dec 18 10:25:03 ispc CRON[1964842]: pam_unix(cron:session): session closed for user root Dec 18 10:25:04 ispc saslauthd[1964949]: pam_mysql - SELECT returned no result. Dec 18 10:25:04 ispc saslauthd[1964949]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:25:04 ispc saslauthd[1964949]: do_auth : auth failure: [user=signa] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:25:28 ispc sshd[1964954]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:25:38 ispc CRON[1964844]: pam_unix(cron:session): session closed for user root Dec 18 10:26:01 ispc CRON[1964956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:27:01 ispc CRON[1964989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:27:02 ispc CRON[1964989]: pam_unix(cron:session): session closed for user root Dec 18 10:27:27 ispc postfix/smtpd[1965012]: sql auxprop plugin using mysql engine Dec 18 10:27:27 ispc saslauthd[1965014]: pam_mysql - SELECT returned no result. Dec 18 10:27:27 ispc saslauthd[1965014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:27:27 ispc saslauthd[1965014]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:28:01 ispc CRON[1965037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:28:02 ispc CRON[1965037]: pam_unix(cron:session): session closed for user root Dec 18 10:28:10 ispc sshd[1965053]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:29:01 ispc CRON[1965075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:29:02 ispc CRON[1965075]: pam_unix(cron:session): session closed for user root Dec 18 10:30:01 ispc CRON[1965116]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:30:01 ispc CRON[1965117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:30:01 ispc CRON[1965115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:30:01 ispc CRON[1965118]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:30:01 ispc CRON[1965114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:30:01 ispc CRON[1965115]: pam_unix(cron:session): session closed for user root Dec 18 10:30:01 ispc CRON[1965116]: pam_unix(cron:session): session closed for user www-data Dec 18 10:30:01 ispc CRON[1965118]: pam_unix(cron:session): session closed for user getmail Dec 18 10:30:02 ispc CRON[1965117]: pam_unix(cron:session): session closed for user root Dec 18 10:30:02 ispc CRON[1965114]: pam_unix(cron:session): session closed for user root Dec 18 10:31:01 ispc CRON[1965216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:31:02 ispc CRON[1965216]: pam_unix(cron:session): session closed for user root Dec 18 10:32:01 ispc CRON[1965252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:32:02 ispc CRON[1965252]: pam_unix(cron:session): session closed for user root Dec 18 10:32:36 ispc postfix/smtpd[1965277]: sql auxprop plugin using mysql engine Dec 18 10:33:01 ispc CRON[1965299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:33:03 ispc CRON[1965299]: pam_unix(cron:session): session closed for user root Dec 18 10:34:01 ispc CRON[1965337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:34:01 ispc CRON[1965337]: pam_unix(cron:session): session closed for user root Dec 18 10:35:01 ispc CRON[1965379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:35:01 ispc CRON[1965380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:35:01 ispc CRON[1965381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:35:01 ispc CRON[1965382]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:35:01 ispc CRON[1965380]: pam_unix(cron:session): session closed for user root Dec 18 10:35:02 ispc CRON[1965382]: pam_unix(cron:session): session closed for user getmail Dec 18 10:35:02 ispc CRON[1965381]: pam_unix(cron:session): session closed for user root Dec 18 10:35:03 ispc CRON[1965379]: pam_unix(cron:session): session closed for user root Dec 18 10:35:58 ispc postfix/smtpd[1965477]: sql auxprop plugin using mysql engine Dec 18 10:35:59 ispc saslauthd[1965479]: pam_mysql - SELECT returned no result. Dec 18 10:35:59 ispc saslauthd[1965479]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:35:59 ispc saslauthd[1965479]: do_auth : auth failure: [user=debbie] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:36:01 ispc CRON[1965480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:36:01 ispc CRON[1965480]: pam_unix(cron:session): session closed for user root Dec 18 10:36:46 ispc saslauthd[1965513]: pam_mysql - SELECT returned no result. Dec 18 10:36:46 ispc saslauthd[1965513]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:36:46 ispc saslauthd[1965513]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:37:01 ispc CRON[1965519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:37:03 ispc CRON[1965519]: pam_unix(cron:session): session closed for user root Dec 18 10:37:15 ispc sshd[1965537]: Invalid user ftp from 45.119.213.109 Dec 18 10:37:30 ispc sshd[1965547]: Invalid user martof from 211.57.200.145 Dec 18 10:38:01 ispc CRON[1965572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:38:02 ispc CRON[1965572]: pam_unix(cron:session): session closed for user root Dec 18 10:39:01 ispc CRON[1965615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:39:01 ispc CRON[1965616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:39:01 ispc CRON[1965615]: pam_unix(cron:session): session closed for user root Dec 18 10:39:02 ispc CRON[1965616]: pam_unix(cron:session): session closed for user root Dec 18 10:39:18 ispc sshd[1965642]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:39:18 ispc sshd[1965642]: Invalid user ziplines from 103.28.37.227 Dec 18 10:40:00 ispc postfix/smtpd[1965667]: sql auxprop plugin using mysql engine Dec 18 10:40:01 ispc CRON[1965669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:40:01 ispc CRON[1965670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:40:01 ispc CRON[1965671]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:40:01 ispc CRON[1965672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:40:01 ispc CRON[1965673]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:40:01 ispc CRON[1965671]: pam_unix(cron:session): session closed for user www-data Dec 18 10:40:01 ispc CRON[1965670]: pam_unix(cron:session): session closed for user root Dec 18 10:40:01 ispc CRON[1965673]: pam_unix(cron:session): session closed for user getmail Dec 18 10:40:01 ispc CRON[1965672]: pam_unix(cron:session): session closed for user root Dec 18 10:40:02 ispc CRON[1965669]: pam_unix(cron:session): session closed for user root Dec 18 10:40:02 ispc saslauthd[1965747]: pam_mysql - SELECT returned no result. Dec 18 10:40:02 ispc saslauthd[1965747]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:40:02 ispc saslauthd[1965747]: do_auth : auth failure: [user=siteadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:41:01 ispc CRON[1965775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:41:02 ispc CRON[1965775]: pam_unix(cron:session): session closed for user root Dec 18 10:41:27 ispc sshd[1965797]: Did not receive identification string from 58.249.158.1 Dec 18 10:41:37 ispc sshd[1965805]: Did not receive identification string from 45.140.17.97 Dec 18 10:42:01 ispc CRON[1965814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:42:02 ispc CRON[1965814]: pam_unix(cron:session): session closed for user root Dec 18 10:43:01 ispc CRON[1965868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:43:01 ispc CRON[1965868]: pam_unix(cron:session): session closed for user root Dec 18 10:43:14 ispc sshd[1965846]: Invalid user klape from 36.50.177.171 Dec 18 10:43:53 ispc sshd[1965909]: Invalid user ziplines from 222.236.46.74 Dec 18 10:44:01 ispc CRON[1965915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:44:02 ispc CRON[1965915]: pam_unix(cron:session): session closed for user root Dec 18 10:45:01 ispc CRON[1965954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:45:01 ispc CRON[1965956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:45:01 ispc CRON[1965955]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:45:01 ispc CRON[1965957]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:45:01 ispc CRON[1965955]: pam_unix(cron:session): session closed for user root Dec 18 10:45:01 ispc CRON[1965957]: pam_unix(cron:session): session closed for user getmail Dec 18 10:45:01 ispc CRON[1965956]: pam_unix(cron:session): session closed for user root Dec 18 10:45:03 ispc CRON[1965954]: pam_unix(cron:session): session closed for user root Dec 18 10:45:07 ispc postfix/smtpd[1966034]: sql auxprop plugin using mysql engine Dec 18 10:45:07 ispc saslauthd[1966037]: pam_mysql - SELECT returned no result. Dec 18 10:45:07 ispc saslauthd[1966037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:45:07 ispc saslauthd[1966037]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:46:01 ispc CRON[1966059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:46:02 ispc CRON[1966059]: pam_unix(cron:session): session closed for user root Dec 18 10:46:21 ispc sshd[1966079]: Invalid user martof from 185.208.181.152 Dec 18 10:46:24 ispc CRON[1964956]: pam_unix(cron:session): session closed for user root Dec 18 10:47:01 ispc CRON[1966086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:47:02 ispc CRON[1966086]: pam_unix(cron:session): session closed for user root Dec 18 10:47:17 ispc sshd[1966098]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 10:47:17 ispc sshd[1966098]: Invalid user martof from 103.28.37.227 Dec 18 10:48:01 ispc CRON[1966113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:48:02 ispc CRON[1966113]: pam_unix(cron:session): session closed for user root Dec 18 10:49:01 ispc CRON[1966125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:49:03 ispc CRON[1966125]: pam_unix(cron:session): session closed for user root Dec 18 10:49:58 ispc sshd[1966137]: Invalid user blceu from 211.45.175.153 Dec 18 10:50:01 ispc CRON[1966139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:50:01 ispc CRON[1966140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:50:01 ispc CRON[1966141]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 10:50:01 ispc CRON[1966142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:50:01 ispc CRON[1966143]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:50:01 ispc CRON[1966141]: pam_unix(cron:session): session closed for user www-data Dec 18 10:50:01 ispc CRON[1966140]: pam_unix(cron:session): session closed for user root Dec 18 10:50:01 ispc CRON[1966143]: pam_unix(cron:session): session closed for user getmail Dec 18 10:50:02 ispc CRON[1966139]: pam_unix(cron:session): session closed for user root Dec 18 10:50:29 ispc CRON[1966142]: pam_unix(cron:session): session closed for user root Dec 18 10:51:01 ispc CRON[1966251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:51:23 ispc sshd[1966269]: Invalid user admin from 211.110.229.128 Dec 18 10:52:01 ispc CRON[1966289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:52:01 ispc CRON[1966289]: pam_unix(cron:session): session closed for user root Dec 18 10:52:53 ispc postfix/smtpd[1966328]: sql auxprop plugin using mysql engine Dec 18 10:52:53 ispc saslauthd[1966329]: pam_mysql - SELECT returned no result. Dec 18 10:52:53 ispc saslauthd[1966329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:52:53 ispc saslauthd[1966329]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:52:57 ispc sshd[1966334]: Invalid user blceu from 51.91.247.10 Dec 18 10:53:01 ispc CRON[1966336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:53:02 ispc CRON[1966336]: pam_unix(cron:session): session closed for user root Dec 18 10:53:28 ispc sshd[1966359]: Invalid user zamestnanievzdravotnictve from 175.125.95.234 Dec 18 10:54:01 ispc CRON[1966373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:54:02 ispc CRON[1966373]: pam_unix(cron:session): session closed for user root Dec 18 10:54:13 ispc postfix/smtpd[1966389]: sql auxprop plugin using mysql engine Dec 18 10:54:19 ispc postfix/smtpd[1966396]: sql auxprop plugin using mysql engine Dec 18 10:55:00 ispc postfix/smtpd[1966417]: sql auxprop plugin using mysql engine Dec 18 10:55:01 ispc CRON[1966419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:55:01 ispc CRON[1966420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:55:01 ispc CRON[1966421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:55:01 ispc CRON[1966422]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 10:55:01 ispc CRON[1966420]: pam_unix(cron:session): session closed for user root Dec 18 10:55:01 ispc CRON[1966422]: pam_unix(cron:session): session closed for user getmail Dec 18 10:55:01 ispc CRON[1966421]: pam_unix(cron:session): session closed for user root Dec 18 10:55:02 ispc CRON[1966419]: pam_unix(cron:session): session closed for user root Dec 18 10:55:02 ispc saslauthd[1966495]: pam_mysql - SELECT returned no result. Dec 18 10:55:02 ispc saslauthd[1966495]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:55:02 ispc saslauthd[1966495]: do_auth : auth failure: [user=snake] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 10:56:02 ispc CRON[1966521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:56:02 ispc CRON[1966521]: pam_unix(cron:session): session closed for user root Dec 18 10:56:56 ispc sshd[1966553]: Did not receive identification string from 116.147.40.236 Dec 18 10:57:01 ispc CRON[1966560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:57:02 ispc CRON[1966560]: pam_unix(cron:session): session closed for user root Dec 18 10:57:33 ispc sshd[1966585]: Invalid user blceu from 220.196.191.58 Dec 18 10:57:57 ispc postfix/smtpd[1966605]: sql auxprop plugin using mysql engine Dec 18 10:57:58 ispc saslauthd[1966607]: pam_mysql - SELECT returned no result. Dec 18 10:57:58 ispc saslauthd[1966607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:57:58 ispc saslauthd[1966607]: do_auth : auth failure: [user=user1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 10:58:01 ispc CRON[1966613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:58:02 ispc CRON[1966613]: pam_unix(cron:session): session closed for user root Dec 18 10:59:01 ispc CRON[1966648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 10:59:02 ispc CRON[1966648]: pam_unix(cron:session): session closed for user root Dec 18 10:59:42 ispc postfix/smtpd[1966676]: sql auxprop plugin using mysql engine Dec 18 10:59:42 ispc saslauthd[1966678]: pam_mysql - SELECT returned no result. Dec 18 10:59:42 ispc saslauthd[1966678]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 10:59:42 ispc saslauthd[1966678]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:00:01 ispc CRON[1966688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:00:01 ispc CRON[1966689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:00:01 ispc CRON[1966690]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:00:01 ispc CRON[1966691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:00:01 ispc CRON[1966692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:00:01 ispc CRON[1966693]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:00:01 ispc CRON[1966689]: pam_unix(cron:session): session closed for user root Dec 18 11:00:01 ispc CRON[1966690]: pam_unix(cron:session): session closed for user www-data Dec 18 11:00:01 ispc CRON[1966693]: pam_unix(cron:session): session closed for user getmail Dec 18 11:00:02 ispc CRON[1966692]: pam_unix(cron:session): session closed for user root Dec 18 11:00:03 ispc CRON[1966691]: pam_unix(cron:session): session closed for user root Dec 18 11:00:03 ispc CRON[1966688]: pam_unix(cron:session): session closed for user root Dec 18 11:01:01 ispc CRON[1966869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:01:02 ispc CRON[1966869]: pam_unix(cron:session): session closed for user root Dec 18 11:02:01 ispc CRON[1966905]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 11:02:01 ispc CRON[1966906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:02:02 ispc CRON[1966906]: pam_unix(cron:session): session closed for user root Dec 18 11:02:07 ispc sshd[1967052]: Invalid user blceu from 185.208.181.152 Dec 18 11:02:59 ispc CRON[1966905]: pam_unix(cron:session): session closed for user logcheck Dec 18 11:03:01 ispc CRON[1967965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:03:02 ispc CRON[1967965]: pam_unix(cron:session): session closed for user root Dec 18 11:03:08 ispc postfix/smtpd[1967981]: sql auxprop plugin using mysql engine Dec 18 11:04:01 ispc CRON[1968010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:04:02 ispc CRON[1968010]: pam_unix(cron:session): session closed for user root Dec 18 11:05:01 ispc CRON[1968048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:05:01 ispc CRON[1968049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:05:01 ispc CRON[1968050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:05:01 ispc CRON[1968051]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:05:01 ispc CRON[1968049]: pam_unix(cron:session): session closed for user root Dec 18 11:05:01 ispc CRON[1968051]: pam_unix(cron:session): session closed for user getmail Dec 18 11:05:02 ispc CRON[1968050]: pam_unix(cron:session): session closed for user root Dec 18 11:05:03 ispc CRON[1968048]: pam_unix(cron:session): session closed for user root Dec 18 11:05:11 ispc sshd[1968128]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:05:11 ispc sshd[1968128]: Invalid user blceu from 103.28.37.227 Dec 18 11:06:01 ispc CRON[1968154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:06:02 ispc CRON[1968154]: pam_unix(cron:session): session closed for user root Dec 18 11:06:17 ispc postfix/smtpd[1968175]: sql auxprop plugin using mysql engine Dec 18 11:06:17 ispc saslauthd[1968178]: pam_mysql - SELECT returned no result. Dec 18 11:06:17 ispc saslauthd[1968178]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:06:17 ispc saslauthd[1968178]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:07:01 ispc CRON[1968196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:07:01 ispc CRON[1968196]: pam_unix(cron:session): session closed for user root Dec 18 11:08:01 ispc CRON[1968237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:08:01 ispc CRON[1968237]: pam_unix(cron:session): session closed for user root Dec 18 11:09:01 ispc CRON[1968274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:09:01 ispc CRON[1968275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:09:02 ispc CRON[1968274]: pam_unix(cron:session): session closed for user root Dec 18 11:09:02 ispc CRON[1968275]: pam_unix(cron:session): session closed for user root Dec 18 11:09:26 ispc postfix/smtpd[1968305]: sql auxprop plugin using mysql engine Dec 18 11:09:27 ispc saslauthd[1968311]: pam_mysql - SELECT returned no result. Dec 18 11:09:27 ispc saslauthd[1968311]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:09:27 ispc saslauthd[1968311]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:09:56 ispc sshd[1968320]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:10:01 ispc CRON[1968326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:10:01 ispc CRON[1968327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:10:01 ispc CRON[1968328]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:10:01 ispc CRON[1968329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:10:01 ispc CRON[1968330]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:10:01 ispc CRON[1968327]: pam_unix(cron:session): session closed for user root Dec 18 11:10:01 ispc CRON[1968328]: pam_unix(cron:session): session closed for user www-data Dec 18 11:10:01 ispc CRON[1968330]: pam_unix(cron:session): session closed for user getmail Dec 18 11:10:02 ispc CRON[1968329]: pam_unix(cron:session): session closed for user root Dec 18 11:10:03 ispc CRON[1968326]: pam_unix(cron:session): session closed for user root Dec 18 11:10:10 ispc saslauthd[1968409]: pam_mysql - SELECT returned no result. Dec 18 11:10:10 ispc saslauthd[1968409]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:10:10 ispc saslauthd[1968409]: do_auth : auth failure: [user=snmp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:10:15 ispc sshd[1968410]: Did not receive identification string from 192.227.134.84 Dec 18 11:11:01 ispc CRON[1968431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:11:02 ispc CRON[1968431]: pam_unix(cron:session): session closed for user root Dec 18 11:11:18 ispc CRON[1966251]: pam_unix(cron:session): session closed for user root Dec 18 11:12:01 ispc CRON[1968450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:12:02 ispc CRON[1968450]: pam_unix(cron:session): session closed for user root Dec 18 11:12:03 ispc saslauthd[1968462]: pam_mysql - SELECT returned no result. Dec 18 11:12:03 ispc saslauthd[1968462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:12:03 ispc saslauthd[1968462]: do_auth : auth failure: [user=abc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:12:56 ispc saslauthd[1968478]: pam_mysql - SELECT returned no result. Dec 18 11:12:56 ispc saslauthd[1968478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:12:56 ispc saslauthd[1968478]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:13:02 ispc CRON[1968479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:13:03 ispc CRON[1968479]: pam_unix(cron:session): session closed for user root Dec 18 11:14:01 ispc CRON[1968491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:14:02 ispc CRON[1968491]: pam_unix(cron:session): session closed for user root Dec 18 11:14:20 ispc sshd[1968503]: Invalid user ziplines from 141.94.71.131 Dec 18 11:15:01 ispc CRON[1968507]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:15:01 ispc CRON[1968508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:15:01 ispc CRON[1968509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:15:01 ispc CRON[1968510]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:15:01 ispc CRON[1968508]: pam_unix(cron:session): session closed for user root Dec 18 11:15:01 ispc CRON[1968510]: pam_unix(cron:session): session closed for user getmail Dec 18 11:15:02 ispc CRON[1968507]: pam_unix(cron:session): session closed for user root Dec 18 11:15:40 ispc CRON[1968509]: pam_unix(cron:session): session closed for user root Dec 18 11:16:01 ispc CRON[1968694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:17:01 ispc CRON[1968732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:17:02 ispc CRON[1968732]: pam_unix(cron:session): session closed for user root Dec 18 11:17:12 ispc sshd[1968747]: Did not receive identification string from 134.209.86.19 Dec 18 11:18:01 ispc CRON[1968785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:18:02 ispc CRON[1968785]: pam_unix(cron:session): session closed for user root Dec 18 11:18:14 ispc sshd[1968802]: Invalid user test1 from 134.209.86.19 Dec 18 11:18:59 ispc sshd[1968829]: Invalid user test2 from 134.209.86.19 Dec 18 11:19:01 ispc CRON[1968831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:19:02 ispc CRON[1968831]: pam_unix(cron:session): session closed for user root Dec 18 11:19:37 ispc postfix/smtpd[1968856]: sql auxprop plugin using mysql engine Dec 18 11:19:37 ispc saslauthd[1968860]: pam_mysql - SELECT returned no result. Dec 18 11:19:37 ispc saslauthd[1968860]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:19:37 ispc saslauthd[1968860]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:19:45 ispc sshd[1968864]: Invalid user test3 from 134.209.86.19 Dec 18 11:20:01 ispc CRON[1968874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:20:01 ispc CRON[1968875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:20:01 ispc CRON[1968876]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:20:01 ispc CRON[1968877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:20:01 ispc CRON[1968878]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:20:01 ispc CRON[1968875]: pam_unix(cron:session): session closed for user root Dec 18 11:20:01 ispc CRON[1968876]: pam_unix(cron:session): session closed for user www-data Dec 18 11:20:01 ispc CRON[1968878]: pam_unix(cron:session): session closed for user getmail Dec 18 11:20:02 ispc CRON[1968877]: pam_unix(cron:session): session closed for user root Dec 18 11:20:02 ispc CRON[1968874]: pam_unix(cron:session): session closed for user root Dec 18 11:21:01 ispc CRON[1968982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:21:01 ispc CRON[1968983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:21:01 ispc CRON[1968982]: pam_unix(cron:session): session closed for user root Dec 18 11:21:02 ispc CRON[1968983]: pam_unix(cron:session): session closed for user root Dec 18 11:22:01 ispc CRON[1969028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:22:02 ispc CRON[1969028]: pam_unix(cron:session): session closed for user root Dec 18 11:23:01 ispc CRON[1969070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:23:02 ispc CRON[1969070]: pam_unix(cron:session): session closed for user root Dec 18 11:24:01 ispc CRON[1969110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:24:02 ispc CRON[1969110]: pam_unix(cron:session): session closed for user root Dec 18 11:25:01 ispc CRON[1969153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:25:01 ispc CRON[1969154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:25:01 ispc CRON[1969155]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:25:01 ispc CRON[1969152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:25:01 ispc CRON[1969153]: pam_unix(cron:session): session closed for user root Dec 18 11:25:01 ispc CRON[1969155]: pam_unix(cron:session): session closed for user getmail Dec 18 11:25:02 ispc CRON[1969154]: pam_unix(cron:session): session closed for user root Dec 18 11:25:02 ispc CRON[1969152]: pam_unix(cron:session): session closed for user root Dec 18 11:25:17 ispc postfix/smtpd[1969236]: sql auxprop plugin using mysql engine Dec 18 11:25:18 ispc saslauthd[1969239]: pam_mysql - SELECT returned no result. Dec 18 11:25:18 ispc saslauthd[1969239]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:25:18 ispc saslauthd[1969239]: do_auth : auth failure: [user=software] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:25:39 ispc sshd[1969248]: Invalid user postgres from 134.209.86.19 Dec 18 11:26:01 ispc CRON[1969259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:26:02 ispc CRON[1969259]: pam_unix(cron:session): session closed for user root Dec 18 11:26:07 ispc saslauthd[1969274]: pam_mysql - SELECT returned no result. Dec 18 11:26:07 ispc saslauthd[1969274]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:26:07 ispc saslauthd[1969274]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:26:17 ispc sshd[1969279]: Invalid user oracle from 134.209.86.19 Dec 18 11:26:54 ispc sshd[1969294]: Invalid user user from 134.209.86.19 Dec 18 11:26:57 ispc sshd[1969296]: Invalid user ziplines from 27.254.144.183 Dec 18 11:27:01 ispc CRON[1969308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:27:02 ispc CRON[1969308]: pam_unix(cron:session): session closed for user root Dec 18 11:27:10 ispc sshd[1969323]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:27:12 ispc sshd[1969327]: Invalid user martof from 85.143.173.172 Dec 18 11:27:12 ispc sshd[1969325]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:27:12 ispc sshd[1969325]: Invalid user klape from 189.89.20.45 Dec 18 11:27:13 ispc sshd[1969329]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:27:13 ispc sshd[1969329]: Invalid user ubuntu from 189.89.20.45 Dec 18 11:28:01 ispc CRON[1969362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:28:01 ispc CRON[1969362]: pam_unix(cron:session): session closed for user root Dec 18 11:29:01 ispc CRON[1969397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:29:02 ispc CRON[1969397]: pam_unix(cron:session): session closed for user root Dec 18 11:30:01 ispc CRON[1969434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:30:01 ispc CRON[1969435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:30:01 ispc CRON[1969436]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:30:01 ispc CRON[1969437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:30:01 ispc CRON[1969438]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:30:01 ispc CRON[1969436]: pam_unix(cron:session): session closed for user www-data Dec 18 11:30:01 ispc CRON[1969435]: pam_unix(cron:session): session closed for user root Dec 18 11:30:01 ispc CRON[1969438]: pam_unix(cron:session): session closed for user getmail Dec 18 11:30:02 ispc CRON[1969434]: pam_unix(cron:session): session closed for user root Dec 18 11:30:02 ispc CRON[1969437]: pam_unix(cron:session): session closed for user root Dec 18 11:31:01 ispc CRON[1969537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:31:01 ispc CRON[1969537]: pam_unix(cron:session): session closed for user root Dec 18 11:32:01 ispc CRON[1969573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:32:02 ispc CRON[1969573]: pam_unix(cron:session): session closed for user root Dec 18 11:32:11 ispc sshd[1969588]: Invalid user ziplines from 211.57.200.145 Dec 18 11:32:30 ispc postfix/smtpd[1969605]: sql auxprop plugin using mysql engine Dec 18 11:32:31 ispc saslauthd[1969608]: pam_mysql - SELECT returned no result. Dec 18 11:32:31 ispc saslauthd[1969608]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:32:31 ispc saslauthd[1969608]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:33:01 ispc CRON[1969628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:33:02 ispc CRON[1969628]: pam_unix(cron:session): session closed for user root Dec 18 11:34:01 ispc CRON[1969666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:34:02 ispc CRON[1969666]: pam_unix(cron:session): session closed for user root Dec 18 11:34:05 ispc sshd[1969679]: Invalid user klape from 103.164.20.29 Dec 18 11:34:06 ispc sshd[1969681]: Invalid user ubuntu from 103.164.20.29 Dec 18 11:35:01 ispc CRON[1969705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:35:01 ispc CRON[1969706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:35:01 ispc CRON[1969707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:35:01 ispc CRON[1969708]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:35:01 ispc CRON[1969708]: pam_unix(cron:session): session closed for user getmail Dec 18 11:35:01 ispc CRON[1969706]: pam_unix(cron:session): session closed for user root Dec 18 11:35:02 ispc CRON[1969707]: pam_unix(cron:session): session closed for user root Dec 18 11:35:02 ispc CRON[1969705]: pam_unix(cron:session): session closed for user root Dec 18 11:36:01 ispc CRON[1969809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:36:01 ispc CRON[1969809]: pam_unix(cron:session): session closed for user root Dec 18 11:36:24 ispc postfix/smtpd[1969831]: sql auxprop plugin using mysql engine Dec 18 11:36:24 ispc CRON[1968694]: pam_unix(cron:session): session closed for user root Dec 18 11:37:01 ispc CRON[1969837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:37:02 ispc CRON[1969837]: pam_unix(cron:session): session closed for user root Dec 18 11:38:01 ispc CRON[1969861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:38:02 ispc CRON[1969861]: pam_unix(cron:session): session closed for user root Dec 18 11:39:01 ispc CRON[1969876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:39:01 ispc CRON[1969877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:39:01 ispc sshd[1969874]: Invalid user diamantdi from 8.133.194.64 Dec 18 11:39:02 ispc CRON[1969876]: pam_unix(cron:session): session closed for user root Dec 18 11:39:02 ispc CRON[1969877]: pam_unix(cron:session): session closed for user root Dec 18 11:39:04 ispc saslauthd[1969900]: pam_mysql - SELECT returned no result. Dec 18 11:39:04 ispc saslauthd[1969900]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:39:04 ispc saslauthd[1969900]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:40:01 ispc CRON[1969902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:40:01 ispc CRON[1969904]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:40:01 ispc CRON[1969903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:40:01 ispc CRON[1969906]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:40:01 ispc CRON[1969905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:40:02 ispc CRON[1969904]: pam_unix(cron:session): session closed for user www-data Dec 18 11:40:02 ispc CRON[1969903]: pam_unix(cron:session): session closed for user root Dec 18 11:40:02 ispc CRON[1969906]: pam_unix(cron:session): session closed for user getmail Dec 18 11:40:02 ispc CRON[1969902]: pam_unix(cron:session): session closed for user root Dec 18 11:40:20 ispc saslauthd[1970012]: pam_mysql - SELECT returned no result. Dec 18 11:40:20 ispc saslauthd[1970012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:40:20 ispc saslauthd[1970012]: do_auth : auth failure: [user=spcl] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:40:50 ispc CRON[1969905]: pam_unix(cron:session): session closed for user root Dec 18 11:41:01 ispc CRON[1970015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:41:58 ispc postfix/smtpd[1970048]: sql auxprop plugin using mysql engine Dec 18 11:41:58 ispc postfix/smtpd[1970050]: sql auxprop plugin using mysql engine Dec 18 11:42:01 ispc CRON[1970052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:42:02 ispc CRON[1970052]: pam_unix(cron:session): session closed for user root Dec 18 11:42:50 ispc sshd[1970085]: Invalid user blceu from 85.143.173.172 Dec 18 11:43:01 ispc CRON[1970097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:43:02 ispc CRON[1970097]: pam_unix(cron:session): session closed for user root Dec 18 11:43:58 ispc postfix/smtpd[1970135]: sql auxprop plugin using mysql engine Dec 18 11:44:01 ispc CRON[1970137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:44:02 ispc CRON[1970137]: pam_unix(cron:session): session closed for user root Dec 18 11:45:01 ispc CRON[1970172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:45:01 ispc CRON[1970173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:45:01 ispc CRON[1970174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:45:01 ispc CRON[1970175]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:45:01 ispc CRON[1970173]: pam_unix(cron:session): session closed for user root Dec 18 11:45:01 ispc CRON[1970175]: pam_unix(cron:session): session closed for user getmail Dec 18 11:45:02 ispc CRON[1970172]: pam_unix(cron:session): session closed for user root Dec 18 11:45:02 ispc CRON[1970174]: pam_unix(cron:session): session closed for user root Dec 18 11:45:24 ispc postfix/smtpd[1970256]: sql auxprop plugin using mysql engine Dec 18 11:45:25 ispc saslauthd[1970258]: pam_mysql - SELECT returned no result. Dec 18 11:45:25 ispc saslauthd[1970258]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:45:25 ispc saslauthd[1970258]: do_auth : auth failure: [user=scan1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 11:45:33 ispc saslauthd[1970263]: pam_mysql - SELECT returned no result. Dec 18 11:45:33 ispc saslauthd[1970263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:45:33 ispc saslauthd[1970263]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:46:01 ispc CRON[1970276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:46:01 ispc CRON[1970276]: pam_unix(cron:session): session closed for user root Dec 18 11:47:01 ispc CRON[1970312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:47:02 ispc CRON[1970312]: pam_unix(cron:session): session closed for user root Dec 18 11:48:01 ispc CRON[1970359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:48:02 ispc CRON[1970359]: pam_unix(cron:session): session closed for user root Dec 18 11:49:01 ispc CRON[1970395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:49:01 ispc CRON[1970395]: pam_unix(cron:session): session closed for user root Dec 18 11:50:01 ispc CRON[1970433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:50:01 ispc CRON[1970434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:50:01 ispc CRON[1970435]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 11:50:01 ispc CRON[1970436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:50:01 ispc CRON[1970437]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:50:01 ispc CRON[1970435]: pam_unix(cron:session): session closed for user www-data Dec 18 11:50:01 ispc CRON[1970434]: pam_unix(cron:session): session closed for user root Dec 18 11:50:02 ispc CRON[1970437]: pam_unix(cron:session): session closed for user getmail Dec 18 11:50:02 ispc CRON[1970436]: pam_unix(cron:session): session closed for user root Dec 18 11:50:03 ispc CRON[1970433]: pam_unix(cron:session): session closed for user root Dec 18 11:51:01 ispc CRON[1970541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:51:01 ispc CRON[1970541]: pam_unix(cron:session): session closed for user root Dec 18 11:52:01 ispc CRON[1970579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:52:02 ispc CRON[1970579]: pam_unix(cron:session): session closed for user root Dec 18 11:52:06 ispc postfix/smtpd[1970590]: sql auxprop plugin using mysql engine Dec 18 11:52:06 ispc saslauthd[1970593]: pam_mysql - SELECT returned no result. Dec 18 11:52:06 ispc saslauthd[1970593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:52:06 ispc saslauthd[1970593]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:53:01 ispc CRON[1970623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:53:03 ispc CRON[1970623]: pam_unix(cron:session): session closed for user root Dec 18 11:54:01 ispc CRON[1970659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:54:02 ispc CRON[1970659]: pam_unix(cron:session): session closed for user root Dec 18 11:54:49 ispc sshd[1970692]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 11:55:01 ispc CRON[1970698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:55:01 ispc CRON[1970699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:55:01 ispc CRON[1970700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:55:01 ispc CRON[1970701]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 11:55:01 ispc CRON[1970699]: pam_unix(cron:session): session closed for user root Dec 18 11:55:01 ispc CRON[1970701]: pam_unix(cron:session): session closed for user getmail Dec 18 11:55:02 ispc CRON[1970700]: pam_unix(cron:session): session closed for user root Dec 18 11:55:03 ispc CRON[1970698]: pam_unix(cron:session): session closed for user root Dec 18 11:55:24 ispc postfix/smtpd[1970782]: sql auxprop plugin using mysql engine Dec 18 11:55:25 ispc saslauthd[1970784]: pam_mysql - SELECT returned no result. Dec 18 11:55:25 ispc saslauthd[1970784]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:55:25 ispc saslauthd[1970784]: do_auth : auth failure: [user=ssadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:56:01 ispc CRON[1970808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:56:02 ispc CRON[1970808]: pam_unix(cron:session): session closed for user root Dec 18 11:57:01 ispc CRON[1970845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:57:02 ispc CRON[1970845]: pam_unix(cron:session): session closed for user root Dec 18 11:58:01 ispc CRON[1970888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:58:02 ispc CRON[1970888]: pam_unix(cron:session): session closed for user root Dec 18 11:58:41 ispc postfix/smtpd[1970913]: sql auxprop plugin using mysql engine Dec 18 11:58:42 ispc saslauthd[1970915]: pam_mysql - SELECT returned no result. Dec 18 11:58:42 ispc saslauthd[1970915]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 11:58:42 ispc saslauthd[1970915]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 11:59:01 ispc CRON[1970924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 11:59:02 ispc CRON[1970924]: pam_unix(cron:session): session closed for user root Dec 18 11:59:10 ispc sshd[1970939]: Invalid user ziplines from 51.91.247.10 Dec 18 12:00:01 ispc CRON[1970963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:00:01 ispc CRON[1970962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:00:01 ispc CRON[1970964]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:00:01 ispc CRON[1970965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:00:01 ispc CRON[1970966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:00:01 ispc CRON[1970967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:00:01 ispc CRON[1970968]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:00:01 ispc CRON[1970963]: pam_unix(cron:session): session closed for user root Dec 18 12:00:01 ispc CRON[1970964]: pam_unix(cron:session): session closed for user www-data Dec 18 12:00:01 ispc CRON[1970968]: pam_unix(cron:session): session closed for user getmail Dec 18 12:00:01 ispc CRON[1970966]: pam_unix(cron:session): session closed for user root Dec 18 12:00:01 ispc CRON[1970967]: pam_unix(cron:session): session closed for user root Dec 18 12:00:02 ispc CRON[1970965]: pam_unix(cron:session): session closed for user root Dec 18 12:00:03 ispc CRON[1970962]: pam_unix(cron:session): session closed for user root Dec 18 12:00:14 ispc sshd[1971126]: Invalid user blceu from 27.254.144.183 Dec 18 12:01:01 ispc CRON[1971150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:01:01 ispc CRON[1971150]: pam_unix(cron:session): session closed for user root Dec 18 12:01:20 ispc sshd[1971170]: Invalid user martof from 211.110.229.128 Dec 18 12:01:24 ispc postfix/smtpd[1971174]: sql auxprop plugin using mysql engine Dec 18 12:01:24 ispc CRON[1970015]: pam_unix(cron:session): session closed for user root Dec 18 12:02:01 ispc CRON[1971180]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 12:02:01 ispc CRON[1971181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:02:02 ispc CRON[1971181]: pam_unix(cron:session): session closed for user root Dec 18 12:03:01 ispc CRON[1971966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:03:02 ispc CRON[1971966]: pam_unix(cron:session): session closed for user root Dec 18 12:03:42 ispc CRON[1971180]: pam_unix(cron:session): session closed for user logcheck Dec 18 12:03:56 ispc postfix/smtpd[1972234]: sql auxprop plugin using mysql engine Dec 18 12:04:01 ispc CRON[1972238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:04:02 ispc CRON[1972238]: pam_unix(cron:session): session closed for user root Dec 18 12:05:01 ispc CRON[1972255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:05:01 ispc CRON[1972256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:05:01 ispc CRON[1972257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:05:01 ispc CRON[1972258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:05:01 ispc CRON[1972259]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:05:01 ispc CRON[1972257]: pam_unix(cron:session): session closed for user root Dec 18 12:05:01 ispc CRON[1972259]: pam_unix(cron:session): session closed for user getmail Dec 18 12:05:03 ispc CRON[1972256]: pam_unix(cron:session): session closed for user root Dec 18 12:05:04 ispc CRON[1972255]: pam_unix(cron:session): session closed for user root Dec 18 12:05:10 ispc postfix/smtpd[1972370]: sql auxprop plugin using mysql engine Dec 18 12:05:12 ispc saslauthd[1972373]: pam_mysql - SELECT returned no result. Dec 18 12:05:12 ispc saslauthd[1972373]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:05:12 ispc saslauthd[1972373]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:05:20 ispc saslauthd[1972374]: pam_mysql - SELECT returned no result. Dec 18 12:05:20 ispc saslauthd[1972374]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:05:20 ispc saslauthd[1972374]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 18 12:05:38 ispc CRON[1972258]: pam_unix(cron:session): session closed for user root Dec 18 12:05:50 ispc saslauthd[1972376]: pam_mysql - SELECT returned no result. Dec 18 12:05:50 ispc saslauthd[1972376]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:05:50 ispc saslauthd[1972376]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:06:01 ispc CRON[1972377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:07:01 ispc CRON[1972415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:07:02 ispc CRON[1972415]: pam_unix(cron:session): session closed for user root Dec 18 12:07:40 ispc sshd[1972448]: Invalid user martof from 185.208.181.153 Dec 18 12:08:01 ispc CRON[1972467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:08:02 ispc CRON[1972467]: pam_unix(cron:session): session closed for user root Dec 18 12:09:01 ispc CRON[1972504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:09:01 ispc CRON[1972505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:09:01 ispc CRON[1972504]: pam_unix(cron:session): session closed for user root Dec 18 12:09:02 ispc CRON[1972505]: pam_unix(cron:session): session closed for user root Dec 18 12:10:01 ispc CRON[1972553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:10:01 ispc CRON[1972554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:10:01 ispc CRON[1972555]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:10:01 ispc CRON[1972556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:10:01 ispc CRON[1972557]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:10:01 ispc CRON[1972555]: pam_unix(cron:session): session closed for user www-data Dec 18 12:10:01 ispc CRON[1972554]: pam_unix(cron:session): session closed for user root Dec 18 12:10:01 ispc CRON[1972557]: pam_unix(cron:session): session closed for user getmail Dec 18 12:10:01 ispc CRON[1972556]: pam_unix(cron:session): session closed for user root Dec 18 12:10:02 ispc CRON[1972553]: pam_unix(cron:session): session closed for user root Dec 18 12:10:36 ispc postfix/smtpd[1972646]: sql auxprop plugin using mysql engine Dec 18 12:10:37 ispc saslauthd[1972649]: pam_mysql - SELECT returned no result. Dec 18 12:10:37 ispc saslauthd[1972649]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:10:37 ispc saslauthd[1972649]: do_auth : auth failure: [user=ssladmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:11:01 ispc CRON[1972662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:11:02 ispc CRON[1972662]: pam_unix(cron:session): session closed for user root Dec 18 12:11:45 ispc saslauthd[1972690]: pam_mysql - SELECT returned no result. Dec 18 12:11:45 ispc saslauthd[1972690]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:11:45 ispc saslauthd[1972690]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:12:01 ispc CRON[1972696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:12:02 ispc CRON[1972696]: pam_unix(cron:session): session closed for user root Dec 18 12:12:06 ispc sshd[1972711]: Invalid user martof from 51.159.91.86 Dec 18 12:12:08 ispc sshd[1972713]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 12:12:08 ispc sshd[1972713]: Invalid user ziplines from 103.28.37.227 Dec 18 12:12:50 ispc sshd[1972732]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 12:13:01 ispc CRON[1972748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:13:02 ispc CRON[1972748]: pam_unix(cron:session): session closed for user root Dec 18 12:14:01 ispc CRON[1972786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:14:02 ispc CRON[1972786]: pam_unix(cron:session): session closed for user root Dec 18 12:14:21 ispc postfix/smtpd[1972808]: sql auxprop plugin using mysql engine Dec 18 12:15:01 ispc CRON[1972828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:15:01 ispc CRON[1972829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:15:01 ispc CRON[1972830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:15:01 ispc CRON[1972831]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:15:01 ispc CRON[1972829]: pam_unix(cron:session): session closed for user root Dec 18 12:15:01 ispc CRON[1972831]: pam_unix(cron:session): session closed for user getmail Dec 18 12:15:02 ispc CRON[1972830]: pam_unix(cron:session): session closed for user root Dec 18 12:15:02 ispc CRON[1972828]: pam_unix(cron:session): session closed for user root Dec 18 12:16:01 ispc CRON[1972934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:16:02 ispc CRON[1972934]: pam_unix(cron:session): session closed for user root Dec 18 12:17:01 ispc CRON[1972976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:17:01 ispc CRON[1972976]: pam_unix(cron:session): session closed for user root Dec 18 12:18:01 ispc CRON[1973023]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 12:18:01 ispc CRON[1973024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:18:02 ispc CRON[1973024]: pam_unix(cron:session): session closed for user root Dec 18 12:18:08 ispc CRON[1973023]: pam_unix(cron:session): session closed for user amavis Dec 18 12:18:11 ispc postfix/smtpd[1973051]: sql auxprop plugin using mysql engine Dec 18 12:18:19 ispc postfix/smtpd[1973061]: sql auxprop plugin using mysql engine Dec 18 12:18:19 ispc saslauthd[1973065]: pam_mysql - SELECT returned no result. Dec 18 12:18:19 ispc saslauthd[1973065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:18:19 ispc saslauthd[1973065]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:19:01 ispc CRON[1973086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:19:01 ispc CRON[1973086]: pam_unix(cron:session): session closed for user root Dec 18 12:20:01 ispc CRON[1973134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:20:01 ispc CRON[1973135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:20:01 ispc CRON[1973136]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:20:01 ispc CRON[1973137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:20:01 ispc CRON[1973138]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:20:01 ispc CRON[1973136]: pam_unix(cron:session): session closed for user www-data Dec 18 12:20:01 ispc CRON[1973135]: pam_unix(cron:session): session closed for user root Dec 18 12:20:02 ispc CRON[1973138]: pam_unix(cron:session): session closed for user getmail Dec 18 12:20:02 ispc CRON[1973137]: pam_unix(cron:session): session closed for user root Dec 18 12:20:03 ispc CRON[1973134]: pam_unix(cron:session): session closed for user root Dec 18 12:21:01 ispc CRON[1973244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:21:01 ispc CRON[1973245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:21:02 ispc CRON[1973244]: pam_unix(cron:session): session closed for user root Dec 18 12:21:03 ispc CRON[1973245]: pam_unix(cron:session): session closed for user root Dec 18 12:22:01 ispc CRON[1973289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:22:02 ispc CRON[1973289]: pam_unix(cron:session): session closed for user root Dec 18 12:23:01 ispc CRON[1973337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:23:03 ispc CRON[1973337]: pam_unix(cron:session): session closed for user root Dec 18 12:24:01 ispc CRON[1973372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:24:02 ispc CRON[1973372]: pam_unix(cron:session): session closed for user root Dec 18 12:24:16 ispc sshd[1973394]: Did not receive identification string from 45.140.17.97 Dec 18 12:24:16 ispc postfix/smtpd[1973395]: sql auxprop plugin using mysql engine Dec 18 12:24:50 ispc saslauthd[1973413]: pam_mysql - SELECT returned no result. Dec 18 12:24:50 ispc saslauthd[1973413]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:24:50 ispc saslauthd[1973413]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:25:01 ispc CRON[1973420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:25:01 ispc CRON[1973421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:25:01 ispc CRON[1973422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:25:01 ispc CRON[1973423]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:25:01 ispc CRON[1973421]: pam_unix(cron:session): session closed for user root Dec 18 12:25:01 ispc CRON[1973423]: pam_unix(cron:session): session closed for user getmail Dec 18 12:25:02 ispc CRON[1973422]: pam_unix(cron:session): session closed for user root Dec 18 12:25:03 ispc CRON[1973420]: pam_unix(cron:session): session closed for user root Dec 18 12:25:07 ispc sshd[1973500]: Invalid user martof from 185.181.182.252 Dec 18 12:25:41 ispc saslauthd[1973517]: pam_mysql - SELECT returned no result. Dec 18 12:25:41 ispc saslauthd[1973517]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:25:41 ispc saslauthd[1973517]: do_auth : auth failure: [user=ssp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:26:01 ispc CRON[1973526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:26:01 ispc CRON[1973526]: pam_unix(cron:session): session closed for user root Dec 18 12:26:24 ispc CRON[1972377]: pam_unix(cron:session): session closed for user root Dec 18 12:26:46 ispc saslauthd[1973552]: pam_mysql - SELECT returned no result. Dec 18 12:26:46 ispc saslauthd[1973552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:26:46 ispc saslauthd[1973552]: do_auth : auth failure: [user=control] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:27:01 ispc CRON[1973555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:27:02 ispc CRON[1973555]: pam_unix(cron:session): session closed for user root Dec 18 12:27:05 ispc sshd[1973567]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 12:28:01 ispc CRON[1973581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:28:02 ispc CRON[1973581]: pam_unix(cron:session): session closed for user root Dec 18 12:28:43 ispc saslauthd[1973597]: pam_mysql - SELECT returned no result. Dec 18 12:28:43 ispc saslauthd[1973597]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:28:43 ispc saslauthd[1973597]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:28:46 ispc saslauthd[1973600]: DEBUG: auth_pam: pam_authenticate failed: Authentication failure Dec 18 12:28:46 ispc saslauthd[1973600]: do_auth : auth failure: [user=info@tshombeknife.com] [service=smtp] [realm=tshombeknife.com] [mech=pam] [reason=PAM auth error] Dec 18 12:29:01 ispc CRON[1973603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:29:02 ispc CRON[1973603]: pam_unix(cron:session): session closed for user root Dec 18 12:29:38 ispc sshd[1973617]: Did not receive identification string from 161.35.218.223 Dec 18 12:30:01 ispc CRON[1973619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:30:01 ispc CRON[1973620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:30:01 ispc CRON[1973621]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:30:01 ispc CRON[1973622]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:30:01 ispc CRON[1973623]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:30:01 ispc CRON[1973621]: pam_unix(cron:session): session closed for user www-data Dec 18 12:30:02 ispc CRON[1973620]: pam_unix(cron:session): session closed for user root Dec 18 12:30:02 ispc CRON[1973623]: pam_unix(cron:session): session closed for user getmail Dec 18 12:30:04 ispc CRON[1973619]: pam_unix(cron:session): session closed for user root Dec 18 12:30:45 ispc CRON[1973622]: pam_unix(cron:session): session closed for user root Dec 18 12:31:01 ispc CRON[1973812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:31:20 ispc saslauthd[1973830]: pam_mysql - SELECT returned no result. Dec 18 12:31:20 ispc saslauthd[1973830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:31:20 ispc saslauthd[1973830]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:32:01 ispc CRON[1973850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:32:02 ispc CRON[1973850]: pam_unix(cron:session): session closed for user root Dec 18 12:32:33 ispc postfix/smtpd[1973873]: sql auxprop plugin using mysql engine Dec 18 12:33:01 ispc CRON[1973899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:33:03 ispc CRON[1973899]: pam_unix(cron:session): session closed for user root Dec 18 12:33:07 ispc postfix/smtpd[1973914]: sql auxprop plugin using mysql engine Dec 18 12:33:07 ispc saslauthd[1973916]: pam_mysql - SELECT returned no result. Dec 18 12:33:07 ispc saslauthd[1973916]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:33:07 ispc saslauthd[1973916]: do_auth : auth failure: [user=pass@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 12:34:01 ispc CRON[1973939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:34:02 ispc CRON[1973939]: pam_unix(cron:session): session closed for user root Dec 18 12:35:01 ispc CRON[1973976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:35:01 ispc CRON[1973977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:35:01 ispc CRON[1973978]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:35:01 ispc CRON[1973979]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:35:01 ispc CRON[1973977]: pam_unix(cron:session): session closed for user root Dec 18 12:35:01 ispc CRON[1973979]: pam_unix(cron:session): session closed for user getmail Dec 18 12:35:02 ispc CRON[1973976]: pam_unix(cron:session): session closed for user root Dec 18 12:35:02 ispc CRON[1973978]: pam_unix(cron:session): session closed for user root Dec 18 12:36:01 ispc CRON[1974078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:36:02 ispc CRON[1974078]: pam_unix(cron:session): session closed for user root Dec 18 12:36:44 ispc postfix/smtpd[1974109]: sql auxprop plugin using mysql engine Dec 18 12:37:01 ispc CRON[1974121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:37:02 ispc CRON[1974121]: pam_unix(cron:session): session closed for user root Dec 18 12:38:01 ispc CRON[1974172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:38:02 ispc CRON[1974172]: pam_unix(cron:session): session closed for user root Dec 18 12:38:07 ispc postfix/smtpd[1974188]: sql auxprop plugin using mysql engine Dec 18 12:38:07 ispc saslauthd[1974190]: pam_mysql - SELECT returned no result. Dec 18 12:38:07 ispc saslauthd[1974190]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:38:07 ispc saslauthd[1974190]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:38:28 ispc sshd[1974201]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 12:38:32 ispc postfix/smtpd[1974205]: sql auxprop plugin using mysql engine Dec 18 12:39:01 ispc CRON[1974224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:39:01 ispc CRON[1974225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:39:02 ispc CRON[1974224]: pam_unix(cron:session): session closed for user root Dec 18 12:39:03 ispc CRON[1974225]: pam_unix(cron:session): session closed for user root Dec 18 12:39:57 ispc saslauthd[1974272]: pam_mysql - SELECT returned no result. Dec 18 12:39:57 ispc saslauthd[1974272]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:39:57 ispc saslauthd[1974272]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 18 12:40:01 ispc CRON[1974273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:40:01 ispc CRON[1974274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:40:01 ispc CRON[1974275]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:40:01 ispc CRON[1974276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:40:01 ispc CRON[1974277]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:40:01 ispc CRON[1974274]: pam_unix(cron:session): session closed for user root Dec 18 12:40:01 ispc CRON[1974275]: pam_unix(cron:session): session closed for user www-data Dec 18 12:40:01 ispc CRON[1974277]: pam_unix(cron:session): session closed for user getmail Dec 18 12:40:01 ispc CRON[1974276]: pam_unix(cron:session): session closed for user root Dec 18 12:40:02 ispc CRON[1974273]: pam_unix(cron:session): session closed for user root Dec 18 12:40:25 ispc postfix/smtpd[1974359]: sql auxprop plugin using mysql engine Dec 18 12:40:35 ispc saslauthd[1974365]: pam_mysql - SELECT returned no result. Dec 18 12:40:35 ispc saslauthd[1974365]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:40:35 ispc saslauthd[1974365]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:40:51 ispc postfix/smtpd[1974375]: sql auxprop plugin using mysql engine Dec 18 12:40:52 ispc saslauthd[1974377]: pam_mysql - SELECT returned no result. Dec 18 12:40:52 ispc saslauthd[1974377]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:40:52 ispc saslauthd[1974377]: do_auth : auth failure: [user=status] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:41:01 ispc CRON[1974382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:41:01 ispc CRON[1974382]: pam_unix(cron:session): session closed for user root Dec 18 12:42:01 ispc CRON[1974423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:42:02 ispc CRON[1974423]: pam_unix(cron:session): session closed for user root Dec 18 12:42:17 ispc postfix/smtpd[1974438]: sql auxprop plugin using mysql engine Dec 18 12:42:51 ispc sshd[1974465]: Invalid user ziplines from 51.159.91.86 Dec 18 12:43:01 ispc CRON[1974472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:43:02 ispc CRON[1974472]: pam_unix(cron:session): session closed for user root Dec 18 12:44:01 ispc CRON[1974509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:44:01 ispc CRON[1974509]: pam_unix(cron:session): session closed for user root Dec 18 12:45:01 ispc CRON[1974550]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:45:01 ispc CRON[1974549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:45:01 ispc CRON[1974547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:45:01 ispc CRON[1974548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:45:01 ispc CRON[1974548]: pam_unix(cron:session): session closed for user root Dec 18 12:45:01 ispc CRON[1974550]: pam_unix(cron:session): session closed for user getmail Dec 18 12:45:01 ispc CRON[1974549]: pam_unix(cron:session): session closed for user root Dec 18 12:45:01 ispc CRON[1974547]: pam_unix(cron:session): session closed for user root Dec 18 12:45:02 ispc postfix/smtpd[1974623]: sql auxprop plugin using mysql engine Dec 18 12:45:02 ispc saslauthd[1974625]: pam_mysql - SELECT returned no result. Dec 18 12:45:02 ispc saslauthd[1974625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:45:02 ispc saslauthd[1974625]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:46:01 ispc CRON[1974655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:46:02 ispc CRON[1974655]: pam_unix(cron:session): session closed for user root Dec 18 12:47:01 ispc CRON[1974687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:47:02 ispc CRON[1974687]: pam_unix(cron:session): session closed for user root Dec 18 12:47:15 ispc sshd[1974711]: Invalid user blceu from 51.159.91.86 Dec 18 12:47:47 ispc sshd[1974726]: Invalid user matlbula from 8.133.194.64 Dec 18 12:48:01 ispc CRON[1974743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:48:02 ispc CRON[1974743]: pam_unix(cron:session): session closed for user root Dec 18 12:49:01 ispc CRON[1974779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:49:02 ispc CRON[1974779]: pam_unix(cron:session): session closed for user root Dec 18 12:49:37 ispc postfix/smtpd[1974804]: sql auxprop plugin using mysql engine Dec 18 12:50:01 ispc CRON[1974821]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 12:50:01 ispc CRON[1974819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:50:01 ispc CRON[1974820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:50:01 ispc CRON[1974822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:50:01 ispc CRON[1974823]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:50:01 ispc CRON[1974820]: pam_unix(cron:session): session closed for user root Dec 18 12:50:01 ispc CRON[1974823]: pam_unix(cron:session): session closed for user getmail Dec 18 12:50:01 ispc CRON[1974821]: pam_unix(cron:session): session closed for user www-data Dec 18 12:50:01 ispc CRON[1974822]: pam_unix(cron:session): session closed for user root Dec 18 12:50:02 ispc CRON[1974819]: pam_unix(cron:session): session closed for user root Dec 18 12:50:27 ispc sshd[1974908]: Invalid user ziplines from 45.119.213.109 Dec 18 12:51:01 ispc CRON[1974929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:51:01 ispc CRON[1974929]: pam_unix(cron:session): session closed for user root Dec 18 12:51:31 ispc postfix/smtpd[1974951]: sql auxprop plugin using mysql engine Dec 18 12:51:32 ispc CRON[1973812]: pam_unix(cron:session): session closed for user root Dec 18 12:52:01 ispc CRON[1974958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:52:01 ispc CRON[1974959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:52:01 ispc CRON[1974959]: pam_unix(cron:session): session closed for user root Dec 18 12:52:14 ispc saslauthd[1974975]: pam_mysql - SELECT returned no result. Dec 18 12:52:14 ispc saslauthd[1974975]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:52:14 ispc saslauthd[1974975]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:53:01 ispc CRON[1974987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:53:02 ispc CRON[1974987]: pam_unix(cron:session): session closed for user root Dec 18 12:53:41 ispc sshd[1975001]: Invalid user martof from 45.119.213.109 Dec 18 12:54:01 ispc CRON[1975005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:54:02 ispc CRON[1975005]: pam_unix(cron:session): session closed for user root Dec 18 12:55:01 ispc CRON[1975026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:55:01 ispc CRON[1975024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:55:01 ispc CRON[1975025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:55:01 ispc CRON[1975027]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 12:55:01 ispc CRON[1975025]: pam_unix(cron:session): session closed for user root Dec 18 12:55:01 ispc CRON[1975027]: pam_unix(cron:session): session closed for user getmail Dec 18 12:55:01 ispc CRON[1975024]: pam_unix(cron:session): session closed for user root Dec 18 12:55:18 ispc CRON[1974958]: pam_unix(cron:session): session closed for user root Dec 18 12:55:42 ispc CRON[1975026]: pam_unix(cron:session): session closed for user root Dec 18 12:55:58 ispc saslauthd[1975136]: pam_mysql - SELECT returned no result. Dec 18 12:55:58 ispc saslauthd[1975136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:55:58 ispc saslauthd[1975136]: do_auth : auth failure: [user=storwatch] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:56:01 ispc CRON[1975137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:56:38 ispc sshd[1975164]: Invalid user matlbula from 175.125.95.234 Dec 18 12:57:01 ispc CRON[1975175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:57:02 ispc CRON[1975175]: pam_unix(cron:session): session closed for user root Dec 18 12:57:29 ispc sshd[1975200]: Invalid user martof from 175.125.92.77 Dec 18 12:58:01 ispc CRON[1975227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:58:01 ispc CRON[1975227]: pam_unix(cron:session): session closed for user root Dec 18 12:59:01 ispc postfix/smtpd[1975265]: sql auxprop plugin using mysql engine Dec 18 12:59:01 ispc CRON[1975267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 12:59:02 ispc saslauthd[1975274]: pam_mysql - SELECT returned no result. Dec 18 12:59:02 ispc saslauthd[1975274]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 12:59:02 ispc saslauthd[1975274]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 12:59:02 ispc CRON[1975267]: pam_unix(cron:session): session closed for user root Dec 18 13:00:01 ispc CRON[1975307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:00:01 ispc CRON[1975310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:00:01 ispc CRON[1975311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:00:01 ispc CRON[1975308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:00:01 ispc CRON[1975309]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:00:01 ispc CRON[1975312]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:00:01 ispc CRON[1975309]: pam_unix(cron:session): session closed for user www-data Dec 18 13:00:01 ispc CRON[1975308]: pam_unix(cron:session): session closed for user root Dec 18 13:00:01 ispc CRON[1975312]: pam_unix(cron:session): session closed for user getmail Dec 18 13:00:02 ispc CRON[1975311]: pam_unix(cron:session): session closed for user root Dec 18 13:00:02 ispc CRON[1975310]: pam_unix(cron:session): session closed for user root Dec 18 13:00:02 ispc CRON[1975307]: pam_unix(cron:session): session closed for user root Dec 18 13:00:33 ispc sshd[1975479]: Invalid user ziplines from 43.135.148.156 Dec 18 13:01:01 ispc CRON[1975494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:01:02 ispc CRON[1975494]: pam_unix(cron:session): session closed for user root Dec 18 13:02:01 ispc CRON[1975533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:02:01 ispc CRON[1975532]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 13:02:01 ispc CRON[1975533]: pam_unix(cron:session): session closed for user root Dec 18 13:03:01 ispc CRON[1976416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:03:02 ispc CRON[1976416]: pam_unix(cron:session): session closed for user root Dec 18 13:03:26 ispc sshd[1976550]: Invalid user blceu from 43.135.148.156 Dec 18 13:03:30 ispc CRON[1975532]: pam_unix(cron:session): session closed for user logcheck Dec 18 13:03:44 ispc postfix/smtpd[1976628]: sql auxprop plugin using mysql engine Dec 18 13:04:01 ispc CRON[1976644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:04:03 ispc CRON[1976644]: pam_unix(cron:session): session closed for user root Dec 18 13:04:38 ispc sshd[1976670]: Invalid user ziplines from 49.247.24.89 Dec 18 13:05:01 ispc CRON[1976687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:05:01 ispc CRON[1976690]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:05:01 ispc CRON[1976689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:05:01 ispc CRON[1976688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:05:01 ispc CRON[1976688]: pam_unix(cron:session): session closed for user root Dec 18 13:05:01 ispc CRON[1976690]: pam_unix(cron:session): session closed for user getmail Dec 18 13:05:01 ispc CRON[1976689]: pam_unix(cron:session): session closed for user root Dec 18 13:05:02 ispc CRON[1976687]: pam_unix(cron:session): session closed for user root Dec 18 13:05:44 ispc postfix/smtpd[1976783]: sql auxprop plugin using mysql engine Dec 18 13:05:44 ispc saslauthd[1976786]: pam_mysql - SELECT returned no result. Dec 18 13:05:44 ispc saslauthd[1976786]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:05:44 ispc saslauthd[1976786]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:05:45 ispc sshd[1976781]: Invalid user ziplines from 211.110.229.128 Dec 18 13:06:01 ispc CRON[1976798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:06:01 ispc CRON[1976798]: pam_unix(cron:session): session closed for user root Dec 18 13:07:01 ispc CRON[1976838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:07:02 ispc CRON[1976838]: pam_unix(cron:session): session closed for user root Dec 18 13:08:01 ispc CRON[1976882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:08:01 ispc CRON[1976882]: pam_unix(cron:session): session closed for user root Dec 18 13:09:01 ispc CRON[1976920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:09:01 ispc CRON[1976919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:09:01 ispc CRON[1976919]: pam_unix(cron:session): session closed for user root Dec 18 13:09:02 ispc CRON[1976920]: pam_unix(cron:session): session closed for user root Dec 18 13:10:01 ispc CRON[1976969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:10:01 ispc CRON[1976970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:10:01 ispc CRON[1976971]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:10:01 ispc CRON[1976972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:10:01 ispc CRON[1976973]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:10:01 ispc CRON[1976970]: pam_unix(cron:session): session closed for user root Dec 18 13:10:01 ispc CRON[1976971]: pam_unix(cron:session): session closed for user www-data Dec 18 13:10:01 ispc CRON[1976973]: pam_unix(cron:session): session closed for user getmail Dec 18 13:10:01 ispc CRON[1976972]: pam_unix(cron:session): session closed for user root Dec 18 13:10:02 ispc CRON[1976969]: pam_unix(cron:session): session closed for user root Dec 18 13:11:01 ispc CRON[1977075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:11:01 ispc CRON[1977075]: pam_unix(cron:session): session closed for user root Dec 18 13:11:03 ispc postfix/smtpd[1977092]: sql auxprop plugin using mysql engine Dec 18 13:11:05 ispc saslauthd[1977095]: pam_mysql - SELECT returned no result. Dec 18 13:11:05 ispc saslauthd[1977095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:11:05 ispc saslauthd[1977095]: do_auth : auth failure: [user=su] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:12:01 ispc CRON[1977123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:12:02 ispc CRON[1977123]: pam_unix(cron:session): session closed for user root Dec 18 13:12:20 ispc saslauthd[1977141]: pam_mysql - SELECT returned no result. Dec 18 13:12:20 ispc saslauthd[1977141]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:12:20 ispc saslauthd[1977141]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:12:25 ispc sshd[1977146]: Invalid user ziplines from 185.208.181.152 Dec 18 13:12:27 ispc sshd[1977148]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:12:27 ispc sshd[1977148]: Invalid user martof from 157.245.115.125 Dec 18 13:13:01 ispc CRON[1977171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:13:02 ispc CRON[1977171]: pam_unix(cron:session): session closed for user root Dec 18 13:14:01 ispc CRON[1977212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:14:02 ispc CRON[1977212]: pam_unix(cron:session): session closed for user root Dec 18 13:15:01 ispc CRON[1977250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:15:01 ispc CRON[1977251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:15:01 ispc CRON[1977252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:15:01 ispc CRON[1977253]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:15:01 ispc CRON[1977251]: pam_unix(cron:session): session closed for user root Dec 18 13:15:01 ispc CRON[1977253]: pam_unix(cron:session): session closed for user getmail Dec 18 13:15:01 ispc CRON[1977252]: pam_unix(cron:session): session closed for user root Dec 18 13:15:01 ispc CRON[1977250]: pam_unix(cron:session): session closed for user root Dec 18 13:16:01 ispc CRON[1977353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:16:02 ispc CRON[1977353]: pam_unix(cron:session): session closed for user root Dec 18 13:16:27 ispc postfix/smtpd[1977377]: sql auxprop plugin using mysql engine Dec 18 13:16:27 ispc CRON[1975137]: pam_unix(cron:session): session closed for user root Dec 18 13:17:01 ispc CRON[1977381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:17:02 ispc CRON[1977381]: pam_unix(cron:session): session closed for user root Dec 18 13:18:01 ispc CRON[1977408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:18:01 ispc CRON[1977407]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 18 13:18:02 ispc CRON[1977408]: pam_unix(cron:session): session closed for user root Dec 18 13:18:04 ispc CRON[1977407]: pam_unix(cron:session): session closed for user web324 Dec 18 13:18:49 ispc saslauthd[1977423]: pam_mysql - SELECT returned no result. Dec 18 13:18:49 ispc saslauthd[1977423]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:18:49 ispc saslauthd[1977423]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:19:01 ispc CRON[1977425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:19:02 ispc CRON[1977425]: pam_unix(cron:session): session closed for user root Dec 18 13:20:01 ispc CRON[1977447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:20:01 ispc CRON[1977446]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:20:01 ispc CRON[1977444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:20:01 ispc CRON[1977445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:20:01 ispc CRON[1977448]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:20:01 ispc CRON[1977446]: pam_unix(cron:session): session closed for user www-data Dec 18 13:20:01 ispc CRON[1977445]: pam_unix(cron:session): session closed for user root Dec 18 13:20:01 ispc CRON[1977448]: pam_unix(cron:session): session closed for user getmail Dec 18 13:20:02 ispc CRON[1977444]: pam_unix(cron:session): session closed for user root Dec 18 13:20:38 ispc CRON[1977447]: pam_unix(cron:session): session closed for user root Dec 18 13:21:01 ispc CRON[1977562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:21:01 ispc CRON[1977561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:21:01 ispc CRON[1977561]: pam_unix(cron:session): session closed for user root Dec 18 13:21:23 ispc sshd[1977587]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:21:51 ispc sshd[1977598]: Invalid user blceu from 175.125.92.77 Dec 18 13:22:02 ispc CRON[1977604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:22:02 ispc CRON[1977604]: pam_unix(cron:session): session closed for user root Dec 18 13:22:35 ispc postfix/smtpd[1977633]: sql auxprop plugin using mysql engine Dec 18 13:22:35 ispc saslauthd[1977635]: pam_mysql - SELECT returned no result. Dec 18 13:22:35 ispc saslauthd[1977635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:22:35 ispc saslauthd[1977635]: do_auth : auth failure: [user=noreply@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 13:22:47 ispc sshd[1977642]: Invalid user ziplines from 185.208.181.153 Dec 18 13:22:49 ispc sshd[1977644]: Invalid user ziplines from 175.125.92.77 Dec 18 13:23:01 ispc CRON[1977659]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:23:02 ispc CRON[1977659]: pam_unix(cron:session): session closed for user root Dec 18 13:23:17 ispc postfix/smtpd[1977681]: sql auxprop plugin using mysql engine Dec 18 13:24:01 ispc CRON[1977701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:24:01 ispc CRON[1977701]: pam_unix(cron:session): session closed for user root Dec 18 13:24:53 ispc postfix/smtpd[1977732]: sql auxprop plugin using mysql engine Dec 18 13:25:01 ispc CRON[1977741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:25:01 ispc CRON[1977742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:25:01 ispc CRON[1977743]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:25:01 ispc CRON[1977740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:25:02 ispc CRON[1977741]: pam_unix(cron:session): session closed for user root Dec 18 13:25:02 ispc CRON[1977743]: pam_unix(cron:session): session closed for user getmail Dec 18 13:25:02 ispc CRON[1977742]: pam_unix(cron:session): session closed for user root Dec 18 13:25:03 ispc CRON[1977740]: pam_unix(cron:session): session closed for user root Dec 18 13:25:14 ispc saslauthd[1977820]: pam_mysql - SELECT returned no result. Dec 18 13:25:14 ispc saslauthd[1977820]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:25:14 ispc saslauthd[1977820]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:25:58 ispc saslauthd[1977846]: pam_mysql - SELECT returned no result. Dec 18 13:25:58 ispc saslauthd[1977846]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:25:58 ispc saslauthd[1977846]: do_auth : auth failure: [user=super] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:26:01 ispc CRON[1977847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:26:01 ispc CRON[1977847]: pam_unix(cron:session): session closed for user root Dec 18 13:26:04 ispc sshd[1977858]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:26:04 ispc sshd[1977858]: Invalid user admin from 41.203.222.206 Dec 18 13:26:06 ispc sshd[1977860]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:26:06 ispc sshd[1977860]: Invalid user admin from 41.203.222.206 Dec 18 13:27:01 ispc CRON[1977888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:27:03 ispc CRON[1977888]: pam_unix(cron:session): session closed for user root Dec 18 13:27:51 ispc sshd[1977924]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:28:01 ispc CRON[1977934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:28:01 ispc CRON[1977934]: pam_unix(cron:session): session closed for user root Dec 18 13:28:14 ispc sshd[1977953]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:28:14 ispc sshd[1977953]: Invalid user admin from 41.203.222.206 Dec 18 13:29:01 ispc CRON[1977973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:29:02 ispc CRON[1977973]: pam_unix(cron:session): session closed for user root Dec 18 13:29:07 ispc sshd[1977988]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:29:07 ispc sshd[1977988]: Invalid user admin from 41.203.222.206 Dec 18 13:30:01 ispc CRON[1978018]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:30:01 ispc CRON[1978014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:30:01 ispc CRON[1978017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:30:01 ispc CRON[1978015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:30:01 ispc CRON[1978016]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:30:01 ispc CRON[1978015]: pam_unix(cron:session): session closed for user root Dec 18 13:30:01 ispc CRON[1978016]: pam_unix(cron:session): session closed for user www-data Dec 18 13:30:01 ispc CRON[1978018]: pam_unix(cron:session): session closed for user getmail Dec 18 13:30:01 ispc CRON[1978017]: pam_unix(cron:session): session closed for user root Dec 18 13:30:02 ispc CRON[1978014]: pam_unix(cron:session): session closed for user root Dec 18 13:30:10 ispc sshd[1978097]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:30:10 ispc sshd[1978097]: Invalid user admin from 41.203.222.206 Dec 18 13:31:01 ispc CRON[1978120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:31:01 ispc CRON[1978120]: pam_unix(cron:session): session closed for user root Dec 18 13:31:55 ispc postfix/smtpd[1978159]: sql auxprop plugin using mysql engine Dec 18 13:31:55 ispc saslauthd[1978162]: pam_mysql - SELECT returned no result. Dec 18 13:31:55 ispc saslauthd[1978162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:31:55 ispc saslauthd[1978162]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:32:01 ispc CRON[1978163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:32:01 ispc CRON[1978163]: pam_unix(cron:session): session closed for user root Dec 18 13:32:11 ispc sshd[1978178]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:33:01 ispc CRON[1978211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:33:02 ispc CRON[1978211]: pam_unix(cron:session): session closed for user root Dec 18 13:34:01 ispc CRON[1978249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:34:01 ispc CRON[1978249]: pam_unix(cron:session): session closed for user root Dec 18 13:34:15 ispc sshd[1978239]: Invalid user martof from 161.35.218.223 Dec 18 13:34:39 ispc sshd[1978282]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:34:39 ispc sshd[1978282]: Invalid user admin from 41.203.222.206 Dec 18 13:35:01 ispc CRON[1978300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:35:01 ispc CRON[1978299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:35:01 ispc CRON[1978301]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:35:01 ispc CRON[1978302]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:35:01 ispc CRON[1978300]: pam_unix(cron:session): session closed for user root Dec 18 13:35:01 ispc CRON[1978302]: pam_unix(cron:session): session closed for user getmail Dec 18 13:35:02 ispc CRON[1978301]: pam_unix(cron:session): session closed for user root Dec 18 13:35:02 ispc CRON[1978299]: pam_unix(cron:session): session closed for user root Dec 18 13:36:01 ispc CRON[1978403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:36:02 ispc CRON[1978403]: pam_unix(cron:session): session closed for user root Dec 18 13:36:59 ispc postfix/smtpd[1978441]: sql auxprop plugin using mysql engine Dec 18 13:37:01 ispc CRON[1978443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:37:02 ispc CRON[1978443]: pam_unix(cron:session): session closed for user root Dec 18 13:37:09 ispc saslauthd[1978460]: pam_mysql - SELECT returned no result. Dec 18 13:37:09 ispc saslauthd[1978460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:37:09 ispc saslauthd[1978460]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 18 13:37:25 ispc saslauthd[1978465]: pam_mysql - SELECT returned no result. Dec 18 13:37:25 ispc saslauthd[1978465]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:37:25 ispc saslauthd[1978465]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:38:01 ispc CRON[1978494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:38:01 ispc CRON[1978494]: pam_unix(cron:session): session closed for user root Dec 18 13:38:07 ispc sshd[1978505]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:38:09 ispc sshd[1978511]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:38:22 ispc sshd[1978521]: Invalid user klape from 36.50.177.171 Dec 18 13:38:24 ispc sshd[1978523]: Invalid user ubuntu from 36.50.177.171 Dec 18 13:38:36 ispc postfix/smtpd[1978529]: sql auxprop plugin using mysql engine Dec 18 13:38:36 ispc saslauthd[1978531]: pam_mysql - SELECT returned no result. Dec 18 13:38:36 ispc saslauthd[1978531]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:38:36 ispc saslauthd[1978531]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:39:01 ispc CRON[1978547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:39:01 ispc CRON[1978546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:39:01 ispc CRON[1978546]: pam_unix(cron:session): session closed for user root Dec 18 13:39:02 ispc CRON[1978547]: pam_unix(cron:session): session closed for user root Dec 18 13:39:47 ispc sshd[1978587]: Invalid user blceu from 103.110.84.105 Dec 18 13:40:01 ispc CRON[1978598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:40:01 ispc CRON[1978599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:40:01 ispc CRON[1978600]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:40:01 ispc CRON[1978601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:40:01 ispc CRON[1978602]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:40:01 ispc CRON[1978600]: pam_unix(cron:session): session closed for user www-data Dec 18 13:40:01 ispc CRON[1978599]: pam_unix(cron:session): session closed for user root Dec 18 13:40:01 ispc CRON[1978602]: pam_unix(cron:session): session closed for user getmail Dec 18 13:40:02 ispc CRON[1978601]: pam_unix(cron:session): session closed for user root Dec 18 13:40:02 ispc CRON[1978598]: pam_unix(cron:session): session closed for user root Dec 18 13:40:09 ispc sshd[1978676]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:40:37 ispc postfix/smtpd[1978692]: sql auxprop plugin using mysql engine Dec 18 13:40:39 ispc saslauthd[1978694]: pam_mysql - SELECT returned no result. Dec 18 13:40:39 ispc saslauthd[1978694]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:40:39 ispc saslauthd[1978694]: do_auth : auth failure: [user=superdba] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:40:58 ispc sshd[1978704]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:41:01 ispc CRON[1978710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:41:02 ispc CRON[1978710]: pam_unix(cron:session): session closed for user root Dec 18 13:41:30 ispc CRON[1977562]: pam_unix(cron:session): session closed for user root Dec 18 13:41:50 ispc saslauthd[1978735]: pam_mysql - SELECT returned no result. Dec 18 13:41:50 ispc saslauthd[1978735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:41:50 ispc saslauthd[1978735]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:42:00 ispc sshd[1978737]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:42:01 ispc CRON[1978739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:42:02 ispc CRON[1978739]: pam_unix(cron:session): session closed for user root Dec 18 13:43:01 ispc CRON[1978762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:43:02 ispc CRON[1978762]: pam_unix(cron:session): session closed for user root Dec 18 13:44:01 ispc CRON[1978777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:44:02 ispc CRON[1978777]: pam_unix(cron:session): session closed for user root Dec 18 13:44:45 ispc sshd[1978792]: Invalid user blceu from 211.110.229.128 Dec 18 13:45:01 ispc CRON[1978802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:45:01 ispc CRON[1978804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:45:01 ispc CRON[1978805]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:45:01 ispc CRON[1978803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:45:01 ispc CRON[1978803]: pam_unix(cron:session): session closed for user root Dec 18 13:45:01 ispc CRON[1978805]: pam_unix(cron:session): session closed for user getmail Dec 18 13:45:02 ispc CRON[1978802]: pam_unix(cron:session): session closed for user root Dec 18 13:45:05 ispc saslauthd[1978936]: pam_mysql - SELECT returned no result. Dec 18 13:45:05 ispc saslauthd[1978936]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:45:05 ispc saslauthd[1978936]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:45:35 ispc CRON[1978804]: pam_unix(cron:session): session closed for user root Dec 18 13:45:37 ispc sshd[1978992]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:46:01 ispc CRON[1978997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:46:03 ispc sshd[1979009]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:47:01 ispc CRON[1979035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:47:02 ispc CRON[1979035]: pam_unix(cron:session): session closed for user root Dec 18 13:48:01 ispc CRON[1979082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:48:02 ispc CRON[1979082]: pam_unix(cron:session): session closed for user root Dec 18 13:48:12 ispc sshd[1979099]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:49:01 ispc CRON[1979122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:49:01 ispc CRON[1979122]: pam_unix(cron:session): session closed for user root Dec 18 13:50:01 ispc CRON[1979162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:50:01 ispc CRON[1979163]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 13:50:01 ispc CRON[1979161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:50:01 ispc CRON[1979164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:50:01 ispc CRON[1979165]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:50:01 ispc CRON[1979162]: pam_unix(cron:session): session closed for user root Dec 18 13:50:01 ispc CRON[1979163]: pam_unix(cron:session): session closed for user www-data Dec 18 13:50:01 ispc CRON[1979165]: pam_unix(cron:session): session closed for user getmail Dec 18 13:50:02 ispc CRON[1979164]: pam_unix(cron:session): session closed for user root Dec 18 13:50:02 ispc CRON[1979161]: pam_unix(cron:session): session closed for user root Dec 18 13:50:15 ispc sshd[1979243]: Invalid user from 65.49.1.117 Dec 18 13:50:43 ispc sshd[1979258]: Invalid user blceu from 202.46.29.79 Dec 18 13:50:58 ispc sshd[1979269]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:51:01 ispc CRON[1979271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:51:02 ispc CRON[1979271]: pam_unix(cron:session): session closed for user root Dec 18 13:51:35 ispc postfix/smtpd[1979295]: sql auxprop plugin using mysql engine Dec 18 13:51:36 ispc saslauthd[1979302]: pam_mysql - SELECT returned no result. Dec 18 13:51:36 ispc saslauthd[1979302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:51:36 ispc saslauthd[1979302]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:52:01 ispc CRON[1979312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:52:01 ispc CRON[1979312]: pam_unix(cron:session): session closed for user root Dec 18 13:53:01 ispc CRON[1979362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:53:02 ispc CRON[1979362]: pam_unix(cron:session): session closed for user root Dec 18 13:53:44 ispc sshd[1979392]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 13:54:01 ispc CRON[1979403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:54:02 ispc CRON[1979403]: pam_unix(cron:session): session closed for user root Dec 18 13:54:30 ispc sshd[1979429]: Invalid user martof from 27.254.144.183 Dec 18 13:55:01 ispc CRON[1979444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:55:01 ispc CRON[1979445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:55:01 ispc CRON[1979446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:55:01 ispc CRON[1979447]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 13:55:01 ispc CRON[1979445]: pam_unix(cron:session): session closed for user root Dec 18 13:55:01 ispc CRON[1979447]: pam_unix(cron:session): session closed for user getmail Dec 18 13:55:01 ispc CRON[1979446]: pam_unix(cron:session): session closed for user root Dec 18 13:55:01 ispc CRON[1979444]: pam_unix(cron:session): session closed for user root Dec 18 13:55:44 ispc sshd[1979538]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 20.102.92.213 Dec 18 13:55:50 ispc postfix/smtpd[1979544]: sql auxprop plugin using mysql engine Dec 18 13:55:52 ispc saslauthd[1979547]: pam_mysql - SELECT returned no result. Dec 18 13:55:52 ispc saslauthd[1979547]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:55:52 ispc saslauthd[1979547]: do_auth : auth failure: [user=superuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:56:01 ispc CRON[1979553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:56:02 ispc CRON[1979553]: pam_unix(cron:session): session closed for user root Dec 18 13:57:01 ispc CRON[1979587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:57:01 ispc CRON[1979587]: pam_unix(cron:session): session closed for user root Dec 18 13:58:00 ispc postfix/smtpd[1979633]: sql auxprop plugin using mysql engine Dec 18 13:58:01 ispc saslauthd[1979635]: pam_mysql - SELECT returned no result. Dec 18 13:58:01 ispc saslauthd[1979635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 13:58:01 ispc saslauthd[1979635]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 13:58:01 ispc CRON[1979636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:58:02 ispc CRON[1979636]: pam_unix(cron:session): session closed for user root Dec 18 13:59:01 ispc CRON[1979674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 13:59:01 ispc CRON[1979674]: pam_unix(cron:session): session closed for user root Dec 18 13:59:12 ispc sshd[1979689]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:00:01 ispc CRON[1979719]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:00:01 ispc CRON[1979717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:00:01 ispc CRON[1979718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:00:01 ispc CRON[1979721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:00:01 ispc CRON[1979720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:00:01 ispc CRON[1979722]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:00:01 ispc CRON[1979719]: pam_unix(cron:session): session closed for user www-data Dec 18 14:00:01 ispc CRON[1979718]: pam_unix(cron:session): session closed for user root Dec 18 14:00:01 ispc CRON[1979722]: pam_unix(cron:session): session closed for user getmail Dec 18 14:00:02 ispc CRON[1979721]: pam_unix(cron:session): session closed for user root Dec 18 14:00:02 ispc CRON[1979720]: pam_unix(cron:session): session closed for user root Dec 18 14:00:02 ispc CRON[1979717]: pam_unix(cron:session): session closed for user root Dec 18 14:01:01 ispc CRON[1979901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:01:02 ispc CRON[1979901]: pam_unix(cron:session): session closed for user root Dec 18 14:02:01 ispc CRON[1979939]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 14:02:01 ispc CRON[1979940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:02:01 ispc CRON[1979940]: pam_unix(cron:session): session closed for user root Dec 18 14:02:27 ispc sshd[1980240]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:02:49 ispc postfix/smtpd[1980585]: sql auxprop plugin using mysql engine Dec 18 14:02:51 ispc saslauthd[1980630]: pam_mysql - SELECT returned no result. Dec 18 14:02:51 ispc saslauthd[1980630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:02:51 ispc saslauthd[1980630]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:02:55 ispc saslauthd[1980652]: pam_mysql - SELECT returned no result. Dec 18 14:02:55 ispc saslauthd[1980652]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:02:55 ispc saslauthd[1980652]: do_auth : auth failure: [user=info@pronajemplosin.com] [service=smtp] [realm=pronajemplosin.com] [mech=pam] [reason=PAM auth error] Dec 18 14:03:01 ispc CRON[1980699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:03:01 ispc CRON[1980699]: pam_unix(cron:session): session closed for user root Dec 18 14:03:49 ispc CRON[1979939]: pam_unix(cron:session): session closed for user logcheck Dec 18 14:03:56 ispc postfix/smtpd[1981041]: sql auxprop plugin using mysql engine Dec 18 14:04:01 ispc CRON[1981052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:04:02 ispc CRON[1981052]: pam_unix(cron:session): session closed for user root Dec 18 14:04:21 ispc saslauthd[1981071]: pam_mysql - SELECT returned no result. Dec 18 14:04:21 ispc saslauthd[1981071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:04:21 ispc saslauthd[1981071]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:05:01 ispc CRON[1981087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:05:01 ispc CRON[1981088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:05:01 ispc CRON[1981089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:05:01 ispc CRON[1981090]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:05:01 ispc CRON[1981088]: pam_unix(cron:session): session closed for user root Dec 18 14:05:01 ispc CRON[1981090]: pam_unix(cron:session): session closed for user getmail Dec 18 14:05:01 ispc CRON[1981089]: pam_unix(cron:session): session closed for user root Dec 18 14:05:01 ispc CRON[1981087]: pam_unix(cron:session): session closed for user root Dec 18 14:06:01 ispc CRON[1981190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:06:02 ispc CRON[1981190]: pam_unix(cron:session): session closed for user root Dec 18 14:06:25 ispc postfix/smtpd[1981213]: sql auxprop plugin using mysql engine Dec 18 14:06:25 ispc CRON[1978997]: pam_unix(cron:session): session closed for user root Dec 18 14:07:01 ispc CRON[1981220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:07:02 ispc CRON[1981220]: pam_unix(cron:session): session closed for user root Dec 18 14:07:05 ispc sshd[1981233]: Invalid user alfa from 217.60.38.20 Dec 18 14:07:11 ispc sshd[1981237]: Invalid user klape from 103.164.20.29 Dec 18 14:07:12 ispc sshd[1981239]: Invalid user ubuntu from 103.164.20.29 Dec 18 14:07:39 ispc sshd[1981244]: Did not receive identification string from 45.140.17.97 Dec 18 14:08:01 ispc CRON[1981255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:08:02 ispc CRON[1981255]: pam_unix(cron:session): session closed for user root Dec 18 14:09:01 ispc CRON[1981270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:09:01 ispc CRON[1981269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:09:01 ispc CRON[1981269]: pam_unix(cron:session): session closed for user root Dec 18 14:09:02 ispc CRON[1981270]: pam_unix(cron:session): session closed for user root Dec 18 14:10:01 ispc CRON[1981296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:10:01 ispc CRON[1981297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:10:01 ispc CRON[1981298]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:10:01 ispc CRON[1981299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:10:01 ispc CRON[1981300]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:10:01 ispc CRON[1981297]: pam_unix(cron:session): session closed for user root Dec 18 14:10:01 ispc CRON[1981298]: pam_unix(cron:session): session closed for user www-data Dec 18 14:10:01 ispc CRON[1981300]: pam_unix(cron:session): session closed for user getmail Dec 18 14:10:02 ispc CRON[1981296]: pam_unix(cron:session): session closed for user root Dec 18 14:10:44 ispc saslauthd[1981410]: pam_mysql - SELECT returned no result. Dec 18 14:10:44 ispc saslauthd[1981410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:10:44 ispc saslauthd[1981410]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:10:48 ispc saslauthd[1981411]: pam_mysql - SELECT returned no result. Dec 18 14:10:48 ispc saslauthd[1981411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:10:48 ispc saslauthd[1981411]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 14:10:48 ispc CRON[1981299]: pam_unix(cron:session): session closed for user root Dec 18 14:10:52 ispc saslauthd[1981412]: pam_mysql - SELECT returned no result. Dec 18 14:10:52 ispc saslauthd[1981412]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:10:52 ispc saslauthd[1981412]: do_auth : auth failure: [user=supervisor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:11:01 ispc CRON[1981413]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:12:01 ispc CRON[1981448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:12:02 ispc CRON[1981448]: pam_unix(cron:session): session closed for user root Dec 18 14:12:04 ispc sshd[1981463]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:13:01 ispc CRON[1981494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:13:01 ispc CRON[1981494]: pam_unix(cron:session): session closed for user root Dec 18 14:13:03 ispc postfix/smtpd[1981506]: sql auxprop plugin using mysql engine Dec 18 14:13:46 ispc sshd[1981531]: Invalid user martof from 202.46.29.79 Dec 18 14:14:01 ispc CRON[1981539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:14:02 ispc CRON[1981539]: pam_unix(cron:session): session closed for user root Dec 18 14:15:01 ispc CRON[1981579]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:15:01 ispc CRON[1981576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:15:01 ispc CRON[1981578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:15:01 ispc CRON[1981577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:15:01 ispc CRON[1981577]: pam_unix(cron:session): session closed for user root Dec 18 14:15:01 ispc CRON[1981579]: pam_unix(cron:session): session closed for user getmail Dec 18 14:15:01 ispc CRON[1981578]: pam_unix(cron:session): session closed for user root Dec 18 14:15:02 ispc CRON[1981576]: pam_unix(cron:session): session closed for user root Dec 18 14:15:25 ispc sshd[1981661]: Invalid user ziplines from 85.143.173.172 Dec 18 14:16:01 ispc CRON[1981681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:16:01 ispc CRON[1981681]: pam_unix(cron:session): session closed for user root Dec 18 14:16:25 ispc sshd[1981707]: Invalid user ubuntu from 117.50.70.169 Dec 18 14:16:47 ispc postfix/smtpd[1981722]: sql auxprop plugin using mysql engine Dec 18 14:17:01 ispc CRON[1981729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:17:02 ispc CRON[1981729]: pam_unix(cron:session): session closed for user root Dec 18 14:17:10 ispc postfix/smtpd[1981744]: sql auxprop plugin using mysql engine Dec 18 14:17:10 ispc saslauthd[1981746]: pam_mysql - SELECT returned no result. Dec 18 14:17:10 ispc saslauthd[1981746]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:17:10 ispc saslauthd[1981746]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:17:36 ispc sshd[1981762]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:17:36 ispc sshd[1981762]: Invalid user blceu from 157.245.115.125 Dec 18 14:18:01 ispc CRON[1981782]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:18:01 ispc CRON[1981782]: pam_unix(cron:session): session closed for user root Dec 18 14:19:01 ispc CRON[1981820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:19:02 ispc CRON[1981820]: pam_unix(cron:session): session closed for user root Dec 18 14:19:51 ispc sshd[1981860]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:20:01 ispc CRON[1981867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:20:01 ispc CRON[1981868]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:20:01 ispc CRON[1981866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:20:01 ispc CRON[1981869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:20:01 ispc CRON[1981870]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:20:01 ispc CRON[1981868]: pam_unix(cron:session): session closed for user www-data Dec 18 14:20:01 ispc CRON[1981867]: pam_unix(cron:session): session closed for user root Dec 18 14:20:01 ispc CRON[1981870]: pam_unix(cron:session): session closed for user getmail Dec 18 14:20:02 ispc CRON[1981866]: pam_unix(cron:session): session closed for user root Dec 18 14:20:02 ispc CRON[1981869]: pam_unix(cron:session): session closed for user root Dec 18 14:20:13 ispc sshd[1981948]: Invalid user admin from 51.91.247.10 Dec 18 14:20:18 ispc postfix/smtpd[1981950]: sql auxprop plugin using mysql engine Dec 18 14:20:20 ispc postfix/smtpd[1981956]: sql auxprop plugin using mysql engine Dec 18 14:21:01 ispc CRON[1981976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:21:01 ispc CRON[1981977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:21:01 ispc CRON[1981976]: pam_unix(cron:session): session closed for user root Dec 18 14:21:01 ispc CRON[1981977]: pam_unix(cron:session): session closed for user root Dec 18 14:21:43 ispc sshd[1982008]: Did not receive identification string from 167.71.68.52 Dec 18 14:22:02 ispc CRON[1982019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:22:02 ispc CRON[1982019]: pam_unix(cron:session): session closed for user root Dec 18 14:23:01 ispc CRON[1982065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:23:02 ispc CRON[1982065]: pam_unix(cron:session): session closed for user root Dec 18 14:23:16 ispc postfix/smtpd[1982087]: sql auxprop plugin using mysql engine Dec 18 14:23:17 ispc saslauthd[1982089]: pam_mysql - SELECT returned no result. Dec 18 14:23:17 ispc saslauthd[1982089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:23:17 ispc saslauthd[1982089]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:24:01 ispc CRON[1982112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:24:02 ispc CRON[1982112]: pam_unix(cron:session): session closed for user root Dec 18 14:25:01 ispc CRON[1982158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:25:01 ispc CRON[1982159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:25:01 ispc CRON[1982160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:25:01 ispc CRON[1982161]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:25:01 ispc CRON[1982159]: pam_unix(cron:session): session closed for user root Dec 18 14:25:01 ispc CRON[1982161]: pam_unix(cron:session): session closed for user getmail Dec 18 14:25:01 ispc CRON[1982160]: pam_unix(cron:session): session closed for user root Dec 18 14:25:02 ispc CRON[1982158]: pam_unix(cron:session): session closed for user root Dec 18 14:25:05 ispc sshd[1982238]: Invalid user martof from 51.159.91.86 Dec 18 14:25:24 ispc sshd[1982249]: Invalid user admin from 210.114.18.123 Dec 18 14:26:01 ispc CRON[1982275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:26:01 ispc CRON[1982275]: pam_unix(cron:session): session closed for user root Dec 18 14:26:05 ispc postfix/smtpd[1982290]: sql auxprop plugin using mysql engine Dec 18 14:26:06 ispc saslauthd[1982292]: pam_mysql - SELECT returned no result. Dec 18 14:26:06 ispc saslauthd[1982292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:26:06 ispc saslauthd[1982292]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:27:01 ispc CRON[1982338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:27:02 ispc CRON[1982338]: pam_unix(cron:session): session closed for user root Dec 18 14:28:01 ispc CRON[1982386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:28:01 ispc CRON[1982386]: pam_unix(cron:session): session closed for user root Dec 18 14:29:01 ispc CRON[1982434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:29:02 ispc CRON[1982434]: pam_unix(cron:session): session closed for user root Dec 18 14:29:34 ispc postfix/smtpd[1982461]: sql auxprop plugin using mysql engine Dec 18 14:29:35 ispc saslauthd[1982464]: pam_mysql - SELECT returned no result. Dec 18 14:29:35 ispc saslauthd[1982464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:29:35 ispc saslauthd[1982464]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:30:01 ispc CRON[1982480]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:30:01 ispc CRON[1982479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:30:01 ispc CRON[1982481]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:30:01 ispc CRON[1982482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:30:01 ispc CRON[1982483]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:30:01 ispc CRON[1982481]: pam_unix(cron:session): session closed for user www-data Dec 18 14:30:01 ispc CRON[1982480]: pam_unix(cron:session): session closed for user root Dec 18 14:30:01 ispc CRON[1982483]: pam_unix(cron:session): session closed for user getmail Dec 18 14:30:01 ispc CRON[1982482]: pam_unix(cron:session): session closed for user root Dec 18 14:30:01 ispc CRON[1982479]: pam_unix(cron:session): session closed for user root Dec 18 14:31:01 ispc CRON[1982589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:31:01 ispc CRON[1982589]: pam_unix(cron:session): session closed for user root Dec 18 14:31:15 ispc sshd[1982608]: Invalid user ziplines from 202.46.29.79 Dec 18 14:31:18 ispc postfix/smtpd[1982613]: sql auxprop plugin using mysql engine Dec 18 14:31:18 ispc CRON[1981413]: pam_unix(cron:session): session closed for user root Dec 18 14:32:01 ispc CRON[1982623]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:32:02 ispc CRON[1982623]: pam_unix(cron:session): session closed for user root Dec 18 14:32:45 ispc sshd[1982639]: Invalid user admin from 167.71.68.52 Dec 18 14:32:47 ispc sshd[1982641]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:32:47 ispc sshd[1982641]: Invalid user ziplines from 157.245.115.125 Dec 18 14:33:01 ispc CRON[1982651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:33:02 ispc CRON[1982651]: pam_unix(cron:session): session closed for user root Dec 18 14:33:16 ispc sshd[1982664]: Invalid user admin from 167.71.68.52 Dec 18 14:33:27 ispc sshd[1982667]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:33:28 ispc sshd[1982669]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:33:28 ispc sshd[1982669]: Invalid user klape from 189.89.20.45 Dec 18 14:33:30 ispc sshd[1982671]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:33:30 ispc sshd[1982671]: Invalid user ubuntu from 189.89.20.45 Dec 18 14:33:46 ispc sshd[1982674]: Invalid user admin from 167.71.68.52 Dec 18 14:34:01 ispc CRON[1982676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:34:02 ispc CRON[1982676]: pam_unix(cron:session): session closed for user root Dec 18 14:34:17 ispc sshd[1982688]: Invalid user admin from 167.71.68.52 Dec 18 14:34:45 ispc sshd[1982693]: Invalid user admin from 167.71.68.52 Dec 18 14:35:01 ispc CRON[1982696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:35:01 ispc CRON[1982697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:35:01 ispc CRON[1982698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:35:01 ispc CRON[1982699]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:35:01 ispc CRON[1982697]: pam_unix(cron:session): session closed for user root Dec 18 14:35:01 ispc CRON[1982699]: pam_unix(cron:session): session closed for user getmail Dec 18 14:35:02 ispc CRON[1982696]: pam_unix(cron:session): session closed for user root Dec 18 14:35:14 ispc sshd[1982805]: Invalid user admin from 167.71.68.52 Dec 18 14:35:38 ispc CRON[1982698]: pam_unix(cron:session): session closed for user root Dec 18 14:36:01 ispc CRON[1982816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:36:08 ispc saslauthd[1982829]: pam_mysql - SELECT returned no result. Dec 18 14:36:08 ispc saslauthd[1982829]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:36:08 ispc saslauthd[1982829]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:37:01 ispc CRON[1982851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:37:01 ispc CRON[1982851]: pam_unix(cron:session): session closed for user root Dec 18 14:38:01 ispc CRON[1982898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:38:02 ispc CRON[1982898]: pam_unix(cron:session): session closed for user root Dec 18 14:38:04 ispc postfix/smtpd[1982909]: sql auxprop plugin using mysql engine Dec 18 14:39:01 ispc CRON[1982937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:39:01 ispc CRON[1982938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:39:01 ispc CRON[1982937]: pam_unix(cron:session): session closed for user root Dec 18 14:39:01 ispc CRON[1982938]: pam_unix(cron:session): session closed for user root Dec 18 14:39:54 ispc sshd[1982983]: Invalid user blceu from 49.247.24.89 Dec 18 14:40:01 ispc CRON[1982993]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:40:01 ispc CRON[1982989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:40:01 ispc CRON[1982990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:40:01 ispc CRON[1982991]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:40:01 ispc CRON[1982992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:40:01 ispc CRON[1982990]: pam_unix(cron:session): session closed for user root Dec 18 14:40:01 ispc CRON[1982991]: pam_unix(cron:session): session closed for user www-data Dec 18 14:40:01 ispc CRON[1982993]: pam_unix(cron:session): session closed for user getmail Dec 18 14:40:01 ispc CRON[1982992]: pam_unix(cron:session): session closed for user root Dec 18 14:40:02 ispc CRON[1982989]: pam_unix(cron:session): session closed for user root Dec 18 14:40:28 ispc sshd[1983080]: Invalid user martof from 49.247.24.89 Dec 18 14:41:01 ispc CRON[1983100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:41:01 ispc CRON[1983100]: pam_unix(cron:session): session closed for user root Dec 18 14:41:19 ispc postfix/smtpd[1983118]: sql auxprop plugin using mysql engine Dec 18 14:41:20 ispc saslauthd[1983120]: pam_mysql - SELECT returned no result. Dec 18 14:41:20 ispc saslauthd[1983120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:41:20 ispc saslauthd[1983120]: do_auth : auth failure: [user=sweex] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:41:26 ispc sshd[1983125]: Invalid user martof from 43.135.148.156 Dec 18 14:42:01 ispc CRON[1983141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:42:02 ispc CRON[1983141]: pam_unix(cron:session): session closed for user root Dec 18 14:42:45 ispc sshd[1983169]: Invalid user from 69.165.78.64 Dec 18 14:43:01 ispc CRON[1983192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:43:01 ispc CRON[1983192]: pam_unix(cron:session): session closed for user root Dec 18 14:43:08 ispc postfix/smtpd[1983208]: sql auxprop plugin using mysql engine Dec 18 14:43:09 ispc saslauthd[1983210]: pam_mysql - SELECT returned no result. Dec 18 14:43:09 ispc saslauthd[1983210]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:43:09 ispc saslauthd[1983210]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:43:20 ispc mysqld[1673]: warning: can't get client address: Connection reset by peer Dec 18 14:43:27 ispc sshd[1983220]: Invalid user ziplines from 103.110.84.105 Dec 18 14:43:56 ispc postfix/smtpd[1983234]: sql auxprop plugin using mysql engine Dec 18 14:44:01 ispc CRON[1983236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:44:01 ispc CRON[1983236]: pam_unix(cron:session): session closed for user root Dec 18 14:44:08 ispc saslauthd[1983251]: pam_mysql - SELECT returned no result. Dec 18 14:44:08 ispc saslauthd[1983251]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:44:08 ispc saslauthd[1983251]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 18 14:44:47 ispc postfix/smtpd[1983269]: sql auxprop plugin using mysql engine Dec 18 14:44:58 ispc saslauthd[1983279]: pam_mysql - SELECT returned no result. Dec 18 14:44:58 ispc saslauthd[1983279]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:44:58 ispc saslauthd[1983279]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:45:01 ispc CRON[1983280]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:45:01 ispc CRON[1983281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:45:01 ispc CRON[1983282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:45:01 ispc CRON[1983283]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:45:02 ispc CRON[1983283]: pam_unix(cron:session): session closed for user getmail Dec 18 14:45:02 ispc CRON[1983281]: pam_unix(cron:session): session closed for user root Dec 18 14:45:02 ispc CRON[1983282]: pam_unix(cron:session): session closed for user root Dec 18 14:45:02 ispc CRON[1983280]: pam_unix(cron:session): session closed for user root Dec 18 14:46:01 ispc CRON[1983384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:46:01 ispc CRON[1983384]: pam_unix(cron:session): session closed for user root Dec 18 14:46:44 ispc sshd[1983414]: Invalid user blceu from 185.208.181.153 Dec 18 14:47:02 ispc CRON[1983426]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:47:02 ispc CRON[1983426]: pam_unix(cron:session): session closed for user root Dec 18 14:48:01 ispc CRON[1983473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:48:02 ispc CRON[1983473]: pam_unix(cron:session): session closed for user root Dec 18 14:48:24 ispc sshd[1983498]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:49:01 ispc CRON[1983520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:49:01 ispc CRON[1983520]: pam_unix(cron:session): session closed for user root Dec 18 14:50:01 ispc CRON[1983557]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:50:01 ispc CRON[1983556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:50:01 ispc CRON[1983553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:50:01 ispc CRON[1983554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:50:01 ispc CRON[1983555]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 14:50:01 ispc CRON[1983555]: pam_unix(cron:session): session closed for user www-data Dec 18 14:50:01 ispc CRON[1983554]: pam_unix(cron:session): session closed for user root Dec 18 14:50:01 ispc CRON[1983557]: pam_unix(cron:session): session closed for user getmail Dec 18 14:50:02 ispc CRON[1983556]: pam_unix(cron:session): session closed for user root Dec 18 14:50:03 ispc CRON[1983553]: pam_unix(cron:session): session closed for user root Dec 18 14:51:01 ispc CRON[1983660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:51:02 ispc CRON[1983660]: pam_unix(cron:session): session closed for user root Dec 18 14:52:01 ispc CRON[1983697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:52:01 ispc CRON[1983697]: pam_unix(cron:session): session closed for user root Dec 18 14:53:01 ispc CRON[1983748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:53:02 ispc CRON[1983748]: pam_unix(cron:session): session closed for user root Dec 18 14:53:36 ispc postfix/smtpd[1983774]: sql auxprop plugin using mysql engine Dec 18 14:53:37 ispc saslauthd[1983777]: pam_mysql - SELECT returned no result. Dec 18 14:53:37 ispc saslauthd[1983777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:53:37 ispc saslauthd[1983777]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:54:01 ispc CRON[1983790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:54:01 ispc CRON[1983790]: pam_unix(cron:session): session closed for user root Dec 18 14:55:01 ispc CRON[1983828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:55:01 ispc CRON[1983831]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 14:55:01 ispc CRON[1983829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:55:01 ispc CRON[1983830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:55:01 ispc CRON[1983829]: pam_unix(cron:session): session closed for user root Dec 18 14:55:01 ispc CRON[1983831]: pam_unix(cron:session): session closed for user getmail Dec 18 14:55:02 ispc CRON[1983830]: pam_unix(cron:session): session closed for user root Dec 18 14:55:02 ispc CRON[1983828]: pam_unix(cron:session): session closed for user root Dec 18 14:56:01 ispc CRON[1983932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:56:02 ispc CRON[1983932]: pam_unix(cron:session): session closed for user root Dec 18 14:56:31 ispc postfix/smtpd[1983954]: sql auxprop plugin using mysql engine Dec 18 14:56:31 ispc postfix/smtpd[1983958]: sql auxprop plugin using mysql engine Dec 18 14:56:31 ispc CRON[1982816]: pam_unix(cron:session): session closed for user root Dec 18 14:56:32 ispc saslauthd[1983961]: pam_mysql - SELECT returned no result. Dec 18 14:56:32 ispc saslauthd[1983961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:56:32 ispc saslauthd[1983961]: do_auth : auth failure: [user=sync] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:56:54 ispc saslauthd[1983963]: pam_mysql - SELECT returned no result. Dec 18 14:56:54 ispc saslauthd[1983963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 14:56:54 ispc saslauthd[1983963]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 14:57:01 ispc CRON[1983965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:57:02 ispc CRON[1983965]: pam_unix(cron:session): session closed for user root Dec 18 14:57:09 ispc sshd[1983978]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:57:17 ispc sshd[1983980]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 14:58:01 ispc CRON[1983993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:58:02 ispc CRON[1983993]: pam_unix(cron:session): session closed for user root Dec 18 14:59:01 ispc CRON[1984010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 14:59:01 ispc CRON[1984010]: pam_unix(cron:session): session closed for user root Dec 18 15:00:01 ispc CRON[1984023]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:00:01 ispc CRON[1984025]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:00:01 ispc CRON[1984024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:00:01 ispc CRON[1984026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:00:01 ispc CRON[1984027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:00:01 ispc CRON[1984028]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:00:01 ispc CRON[1984024]: pam_unix(cron:session): session closed for user root Dec 18 15:00:01 ispc CRON[1984025]: pam_unix(cron:session): session closed for user www-data Dec 18 15:00:01 ispc CRON[1984028]: pam_unix(cron:session): session closed for user getmail Dec 18 15:00:02 ispc CRON[1984023]: pam_unix(cron:session): session closed for user root Dec 18 15:00:02 ispc CRON[1984026]: pam_unix(cron:session): session closed for user root Dec 18 15:00:42 ispc CRON[1984027]: pam_unix(cron:session): session closed for user root Dec 18 15:01:01 ispc CRON[1984296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:01:36 ispc saslauthd[1984322]: pam_mysql - SELECT returned no result. Dec 18 15:01:36 ispc saslauthd[1984322]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:01:36 ispc saslauthd[1984322]: do_auth : auth failure: [user=test@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 15:02:01 ispc CRON[1984333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:02:01 ispc CRON[1984332]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 15:02:02 ispc CRON[1984333]: pam_unix(cron:session): session closed for user root Dec 18 15:02:10 ispc saslauthd[1984414]: pam_mysql - SELECT returned no result. Dec 18 15:02:10 ispc saslauthd[1984414]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:02:10 ispc saslauthd[1984414]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:02:27 ispc sshd[1984768]: Invalid user admin from 51.91.247.10 Dec 18 15:02:29 ispc sshd[1984777]: Invalid user admin from 210.114.18.123 Dec 18 15:02:49 ispc sshd[1985082]: Bad protocol version identification 'GET / HTTP/1.1' from 3.149.59.26 Dec 18 15:02:49 ispc sshd[1985083]: Bad protocol version identification '\026\003\001' from 3.149.59.26 Dec 18 15:02:55 ispc sshd[1985167]: Bad protocol version identification '\026\003\001' from 3.149.59.26 Dec 18 15:02:57 ispc sshd[1985183]: Bad protocol version identification '' from 3.149.59.26 Dec 18 15:03:01 ispc CRON[1985217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:03:02 ispc CRON[1985217]: pam_unix(cron:session): session closed for user root Dec 18 15:03:32 ispc CRON[1984332]: pam_unix(cron:session): session closed for user logcheck Dec 18 15:03:42 ispc postfix/smtpd[1985427]: sql auxprop plugin using mysql engine Dec 18 15:04:00 ispc postfix/smtpd[1985442]: sql auxprop plugin using mysql engine Dec 18 15:04:01 ispc CRON[1985444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:04:02 ispc CRON[1985444]: pam_unix(cron:session): session closed for user root Dec 18 15:05:01 ispc CRON[1985482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:05:01 ispc CRON[1985484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:05:01 ispc CRON[1985483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:05:01 ispc CRON[1985485]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:05:01 ispc CRON[1985483]: pam_unix(cron:session): session closed for user root Dec 18 15:05:01 ispc CRON[1985485]: pam_unix(cron:session): session closed for user getmail Dec 18 15:05:01 ispc CRON[1985484]: pam_unix(cron:session): session closed for user root Dec 18 15:05:01 ispc CRON[1985482]: pam_unix(cron:session): session closed for user root Dec 18 15:06:01 ispc CRON[1985587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:06:02 ispc CRON[1985587]: pam_unix(cron:session): session closed for user root Dec 18 15:06:40 ispc sshd[1985613]: Invalid user ziplines from 49.247.24.89 Dec 18 15:07:01 ispc CRON[1985628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:07:02 ispc CRON[1985628]: pam_unix(cron:session): session closed for user root Dec 18 15:08:01 ispc CRON[1985670]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:08:01 ispc CRON[1985670]: pam_unix(cron:session): session closed for user root Dec 18 15:09:01 ispc CRON[1985715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:09:01 ispc CRON[1985714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:09:01 ispc CRON[1985714]: pam_unix(cron:session): session closed for user root Dec 18 15:09:02 ispc CRON[1985715]: pam_unix(cron:session): session closed for user root Dec 18 15:10:01 ispc CRON[1985765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:10:01 ispc CRON[1985766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:10:01 ispc CRON[1985767]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:10:01 ispc CRON[1985768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:10:01 ispc CRON[1985769]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:10:01 ispc CRON[1985767]: pam_unix(cron:session): session closed for user www-data Dec 18 15:10:01 ispc CRON[1985766]: pam_unix(cron:session): session closed for user root Dec 18 15:10:01 ispc CRON[1985769]: pam_unix(cron:session): session closed for user getmail Dec 18 15:10:02 ispc CRON[1985768]: pam_unix(cron:session): session closed for user root Dec 18 15:10:03 ispc CRON[1985765]: pam_unix(cron:session): session closed for user root Dec 18 15:11:01 ispc CRON[1985871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:11:01 ispc CRON[1985871]: pam_unix(cron:session): session closed for user root Dec 18 15:11:14 ispc postfix/smtpd[1985886]: sql auxprop plugin using mysql engine Dec 18 15:11:15 ispc saslauthd[1985889]: pam_mysql - SELECT returned no result. Dec 18 15:11:15 ispc saslauthd[1985889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:11:15 ispc saslauthd[1985889]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:11:41 ispc saslauthd[1985904]: pam_mysql - SELECT returned no result. Dec 18 15:11:41 ispc saslauthd[1985904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:11:41 ispc saslauthd[1985904]: do_auth : auth failure: [user=sys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:11:52 ispc sshd[1985909]: Invalid user ziplines from 43.135.148.156 Dec 18 15:12:01 ispc CRON[1985916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:12:02 ispc CRON[1985916]: pam_unix(cron:session): session closed for user root Dec 18 15:13:01 ispc CRON[1985962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:13:02 ispc CRON[1985962]: pam_unix(cron:session): session closed for user root Dec 18 15:14:01 ispc CRON[1986001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:14:02 ispc CRON[1986001]: pam_unix(cron:session): session closed for user root Dec 18 15:14:41 ispc sshd[1986030]: Invalid user blceu from 43.135.148.156 Dec 18 15:15:01 ispc CRON[1986058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:15:01 ispc CRON[1986059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:15:01 ispc CRON[1986060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:15:01 ispc CRON[1986061]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:15:01 ispc CRON[1986059]: pam_unix(cron:session): session closed for user root Dec 18 15:15:01 ispc CRON[1986061]: pam_unix(cron:session): session closed for user getmail Dec 18 15:15:02 ispc CRON[1986060]: pam_unix(cron:session): session closed for user root Dec 18 15:15:03 ispc CRON[1986058]: pam_unix(cron:session): session closed for user root Dec 18 15:15:08 ispc sshd[1986137]: Invalid user martof from 103.110.84.105 Dec 18 15:15:25 ispc sshd[1986148]: Invalid user martof from 141.94.71.131 Dec 18 15:16:01 ispc CRON[1986162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:16:01 ispc CRON[1986162]: pam_unix(cron:session): session closed for user root Dec 18 15:17:01 ispc CRON[1986202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:17:03 ispc CRON[1986202]: pam_unix(cron:session): session closed for user root Dec 18 15:18:01 ispc CRON[1986249]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 15:18:01 ispc CRON[1986250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:18:02 ispc CRON[1986250]: pam_unix(cron:session): session closed for user root Dec 18 15:18:04 ispc CRON[1986249]: pam_unix(cron:session): session closed for user amavis Dec 18 15:18:05 ispc postfix/smtpd[1986277]: sql auxprop plugin using mysql engine Dec 18 15:18:18 ispc sshd[1986285]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 15:19:01 ispc CRON[1986307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:19:02 ispc CRON[1986307]: pam_unix(cron:session): session closed for user root Dec 18 15:19:55 ispc postfix/smtpd[1986347]: sql auxprop plugin using mysql engine Dec 18 15:19:55 ispc saslauthd[1986350]: pam_mysql - SELECT returned no result. Dec 18 15:19:55 ispc saslauthd[1986350]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:19:55 ispc saslauthd[1986350]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:20:01 ispc CRON[1986351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:20:01 ispc CRON[1986352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:20:01 ispc CRON[1986353]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:20:01 ispc CRON[1986354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:20:01 ispc CRON[1986355]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:20:01 ispc CRON[1986352]: pam_unix(cron:session): session closed for user root Dec 18 15:20:01 ispc CRON[1986353]: pam_unix(cron:session): session closed for user www-data Dec 18 15:20:01 ispc CRON[1986355]: pam_unix(cron:session): session closed for user getmail Dec 18 15:20:01 ispc CRON[1986354]: pam_unix(cron:session): session closed for user root Dec 18 15:20:02 ispc CRON[1986351]: pam_unix(cron:session): session closed for user root Dec 18 15:21:01 ispc CRON[1986458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:21:01 ispc CRON[1986459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:21:01 ispc CRON[1986458]: pam_unix(cron:session): session closed for user root Dec 18 15:21:02 ispc CRON[1986459]: pam_unix(cron:session): session closed for user root Dec 18 15:21:26 ispc CRON[1984296]: pam_unix(cron:session): session closed for user root Dec 18 15:21:38 ispc sshd[1986488]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 15:22:01 ispc CRON[1986491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:22:02 ispc CRON[1986491]: pam_unix(cron:session): session closed for user root Dec 18 15:23:01 ispc CRON[1986519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:23:02 ispc CRON[1986519]: pam_unix(cron:session): session closed for user root Dec 18 15:23:16 ispc sshd[1986531]: Did not receive identification string from 167.99.32.200 Dec 18 15:24:01 ispc CRON[1986533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:24:02 ispc CRON[1986533]: pam_unix(cron:session): session closed for user root Dec 18 15:25:01 ispc CRON[1986555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:25:01 ispc CRON[1986556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:25:01 ispc CRON[1986557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:25:01 ispc CRON[1986558]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:25:01 ispc CRON[1986556]: pam_unix(cron:session): session closed for user root Dec 18 15:25:01 ispc CRON[1986558]: pam_unix(cron:session): session closed for user getmail Dec 18 15:25:02 ispc CRON[1986555]: pam_unix(cron:session): session closed for user root Dec 18 15:25:33 ispc CRON[1986557]: pam_unix(cron:session): session closed for user root Dec 18 15:26:01 ispc CRON[1986667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:27:01 ispc CRON[1986705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:27:02 ispc postfix/smtpd[1986712]: sql auxprop plugin using mysql engine Dec 18 15:27:02 ispc CRON[1986705]: pam_unix(cron:session): session closed for user root Dec 18 15:27:03 ispc saslauthd[1986718]: pam_mysql - SELECT returned no result. Dec 18 15:27:03 ispc saslauthd[1986718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:27:03 ispc saslauthd[1986718]: do_auth : auth failure: [user=sysadm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:28:01 ispc CRON[1986757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:28:03 ispc CRON[1986757]: pam_unix(cron:session): session closed for user root Dec 18 15:28:53 ispc postfix/smtpd[1986793]: sql auxprop plugin using mysql engine Dec 18 15:28:54 ispc saslauthd[1986795]: pam_mysql - SELECT returned no result. Dec 18 15:28:54 ispc saslauthd[1986795]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:28:54 ispc saslauthd[1986795]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:29:01 ispc CRON[1986800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:29:01 ispc CRON[1986800]: pam_unix(cron:session): session closed for user root Dec 18 15:29:20 ispc sshd[1986822]: Invalid user matlbula from 47.101.220.231 Dec 18 15:29:42 ispc sshd[1986835]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 15:30:01 ispc CRON[1986845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:30:01 ispc CRON[1986846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:30:01 ispc CRON[1986847]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:30:01 ispc CRON[1986848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:30:01 ispc CRON[1986849]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:30:01 ispc CRON[1986846]: pam_unix(cron:session): session closed for user root Dec 18 15:30:02 ispc CRON[1986847]: pam_unix(cron:session): session closed for user www-data Dec 18 15:30:02 ispc CRON[1986849]: pam_unix(cron:session): session closed for user getmail Dec 18 15:30:02 ispc CRON[1986848]: pam_unix(cron:session): session closed for user root Dec 18 15:30:03 ispc CRON[1986845]: pam_unix(cron:session): session closed for user root Dec 18 15:30:28 ispc sshd[1986938]: Invalid user martof from 211.23.78.98 Dec 18 15:31:01 ispc CRON[1986958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:31:02 ispc CRON[1986958]: pam_unix(cron:session): session closed for user root Dec 18 15:32:01 ispc CRON[1986992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:32:01 ispc CRON[1986992]: pam_unix(cron:session): session closed for user root Dec 18 15:33:01 ispc CRON[1987045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:33:02 ispc CRON[1987045]: pam_unix(cron:session): session closed for user root Dec 18 15:34:01 ispc CRON[1987085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:34:02 ispc CRON[1987085]: pam_unix(cron:session): session closed for user root Dec 18 15:34:03 ispc sshd[1987092]: Invalid user blceu from 211.23.78.98 Dec 18 15:35:01 ispc CRON[1987124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:35:01 ispc CRON[1987125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:35:01 ispc CRON[1987126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:35:01 ispc CRON[1987127]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:35:01 ispc CRON[1987125]: pam_unix(cron:session): session closed for user root Dec 18 15:35:01 ispc CRON[1987127]: pam_unix(cron:session): session closed for user getmail Dec 18 15:35:02 ispc CRON[1987126]: pam_unix(cron:session): session closed for user root Dec 18 15:35:03 ispc CRON[1987124]: pam_unix(cron:session): session closed for user root Dec 18 15:35:17 ispc sshd[1987204]: Invalid user martof from 175.125.92.77 Dec 18 15:35:40 ispc sshd[1987214]: Invalid user admin from 220.196.191.58 Dec 18 15:36:01 ispc CRON[1987236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:36:03 ispc CRON[1987236]: pam_unix(cron:session): session closed for user root Dec 18 15:36:26 ispc sshd[1987267]: Invalid user admin from 210.114.18.123 Dec 18 15:37:01 ispc CRON[1987282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:37:02 ispc CRON[1987282]: pam_unix(cron:session): session closed for user root Dec 18 15:37:43 ispc postfix/smtpd[1987317]: sql auxprop plugin using mysql engine Dec 18 15:37:44 ispc saslauthd[1987320]: pam_mysql - SELECT returned no result. Dec 18 15:37:44 ispc saslauthd[1987320]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:37:44 ispc saslauthd[1987320]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:38:01 ispc CRON[1987340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:38:02 ispc CRON[1987340]: pam_unix(cron:session): session closed for user root Dec 18 15:39:01 ispc CRON[1987389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:39:01 ispc CRON[1987390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:39:01 ispc CRON[1987389]: pam_unix(cron:session): session closed for user root Dec 18 15:39:02 ispc CRON[1987390]: pam_unix(cron:session): session closed for user root Dec 18 15:40:01 ispc CRON[1987437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:40:01 ispc CRON[1987438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:40:01 ispc CRON[1987439]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:40:01 ispc CRON[1987440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:40:01 ispc CRON[1987441]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:40:01 ispc CRON[1987438]: pam_unix(cron:session): session closed for user root Dec 18 15:40:01 ispc CRON[1987439]: pam_unix(cron:session): session closed for user www-data Dec 18 15:40:01 ispc CRON[1987441]: pam_unix(cron:session): session closed for user getmail Dec 18 15:40:01 ispc CRON[1987440]: pam_unix(cron:session): session closed for user root Dec 18 15:40:02 ispc CRON[1987437]: pam_unix(cron:session): session closed for user root Dec 18 15:41:01 ispc CRON[1987544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:41:02 ispc CRON[1987544]: pam_unix(cron:session): session closed for user root Dec 18 15:42:01 ispc CRON[1987584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:42:02 ispc CRON[1987584]: pam_unix(cron:session): session closed for user root Dec 18 15:42:16 ispc postfix/smtpd[1987600]: sql auxprop plugin using mysql engine Dec 18 15:42:18 ispc saslauthd[1987607]: pam_mysql - SELECT returned no result. Dec 18 15:42:18 ispc saslauthd[1987607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:42:18 ispc saslauthd[1987607]: do_auth : auth failure: [user=sysadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:43:01 ispc CRON[1987636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:43:01 ispc CRON[1987636]: pam_unix(cron:session): session closed for user root Dec 18 15:44:01 ispc CRON[1987678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:44:02 ispc CRON[1987678]: pam_unix(cron:session): session closed for user root Dec 18 15:45:01 ispc CRON[1987718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:45:01 ispc CRON[1987719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:45:01 ispc CRON[1987720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:45:01 ispc CRON[1987721]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:45:01 ispc CRON[1987719]: pam_unix(cron:session): session closed for user root Dec 18 15:45:01 ispc CRON[1987721]: pam_unix(cron:session): session closed for user getmail Dec 18 15:45:02 ispc CRON[1987718]: pam_unix(cron:session): session closed for user root Dec 18 15:45:02 ispc CRON[1987720]: pam_unix(cron:session): session closed for user root Dec 18 15:46:01 ispc CRON[1987822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:46:02 ispc CRON[1987822]: pam_unix(cron:session): session closed for user root Dec 18 15:46:24 ispc postfix/smtpd[1987841]: sql auxprop plugin using mysql engine Dec 18 15:46:24 ispc saslauthd[1987844]: pam_mysql - SELECT returned no result. Dec 18 15:46:24 ispc saslauthd[1987844]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:46:24 ispc saslauthd[1987844]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:46:32 ispc CRON[1986667]: pam_unix(cron:session): session closed for user root Dec 18 15:47:01 ispc CRON[1987850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:47:02 ispc CRON[1987850]: pam_unix(cron:session): session closed for user root Dec 18 15:47:34 ispc sshd[1987867]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 15:48:01 ispc CRON[1987878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:48:02 ispc CRON[1987878]: pam_unix(cron:session): session closed for user root Dec 18 15:49:01 ispc CRON[1987896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:49:02 ispc CRON[1987896]: pam_unix(cron:session): session closed for user root Dec 18 15:49:31 ispc sshd[1987912]: Invalid user blceu from 118.69.109.194 Dec 18 15:50:01 ispc CRON[1987920]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:50:01 ispc CRON[1987921]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 15:50:01 ispc CRON[1987922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:50:01 ispc CRON[1987923]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:50:01 ispc CRON[1987919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:50:02 ispc CRON[1987921]: pam_unix(cron:session): session closed for user www-data Dec 18 15:50:02 ispc CRON[1987920]: pam_unix(cron:session): session closed for user root Dec 18 15:50:02 ispc CRON[1987923]: pam_unix(cron:session): session closed for user getmail Dec 18 15:50:03 ispc CRON[1987919]: pam_unix(cron:session): session closed for user root Dec 18 15:50:31 ispc CRON[1987922]: pam_unix(cron:session): session closed for user root Dec 18 15:51:01 ispc CRON[1988032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:51:18 ispc sshd[1988049]: Did not receive identification string from 45.140.17.97 Dec 18 15:52:01 ispc CRON[1988068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:52:01 ispc CRON[1988069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:52:01 ispc CRON[1988069]: pam_unix(cron:session): session closed for user root Dec 18 15:53:01 ispc CRON[1988118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:53:02 ispc CRON[1988118]: pam_unix(cron:session): session closed for user root Dec 18 15:54:01 ispc CRON[1988157]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:54:01 ispc CRON[1988157]: pam_unix(cron:session): session closed for user root Dec 18 15:55:01 ispc CRON[1988196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:55:01 ispc CRON[1988197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:55:01 ispc CRON[1988198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:55:01 ispc CRON[1988199]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 15:55:01 ispc CRON[1988197]: pam_unix(cron:session): session closed for user root Dec 18 15:55:01 ispc CRON[1988199]: pam_unix(cron:session): session closed for user getmail Dec 18 15:55:02 ispc CRON[1988198]: pam_unix(cron:session): session closed for user root Dec 18 15:55:03 ispc CRON[1988196]: pam_unix(cron:session): session closed for user root Dec 18 15:55:08 ispc postfix/smtpd[1988276]: sql auxprop plugin using mysql engine Dec 18 15:55:10 ispc postfix/smtpd[1988279]: sql auxprop plugin using mysql engine Dec 18 15:55:10 ispc saslauthd[1988280]: pam_mysql - SELECT returned no result. Dec 18 15:55:10 ispc saslauthd[1988280]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:55:10 ispc saslauthd[1988280]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:55:17 ispc CRON[1988068]: pam_unix(cron:session): session closed for user root Dec 18 15:56:01 ispc CRON[1988306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:56:02 ispc CRON[1988306]: pam_unix(cron:session): session closed for user root Dec 18 15:56:20 ispc saslauthd[1988326]: pam_mysql - SELECT returned no result. Dec 18 15:56:20 ispc saslauthd[1988326]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:56:20 ispc saslauthd[1988326]: do_auth : auth failure: [user=user@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 15:57:01 ispc CRON[1988345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:57:02 ispc CRON[1988345]: pam_unix(cron:session): session closed for user root Dec 18 15:57:29 ispc saslauthd[1988369]: pam_mysql - SELECT returned no result. Dec 18 15:57:29 ispc saslauthd[1988369]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 15:57:29 ispc saslauthd[1988369]: do_auth : auth failure: [user=sysbin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 15:58:01 ispc CRON[1988392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:58:02 ispc CRON[1988392]: pam_unix(cron:session): session closed for user root Dec 18 15:58:13 ispc sshd[1988408]: Invalid user blceu from 175.125.92.77 Dec 18 15:58:58 ispc sshd[1988469]: Invalid user martof from 185.208.181.152 Dec 18 15:59:01 ispc CRON[1988475]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 15:59:01 ispc CRON[1988475]: pam_unix(cron:session): session closed for user root Dec 18 15:59:08 ispc sshd[1988487]: Invalid user ziplines from 175.125.92.77 Dec 18 16:00:01 ispc CRON[1988517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:00:01 ispc CRON[1988518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:00:01 ispc CRON[1988519]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:00:01 ispc CRON[1988520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:00:01 ispc CRON[1988521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:00:01 ispc CRON[1988522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:00:01 ispc CRON[1988523]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:00:01 ispc CRON[1988519]: pam_unix(cron:session): session closed for user www-data Dec 18 16:00:01 ispc CRON[1988521]: pam_unix(cron:session): session closed for user root Dec 18 16:00:01 ispc CRON[1988523]: pam_unix(cron:session): session closed for user getmail Dec 18 16:00:01 ispc CRON[1988518]: pam_unix(cron:session): session closed for user root Dec 18 16:00:02 ispc CRON[1988522]: pam_unix(cron:session): session closed for user root Dec 18 16:00:02 ispc CRON[1988520]: pam_unix(cron:session): session closed for user root Dec 18 16:00:03 ispc CRON[1988517]: pam_unix(cron:session): session closed for user root Dec 18 16:01:01 ispc CRON[1988705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:01:02 ispc CRON[1988705]: pam_unix(cron:session): session closed for user root Dec 18 16:02:01 ispc CRON[1988740]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 16:02:01 ispc CRON[1988741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:02:01 ispc CRON[1988741]: pam_unix(cron:session): session closed for user root Dec 18 16:03:01 ispc CRON[1989619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:03:02 ispc CRON[1989619]: pam_unix(cron:session): session closed for user root Dec 18 16:03:13 ispc sshd[1989658]: Invalid user blceu from 45.119.213.109 Dec 18 16:03:22 ispc CRON[1988740]: pam_unix(cron:session): session closed for user logcheck Dec 18 16:03:28 ispc postfix/smtpd[1989826]: sql auxprop plugin using mysql engine Dec 18 16:03:34 ispc postfix/smtpd[1989834]: sql auxprop plugin using mysql engine Dec 18 16:03:35 ispc saslauthd[1989836]: pam_mysql - SELECT returned no result. Dec 18 16:03:35 ispc saslauthd[1989836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:03:35 ispc saslauthd[1989836]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:04:01 ispc CRON[1989849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:04:02 ispc CRON[1989849]: pam_unix(cron:session): session closed for user root Dec 18 16:05:01 ispc CRON[1989889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:05:01 ispc CRON[1989890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:05:01 ispc CRON[1989891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:05:01 ispc CRON[1989892]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:05:01 ispc CRON[1989890]: pam_unix(cron:session): session closed for user root Dec 18 16:05:01 ispc CRON[1989892]: pam_unix(cron:session): session closed for user getmail Dec 18 16:05:01 ispc CRON[1989891]: pam_unix(cron:session): session closed for user root Dec 18 16:05:02 ispc CRON[1989889]: pam_unix(cron:session): session closed for user root Dec 18 16:05:57 ispc sshd[1989991]: Invalid user blceu from 141.94.71.131 Dec 18 16:06:01 ispc CRON[1989993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:06:01 ispc CRON[1989993]: pam_unix(cron:session): session closed for user root Dec 18 16:07:01 ispc CRON[1990032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:07:02 ispc CRON[1990032]: pam_unix(cron:session): session closed for user root Dec 18 16:08:01 ispc CRON[1990079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:08:02 ispc CRON[1990079]: pam_unix(cron:session): session closed for user root Dec 18 16:08:30 ispc sshd[1990103]: Invalid user admin from 51.91.247.10 Dec 18 16:09:01 ispc CRON[1990119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:09:01 ispc CRON[1990120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:09:02 ispc CRON[1990119]: pam_unix(cron:session): session closed for user root Dec 18 16:09:02 ispc CRON[1990120]: pam_unix(cron:session): session closed for user root Dec 18 16:10:01 ispc CRON[1990167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:10:01 ispc CRON[1990168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:10:01 ispc CRON[1990169]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:10:01 ispc CRON[1990170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:10:01 ispc CRON[1990171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:10:01 ispc CRON[1990169]: pam_unix(cron:session): session closed for user www-data Dec 18 16:10:01 ispc CRON[1990168]: pam_unix(cron:session): session closed for user root Dec 18 16:10:01 ispc CRON[1990171]: pam_unix(cron:session): session closed for user getmail Dec 18 16:10:01 ispc CRON[1990170]: pam_unix(cron:session): session closed for user root Dec 18 16:10:03 ispc CRON[1990167]: pam_unix(cron:session): session closed for user root Dec 18 16:11:01 ispc CRON[1990276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:11:02 ispc CRON[1990276]: pam_unix(cron:session): session closed for user root Dec 18 16:11:22 ispc postfix/smtpd[1990293]: sql auxprop plugin using mysql engine Dec 18 16:11:22 ispc CRON[1988032]: pam_unix(cron:session): session closed for user root Dec 18 16:11:56 ispc saslauthd[1990302]: pam_mysql - SELECT returned no result. Dec 18 16:11:56 ispc saslauthd[1990302]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:11:56 ispc saslauthd[1990302]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:12:01 ispc CRON[1990303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:12:02 ispc CRON[1990303]: pam_unix(cron:session): session closed for user root Dec 18 16:12:39 ispc saslauthd[1990315]: pam_mysql - SELECT returned no result. Dec 18 16:12:39 ispc saslauthd[1990315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:12:39 ispc saslauthd[1990315]: do_auth : auth failure: [user=sysopr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:12:44 ispc saslauthd[1990316]: pam_mysql - SELECT returned no result. Dec 18 16:12:44 ispc saslauthd[1990316]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:12:44 ispc saslauthd[1990316]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:12:51 ispc sshd[1990324]: Did not receive identification string from 80.94.92.182 Dec 18 16:13:01 ispc CRON[1990333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:13:02 ispc CRON[1990333]: pam_unix(cron:session): session closed for user root Dec 18 16:14:01 ispc CRON[1990346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:14:02 ispc CRON[1990346]: pam_unix(cron:session): session closed for user root Dec 18 16:15:01 ispc CRON[1990363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:15:01 ispc CRON[1990364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:15:01 ispc CRON[1990365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:15:01 ispc CRON[1990366]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:15:01 ispc CRON[1990364]: pam_unix(cron:session): session closed for user root Dec 18 16:15:01 ispc CRON[1990366]: pam_unix(cron:session): session closed for user getmail Dec 18 16:15:02 ispc CRON[1990363]: pam_unix(cron:session): session closed for user root Dec 18 16:15:20 ispc sshd[1990552]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 16:15:45 ispc CRON[1990365]: pam_unix(cron:session): session closed for user root Dec 18 16:16:01 ispc CRON[1990559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:16:06 ispc sshd[1990573]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 16:17:01 ispc CRON[1990597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:17:01 ispc CRON[1990597]: pam_unix(cron:session): session closed for user root Dec 18 16:18:01 ispc CRON[1990645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:18:02 ispc CRON[1990645]: pam_unix(cron:session): session closed for user root Dec 18 16:19:01 ispc CRON[1990687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:19:01 ispc CRON[1990687]: pam_unix(cron:session): session closed for user root Dec 18 16:20:01 ispc CRON[1990726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:20:01 ispc CRON[1990727]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:20:01 ispc CRON[1990728]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:20:01 ispc CRON[1990729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:20:01 ispc CRON[1990730]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:20:01 ispc CRON[1990728]: pam_unix(cron:session): session closed for user www-data Dec 18 16:20:01 ispc CRON[1990727]: pam_unix(cron:session): session closed for user root Dec 18 16:20:01 ispc CRON[1990730]: pam_unix(cron:session): session closed for user getmail Dec 18 16:20:02 ispc CRON[1990729]: pam_unix(cron:session): session closed for user root Dec 18 16:20:02 ispc CRON[1990726]: pam_unix(cron:session): session closed for user root Dec 18 16:20:25 ispc postfix/smtpd[1990813]: sql auxprop plugin using mysql engine Dec 18 16:20:25 ispc saslauthd[1990816]: pam_mysql - SELECT returned no result. Dec 18 16:20:25 ispc saslauthd[1990816]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:20:25 ispc saslauthd[1990816]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:21:01 ispc CRON[1990837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:21:01 ispc CRON[1990836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:21:01 ispc CRON[1990836]: pam_unix(cron:session): session closed for user root Dec 18 16:21:02 ispc CRON[1990837]: pam_unix(cron:session): session closed for user root Dec 18 16:21:19 ispc sshd[1990855]: Invalid user sol from 80.94.92.182 Dec 18 16:22:01 ispc CRON[1990879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:22:02 ispc CRON[1990879]: pam_unix(cron:session): session closed for user root Dec 18 16:22:27 ispc sshd[1990903]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 16:23:01 ispc CRON[1990928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:23:01 ispc CRON[1990928]: pam_unix(cron:session): session closed for user root Dec 18 16:24:01 ispc CRON[1990967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:24:02 ispc CRON[1990967]: pam_unix(cron:session): session closed for user root Dec 18 16:25:01 ispc CRON[1991005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:25:01 ispc CRON[1991006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:25:01 ispc CRON[1991007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:25:01 ispc CRON[1991008]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:25:01 ispc CRON[1991006]: pam_unix(cron:session): session closed for user root Dec 18 16:25:01 ispc CRON[1991008]: pam_unix(cron:session): session closed for user getmail Dec 18 16:25:02 ispc CRON[1991005]: pam_unix(cron:session): session closed for user root Dec 18 16:25:02 ispc CRON[1991007]: pam_unix(cron:session): session closed for user root Dec 18 16:26:01 ispc CRON[1991109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:26:01 ispc CRON[1991109]: pam_unix(cron:session): session closed for user root Dec 18 16:27:01 ispc CRON[1991147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:27:02 ispc CRON[1991147]: pam_unix(cron:session): session closed for user root Dec 18 16:27:52 ispc postfix/smtpd[1991185]: sql auxprop plugin using mysql engine Dec 18 16:27:53 ispc saslauthd[1991187]: pam_mysql - SELECT returned no result. Dec 18 16:27:53 ispc saslauthd[1991187]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:27:53 ispc saslauthd[1991187]: do_auth : auth failure: [user=system] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:28:01 ispc CRON[1991193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:28:02 ispc CRON[1991193]: pam_unix(cron:session): session closed for user root Dec 18 16:28:34 ispc sshd[1991222]: Invalid user blceu from 185.208.181.152 Dec 18 16:28:38 ispc saslauthd[1991225]: pam_mysql - SELECT returned no result. Dec 18 16:28:38 ispc saslauthd[1991225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:28:38 ispc saslauthd[1991225]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:28:55 ispc sshd[1991226]: Invalid user solana from 80.94.92.182 Dec 18 16:29:01 ispc CRON[1991238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:29:01 ispc CRON[1991238]: pam_unix(cron:session): session closed for user root Dec 18 16:30:01 ispc CRON[1991276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:30:01 ispc CRON[1991277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:30:01 ispc CRON[1991278]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:30:01 ispc CRON[1991279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:30:01 ispc CRON[1991280]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:30:01 ispc CRON[1991278]: pam_unix(cron:session): session closed for user www-data Dec 18 16:30:02 ispc CRON[1991277]: pam_unix(cron:session): session closed for user root Dec 18 16:30:02 ispc CRON[1991280]: pam_unix(cron:session): session closed for user getmail Dec 18 16:30:02 ispc CRON[1991279]: pam_unix(cron:session): session closed for user root Dec 18 16:30:05 ispc CRON[1991276]: pam_unix(cron:session): session closed for user root Dec 18 16:31:01 ispc CRON[1991380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:31:01 ispc CRON[1991380]: pam_unix(cron:session): session closed for user root Dec 18 16:32:01 ispc CRON[1991422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:32:02 ispc CRON[1991422]: pam_unix(cron:session): session closed for user root Dec 18 16:33:01 ispc CRON[1991473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:33:02 ispc CRON[1991473]: pam_unix(cron:session): session closed for user root Dec 18 16:34:01 ispc CRON[1991518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:34:01 ispc CRON[1991518]: pam_unix(cron:session): session closed for user root Dec 18 16:35:01 ispc CRON[1991556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:35:01 ispc CRON[1991557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:35:01 ispc CRON[1991558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:35:01 ispc CRON[1991559]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:35:01 ispc CRON[1991557]: pam_unix(cron:session): session closed for user root Dec 18 16:35:01 ispc CRON[1991559]: pam_unix(cron:session): session closed for user getmail Dec 18 16:35:02 ispc CRON[1991558]: pam_unix(cron:session): session closed for user root Dec 18 16:35:03 ispc CRON[1991556]: pam_unix(cron:session): session closed for user root Dec 18 16:36:01 ispc CRON[1991658]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:36:02 ispc CRON[1991658]: pam_unix(cron:session): session closed for user root Dec 18 16:36:29 ispc postfix/smtpd[1991686]: sql auxprop plugin using mysql engine Dec 18 16:36:29 ispc CRON[1990559]: pam_unix(cron:session): session closed for user root Dec 18 16:36:51 ispc saslauthd[1991691]: pam_mysql - SELECT returned no result. Dec 18 16:36:51 ispc saslauthd[1991691]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:36:51 ispc saslauthd[1991691]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:37:01 ispc CRON[1991693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:37:02 ispc CRON[1991693]: pam_unix(cron:session): session closed for user root Dec 18 16:37:04 ispc sshd[1991705]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 16:37:36 ispc sshd[1991682]: Invalid user klape from 36.50.177.171 Dec 18 16:38:01 ispc CRON[1991720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:38:02 ispc CRON[1991720]: pam_unix(cron:session): session closed for user root Dec 18 16:39:01 ispc CRON[1991735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:39:01 ispc CRON[1991736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:39:01 ispc CRON[1991735]: pam_unix(cron:session): session closed for user root Dec 18 16:39:02 ispc CRON[1991736]: pam_unix(cron:session): session closed for user root Dec 18 16:40:01 ispc CRON[1991762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:40:01 ispc CRON[1991765]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:40:01 ispc CRON[1991763]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:40:01 ispc CRON[1991761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:40:01 ispc CRON[1991764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:40:01 ispc CRON[1991762]: pam_unix(cron:session): session closed for user root Dec 18 16:40:01 ispc CRON[1991763]: pam_unix(cron:session): session closed for user www-data Dec 18 16:40:01 ispc CRON[1991765]: pam_unix(cron:session): session closed for user getmail Dec 18 16:40:02 ispc CRON[1991761]: pam_unix(cron:session): session closed for user root Dec 18 16:40:40 ispc CRON[1991764]: pam_unix(cron:session): session closed for user root Dec 18 16:40:41 ispc sshd[1991874]: Invalid user blceu from 49.247.24.89 Dec 18 16:41:01 ispc CRON[1991878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:41:16 ispc sshd[1991895]: Invalid user martof from 49.247.24.89 Dec 18 16:41:19 ispc sshd[1991905]: Invalid user klape from 103.164.20.29 Dec 18 16:41:20 ispc sshd[1991907]: Invalid user ubuntu from 103.164.20.29 Dec 18 16:42:01 ispc CRON[1991927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:42:02 ispc CRON[1991927]: pam_unix(cron:session): session closed for user root Dec 18 16:42:21 ispc sshd[1991947]: Invalid user ziplines from 211.23.78.98 Dec 18 16:42:49 ispc sshd[1991959]: Invalid user 2wire from 36.37.244.244 Dec 18 16:42:58 ispc postfix/smtpd[1991977]: sql auxprop plugin using mysql engine Dec 18 16:42:59 ispc saslauthd[1991979]: pam_mysql - SELECT returned no result. Dec 18 16:42:59 ispc saslauthd[1991979]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:42:59 ispc saslauthd[1991979]: do_auth : auth failure: [user=system_admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:43:01 ispc CRON[1991981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:43:01 ispc CRON[1991981]: pam_unix(cron:session): session closed for user root Dec 18 16:43:02 ispc sshd[1991992]: Invalid user kurtis from 62.60.131.157 Dec 18 16:43:42 ispc sshd[1992013]: Invalid user sol from 80.94.92.182 Dec 18 16:44:01 ispc CRON[1992025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:44:02 ispc CRON[1992025]: pam_unix(cron:session): session closed for user root Dec 18 16:45:01 ispc CRON[1992062]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:45:01 ispc CRON[1992063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:45:01 ispc CRON[1992064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:45:01 ispc CRON[1992065]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:45:01 ispc CRON[1992063]: pam_unix(cron:session): session closed for user root Dec 18 16:45:01 ispc CRON[1992065]: pam_unix(cron:session): session closed for user getmail Dec 18 16:45:02 ispc CRON[1992062]: pam_unix(cron:session): session closed for user root Dec 18 16:45:02 ispc CRON[1992064]: pam_unix(cron:session): session closed for user root Dec 18 16:45:09 ispc postfix/smtpd[1992142]: sql auxprop plugin using mysql engine Dec 18 16:45:09 ispc saslauthd[1992144]: pam_mysql - SELECT returned no result. Dec 18 16:45:09 ispc saslauthd[1992144]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:45:09 ispc saslauthd[1992144]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:46:01 ispc CRON[1992168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:46:02 ispc CRON[1992168]: pam_unix(cron:session): session closed for user root Dec 18 16:46:50 ispc postfix/smtpd[1992201]: sql auxprop plugin using mysql engine Dec 18 16:47:01 ispc CRON[1992207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:47:01 ispc CRON[1992207]: pam_unix(cron:session): session closed for user root Dec 18 16:48:01 ispc CRON[1992249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:48:02 ispc CRON[1992249]: pam_unix(cron:session): session closed for user root Dec 18 16:48:17 ispc postfix/smtpd[1992268]: sql auxprop plugin using mysql engine Dec 18 16:48:19 ispc saslauthd[1992270]: pam_mysql - SELECT returned no result. Dec 18 16:48:19 ispc saslauthd[1992270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:48:19 ispc saslauthd[1992270]: do_auth : auth failure: [user=sales@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 16:48:51 ispc sshd[1992281]: Did not receive identification string from 165.210.33.193 Dec 18 16:49:01 ispc CRON[1992291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:49:02 ispc CRON[1992291]: pam_unix(cron:session): session closed for user root Dec 18 16:50:01 ispc CRON[1992331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:50:01 ispc CRON[1992333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:50:01 ispc CRON[1992332]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 16:50:01 ispc CRON[1992334]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:50:01 ispc CRON[1992330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:50:01 ispc CRON[1992334]: pam_unix(cron:session): session closed for user getmail Dec 18 16:50:01 ispc CRON[1992332]: pam_unix(cron:session): session closed for user www-data Dec 18 16:50:01 ispc CRON[1992331]: pam_unix(cron:session): session closed for user root Dec 18 16:50:01 ispc CRON[1992333]: pam_unix(cron:session): session closed for user root Dec 18 16:50:02 ispc CRON[1992330]: pam_unix(cron:session): session closed for user root Dec 18 16:51:01 ispc CRON[1992437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:51:02 ispc CRON[1992437]: pam_unix(cron:session): session closed for user root Dec 18 16:52:01 ispc CRON[1992491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:52:02 ispc CRON[1992491]: pam_unix(cron:session): session closed for user root Dec 18 16:53:01 ispc CRON[1992539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:53:01 ispc CRON[1992539]: pam_unix(cron:session): session closed for user root Dec 18 16:53:23 ispc postfix/smtpd[1992563]: sql auxprop plugin using mysql engine Dec 18 16:53:23 ispc saslauthd[1992566]: pam_mysql - SELECT returned no result. Dec 18 16:53:23 ispc saslauthd[1992566]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:53:23 ispc saslauthd[1992566]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:53:57 ispc sshd[1992584]: Invalid user martof from 43.135.148.156 Dec 18 16:54:01 ispc CRON[1992596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:54:02 ispc CRON[1992596]: pam_unix(cron:session): session closed for user root Dec 18 16:55:01 ispc CRON[1992631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:55:01 ispc CRON[1992632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:55:01 ispc CRON[1992633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:55:01 ispc CRON[1992634]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 16:55:01 ispc CRON[1992632]: pam_unix(cron:session): session closed for user root Dec 18 16:55:01 ispc CRON[1992634]: pam_unix(cron:session): session closed for user getmail Dec 18 16:55:02 ispc CRON[1992631]: pam_unix(cron:session): session closed for user root Dec 18 16:55:02 ispc CRON[1992633]: pam_unix(cron:session): session closed for user root Dec 18 16:55:58 ispc postfix/smtpd[1992738]: sql auxprop plugin using mysql engine Dec 18 16:56:01 ispc CRON[1992740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:56:02 ispc CRON[1992740]: pam_unix(cron:session): session closed for user root Dec 18 16:57:01 ispc CRON[1992779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:57:03 ispc CRON[1992779]: pam_unix(cron:session): session closed for user root Dec 18 16:58:01 ispc CRON[1992826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:58:01 ispc CRON[1992826]: pam_unix(cron:session): session closed for user root Dec 18 16:58:05 ispc saslauthd[1992841]: pam_mysql - SELECT returned no result. Dec 18 16:58:05 ispc saslauthd[1992841]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 16:58:05 ispc saslauthd[1992841]: do_auth : auth failure: [user=t3admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 16:58:29 ispc sshd[1992862]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 16:58:30 ispc postfix/smtpd[1992865]: sql auxprop plugin using mysql engine Dec 18 16:59:01 ispc CRON[1992888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 16:59:02 ispc CRON[1992888]: pam_unix(cron:session): session closed for user root Dec 18 17:00:01 ispc CRON[1992927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:00:01 ispc CRON[1992928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:00:01 ispc CRON[1992929]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:00:01 ispc CRON[1992930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:00:01 ispc CRON[1992931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:00:01 ispc CRON[1992932]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:00:01 ispc CRON[1992928]: pam_unix(cron:session): session closed for user root Dec 18 17:00:01 ispc CRON[1992929]: pam_unix(cron:session): session closed for user www-data Dec 18 17:00:01 ispc CRON[1992932]: pam_unix(cron:session): session closed for user getmail Dec 18 17:00:02 ispc CRON[1992927]: pam_unix(cron:session): session closed for user root Dec 18 17:00:02 ispc CRON[1992931]: pam_unix(cron:session): session closed for user root Dec 18 17:00:02 ispc CRON[1992930]: pam_unix(cron:session): session closed for user root Dec 18 17:01:01 ispc CRON[1993111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:01:02 ispc CRON[1993111]: pam_unix(cron:session): session closed for user root Dec 18 17:01:26 ispc postfix/smtpd[1993137]: sql auxprop plugin using mysql engine Dec 18 17:01:26 ispc CRON[1991878]: pam_unix(cron:session): session closed for user root Dec 18 17:01:45 ispc saslauthd[1993142]: pam_mysql - SELECT returned no result. Dec 18 17:01:45 ispc saslauthd[1993142]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:01:45 ispc saslauthd[1993142]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:02:01 ispc CRON[1993151]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 17:02:01 ispc CRON[1993152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:02:02 ispc CRON[1993152]: pam_unix(cron:session): session closed for user root Dec 18 17:03:01 ispc CRON[1993917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:03:03 ispc CRON[1993917]: pam_unix(cron:session): session closed for user root Dec 18 17:03:33 ispc CRON[1993151]: pam_unix(cron:session): session closed for user logcheck Dec 18 17:03:41 ispc postfix/smtpd[1994205]: sql auxprop plugin using mysql engine Dec 18 17:04:01 ispc CRON[1994211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:04:02 ispc CRON[1994211]: pam_unix(cron:session): session closed for user root Dec 18 17:04:05 ispc sshd[1994209]: Invalid user lanovacentra from 36.134.126.74 Dec 18 17:05:01 ispc CRON[1994226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:05:01 ispc CRON[1994227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:05:01 ispc CRON[1994228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:05:01 ispc CRON[1994229]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:05:01 ispc CRON[1994227]: pam_unix(cron:session): session closed for user root Dec 18 17:05:02 ispc CRON[1994229]: pam_unix(cron:session): session closed for user getmail Dec 18 17:05:02 ispc CRON[1994226]: pam_unix(cron:session): session closed for user root Dec 18 17:05:28 ispc postfix/smtpd[1994339]: sql auxprop plugin using mysql engine Dec 18 17:05:35 ispc CRON[1994228]: pam_unix(cron:session): session closed for user root Dec 18 17:06:01 ispc CRON[1994344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:07:01 ispc CRON[1994380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:07:01 ispc CRON[1994380]: pam_unix(cron:session): session closed for user root Dec 18 17:07:02 ispc sshd[1994391]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:08:02 ispc CRON[1994429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:08:02 ispc CRON[1994429]: pam_unix(cron:session): session closed for user root Dec 18 17:09:01 ispc CRON[1994467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:09:01 ispc CRON[1994466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:09:02 ispc CRON[1994466]: pam_unix(cron:session): session closed for user root Dec 18 17:09:02 ispc CRON[1994467]: pam_unix(cron:session): session closed for user root Dec 18 17:09:30 ispc sshd[1994502]: Invalid user ziplines from 51.159.91.86 Dec 18 17:10:01 ispc CRON[1994517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:10:01 ispc CRON[1994518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:10:01 ispc CRON[1994519]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:10:01 ispc CRON[1994520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:10:01 ispc CRON[1994521]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:10:01 ispc CRON[1994521]: pam_unix(cron:session): session closed for user getmail Dec 18 17:10:01 ispc CRON[1994519]: pam_unix(cron:session): session closed for user www-data Dec 18 17:10:01 ispc CRON[1994518]: pam_unix(cron:session): session closed for user root Dec 18 17:10:02 ispc CRON[1994520]: pam_unix(cron:session): session closed for user root Dec 18 17:10:03 ispc CRON[1994517]: pam_unix(cron:session): session closed for user root Dec 18 17:10:18 ispc postfix/smtpd[1994603]: sql auxprop plugin using mysql engine Dec 18 17:10:18 ispc saslauthd[1994607]: pam_mysql - SELECT returned no result. Dec 18 17:10:18 ispc saslauthd[1994607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:10:18 ispc saslauthd[1994607]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:11:01 ispc CRON[1994629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:11:02 ispc CRON[1994629]: pam_unix(cron:session): session closed for user root Dec 18 17:12:01 ispc CRON[1994669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:12:02 ispc CRON[1994669]: pam_unix(cron:session): session closed for user root Dec 18 17:12:42 ispc postfix/smtpd[1994699]: sql auxprop plugin using mysql engine Dec 18 17:12:43 ispc saslauthd[1994701]: pam_mysql - SELECT returned no result. Dec 18 17:12:43 ispc saslauthd[1994701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:12:43 ispc saslauthd[1994701]: do_auth : auth failure: [user=tasman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:13:01 ispc CRON[1994718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:13:02 ispc CRON[1994718]: pam_unix(cron:session): session closed for user root Dec 18 17:14:00 ispc sshd[1994751]: Invalid user blceu from 51.159.91.86 Dec 18 17:14:01 ispc CRON[1994753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:14:02 ispc CRON[1994753]: pam_unix(cron:session): session closed for user root Dec 18 17:15:01 ispc CRON[1994794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:15:01 ispc CRON[1994795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:15:01 ispc CRON[1994796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:15:01 ispc CRON[1994797]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:15:01 ispc CRON[1994795]: pam_unix(cron:session): session closed for user root Dec 18 17:15:01 ispc CRON[1994797]: pam_unix(cron:session): session closed for user getmail Dec 18 17:15:02 ispc CRON[1994796]: pam_unix(cron:session): session closed for user root Dec 18 17:15:03 ispc CRON[1994794]: pam_unix(cron:session): session closed for user root Dec 18 17:15:38 ispc postfix/smtpd[1994892]: sql auxprop plugin using mysql engine Dec 18 17:16:01 ispc CRON[1994910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:16:02 ispc CRON[1994910]: pam_unix(cron:session): session closed for user root Dec 18 17:17:01 ispc CRON[1994950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:17:02 ispc CRON[1994950]: pam_unix(cron:session): session closed for user root Dec 18 17:18:01 ispc CRON[1994995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:18:01 ispc CRON[1994995]: pam_unix(cron:session): session closed for user root Dec 18 17:18:56 ispc postfix/smtpd[1995028]: sql auxprop plugin using mysql engine Dec 18 17:18:56 ispc saslauthd[1995030]: pam_mysql - SELECT returned no result. Dec 18 17:18:56 ispc saslauthd[1995030]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:18:56 ispc saslauthd[1995030]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:19:02 ispc CRON[1995035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:19:02 ispc CRON[1995035]: pam_unix(cron:session): session closed for user root Dec 18 17:20:01 ispc CRON[1995081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:20:01 ispc CRON[1995082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:20:01 ispc CRON[1995083]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:20:01 ispc CRON[1995084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:20:01 ispc CRON[1995085]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:20:02 ispc CRON[1995083]: pam_unix(cron:session): session closed for user www-data Dec 18 17:20:02 ispc CRON[1995082]: pam_unix(cron:session): session closed for user root Dec 18 17:20:02 ispc CRON[1995085]: pam_unix(cron:session): session closed for user getmail Dec 18 17:20:02 ispc CRON[1995084]: pam_unix(cron:session): session closed for user root Dec 18 17:20:02 ispc CRON[1995081]: pam_unix(cron:session): session closed for user root Dec 18 17:21:01 ispc CRON[1995188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:21:01 ispc CRON[1995189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:21:01 ispc CRON[1995188]: pam_unix(cron:session): session closed for user root Dec 18 17:21:02 ispc CRON[1995189]: pam_unix(cron:session): session closed for user root Dec 18 17:21:37 ispc sshd[1995218]: Invalid user martof from 210.114.18.123 Dec 18 17:22:01 ispc CRON[1995228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:22:01 ispc CRON[1995228]: pam_unix(cron:session): session closed for user root Dec 18 17:22:27 ispc sshd[1995251]: Did not receive identification string from 78.84.151.229 Dec 18 17:22:27 ispc sshd[1995252]: Invalid user a from 78.84.151.229 Dec 18 17:22:37 ispc sshd[1995258]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:22:37 ispc sshd[1995258]: Invalid user martof from 157.245.115.125 Dec 18 17:23:01 ispc CRON[1995281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:23:02 ispc CRON[1995281]: pam_unix(cron:session): session closed for user root Dec 18 17:24:01 ispc CRON[1995318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:24:02 ispc CRON[1995318]: pam_unix(cron:session): session closed for user root Dec 18 17:25:01 ispc CRON[1995360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:25:01 ispc CRON[1995361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:25:01 ispc CRON[1995362]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:25:01 ispc CRON[1995363]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:25:01 ispc CRON[1995361]: pam_unix(cron:session): session closed for user root Dec 18 17:25:01 ispc CRON[1995363]: pam_unix(cron:session): session closed for user getmail Dec 18 17:25:02 ispc CRON[1995362]: pam_unix(cron:session): session closed for user root Dec 18 17:25:02 ispc CRON[1995360]: pam_unix(cron:session): session closed for user root Dec 18 17:25:50 ispc sshd[1995457]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:25:50 ispc sshd[1995457]: Invalid user blceu from 103.28.37.227 Dec 18 17:26:01 ispc CRON[1995466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:26:02 ispc CRON[1995466]: pam_unix(cron:session): session closed for user root Dec 18 17:26:34 ispc postfix/smtpd[1995492]: sql auxprop plugin using mysql engine Dec 18 17:26:34 ispc CRON[1994344]: pam_unix(cron:session): session closed for user root Dec 18 17:27:01 ispc CRON[1995497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:27:02 ispc CRON[1995497]: pam_unix(cron:session): session closed for user root Dec 18 17:27:05 ispc saslauthd[1995511]: pam_mysql - SELECT returned no result. Dec 18 17:27:05 ispc saslauthd[1995511]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:27:05 ispc saslauthd[1995511]: do_auth : auth failure: [user=teacher] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:27:31 ispc saslauthd[1995514]: pam_mysql - SELECT returned no result. Dec 18 17:27:31 ispc saslauthd[1995514]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:27:31 ispc saslauthd[1995514]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:27:50 ispc saslauthd[1995522]: pam_mysql - SELECT returned no result. Dec 18 17:27:50 ispc saslauthd[1995522]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:27:50 ispc saslauthd[1995522]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:28:01 ispc CRON[1995528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:28:02 ispc CRON[1995528]: pam_unix(cron:session): session closed for user root Dec 18 17:29:01 ispc CRON[1995541]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:29:01 ispc CRON[1995541]: pam_unix(cron:session): session closed for user root Dec 18 17:30:01 ispc CRON[1995557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:30:01 ispc CRON[1995558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:30:01 ispc CRON[1995559]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:30:01 ispc CRON[1995560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:30:01 ispc CRON[1995561]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:30:01 ispc CRON[1995558]: pam_unix(cron:session): session closed for user root Dec 18 17:30:01 ispc CRON[1995559]: pam_unix(cron:session): session closed for user www-data Dec 18 17:30:01 ispc CRON[1995561]: pam_unix(cron:session): session closed for user getmail Dec 18 17:30:02 ispc CRON[1995557]: pam_unix(cron:session): session closed for user root Dec 18 17:30:50 ispc CRON[1995560]: pam_unix(cron:session): session closed for user root Dec 18 17:31:01 ispc CRON[1995746]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:32:01 ispc CRON[1995780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:32:01 ispc CRON[1995780]: pam_unix(cron:session): session closed for user root Dec 18 17:33:01 ispc CRON[1995829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:33:03 ispc CRON[1995829]: pam_unix(cron:session): session closed for user root Dec 18 17:34:01 ispc CRON[1995870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:34:01 ispc CRON[1995870]: pam_unix(cron:session): session closed for user root Dec 18 17:35:00 ispc sshd[1995908]: Did not receive identification string from 45.140.17.97 Dec 18 17:35:00 ispc postfix/smtpd[1995909]: sql auxprop plugin using mysql engine Dec 18 17:35:01 ispc CRON[1995913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:35:01 ispc CRON[1995914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:35:01 ispc CRON[1995915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:35:01 ispc CRON[1995916]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:35:01 ispc CRON[1995914]: pam_unix(cron:session): session closed for user root Dec 18 17:35:01 ispc CRON[1995916]: pam_unix(cron:session): session closed for user getmail Dec 18 17:35:02 ispc CRON[1995915]: pam_unix(cron:session): session closed for user root Dec 18 17:35:04 ispc CRON[1995913]: pam_unix(cron:session): session closed for user root Dec 18 17:36:00 ispc saslauthd[1996013]: pam_mysql - SELECT returned no result. Dec 18 17:36:00 ispc saslauthd[1996013]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:36:00 ispc saslauthd[1996013]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:36:01 ispc CRON[1996018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:36:01 ispc CRON[1996018]: pam_unix(cron:session): session closed for user root Dec 18 17:37:01 ispc CRON[1996058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:37:02 ispc CRON[1996058]: pam_unix(cron:session): session closed for user root Dec 18 17:37:36 ispc postfix/smtpd[1996090]: sql auxprop plugin using mysql engine Dec 18 17:38:01 ispc CRON[1996113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:38:02 ispc CRON[1996113]: pam_unix(cron:session): session closed for user root Dec 18 17:39:01 ispc CRON[1996152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:39:01 ispc CRON[1996153]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:39:01 ispc CRON[1996152]: pam_unix(cron:session): session closed for user root Dec 18 17:39:02 ispc CRON[1996153]: pam_unix(cron:session): session closed for user root Dec 18 17:39:45 ispc sshd[1996196]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:39:46 ispc sshd[1996198]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:39:46 ispc sshd[1996198]: Invalid user klape from 189.89.20.45 Dec 18 17:39:48 ispc sshd[1996204]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:39:48 ispc sshd[1996204]: Invalid user ubuntu from 189.89.20.45 Dec 18 17:39:49 ispc postfix/smtpd[1996206]: sql auxprop plugin using mysql engine Dec 18 17:39:50 ispc saslauthd[1996208]: pam_mysql - SELECT returned no result. Dec 18 17:39:50 ispc saslauthd[1996208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:39:50 ispc saslauthd[1996208]: do_auth : auth failure: [user=scan@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 17:40:01 ispc CRON[1996217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:40:01 ispc CRON[1996218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:40:01 ispc CRON[1996219]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:40:01 ispc CRON[1996220]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:40:01 ispc CRON[1996221]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:40:01 ispc CRON[1996219]: pam_unix(cron:session): session closed for user www-data Dec 18 17:40:01 ispc CRON[1996218]: pam_unix(cron:session): session closed for user root Dec 18 17:40:01 ispc CRON[1996221]: pam_unix(cron:session): session closed for user getmail Dec 18 17:40:02 ispc CRON[1996220]: pam_unix(cron:session): session closed for user root Dec 18 17:40:03 ispc CRON[1996217]: pam_unix(cron:session): session closed for user root Dec 18 17:40:49 ispc sshd[1996313]: Invalid user ziplines from 27.254.144.183 Dec 18 17:41:01 ispc CRON[1996324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:41:02 ispc CRON[1996324]: pam_unix(cron:session): session closed for user root Dec 18 17:41:06 ispc sshd[1996331]: Invalid user blceu from 117.50.70.169 Dec 18 17:41:36 ispc sshd[1996353]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 17:42:01 ispc CRON[1996368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:42:01 ispc CRON[1996368]: pam_unix(cron:session): session closed for user root Dec 18 17:42:05 ispc postfix/smtpd[1996380]: sql auxprop plugin using mysql engine Dec 18 17:42:07 ispc saslauthd[1996382]: pam_mysql - SELECT returned no result. Dec 18 17:42:07 ispc saslauthd[1996382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:42:07 ispc saslauthd[1996382]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:42:54 ispc sshd[1996413]: Did not receive identification string from 192.227.134.84 Dec 18 17:43:01 ispc CRON[1996415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:43:03 ispc CRON[1996415]: pam_unix(cron:session): session closed for user root Dec 18 17:44:01 ispc CRON[1996459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:44:01 ispc CRON[1996459]: pam_unix(cron:session): session closed for user root Dec 18 17:44:26 ispc postfix/smtpd[1996484]: sql auxprop plugin using mysql engine Dec 18 17:44:27 ispc saslauthd[1996486]: pam_mysql - SELECT returned no result. Dec 18 17:44:27 ispc saslauthd[1996486]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:44:27 ispc saslauthd[1996486]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:45:01 ispc CRON[1996499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:45:01 ispc CRON[1996500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:45:01 ispc CRON[1996501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:45:01 ispc CRON[1996502]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:45:01 ispc CRON[1996500]: pam_unix(cron:session): session closed for user root Dec 18 17:45:02 ispc CRON[1996502]: pam_unix(cron:session): session closed for user getmail Dec 18 17:45:03 ispc CRON[1996501]: pam_unix(cron:session): session closed for user root Dec 18 17:45:04 ispc CRON[1996499]: pam_unix(cron:session): session closed for user root Dec 18 17:45:48 ispc sshd[1996597]: Invalid user martof from 211.23.78.98 Dec 18 17:46:01 ispc CRON[1996607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:46:02 ispc CRON[1996607]: pam_unix(cron:session): session closed for user root Dec 18 17:46:15 ispc sshd[1996623]: Did not receive identification string from 178.62.220.150 Dec 18 17:46:36 ispc postfix/smtpd[1996635]: sql auxprop plugin using mysql engine Dec 18 17:47:01 ispc CRON[1996654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:47:02 ispc CRON[1996654]: pam_unix(cron:session): session closed for user root Dec 18 17:48:01 ispc CRON[1996711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:48:02 ispc CRON[1996711]: pam_unix(cron:session): session closed for user root Dec 18 17:49:01 ispc CRON[1996747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:49:01 ispc CRON[1996747]: pam_unix(cron:session): session closed for user root Dec 18 17:49:20 ispc sshd[1996766]: Invalid user blceu from 211.23.78.98 Dec 18 17:50:01 ispc CRON[1996790]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:50:01 ispc CRON[1996791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:50:01 ispc CRON[1996792]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 17:50:01 ispc CRON[1996793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:50:01 ispc CRON[1996794]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:50:01 ispc CRON[1996792]: pam_unix(cron:session): session closed for user www-data Dec 18 17:50:01 ispc CRON[1996791]: pam_unix(cron:session): session closed for user root Dec 18 17:50:01 ispc CRON[1996794]: pam_unix(cron:session): session closed for user getmail Dec 18 17:50:02 ispc CRON[1996793]: pam_unix(cron:session): session closed for user root Dec 18 17:50:02 ispc CRON[1996790]: pam_unix(cron:session): session closed for user root Dec 18 17:51:01 ispc CRON[1996896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:51:02 ispc CRON[1996896]: pam_unix(cron:session): session closed for user root Dec 18 17:51:23 ispc sshd[1996918]: Invalid user admin from 103.172.236.164 Dec 18 17:51:25 ispc sshd[1996924]: Invalid user admin from 103.172.236.164 Dec 18 17:51:33 ispc postfix/smtpd[1996929]: sql auxprop plugin using mysql engine Dec 18 17:51:33 ispc CRON[1995746]: pam_unix(cron:session): session closed for user root Dec 18 17:52:01 ispc CRON[1996937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:52:02 ispc CRON[1996937]: pam_unix(cron:session): session closed for user root Dec 18 17:52:54 ispc saslauthd[1996962]: pam_mysql - SELECT returned no result. Dec 18 17:52:54 ispc saslauthd[1996962]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:52:54 ispc saslauthd[1996962]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:53:01 ispc CRON[1996965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:53:02 ispc CRON[1996965]: pam_unix(cron:session): session closed for user root Dec 18 17:53:47 ispc sshd[1996989]: Invalid user admin from 103.172.236.164 Dec 18 17:54:01 ispc CRON[1996991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:54:02 ispc CRON[1996991]: pam_unix(cron:session): session closed for user root Dec 18 17:54:43 ispc sshd[1997014]: Invalid user admin from 103.172.236.164 Dec 18 17:55:01 ispc CRON[1997016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:55:01 ispc CRON[1997017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:55:01 ispc CRON[1997018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:55:01 ispc CRON[1997019]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 17:55:01 ispc CRON[1997017]: pam_unix(cron:session): session closed for user root Dec 18 17:55:01 ispc CRON[1997019]: pam_unix(cron:session): session closed for user getmail Dec 18 17:55:02 ispc CRON[1997016]: pam_unix(cron:session): session closed for user root Dec 18 17:55:36 ispc CRON[1997018]: pam_unix(cron:session): session closed for user root Dec 18 17:55:50 ispc sshd[1997136]: Invalid user admin from 103.172.236.164 Dec 18 17:56:01 ispc CRON[1997141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:57:01 ispc CRON[1997178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:57:02 ispc CRON[1997178]: pam_unix(cron:session): session closed for user root Dec 18 17:57:04 ispc postfix/smtpd[1997193]: sql auxprop plugin using mysql engine Dec 18 17:57:06 ispc saslauthd[1997196]: pam_mysql - SELECT returned no result. Dec 18 17:57:06 ispc saslauthd[1997196]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 17:57:06 ispc saslauthd[1997196]: do_auth : auth failure: [user=technician] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 17:58:01 ispc CRON[1997228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:58:02 ispc CRON[1997228]: pam_unix(cron:session): session closed for user root Dec 18 17:58:39 ispc sshd[1997258]: Invalid user blceu from 210.114.18.123 Dec 18 17:59:01 ispc CRON[1997271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 17:59:03 ispc CRON[1997271]: pam_unix(cron:session): session closed for user root Dec 18 17:59:42 ispc postfix/smtpd[1997302]: sql auxprop plugin using mysql engine Dec 18 18:00:01 ispc CRON[1997316]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:00:01 ispc CRON[1997315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:00:01 ispc CRON[1997318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:00:01 ispc CRON[1997316]: pam_unix(cron:session): session closed for user www-data Dec 18 18:00:01 ispc CRON[1997315]: pam_unix(cron:session): session closed for user root Dec 18 18:00:01 ispc CRON[1997317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:00:01 ispc CRON[1997319]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:00:01 ispc CRON[1997314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:00:01 ispc CRON[1997319]: pam_unix(cron:session): session closed for user getmail Dec 18 18:00:02 ispc CRON[1997314]: pam_unix(cron:session): session closed for user root Dec 18 18:00:02 ispc CRON[1997318]: pam_unix(cron:session): session closed for user root Dec 18 18:00:03 ispc CRON[1997317]: pam_unix(cron:session): session closed for user root Dec 18 18:00:39 ispc sshd[1997495]: Invalid user admin from 103.172.236.164 Dec 18 18:00:59 ispc sshd[1997511]: Invalid user admin from 178.62.220.150 Dec 18 18:01:01 ispc CRON[1997513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:01:01 ispc CRON[1997513]: pam_unix(cron:session): session closed for user root Dec 18 18:01:20 ispc postfix/smtpd[1997533]: sql auxprop plugin using mysql engine Dec 18 18:01:20 ispc saslauthd[1997535]: pam_mysql - SELECT returned no result. Dec 18 18:01:20 ispc saslauthd[1997535]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:01:20 ispc saslauthd[1997535]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:01:35 ispc sshd[1997541]: Invalid user admin from 178.62.220.150 Dec 18 18:02:01 ispc CRON[1997556]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 18:02:01 ispc CRON[1997557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:02:02 ispc CRON[1997557]: pam_unix(cron:session): session closed for user root Dec 18 18:02:11 ispc sshd[1997795]: Invalid user admin from 178.62.220.150 Dec 18 18:02:45 ispc sshd[1998296]: Invalid user admin from 178.62.220.150 Dec 18 18:03:01 ispc CRON[1998437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:03:01 ispc CRON[1998437]: pam_unix(cron:session): session closed for user root Dec 18 18:03:20 ispc sshd[1998574]: Invalid user admin from 178.62.220.150 Dec 18 18:03:24 ispc CRON[1997556]: pam_unix(cron:session): session closed for user logcheck Dec 18 18:03:29 ispc postfix/smtpd[1998640]: sql auxprop plugin using mysql engine Dec 18 18:03:53 ispc sshd[1998657]: Invalid user admin from 178.62.220.150 Dec 18 18:04:01 ispc CRON[1998666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:04:02 ispc CRON[1998666]: pam_unix(cron:session): session closed for user root Dec 18 18:04:25 ispc postfix/smtpd[1998690]: sql auxprop plugin using mysql engine Dec 18 18:05:01 ispc CRON[1998710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:05:01 ispc CRON[1998711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:05:01 ispc CRON[1998712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:05:01 ispc CRON[1998713]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:05:01 ispc CRON[1998711]: pam_unix(cron:session): session closed for user root Dec 18 18:05:01 ispc CRON[1998713]: pam_unix(cron:session): session closed for user getmail Dec 18 18:05:02 ispc CRON[1998712]: pam_unix(cron:session): session closed for user root Dec 18 18:05:03 ispc CRON[1998710]: pam_unix(cron:session): session closed for user root Dec 18 18:06:01 ispc CRON[1998813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:06:03 ispc CRON[1998813]: pam_unix(cron:session): session closed for user root Dec 18 18:07:01 ispc CRON[1998853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:07:02 ispc CRON[1998853]: pam_unix(cron:session): session closed for user root Dec 18 18:08:01 ispc CRON[1998897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:08:02 ispc CRON[1998897]: pam_unix(cron:session): session closed for user root Dec 18 18:08:05 ispc postfix/smtpd[1998909]: sql auxprop plugin using mysql engine Dec 18 18:09:01 ispc CRON[1998937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:09:01 ispc CRON[1998938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:09:01 ispc CRON[1998937]: pam_unix(cron:session): session closed for user root Dec 18 18:09:01 ispc CRON[1998938]: pam_unix(cron:session): session closed for user root Dec 18 18:09:26 ispc sshd[1998967]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 18:09:42 ispc postfix/smtpd[1998977]: sql auxprop plugin using mysql engine Dec 18 18:09:43 ispc saslauthd[1998979]: pam_mysql - SELECT returned no result. Dec 18 18:09:43 ispc saslauthd[1998979]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:09:43 ispc saslauthd[1998979]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:10:01 ispc CRON[1998989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:10:01 ispc CRON[1998991]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:10:01 ispc CRON[1998992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:10:01 ispc CRON[1998993]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:10:01 ispc CRON[1998990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:10:01 ispc CRON[1998991]: pam_unix(cron:session): session closed for user www-data Dec 18 18:10:01 ispc CRON[1998990]: pam_unix(cron:session): session closed for user root Dec 18 18:10:01 ispc CRON[1998993]: pam_unix(cron:session): session closed for user getmail Dec 18 18:10:02 ispc CRON[1998992]: pam_unix(cron:session): session closed for user root Dec 18 18:10:02 ispc CRON[1998989]: pam_unix(cron:session): session closed for user root Dec 18 18:11:01 ispc CRON[1999092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:11:02 ispc CRON[1999092]: pam_unix(cron:session): session closed for user root Dec 18 18:12:00 ispc postfix/smtpd[1999128]: sql auxprop plugin using mysql engine Dec 18 18:12:01 ispc saslauthd[1999130]: pam_mysql - SELECT returned no result. Dec 18 18:12:01 ispc saslauthd[1999130]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:12:01 ispc saslauthd[1999130]: do_auth : auth failure: [user=tele] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:12:01 ispc CRON[1999131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:12:02 ispc CRON[1999131]: pam_unix(cron:session): session closed for user root Dec 18 18:12:19 ispc sshd[1999152]: Invalid user martof from 116.120.58.228 Dec 18 18:13:01 ispc CRON[1999182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:13:01 ispc CRON[1999182]: pam_unix(cron:session): session closed for user root Dec 18 18:14:01 ispc CRON[1999223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:14:02 ispc CRON[1999223]: pam_unix(cron:session): session closed for user root Dec 18 18:14:40 ispc sshd[1999250]: Invalid user ftp from 45.119.213.109 Dec 18 18:15:01 ispc CRON[1999260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:15:01 ispc CRON[1999261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:15:01 ispc CRON[1999262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:15:01 ispc CRON[1999263]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:15:01 ispc CRON[1999261]: pam_unix(cron:session): session closed for user root Dec 18 18:15:01 ispc CRON[1999263]: pam_unix(cron:session): session closed for user getmail Dec 18 18:15:02 ispc CRON[1999262]: pam_unix(cron:session): session closed for user root Dec 18 18:15:03 ispc CRON[1999260]: pam_unix(cron:session): session closed for user root Dec 18 18:15:25 ispc sshd[1999345]: Invalid user blceu from 27.254.144.183 Dec 18 18:16:01 ispc CRON[1999366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:16:01 ispc CRON[1999366]: pam_unix(cron:session): session closed for user root Dec 18 18:16:29 ispc postfix/smtpd[1999389]: sql auxprop plugin using mysql engine Dec 18 18:16:29 ispc CRON[1997141]: pam_unix(cron:session): session closed for user root Dec 18 18:17:01 ispc CRON[1999395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:17:01 ispc CRON[1999395]: pam_unix(cron:session): session closed for user root Dec 18 18:17:52 ispc sshd[1999415]: Invalid user ftp from 45.119.213.109 Dec 18 18:18:01 ispc CRON[1999422]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 18:18:01 ispc CRON[1999423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:18:02 ispc CRON[1999423]: pam_unix(cron:session): session closed for user root Dec 18 18:18:06 ispc CRON[1999422]: pam_unix(cron:session): session closed for user amavis Dec 18 18:18:07 ispc postfix/smtpd[1999448]: sql auxprop plugin using mysql engine Dec 18 18:18:22 ispc saslauthd[1999451]: pam_mysql - SELECT returned no result. Dec 18 18:18:22 ispc saslauthd[1999451]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:18:22 ispc saslauthd[1999451]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:19:01 ispc CRON[1999452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:19:02 ispc CRON[1999452]: pam_unix(cron:session): session closed for user root Dec 18 18:20:01 ispc CRON[1999468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:20:01 ispc CRON[1999469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:20:01 ispc CRON[1999470]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:20:01 ispc CRON[1999471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:20:01 ispc CRON[1999472]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:20:01 ispc CRON[1999469]: pam_unix(cron:session): session closed for user root Dec 18 18:20:01 ispc CRON[1999470]: pam_unix(cron:session): session closed for user www-data Dec 18 18:20:01 ispc CRON[1999472]: pam_unix(cron:session): session closed for user getmail Dec 18 18:20:03 ispc CRON[1999468]: pam_unix(cron:session): session closed for user root Dec 18 18:20:35 ispc CRON[1999471]: pam_unix(cron:session): session closed for user root Dec 18 18:21:01 ispc CRON[1999587]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:21:01 ispc CRON[1999588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:21:01 ispc CRON[1999587]: pam_unix(cron:session): session closed for user root Dec 18 18:22:01 ispc CRON[1999642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:22:02 ispc CRON[1999642]: pam_unix(cron:session): session closed for user root Dec 18 18:23:01 ispc CRON[1999688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:23:02 ispc CRON[1999688]: pam_unix(cron:session): session closed for user root Dec 18 18:24:01 ispc CRON[1999725]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:24:02 ispc CRON[1999725]: pam_unix(cron:session): session closed for user root Dec 18 18:24:38 ispc sshd[1999754]: Did not receive identification string from 192.227.134.84 Dec 18 18:25:01 ispc CRON[1999764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:25:01 ispc CRON[1999765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:25:01 ispc CRON[1999766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:25:01 ispc CRON[1999767]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:25:01 ispc CRON[1999765]: pam_unix(cron:session): session closed for user root Dec 18 18:25:01 ispc CRON[1999767]: pam_unix(cron:session): session closed for user getmail Dec 18 18:25:02 ispc CRON[1999764]: pam_unix(cron:session): session closed for user root Dec 18 18:25:02 ispc CRON[1999766]: pam_unix(cron:session): session closed for user root Dec 18 18:26:01 ispc CRON[1999867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:26:03 ispc CRON[1999867]: pam_unix(cron:session): session closed for user root Dec 18 18:26:50 ispc postfix/smtpd[1999899]: sql auxprop plugin using mysql engine Dec 18 18:26:53 ispc postfix/smtpd[1999902]: sql auxprop plugin using mysql engine Dec 18 18:26:54 ispc postfix/smtpd[1999903]: sql auxprop plugin using mysql engine Dec 18 18:26:55 ispc saslauthd[1999904]: pam_mysql - SELECT returned no result. Dec 18 18:26:55 ispc saslauthd[1999904]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:26:55 ispc saslauthd[1999904]: do_auth : auth failure: [user=temp1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:26:56 ispc saslauthd[1999909]: pam_mysql - SELECT returned no result. Dec 18 18:26:56 ispc saslauthd[1999909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:26:56 ispc saslauthd[1999909]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:27:01 ispc CRON[1999910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:27:01 ispc CRON[1999910]: pam_unix(cron:session): session closed for user root Dec 18 18:28:01 ispc CRON[1999957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:28:02 ispc CRON[1999957]: pam_unix(cron:session): session closed for user root Dec 18 18:28:40 ispc sshd[1999986]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 18:28:40 ispc sshd[1999986]: Invalid user blceu from 157.245.115.125 Dec 18 18:29:01 ispc CRON[1999997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:29:02 ispc CRON[1999997]: pam_unix(cron:session): session closed for user root Dec 18 18:29:16 ispc sshd[2000013]: Invalid user blceu from 185.181.182.252 Dec 18 18:29:59 ispc postfix/smtpd[2000038]: sql auxprop plugin using mysql engine Dec 18 18:30:01 ispc CRON[2000050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:30:01 ispc CRON[2000051]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:30:01 ispc CRON[2000052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:30:01 ispc CRON[2000053]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:30:01 ispc CRON[2000049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:30:01 ispc CRON[2000051]: pam_unix(cron:session): session closed for user www-data Dec 18 18:30:01 ispc CRON[2000050]: pam_unix(cron:session): session closed for user root Dec 18 18:30:01 ispc CRON[2000053]: pam_unix(cron:session): session closed for user getmail Dec 18 18:30:02 ispc CRON[2000052]: pam_unix(cron:session): session closed for user root Dec 18 18:30:02 ispc CRON[2000049]: pam_unix(cron:session): session closed for user root Dec 18 18:30:06 ispc postfix/smtpd[2000129]: sql auxprop plugin using mysql engine Dec 18 18:31:01 ispc CRON[2000161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:31:02 ispc CRON[2000161]: pam_unix(cron:session): session closed for user root Dec 18 18:32:01 ispc CRON[2000201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:32:02 ispc CRON[2000201]: pam_unix(cron:session): session closed for user root Dec 18 18:32:08 ispc postfix/smtpd[2000216]: sql auxprop plugin using mysql engine Dec 18 18:32:08 ispc saslauthd[2000218]: pam_mysql - SELECT returned no result. Dec 18 18:32:08 ispc saslauthd[2000218]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:32:08 ispc saslauthd[2000218]: do_auth : auth failure: [user=scanner@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 18:32:37 ispc sshd[2000231]: Invalid user ziplines from 210.114.18.123 Dec 18 18:33:01 ispc CRON[2000256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:33:02 ispc CRON[2000256]: pam_unix(cron:session): session closed for user root Dec 18 18:33:55 ispc postfix/smtpd[2000291]: sql auxprop plugin using mysql engine Dec 18 18:34:01 ispc CRON[2000303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:34:02 ispc CRON[2000303]: pam_unix(cron:session): session closed for user root Dec 18 18:34:04 ispc postfix/smtpd[2000315]: sql auxprop plugin using mysql engine Dec 18 18:35:01 ispc CRON[2000350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:35:01 ispc CRON[2000351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:35:01 ispc CRON[2000352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:35:01 ispc CRON[2000353]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:35:01 ispc CRON[2000351]: pam_unix(cron:session): session closed for user root Dec 18 18:35:01 ispc CRON[2000353]: pam_unix(cron:session): session closed for user getmail Dec 18 18:35:02 ispc CRON[2000352]: pam_unix(cron:session): session closed for user root Dec 18 18:35:03 ispc CRON[2000350]: pam_unix(cron:session): session closed for user root Dec 18 18:35:20 ispc saslauthd[2000435]: pam_mysql - SELECT returned no result. Dec 18 18:35:20 ispc saslauthd[2000435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:35:20 ispc saslauthd[2000435]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:36:01 ispc CRON[2000458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:36:02 ispc CRON[2000458]: pam_unix(cron:session): session closed for user root Dec 18 18:36:59 ispc sshd[2000491]: Invalid user martof from 52.232.19.79 Dec 18 18:37:01 ispc CRON[2000497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:37:02 ispc CRON[2000497]: pam_unix(cron:session): session closed for user root Dec 18 18:38:01 ispc CRON[2000549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:38:01 ispc CRON[2000549]: pam_unix(cron:session): session closed for user root Dec 18 18:38:07 ispc sshd[2000561]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 18:38:07 ispc sshd[2000561]: Invalid user ziplines from 103.28.37.227 Dec 18 18:38:27 ispc sshd[2000571]: Invalid user ziplines from 116.120.58.228 Dec 18 18:39:01 ispc CRON[2000592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:39:01 ispc CRON[2000593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:39:02 ispc CRON[2000592]: pam_unix(cron:session): session closed for user root Dec 18 18:39:02 ispc CRON[2000593]: pam_unix(cron:session): session closed for user root Dec 18 18:40:01 ispc CRON[2000638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:40:01 ispc CRON[2000639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:40:01 ispc CRON[2000640]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:40:01 ispc CRON[2000641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:40:01 ispc CRON[2000642]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:40:01 ispc CRON[2000639]: pam_unix(cron:session): session closed for user root Dec 18 18:40:01 ispc CRON[2000640]: pam_unix(cron:session): session closed for user www-data Dec 18 18:40:01 ispc CRON[2000642]: pam_unix(cron:session): session closed for user getmail Dec 18 18:40:02 ispc CRON[2000638]: pam_unix(cron:session): session closed for user root Dec 18 18:40:02 ispc CRON[2000641]: pam_unix(cron:session): session closed for user root Dec 18 18:40:43 ispc postfix/smtpd[2000736]: sql auxprop plugin using mysql engine Dec 18 18:40:47 ispc saslauthd[2000743]: pam_mysql - SELECT returned no result. Dec 18 18:40:47 ispc saslauthd[2000743]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:40:47 ispc saslauthd[2000743]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:40:52 ispc saslauthd[2000745]: pam_mysql - SELECT returned no result. Dec 18 18:40:52 ispc saslauthd[2000745]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:40:52 ispc saslauthd[2000745]: do_auth : auth failure: [user=postmaster@matl-bula.info] [service=smtp] [realm=matl-bula.info] [mech=pam] [reason=PAM auth error] Dec 18 18:41:01 ispc CRON[2000750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:41:02 ispc CRON[2000750]: pam_unix(cron:session): session closed for user root Dec 18 18:41:25 ispc CRON[1999588]: pam_unix(cron:session): session closed for user root Dec 18 18:41:52 ispc saslauthd[2000775]: pam_mysql - SELECT returned no result. Dec 18 18:41:52 ispc saslauthd[2000775]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:41:52 ispc saslauthd[2000775]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:42:01 ispc CRON[2000777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:42:02 ispc CRON[2000777]: pam_unix(cron:session): session closed for user root Dec 18 18:42:49 ispc saslauthd[2000800]: pam_mysql - SELECT returned no result. Dec 18 18:42:49 ispc saslauthd[2000800]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:42:49 ispc saslauthd[2000800]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:43:01 ispc CRON[2000802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:43:03 ispc CRON[2000802]: pam_unix(cron:session): session closed for user root Dec 18 18:43:32 ispc sshd[2000816]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 18:43:32 ispc sshd[2000816]: Invalid user ziplines from 157.245.115.125 Dec 18 18:43:49 ispc saslauthd[2000819]: pam_mysql - SELECT returned no result. Dec 18 18:43:49 ispc saslauthd[2000819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:43:49 ispc saslauthd[2000819]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:44:01 ispc CRON[2000821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:44:02 ispc CRON[2000821]: pam_unix(cron:session): session closed for user root Dec 18 18:45:01 ispc CRON[2000836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:45:01 ispc CRON[2000837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:45:01 ispc CRON[2000838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:45:01 ispc CRON[2000839]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:45:01 ispc CRON[2000837]: pam_unix(cron:session): session closed for user root Dec 18 18:45:01 ispc CRON[2000839]: pam_unix(cron:session): session closed for user getmail Dec 18 18:45:04 ispc CRON[2000836]: pam_unix(cron:session): session closed for user root Dec 18 18:45:43 ispc CRON[2000838]: pam_unix(cron:session): session closed for user root Dec 18 18:45:48 ispc sshd[2001023]: Invalid user ziplines from 52.232.19.79 Dec 18 18:46:01 ispc CRON[2001025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:47:01 ispc CRON[2001059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:47:03 ispc CRON[2001059]: pam_unix(cron:session): session closed for user root Dec 18 18:47:46 ispc sshd[2001094]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 18:47:46 ispc sshd[2001094]: Invalid user martof from 103.28.37.227 Dec 18 18:48:01 ispc CRON[2001109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:48:01 ispc CRON[2001109]: pam_unix(cron:session): session closed for user root Dec 18 18:49:01 ispc CRON[2001147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:49:02 ispc CRON[2001147]: pam_unix(cron:session): session closed for user root Dec 18 18:50:01 ispc CRON[2001188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:50:01 ispc CRON[2001189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:50:01 ispc CRON[2001190]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 18:50:01 ispc CRON[2001191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:50:01 ispc CRON[2001192]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:50:01 ispc CRON[2001189]: pam_unix(cron:session): session closed for user root Dec 18 18:50:01 ispc CRON[2001190]: pam_unix(cron:session): session closed for user www-data Dec 18 18:50:02 ispc CRON[2001192]: pam_unix(cron:session): session closed for user getmail Dec 18 18:50:03 ispc CRON[2001191]: pam_unix(cron:session): session closed for user root Dec 18 18:50:03 ispc CRON[2001188]: pam_unix(cron:session): session closed for user root Dec 18 18:51:01 ispc CRON[2001303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:51:02 ispc CRON[2001303]: pam_unix(cron:session): session closed for user root Dec 18 18:51:53 ispc sshd[2001337]: Invalid user martof from 51.159.91.86 Dec 18 18:52:01 ispc CRON[2001343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:52:01 ispc CRON[2001344]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:52:02 ispc CRON[2001344]: pam_unix(cron:session): session closed for user root Dec 18 18:53:01 ispc CRON[2001394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:53:02 ispc CRON[2001394]: pam_unix(cron:session): session closed for user root Dec 18 18:54:01 ispc CRON[2001432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:54:01 ispc CRON[2001432]: pam_unix(cron:session): session closed for user root Dec 18 18:54:24 ispc sshd[2001454]: Invalid user maximillian from 62.60.131.157 Dec 18 18:54:39 ispc sshd[2001460]: Invalid user anoraksro from 117.50.70.169 Dec 18 18:55:01 ispc CRON[2001472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:55:01 ispc CRON[2001471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:55:01 ispc CRON[2001473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:55:01 ispc CRON[2001474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 18:55:01 ispc CRON[2001472]: pam_unix(cron:session): session closed for user root Dec 18 18:55:01 ispc CRON[2001474]: pam_unix(cron:session): session closed for user getmail Dec 18 18:55:02 ispc CRON[2001473]: pam_unix(cron:session): session closed for user root Dec 18 18:55:02 ispc CRON[2001471]: pam_unix(cron:session): session closed for user root Dec 18 18:55:04 ispc postfix/smtpd[2001551]: sql auxprop plugin using mysql engine Dec 18 18:55:04 ispc saslauthd[2001554]: pam_mysql - SELECT returned no result. Dec 18 18:55:04 ispc saslauthd[2001554]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:55:04 ispc saslauthd[2001554]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:55:19 ispc CRON[2001343]: pam_unix(cron:session): session closed for user root Dec 18 18:56:01 ispc CRON[2001582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:56:02 ispc CRON[2001582]: pam_unix(cron:session): session closed for user root Dec 18 18:56:03 ispc sshd[2001580]: Invalid user ziplines from 211.23.78.98 Dec 18 18:56:49 ispc postfix/smtpd[2001623]: sql auxprop plugin using mysql engine Dec 18 18:56:50 ispc saslauthd[2001625]: pam_mysql - SELECT returned no result. Dec 18 18:56:50 ispc saslauthd[2001625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 18:56:50 ispc saslauthd[2001625]: do_auth : auth failure: [user=theman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 18:57:01 ispc CRON[2001630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:57:02 ispc CRON[2001630]: pam_unix(cron:session): session closed for user root Dec 18 18:58:01 ispc CRON[2001679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:58:02 ispc CRON[2001679]: pam_unix(cron:session): session closed for user root Dec 18 18:59:01 ispc CRON[2001716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 18:59:02 ispc CRON[2001716]: pam_unix(cron:session): session closed for user root Dec 18 19:00:01 ispc CRON[2001754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:00:01 ispc CRON[2001755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:00:01 ispc CRON[2001756]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:00:01 ispc CRON[2001757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:00:01 ispc CRON[2001758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:00:01 ispc CRON[2001759]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:00:01 ispc CRON[2001755]: pam_unix(cron:session): session closed for user root Dec 18 19:00:01 ispc CRON[2001756]: pam_unix(cron:session): session closed for user www-data Dec 18 19:00:01 ispc CRON[2001759]: pam_unix(cron:session): session closed for user getmail Dec 18 19:00:02 ispc CRON[2001754]: pam_unix(cron:session): session closed for user root Dec 18 19:00:02 ispc CRON[2001758]: pam_unix(cron:session): session closed for user root Dec 18 19:00:02 ispc CRON[2001757]: pam_unix(cron:session): session closed for user root Dec 18 19:00:37 ispc sshd[2001925]: Invalid user from 69.165.78.64 Dec 18 19:01:01 ispc CRON[2001944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:01:02 ispc CRON[2001944]: pam_unix(cron:session): session closed for user root Dec 18 19:02:01 ispc CRON[2001985]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 19:02:01 ispc CRON[2001986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:02:02 ispc CRON[2001986]: pam_unix(cron:session): session closed for user root Dec 18 19:02:59 ispc CRON[2001985]: pam_unix(cron:session): session closed for user logcheck Dec 18 19:03:01 ispc CRON[2003037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:03:02 ispc CRON[2003037]: pam_unix(cron:session): session closed for user root Dec 18 19:03:07 ispc postfix/smtpd[2003053]: sql auxprop plugin using mysql engine Dec 18 19:04:01 ispc CRON[2003081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:04:02 ispc CRON[2003081]: pam_unix(cron:session): session closed for user root Dec 18 19:05:01 ispc CRON[2003122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:05:01 ispc CRON[2003123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:05:01 ispc CRON[2003124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:05:01 ispc CRON[2003125]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:05:01 ispc CRON[2003123]: pam_unix(cron:session): session closed for user root Dec 18 19:05:01 ispc CRON[2003125]: pam_unix(cron:session): session closed for user getmail Dec 18 19:05:02 ispc CRON[2003124]: pam_unix(cron:session): session closed for user root Dec 18 19:05:02 ispc CRON[2003122]: pam_unix(cron:session): session closed for user root Dec 18 19:06:01 ispc CRON[2003224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:06:02 ispc CRON[2003224]: pam_unix(cron:session): session closed for user root Dec 18 19:06:23 ispc postfix/smtpd[2003247]: sql auxprop plugin using mysql engine Dec 18 19:06:24 ispc CRON[2001025]: pam_unix(cron:session): session closed for user root Dec 18 19:06:29 ispc saslauthd[2003252]: pam_mysql - SELECT returned no result. Dec 18 19:06:29 ispc saslauthd[2003252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:06:29 ispc saslauthd[2003252]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:06:56 ispc postfix/smtpd[2003262]: sql auxprop plugin using mysql engine Dec 18 19:07:01 ispc CRON[2003271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:07:02 ispc CRON[2003271]: pam_unix(cron:session): session closed for user root Dec 18 19:07:07 ispc sshd[2003283]: Did not receive identification string from 192.227.134.84 Dec 18 19:07:43 ispc sshd[2003286]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 19:07:43 ispc sshd[2003286]: Invalid user blceu from 103.28.37.227 Dec 18 19:08:01 ispc CRON[2003299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:08:02 ispc CRON[2003299]: pam_unix(cron:session): session closed for user root Dec 18 19:08:32 ispc sshd[2003312]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 19:09:01 ispc CRON[2003315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:09:01 ispc CRON[2003316]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:09:01 ispc CRON[2003315]: pam_unix(cron:session): session closed for user root Dec 18 19:09:01 ispc CRON[2003316]: pam_unix(cron:session): session closed for user root Dec 18 19:10:01 ispc CRON[2003342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:10:01 ispc CRON[2003343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:10:01 ispc CRON[2003344]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:10:01 ispc CRON[2003345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:10:01 ispc CRON[2003346]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:10:01 ispc CRON[2003344]: pam_unix(cron:session): session closed for user www-data Dec 18 19:10:01 ispc CRON[2003343]: pam_unix(cron:session): session closed for user root Dec 18 19:10:02 ispc CRON[2003346]: pam_unix(cron:session): session closed for user getmail Dec 18 19:10:02 ispc CRON[2003342]: pam_unix(cron:session): session closed for user root Dec 18 19:10:31 ispc CRON[2003345]: pam_unix(cron:session): session closed for user root Dec 18 19:11:01 ispc CRON[2003457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:11:39 ispc saslauthd[2003483]: pam_mysql - SELECT returned no result. Dec 18 19:11:39 ispc saslauthd[2003483]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:11:39 ispc saslauthd[2003483]: do_auth : auth failure: [user=tomcat] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:12:01 ispc CRON[2003494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:12:01 ispc CRON[2003494]: pam_unix(cron:session): session closed for user root Dec 18 19:13:01 ispc CRON[2003539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:13:02 ispc CRON[2003539]: pam_unix(cron:session): session closed for user root Dec 18 19:14:01 ispc CRON[2003580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:14:01 ispc CRON[2003580]: pam_unix(cron:session): session closed for user root Dec 18 19:14:19 ispc sshd[2003602]: Invalid user klape from 103.164.20.29 Dec 18 19:14:21 ispc sshd[2003604]: Invalid user ubuntu from 103.164.20.29 Dec 18 19:14:30 ispc postfix/smtpd[2003610]: sql auxprop plugin using mysql engine Dec 18 19:15:01 ispc CRON[2003627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:15:01 ispc CRON[2003628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:15:01 ispc CRON[2003629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:15:01 ispc CRON[2003630]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:15:01 ispc CRON[2003628]: pam_unix(cron:session): session closed for user root Dec 18 19:15:01 ispc CRON[2003630]: pam_unix(cron:session): session closed for user getmail Dec 18 19:15:02 ispc CRON[2003627]: pam_unix(cron:session): session closed for user root Dec 18 19:15:02 ispc CRON[2003629]: pam_unix(cron:session): session closed for user root Dec 18 19:16:01 ispc CRON[2003737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:16:01 ispc CRON[2003737]: pam_unix(cron:session): session closed for user root Dec 18 19:16:30 ispc postfix/smtpd[2003763]: sql auxprop plugin using mysql engine Dec 18 19:16:31 ispc saslauthd[2003765]: pam_mysql - SELECT returned no result. Dec 18 19:16:31 ispc saslauthd[2003765]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:16:31 ispc saslauthd[2003765]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:16:41 ispc postfix/smtpd[2003771]: sql auxprop plugin using mysql engine Dec 18 19:17:01 ispc CRON[2003785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:17:02 ispc CRON[2003785]: pam_unix(cron:session): session closed for user root Dec 18 19:18:01 ispc CRON[2003830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:18:02 ispc CRON[2003830]: pam_unix(cron:session): session closed for user root Dec 18 19:19:01 ispc CRON[2003872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:19:02 ispc CRON[2003872]: pam_unix(cron:session): session closed for user root Dec 18 19:20:01 ispc CRON[2003912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:20:01 ispc CRON[2003913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:20:01 ispc CRON[2003914]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:20:01 ispc CRON[2003915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:20:01 ispc CRON[2003916]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:20:01 ispc CRON[2003914]: pam_unix(cron:session): session closed for user www-data Dec 18 19:20:01 ispc CRON[2003913]: pam_unix(cron:session): session closed for user root Dec 18 19:20:01 ispc CRON[2003916]: pam_unix(cron:session): session closed for user getmail Dec 18 19:20:01 ispc CRON[2003915]: pam_unix(cron:session): session closed for user root Dec 18 19:20:01 ispc CRON[2003912]: pam_unix(cron:session): session closed for user root Dec 18 19:21:01 ispc CRON[2004017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:21:01 ispc CRON[2004018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:21:02 ispc CRON[2004017]: pam_unix(cron:session): session closed for user root Dec 18 19:21:02 ispc CRON[2004018]: pam_unix(cron:session): session closed for user root Dec 18 19:22:01 ispc CRON[2004059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:22:02 ispc CRON[2004059]: pam_unix(cron:session): session closed for user root Dec 18 19:23:01 ispc CRON[2004107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:23:01 ispc CRON[2004107]: pam_unix(cron:session): session closed for user root Dec 18 19:23:31 ispc postfix/smtpd[2004131]: sql auxprop plugin using mysql engine Dec 18 19:24:01 ispc CRON[2004149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:24:01 ispc CRON[2004149]: pam_unix(cron:session): session closed for user root Dec 18 19:24:18 ispc sshd[2004164]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 19:24:18 ispc sshd[2004164]: Invalid user martof from 193.110.157.47 Dec 18 19:25:01 ispc CRON[2004189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:25:01 ispc CRON[2004188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:25:01 ispc CRON[2004190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:25:01 ispc CRON[2004191]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:25:01 ispc CRON[2004189]: pam_unix(cron:session): session closed for user root Dec 18 19:25:01 ispc CRON[2004191]: pam_unix(cron:session): session closed for user getmail Dec 18 19:25:02 ispc CRON[2004190]: pam_unix(cron:session): session closed for user root Dec 18 19:25:02 ispc CRON[2004188]: pam_unix(cron:session): session closed for user root Dec 18 19:26:01 ispc CRON[2004292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:26:01 ispc CRON[2004292]: pam_unix(cron:session): session closed for user root Dec 18 19:26:28 ispc postfix/smtpd[2004312]: sql auxprop plugin using mysql engine Dec 18 19:26:29 ispc saslauthd[2004315]: pam_mysql - SELECT returned no result. Dec 18 19:26:29 ispc saslauthd[2004315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:26:29 ispc saslauthd[2004315]: do_auth : auth failure: [user=toor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:27:01 ispc CRON[2004336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:27:02 ispc CRON[2004336]: pam_unix(cron:session): session closed for user root Dec 18 19:27:18 ispc saslauthd[2004353]: pam_mysql - SELECT returned no result. Dec 18 19:27:18 ispc saslauthd[2004353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:27:18 ispc saslauthd[2004353]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:28:01 ispc CRON[2004380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:28:01 ispc CRON[2004380]: pam_unix(cron:session): session closed for user root Dec 18 19:28:56 ispc sshd[2004418]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 19:28:56 ispc sshd[2004418]: Invalid user martof from 157.245.115.125 Dec 18 19:29:01 ispc CRON[2004424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:29:02 ispc CRON[2004424]: pam_unix(cron:session): session closed for user root Dec 18 19:30:01 ispc CRON[2004458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:30:01 ispc CRON[2004459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:30:01 ispc CRON[2004460]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:30:01 ispc CRON[2004461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:30:01 ispc CRON[2004462]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:30:01 ispc CRON[2004460]: pam_unix(cron:session): session closed for user www-data Dec 18 19:30:01 ispc CRON[2004459]: pam_unix(cron:session): session closed for user root Dec 18 19:30:01 ispc CRON[2004462]: pam_unix(cron:session): session closed for user getmail Dec 18 19:30:02 ispc CRON[2004461]: pam_unix(cron:session): session closed for user root Dec 18 19:30:02 ispc CRON[2004458]: pam_unix(cron:session): session closed for user root Dec 18 19:30:59 ispc sshd[2004564]: Did not receive identification string from 45.140.17.97 Dec 18 19:30:59 ispc postfix/smtpd[2004565]: sql auxprop plugin using mysql engine Dec 18 19:31:01 ispc CRON[2004568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:31:02 ispc CRON[2004568]: pam_unix(cron:session): session closed for user root Dec 18 19:31:15 ispc CRON[2003457]: pam_unix(cron:session): session closed for user root Dec 18 19:32:01 ispc CRON[2004590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:32:02 ispc CRON[2004590]: pam_unix(cron:session): session closed for user root Dec 18 19:32:56 ispc sshd[2004613]: Invalid user blceu from 52.232.19.79 Dec 18 19:33:01 ispc CRON[2004615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:33:02 ispc CRON[2004615]: pam_unix(cron:session): session closed for user root Dec 18 19:34:01 ispc CRON[2004631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:34:05 ispc CRON[2004631]: pam_unix(cron:session): session closed for user root Dec 18 19:34:30 ispc sshd[2004649]: Invalid user klape from 36.50.177.171 Dec 18 19:34:32 ispc sshd[2004651]: Invalid user ubuntu from 36.50.177.171 Dec 18 19:34:39 ispc saslauthd[2004654]: pam_mysql - SELECT returned no result. Dec 18 19:34:39 ispc saslauthd[2004654]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:34:39 ispc saslauthd[2004654]: do_auth : auth failure: [user=backup@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 19:35:01 ispc CRON[2004656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:35:01 ispc CRON[2004657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:35:01 ispc CRON[2004658]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:35:01 ispc CRON[2004655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:35:01 ispc CRON[2004656]: pam_unix(cron:session): session closed for user root Dec 18 19:35:01 ispc CRON[2004658]: pam_unix(cron:session): session closed for user getmail Dec 18 19:35:01 ispc CRON[2004655]: pam_unix(cron:session): session closed for user root Dec 18 19:35:35 ispc CRON[2004657]: pam_unix(cron:session): session closed for user root Dec 18 19:36:01 ispc CRON[2004771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:37:01 ispc CRON[2004805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:37:01 ispc CRON[2004805]: pam_unix(cron:session): session closed for user root Dec 18 19:38:01 ispc CRON[2004856]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:38:02 ispc CRON[2004856]: pam_unix(cron:session): session closed for user root Dec 18 19:39:01 ispc CRON[2004899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:39:01 ispc CRON[2004900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:39:01 ispc CRON[2004899]: pam_unix(cron:session): session closed for user root Dec 18 19:39:01 ispc CRON[2004900]: pam_unix(cron:session): session closed for user root Dec 18 19:39:04 ispc postfix/smtpd[2004921]: sql auxprop plugin using mysql engine Dec 18 19:39:05 ispc saslauthd[2004929]: pam_mysql - SELECT returned no result. Dec 18 19:39:05 ispc saslauthd[2004929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:39:05 ispc saslauthd[2004929]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:40:01 ispc CRON[2004956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:40:01 ispc CRON[2004957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:40:01 ispc CRON[2004959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:40:01 ispc CRON[2004960]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:40:01 ispc CRON[2004958]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:40:01 ispc CRON[2004957]: pam_unix(cron:session): session closed for user root Dec 18 19:40:01 ispc CRON[2004958]: pam_unix(cron:session): session closed for user www-data Dec 18 19:40:01 ispc CRON[2004960]: pam_unix(cron:session): session closed for user getmail Dec 18 19:40:02 ispc CRON[2004959]: pam_unix(cron:session): session closed for user root Dec 18 19:40:02 ispc CRON[2004956]: pam_unix(cron:session): session closed for user root Dec 18 19:40:29 ispc sshd[2005048]: Did not receive identification string from 209.38.99.12 Dec 18 19:41:01 ispc CRON[2005064]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:41:02 ispc CRON[2005064]: pam_unix(cron:session): session closed for user root Dec 18 19:41:07 ispc sshd[2005082]: Did not receive identification string from 134.209.84.210 Dec 18 19:41:11 ispc postfix/smtpd[2005083]: sql auxprop plugin using mysql engine Dec 18 19:41:12 ispc saslauthd[2005085]: pam_mysql - SELECT returned no result. Dec 18 19:41:12 ispc saslauthd[2005085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:41:12 ispc saslauthd[2005085]: do_auth : auth failure: [user=topicalt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:41:51 ispc sshd[2005106]: Did not receive identification string from 183.215.223.68 Dec 18 19:42:01 ispc CRON[2005112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:42:01 ispc CRON[2005112]: pam_unix(cron:session): session closed for user root Dec 18 19:43:01 ispc CRON[2005166]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:43:02 ispc CRON[2005166]: pam_unix(cron:session): session closed for user root Dec 18 19:44:01 ispc CRON[2005211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:44:01 ispc CRON[2005211]: pam_unix(cron:session): session closed for user root Dec 18 19:44:41 ispc postfix/smtpd[2005240]: sql auxprop plugin using mysql engine Dec 18 19:45:01 ispc CRON[2005256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:45:01 ispc CRON[2005257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:45:01 ispc CRON[2005259]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:45:01 ispc CRON[2005258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:45:01 ispc CRON[2005257]: pam_unix(cron:session): session closed for user root Dec 18 19:45:01 ispc CRON[2005259]: pam_unix(cron:session): session closed for user getmail Dec 18 19:45:02 ispc CRON[2005256]: pam_unix(cron:session): session closed for user root Dec 18 19:45:02 ispc CRON[2005258]: pam_unix(cron:session): session closed for user root Dec 18 19:46:01 ispc CRON[2005364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:46:01 ispc CRON[2005364]: pam_unix(cron:session): session closed for user root Dec 18 19:46:02 ispc sshd[2005375]: Did not receive identification string from 209.38.108.77 Dec 18 19:47:01 ispc CRON[2005406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:47:02 ispc CRON[2005406]: pam_unix(cron:session): session closed for user root Dec 18 19:48:01 ispc CRON[2005461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:48:02 ispc CRON[2005461]: pam_unix(cron:session): session closed for user root Dec 18 19:49:01 ispc CRON[2005509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:49:01 ispc CRON[2005509]: pam_unix(cron:session): session closed for user root Dec 18 19:49:47 ispc postfix/smtpd[2005546]: sql auxprop plugin using mysql engine Dec 18 19:49:48 ispc saslauthd[2005549]: pam_mysql - SELECT returned no result. Dec 18 19:49:48 ispc saslauthd[2005549]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:49:48 ispc saslauthd[2005549]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:50:01 ispc CRON[2005558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:50:01 ispc CRON[2005559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:50:01 ispc CRON[2005560]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 19:50:01 ispc CRON[2005561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:50:01 ispc CRON[2005562]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:50:01 ispc CRON[2005560]: pam_unix(cron:session): session closed for user www-data Dec 18 19:50:01 ispc CRON[2005559]: pam_unix(cron:session): session closed for user root Dec 18 19:50:01 ispc CRON[2005562]: pam_unix(cron:session): session closed for user getmail Dec 18 19:50:02 ispc CRON[2005561]: pam_unix(cron:session): session closed for user root Dec 18 19:50:03 ispc CRON[2005558]: pam_unix(cron:session): session closed for user root Dec 18 19:50:56 ispc sshd[2005670]: Did not receive identification string from 192.227.134.84 Dec 18 19:51:01 ispc CRON[2005674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:51:02 ispc CRON[2005674]: pam_unix(cron:session): session closed for user root Dec 18 19:51:41 ispc sshd[2005708]: Invalid user admin from 134.209.84.210 Dec 18 19:52:01 ispc CRON[2005720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:52:01 ispc CRON[2005720]: pam_unix(cron:session): session closed for user root Dec 18 19:52:29 ispc sshd[2005752]: Invalid user admin from 134.209.84.210 Dec 18 19:53:01 ispc CRON[2005780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:53:02 ispc CRON[2005780]: pam_unix(cron:session): session closed for user root Dec 18 19:53:15 ispc sshd[2005797]: Invalid user admin from 134.209.84.210 Dec 18 19:53:59 ispc sshd[2005825]: Invalid user admin from 134.209.84.210 Dec 18 19:54:01 ispc CRON[2005831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:54:01 ispc CRON[2005831]: pam_unix(cron:session): session closed for user root Dec 18 19:54:44 ispc sshd[2005867]: Invalid user admin from 134.209.84.210 Dec 18 19:55:01 ispc CRON[2005884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:55:01 ispc CRON[2005885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:55:02 ispc CRON[2005887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 19:55:02 ispc CRON[2005886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:55:02 ispc CRON[2005885]: pam_unix(cron:session): session closed for user root Dec 18 19:55:02 ispc CRON[2005887]: pam_unix(cron:session): session closed for user getmail Dec 18 19:55:02 ispc CRON[2005884]: pam_unix(cron:session): session closed for user root Dec 18 19:55:03 ispc CRON[2005886]: pam_unix(cron:session): session closed for user root Dec 18 19:55:29 ispc sshd[2005971]: Invalid user admin from 134.209.84.210 Dec 18 19:56:01 ispc CRON[2006000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:56:01 ispc postfix/smtpd[2005998]: sql auxprop plugin using mysql engine Dec 18 19:56:01 ispc CRON[2006000]: pam_unix(cron:session): session closed for user root Dec 18 19:56:02 ispc saslauthd[2006013]: pam_mysql - SELECT returned no result. Dec 18 19:56:02 ispc saslauthd[2006013]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:56:02 ispc saslauthd[2006013]: do_auth : auth failure: [user=topicnorm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:56:23 ispc CRON[2004771]: pam_unix(cron:session): session closed for user root Dec 18 19:56:32 ispc sshd[2006031]: Invalid user from 143.198.216.98 Dec 18 19:57:01 ispc CRON[2006039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:57:02 ispc CRON[2006039]: pam_unix(cron:session): session closed for user root Dec 18 19:57:38 ispc saslauthd[2006059]: pam_mysql - SELECT returned no result. Dec 18 19:57:38 ispc saslauthd[2006059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:57:38 ispc saslauthd[2006059]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:58:01 ispc CRON[2006074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:58:02 ispc CRON[2006074]: pam_unix(cron:session): session closed for user root Dec 18 19:59:01 ispc CRON[2006097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 19:59:01 ispc saslauthd[2006105]: pam_mysql - SELECT returned no result. Dec 18 19:59:01 ispc saslauthd[2006105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 19:59:01 ispc saslauthd[2006105]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 19:59:01 ispc postfix/smtpd[2006108]: sql auxprop plugin using mysql engine Dec 18 19:59:01 ispc CRON[2006097]: pam_unix(cron:session): session closed for user root Dec 18 20:00:01 ispc CRON[2006127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:00:01 ispc CRON[2006130]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:00:01 ispc CRON[2006128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:00:01 ispc CRON[2006124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:00:01 ispc CRON[2006129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:00:01 ispc CRON[2006125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:00:01 ispc CRON[2006126]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:00:02 ispc CRON[2006126]: pam_unix(cron:session): session closed for user www-data Dec 18 20:00:02 ispc CRON[2006125]: pam_unix(cron:session): session closed for user root Dec 18 20:00:02 ispc CRON[2006130]: pam_unix(cron:session): session closed for user getmail Dec 18 20:00:02 ispc CRON[2006128]: pam_unix(cron:session): session closed for user root Dec 18 20:00:02 ispc CRON[2006127]: pam_unix(cron:session): session closed for user root Dec 18 20:00:02 ispc CRON[2006124]: pam_unix(cron:session): session closed for user root Dec 18 20:00:48 ispc sshd[2006412]: Invalid user admin from 209.38.108.77 Dec 18 20:00:51 ispc CRON[2006129]: pam_unix(cron:session): session closed for user root Dec 18 20:01:01 ispc CRON[2006418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:01:36 ispc sshd[2006443]: Invalid user admin from 209.38.108.77 Dec 18 20:02:01 ispc CRON[2006459]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 20:02:01 ispc CRON[2006460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:02:02 ispc CRON[2006460]: pam_unix(cron:session): session closed for user root Dec 18 20:02:22 ispc sshd[2006883]: Invalid user admin from 209.38.108.77 Dec 18 20:03:01 ispc CRON[2007418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:03:01 ispc CRON[2007418]: pam_unix(cron:session): session closed for user root Dec 18 20:03:11 ispc sshd[2007528]: Invalid user admin from 209.38.108.77 Dec 18 20:03:12 ispc CRON[2006459]: pam_unix(cron:session): session closed for user logcheck Dec 18 20:03:20 ispc postfix/smtpd[2007551]: sql auxprop plugin using mysql engine Dec 18 20:03:57 ispc sshd[2007582]: Invalid user admin from 209.38.108.77 Dec 18 20:04:01 ispc CRON[2007585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:04:02 ispc CRON[2007585]: pam_unix(cron:session): session closed for user root Dec 18 20:04:40 ispc sshd[2007619]: Invalid user admin from 209.38.108.77 Dec 18 20:04:42 ispc sshd[2007621]: Invalid user blceu from 220.196.191.58 Dec 18 20:05:01 ispc CRON[2007642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:05:01 ispc CRON[2007643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:05:01 ispc CRON[2007641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:05:01 ispc CRON[2007644]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:05:01 ispc CRON[2007642]: pam_unix(cron:session): session closed for user root Dec 18 20:05:01 ispc CRON[2007644]: pam_unix(cron:session): session closed for user getmail Dec 18 20:05:01 ispc CRON[2007643]: pam_unix(cron:session): session closed for user root Dec 18 20:05:02 ispc CRON[2007641]: pam_unix(cron:session): session closed for user root Dec 18 20:05:54 ispc postfix/smtpd[2007745]: sql auxprop plugin using mysql engine Dec 18 20:06:01 ispc CRON[2007752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:06:01 ispc CRON[2007752]: pam_unix(cron:session): session closed for user root Dec 18 20:07:01 ispc CRON[2007798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:07:02 ispc CRON[2007798]: pam_unix(cron:session): session closed for user root Dec 18 20:08:01 ispc CRON[2007847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:08:02 ispc CRON[2007847]: pam_unix(cron:session): session closed for user root Dec 18 20:08:41 ispc postfix/smtpd[2007885]: sql auxprop plugin using mysql engine Dec 18 20:08:41 ispc saslauthd[2007888]: pam_mysql - SELECT returned no result. Dec 18 20:08:41 ispc saslauthd[2007888]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:08:41 ispc saslauthd[2007888]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:09:01 ispc CRON[2007900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:09:01 ispc CRON[2007901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:09:01 ispc CRON[2007900]: pam_unix(cron:session): session closed for user root Dec 18 20:09:01 ispc CRON[2007901]: pam_unix(cron:session): session closed for user root Dec 18 20:10:01 ispc CRON[2007954]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:10:01 ispc CRON[2007951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:10:01 ispc CRON[2007950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:10:01 ispc CRON[2007952]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:10:01 ispc CRON[2007953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:10:01 ispc CRON[2007951]: pam_unix(cron:session): session closed for user root Dec 18 20:10:01 ispc CRON[2007952]: pam_unix(cron:session): session closed for user www-data Dec 18 20:10:01 ispc CRON[2007954]: pam_unix(cron:session): session closed for user getmail Dec 18 20:10:02 ispc CRON[2007953]: pam_unix(cron:session): session closed for user root Dec 18 20:10:02 ispc CRON[2007950]: pam_unix(cron:session): session closed for user root Dec 18 20:10:48 ispc postfix/smtpd[2008052]: sql auxprop plugin using mysql engine Dec 18 20:10:49 ispc saslauthd[2008057]: pam_mysql - SELECT returned no result. Dec 18 20:10:49 ispc saslauthd[2008057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:10:49 ispc saslauthd[2008057]: do_auth : auth failure: [user=topicres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:11:01 ispc CRON[2008063]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:11:02 ispc CRON[2008063]: pam_unix(cron:session): session closed for user root Dec 18 20:11:44 ispc sshd[2008094]: Invalid user alfa from 217.60.38.20 Dec 18 20:12:01 ispc CRON[2008106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:12:02 ispc CRON[2008106]: pam_unix(cron:session): session closed for user root Dec 18 20:13:01 ispc CRON[2008156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:13:01 ispc CRON[2008156]: pam_unix(cron:session): session closed for user root Dec 18 20:13:36 ispc sshd[2008183]: Invalid user martof from 27.254.144.183 Dec 18 20:13:59 ispc sshd[2008195]: Invalid user ziplines from 185.208.181.152 Dec 18 20:14:01 ispc CRON[2008199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:14:02 ispc CRON[2008199]: pam_unix(cron:session): session closed for user root Dec 18 20:15:01 ispc CRON[2008243]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:15:01 ispc CRON[2008244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:15:01 ispc CRON[2008245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:15:01 ispc CRON[2008246]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:15:01 ispc CRON[2008244]: pam_unix(cron:session): session closed for user root Dec 18 20:15:01 ispc CRON[2008246]: pam_unix(cron:session): session closed for user getmail Dec 18 20:15:03 ispc CRON[2008245]: pam_unix(cron:session): session closed for user root Dec 18 20:15:04 ispc CRON[2008243]: pam_unix(cron:session): session closed for user root Dec 18 20:15:49 ispc sshd[2008344]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:15:49 ispc sshd[2008344]: Invalid user ziplines from 193.110.157.47 Dec 18 20:16:01 ispc CRON[2008352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:16:02 ispc CRON[2008352]: pam_unix(cron:session): session closed for user root Dec 18 20:16:12 ispc sshd[2008369]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:16:12 ispc sshd[2008369]: Invalid user ziplines from 103.28.37.227 Dec 18 20:16:45 ispc sshd[2008390]: Invalid user stephan from 62.60.131.157 Dec 18 20:17:01 ispc CRON[2008396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:17:02 ispc CRON[2008396]: pam_unix(cron:session): session closed for user root Dec 18 20:17:47 ispc postfix/smtpd[2008435]: sql auxprop plugin using mysql engine Dec 18 20:17:47 ispc saslauthd[2008438]: pam_mysql - SELECT returned no result. Dec 18 20:17:47 ispc saslauthd[2008438]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:17:47 ispc saslauthd[2008438]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:18:01 ispc CRON[2008452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:18:02 ispc CRON[2008452]: pam_unix(cron:session): session closed for user root Dec 18 20:19:01 ispc CRON[2008490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:19:03 ispc CRON[2008490]: pam_unix(cron:session): session closed for user root Dec 18 20:20:01 ispc CRON[2008531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:20:01 ispc CRON[2008532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:20:01 ispc CRON[2008533]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:20:01 ispc CRON[2008534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:20:01 ispc CRON[2008535]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:20:01 ispc CRON[2008533]: pam_unix(cron:session): session closed for user www-data Dec 18 20:20:01 ispc CRON[2008532]: pam_unix(cron:session): session closed for user root Dec 18 20:20:01 ispc CRON[2008535]: pam_unix(cron:session): session closed for user getmail Dec 18 20:20:02 ispc CRON[2008534]: pam_unix(cron:session): session closed for user root Dec 18 20:20:02 ispc CRON[2008531]: pam_unix(cron:session): session closed for user root Dec 18 20:21:01 ispc CRON[2008641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:21:01 ispc CRON[2008642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:21:02 ispc CRON[2008641]: pam_unix(cron:session): session closed for user root Dec 18 20:21:03 ispc CRON[2008642]: pam_unix(cron:session): session closed for user root Dec 18 20:21:18 ispc postfix/smtpd[2008663]: sql auxprop plugin using mysql engine Dec 18 20:21:19 ispc CRON[2006418]: pam_unix(cron:session): session closed for user root Dec 18 20:21:40 ispc sshd[2008667]: Invalid user admin from 209.38.99.12 Dec 18 20:22:01 ispc CRON[2008672]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:22:05 ispc CRON[2008672]: pam_unix(cron:session): session closed for user root Dec 18 20:22:18 ispc sshd[2008687]: Invalid user admin from 209.38.99.12 Dec 18 20:22:55 ispc sshd[2008702]: Invalid user admin from 209.38.99.12 Dec 18 20:23:01 ispc CRON[2008705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:23:03 ispc CRON[2008705]: pam_unix(cron:session): session closed for user root Dec 18 20:23:32 ispc sshd[2008720]: Invalid user admin from 209.38.99.12 Dec 18 20:23:55 ispc sshd[2008724]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:23:55 ispc sshd[2008724]: Invalid user martof from 103.28.37.227 Dec 18 20:24:01 ispc CRON[2008733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:24:03 ispc CRON[2008733]: pam_unix(cron:session): session closed for user root Dec 18 20:24:09 ispc sshd[2008745]: Invalid user admin from 209.38.99.12 Dec 18 20:24:46 ispc sshd[2008748]: Invalid user admin from 209.38.99.12 Dec 18 20:24:54 ispc sshd[2008757]: Invalid user ziplines from 165.227.38.205 Dec 18 20:25:01 ispc CRON[2008759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:25:01 ispc CRON[2008760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:25:01 ispc CRON[2008761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:25:01 ispc CRON[2008762]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:25:01 ispc CRON[2008762]: pam_unix(cron:session): session closed for user getmail Dec 18 20:25:01 ispc CRON[2008760]: pam_unix(cron:session): session closed for user root Dec 18 20:25:03 ispc CRON[2008759]: pam_unix(cron:session): session closed for user root Dec 18 20:25:37 ispc saslauthd[2008869]: pam_mysql - SELECT returned no result. Dec 18 20:25:37 ispc saslauthd[2008869]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:25:37 ispc saslauthd[2008869]: do_auth : auth failure: [user=tour] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:25:38 ispc CRON[2008761]: pam_unix(cron:session): session closed for user root Dec 18 20:26:01 ispc CRON[2008873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:26:53 ispc saslauthd[2008906]: pam_mysql - SELECT returned no result. Dec 18 20:26:53 ispc saslauthd[2008906]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:26:53 ispc saslauthd[2008906]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:27:01 ispc CRON[2008908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:27:02 ispc CRON[2008908]: pam_unix(cron:session): session closed for user root Dec 18 20:28:01 ispc CRON[2008954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:28:03 ispc CRON[2008954]: pam_unix(cron:session): session closed for user root Dec 18 20:29:01 ispc CRON[2008992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:29:01 ispc CRON[2008992]: pam_unix(cron:session): session closed for user root Dec 18 20:29:54 ispc sshd[2009028]: Did not receive identification string from 194.0.234.20 Dec 18 20:30:01 ispc CRON[2009032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:30:01 ispc CRON[2009033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:30:01 ispc CRON[2009034]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:30:01 ispc CRON[2009035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:30:01 ispc CRON[2009036]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:30:01 ispc CRON[2009034]: pam_unix(cron:session): session closed for user www-data Dec 18 20:30:01 ispc CRON[2009033]: pam_unix(cron:session): session closed for user root Dec 18 20:30:01 ispc CRON[2009036]: pam_unix(cron:session): session closed for user getmail Dec 18 20:30:02 ispc CRON[2009035]: pam_unix(cron:session): session closed for user root Dec 18 20:30:03 ispc CRON[2009032]: pam_unix(cron:session): session closed for user root Dec 18 20:31:01 ispc CRON[2009135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:31:03 ispc CRON[2009135]: pam_unix(cron:session): session closed for user root Dec 18 20:32:01 ispc CRON[2009175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:32:01 ispc CRON[2009175]: pam_unix(cron:session): session closed for user root Dec 18 20:32:40 ispc sshd[2009203]: Did not receive identification string from 192.227.134.84 Dec 18 20:32:56 ispc sshd[2009218]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:32:56 ispc sshd[2009218]: Invalid user blceu from 157.245.115.125 Dec 18 20:33:01 ispc CRON[2009224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:33:02 ispc CRON[2009224]: pam_unix(cron:session): session closed for user root Dec 18 20:34:01 ispc CRON[2009263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:34:01 ispc CRON[2009263]: pam_unix(cron:session): session closed for user root Dec 18 20:35:01 ispc CRON[2009314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:35:01 ispc CRON[2009312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:35:01 ispc CRON[2009313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:35:01 ispc CRON[2009315]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:35:01 ispc CRON[2009313]: pam_unix(cron:session): session closed for user root Dec 18 20:35:02 ispc CRON[2009315]: pam_unix(cron:session): session closed for user getmail Dec 18 20:35:02 ispc CRON[2009314]: pam_unix(cron:session): session closed for user root Dec 18 20:35:02 ispc CRON[2009312]: pam_unix(cron:session): session closed for user root Dec 18 20:35:42 ispc sshd[2009414]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:36:01 ispc CRON[2009420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:36:02 ispc CRON[2009420]: pam_unix(cron:session): session closed for user root Dec 18 20:36:08 ispc postfix/smtpd[2009439]: sql auxprop plugin using mysql engine Dec 18 20:36:08 ispc saslauthd[2009442]: pam_mysql - SELECT returned no result. Dec 18 20:36:08 ispc saslauthd[2009442]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:36:08 ispc saslauthd[2009442]: do_auth : auth failure: [user=testuser@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 20:36:47 ispc saslauthd[2009463]: pam_mysql - SELECT returned no result. Dec 18 20:36:47 ispc saslauthd[2009463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:36:47 ispc saslauthd[2009463]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:37:01 ispc CRON[2009468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:37:01 ispc CRON[2009468]: pam_unix(cron:session): session closed for user root Dec 18 20:38:01 ispc CRON[2009515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:38:02 ispc CRON[2009515]: pam_unix(cron:session): session closed for user root Dec 18 20:38:22 ispc sshd[2009535]: Invalid user blceu from 116.120.58.228 Dec 18 20:39:01 ispc CRON[2009557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:39:01 ispc CRON[2009556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:39:01 ispc CRON[2009556]: pam_unix(cron:session): session closed for user root Dec 18 20:39:01 ispc CRON[2009557]: pam_unix(cron:session): session closed for user root Dec 18 20:40:01 ispc CRON[2009609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:40:01 ispc CRON[2009610]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:40:01 ispc CRON[2009607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:40:01 ispc CRON[2009606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:40:01 ispc CRON[2009608]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:40:01 ispc CRON[2009608]: pam_unix(cron:session): session closed for user www-data Dec 18 20:40:01 ispc CRON[2009607]: pam_unix(cron:session): session closed for user root Dec 18 20:40:01 ispc CRON[2009610]: pam_unix(cron:session): session closed for user getmail Dec 18 20:40:02 ispc CRON[2009609]: pam_unix(cron:session): session closed for user root Dec 18 20:40:03 ispc CRON[2009606]: pam_unix(cron:session): session closed for user root Dec 18 20:40:24 ispc postfix/smtpd[2009696]: sql auxprop plugin using mysql engine Dec 18 20:40:26 ispc saslauthd[2009699]: pam_mysql - SELECT returned no result. Dec 18 20:40:26 ispc saslauthd[2009699]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:40:26 ispc saslauthd[2009699]: do_auth : auth failure: [user=tridium] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:41:01 ispc CRON[2009714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:41:02 ispc CRON[2009714]: pam_unix(cron:session): session closed for user root Dec 18 20:42:01 ispc CRON[2009754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:42:01 ispc CRON[2009754]: pam_unix(cron:session): session closed for user root Dec 18 20:42:56 ispc sshd[2009794]: Invalid user blceu from 118.218.219.250 Dec 18 20:43:01 ispc CRON[2009801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:43:02 ispc CRON[2009801]: pam_unix(cron:session): session closed for user root Dec 18 20:43:52 ispc postfix/smtpd[2009836]: sql auxprop plugin using mysql engine Dec 18 20:44:01 ispc postfix/smtpd[2009851]: sql auxprop plugin using mysql engine Dec 18 20:44:01 ispc CRON[2009854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:44:02 ispc CRON[2009854]: pam_unix(cron:session): session closed for user root Dec 18 20:45:01 ispc CRON[2009904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:45:01 ispc CRON[2009905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:45:01 ispc CRON[2009906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:45:01 ispc CRON[2009907]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:45:01 ispc CRON[2009905]: pam_unix(cron:session): session closed for user root Dec 18 20:45:01 ispc CRON[2009907]: pam_unix(cron:session): session closed for user getmail Dec 18 20:45:01 ispc CRON[2009906]: pam_unix(cron:session): session closed for user root Dec 18 20:45:02 ispc CRON[2009904]: pam_unix(cron:session): session closed for user root Dec 18 20:46:01 ispc CRON[2010006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:46:02 ispc CRON[2010006]: pam_unix(cron:session): session closed for user root Dec 18 20:46:06 ispc sshd[2010021]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:46:08 ispc sshd[2010023]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:46:08 ispc sshd[2010023]: Invalid user klape from 189.89.20.45 Dec 18 20:46:10 ispc sshd[2010025]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:46:10 ispc sshd[2010025]: Invalid user ubuntu from 189.89.20.45 Dec 18 20:46:23 ispc postfix/smtpd[2010036]: sql auxprop plugin using mysql engine Dec 18 20:46:23 ispc CRON[2008873]: pam_unix(cron:session): session closed for user root Dec 18 20:46:26 ispc saslauthd[2010041]: pam_mysql - SELECT returned no result. Dec 18 20:46:26 ispc saslauthd[2010041]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:46:26 ispc saslauthd[2010041]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:47:01 ispc CRON[2010043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:47:02 ispc CRON[2010043]: pam_unix(cron:session): session closed for user root Dec 18 20:47:20 ispc sshd[2010056]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 20:47:20 ispc sshd[2010056]: Invalid user ziplines from 157.245.115.125 Dec 18 20:48:01 ispc CRON[2010076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:48:02 ispc CRON[2010076]: pam_unix(cron:session): session closed for user root Dec 18 20:49:01 ispc CRON[2010088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:49:01 ispc CRON[2010088]: pam_unix(cron:session): session closed for user root Dec 18 20:49:49 ispc sshd[2010104]: Invalid user martof from 185.181.182.252 Dec 18 20:50:01 ispc CRON[2010106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:50:01 ispc CRON[2010107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:50:01 ispc CRON[2010108]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 20:50:01 ispc CRON[2010109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:50:01 ispc CRON[2010110]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:50:01 ispc CRON[2010108]: pam_unix(cron:session): session closed for user www-data Dec 18 20:50:01 ispc CRON[2010107]: pam_unix(cron:session): session closed for user root Dec 18 20:50:02 ispc CRON[2010110]: pam_unix(cron:session): session closed for user getmail Dec 18 20:50:03 ispc CRON[2010106]: pam_unix(cron:session): session closed for user root Dec 18 20:50:38 ispc CRON[2010109]: pam_unix(cron:session): session closed for user root Dec 18 20:51:01 ispc CRON[2010216]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:52:01 ispc CRON[2010252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:52:02 ispc CRON[2010252]: pam_unix(cron:session): session closed for user root Dec 18 20:53:01 ispc CRON[2010298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:53:02 ispc CRON[2010298]: pam_unix(cron:session): session closed for user root Dec 18 20:54:01 ispc CRON[2010336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:54:01 ispc CRON[2010336]: pam_unix(cron:session): session closed for user root Dec 18 20:54:35 ispc postfix/smtpd[2010361]: sql auxprop plugin using mysql engine Dec 18 20:55:01 ispc CRON[2010379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:55:01 ispc CRON[2010378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:55:01 ispc CRON[2010381]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 20:55:01 ispc CRON[2010380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:55:01 ispc CRON[2010379]: pam_unix(cron:session): session closed for user root Dec 18 20:55:01 ispc CRON[2010381]: pam_unix(cron:session): session closed for user getmail Dec 18 20:55:02 ispc CRON[2010380]: pam_unix(cron:session): session closed for user root Dec 18 20:55:02 ispc CRON[2010378]: pam_unix(cron:session): session closed for user root Dec 18 20:55:08 ispc postfix/smtpd[2010458]: sql auxprop plugin using mysql engine Dec 18 20:55:10 ispc saslauthd[2010460]: pam_mysql - SELECT returned no result. Dec 18 20:55:10 ispc saslauthd[2010460]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:55:10 ispc saslauthd[2010460]: do_auth : auth failure: [user=trmcnfg] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:55:14 ispc saslauthd[2010461]: pam_mysql - SELECT returned no result. Dec 18 20:55:14 ispc saslauthd[2010461]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 20:55:14 ispc saslauthd[2010461]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 20:56:01 ispc CRON[2010485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:56:02 ispc CRON[2010485]: pam_unix(cron:session): session closed for user root Dec 18 20:57:01 ispc CRON[2010523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:57:01 ispc CRON[2010523]: pam_unix(cron:session): session closed for user root Dec 18 20:58:01 ispc CRON[2010572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:58:02 ispc CRON[2010572]: pam_unix(cron:session): session closed for user root Dec 18 20:59:01 ispc CRON[2010613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 20:59:02 ispc CRON[2010613]: pam_unix(cron:session): session closed for user root Dec 18 21:00:01 ispc CRON[2010651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:00:01 ispc CRON[2010652]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:00:01 ispc CRON[2010653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:00:01 ispc CRON[2010654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:00:01 ispc CRON[2010655]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:00:01 ispc CRON[2010650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:00:01 ispc CRON[2010651]: pam_unix(cron:session): session closed for user root Dec 18 21:00:01 ispc CRON[2010652]: pam_unix(cron:session): session closed for user www-data Dec 18 21:00:01 ispc CRON[2010655]: pam_unix(cron:session): session closed for user getmail Dec 18 21:00:02 ispc CRON[2010654]: pam_unix(cron:session): session closed for user root Dec 18 21:00:02 ispc CRON[2010650]: pam_unix(cron:session): session closed for user root Dec 18 21:00:02 ispc CRON[2010653]: pam_unix(cron:session): session closed for user root Dec 18 21:01:01 ispc CRON[2010835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:01:02 ispc CRON[2010835]: pam_unix(cron:session): session closed for user root Dec 18 21:02:01 ispc CRON[2010872]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 21:02:01 ispc CRON[2010873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:02:01 ispc CRON[2010873]: pam_unix(cron:session): session closed for user root Dec 18 21:02:40 ispc sshd[2011735]: Bad protocol version identification 'GET / HTTP/1.1' from 64.227.136.143 Dec 18 21:02:41 ispc sshd[2011744]: Bad protocol version identification 'GET /favicon.ico HTTP/1.1' from 64.227.136.143 Dec 18 21:02:50 ispc CRON[2010872]: pam_unix(cron:session): session closed for user logcheck Dec 18 21:02:54 ispc postfix/smtpd[2011926]: sql auxprop plugin using mysql engine Dec 18 21:03:01 ispc CRON[2011933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:03:02 ispc CRON[2011933]: pam_unix(cron:session): session closed for user root Dec 18 21:04:01 ispc CRON[2011968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:04:02 ispc CRON[2011968]: pam_unix(cron:session): session closed for user root Dec 18 21:04:09 ispc postfix/smtpd[2011984]: sql auxprop plugin using mysql engine Dec 18 21:04:10 ispc saslauthd[2011988]: pam_mysql - SELECT returned no result. Dec 18 21:04:10 ispc saslauthd[2011988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:04:10 ispc saslauthd[2011988]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:05:01 ispc CRON[2012011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:05:01 ispc CRON[2012012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:05:01 ispc CRON[2012013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:05:01 ispc CRON[2012014]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:05:01 ispc CRON[2012012]: pam_unix(cron:session): session closed for user root Dec 18 21:05:01 ispc CRON[2012014]: pam_unix(cron:session): session closed for user getmail Dec 18 21:05:02 ispc CRON[2012013]: pam_unix(cron:session): session closed for user root Dec 18 21:05:03 ispc CRON[2012011]: pam_unix(cron:session): session closed for user root Dec 18 21:06:01 ispc CRON[2012115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:06:02 ispc CRON[2012115]: pam_unix(cron:session): session closed for user root Dec 18 21:07:01 ispc CRON[2012161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:07:02 ispc CRON[2012161]: pam_unix(cron:session): session closed for user root Dec 18 21:07:21 ispc sshd[2012188]: Invalid user martof from 116.120.58.228 Dec 18 21:08:01 ispc CRON[2012218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:08:02 ispc CRON[2012218]: pam_unix(cron:session): session closed for user root Dec 18 21:09:01 ispc CRON[2012259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:09:01 ispc CRON[2012260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:09:01 ispc CRON[2012259]: pam_unix(cron:session): session closed for user root Dec 18 21:09:02 ispc CRON[2012260]: pam_unix(cron:session): session closed for user root Dec 18 21:09:57 ispc postfix/smtpd[2012308]: sql auxprop plugin using mysql engine Dec 18 21:09:58 ispc saslauthd[2012311]: pam_mysql - SELECT returned no result. Dec 18 21:09:58 ispc saslauthd[2012311]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:09:58 ispc saslauthd[2012311]: do_auth : auth failure: [user=trouble] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:10:01 ispc CRON[2012313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:10:01 ispc CRON[2012314]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:10:01 ispc CRON[2012316]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:10:01 ispc CRON[2012312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:10:01 ispc CRON[2012315]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:10:01 ispc CRON[2012314]: pam_unix(cron:session): session closed for user www-data Dec 18 21:10:01 ispc CRON[2012313]: pam_unix(cron:session): session closed for user root Dec 18 21:10:01 ispc CRON[2012316]: pam_unix(cron:session): session closed for user getmail Dec 18 21:10:01 ispc CRON[2012315]: pam_unix(cron:session): session closed for user root Dec 18 21:10:02 ispc CRON[2012312]: pam_unix(cron:session): session closed for user root Dec 18 21:11:01 ispc CRON[2012418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:11:01 ispc CRON[2012418]: pam_unix(cron:session): session closed for user root Dec 18 21:11:17 ispc CRON[2010216]: pam_unix(cron:session): session closed for user root Dec 18 21:12:01 ispc CRON[2012443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:12:03 ispc CRON[2012443]: pam_unix(cron:session): session closed for user root Dec 18 21:12:15 ispc saslauthd[2012457]: pam_mysql - SELECT returned no result. Dec 18 21:12:15 ispc saslauthd[2012457]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:12:15 ispc saslauthd[2012457]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:12:32 ispc saslauthd[2012459]: pam_mysql - SELECT returned no result. Dec 18 21:12:32 ispc saslauthd[2012459]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:12:32 ispc saslauthd[2012459]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:13:01 ispc CRON[2012470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:13:02 ispc CRON[2012470]: pam_unix(cron:session): session closed for user root Dec 18 21:13:19 ispc sshd[2012485]: Did not receive identification string from 45.140.17.97 Dec 18 21:13:38 ispc sshd[2012489]: Did not receive identification string from 192.227.134.84 Dec 18 21:14:01 ispc CRON[2012490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:14:03 ispc CRON[2012490]: pam_unix(cron:session): session closed for user root Dec 18 21:15:01 ispc CRON[2012508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:15:01 ispc CRON[2012509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:15:01 ispc CRON[2012510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:15:01 ispc CRON[2012511]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:15:01 ispc CRON[2012509]: pam_unix(cron:session): session closed for user root Dec 18 21:15:01 ispc CRON[2012511]: pam_unix(cron:session): session closed for user getmail Dec 18 21:15:02 ispc CRON[2012508]: pam_unix(cron:session): session closed for user root Dec 18 21:15:45 ispc CRON[2012510]: pam_unix(cron:session): session closed for user root Dec 18 21:16:01 ispc CRON[2012702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:17:01 ispc CRON[2012740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:17:01 ispc CRON[2012740]: pam_unix(cron:session): session closed for user root Dec 18 21:18:01 ispc CRON[2012788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:18:01 ispc CRON[2012787]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 18 21:18:02 ispc CRON[2012788]: pam_unix(cron:session): session closed for user root Dec 18 21:18:07 ispc CRON[2012787]: pam_unix(cron:session): session closed for user amavis Dec 18 21:18:08 ispc postfix/smtpd[2012816]: sql auxprop plugin using mysql engine Dec 18 21:19:01 ispc CRON[2012842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:19:01 ispc CRON[2012842]: pam_unix(cron:session): session closed for user root Dec 18 21:20:01 ispc CRON[2012882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:20:01 ispc CRON[2012883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:20:01 ispc CRON[2012884]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:20:01 ispc CRON[2012885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:20:01 ispc CRON[2012886]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:20:01 ispc CRON[2012884]: pam_unix(cron:session): session closed for user www-data Dec 18 21:20:01 ispc CRON[2012883]: pam_unix(cron:session): session closed for user root Dec 18 21:20:01 ispc CRON[2012886]: pam_unix(cron:session): session closed for user getmail Dec 18 21:20:02 ispc CRON[2012885]: pam_unix(cron:session): session closed for user root Dec 18 21:20:03 ispc CRON[2012882]: pam_unix(cron:session): session closed for user root Dec 18 21:21:01 ispc CRON[2012988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:21:01 ispc CRON[2012989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:21:01 ispc CRON[2012988]: pam_unix(cron:session): session closed for user root Dec 18 21:21:02 ispc CRON[2012989]: pam_unix(cron:session): session closed for user root Dec 18 21:21:16 ispc postfix/smtpd[2013014]: sql auxprop plugin using mysql engine Dec 18 21:21:16 ispc saslauthd[2013021]: pam_mysql - SELECT returned no result. Dec 18 21:21:16 ispc saslauthd[2013021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:21:16 ispc saslauthd[2013021]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:22:01 ispc CRON[2013041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:22:02 ispc CRON[2013041]: pam_unix(cron:session): session closed for user root Dec 18 21:23:01 ispc CRON[2013089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:23:01 ispc CRON[2013089]: pam_unix(cron:session): session closed for user root Dec 18 21:24:01 ispc CRON[2013129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:24:02 ispc CRON[2013129]: pam_unix(cron:session): session closed for user root Dec 18 21:24:10 ispc postfix/smtpd[2013146]: sql auxprop plugin using mysql engine Dec 18 21:24:11 ispc saslauthd[2013148]: pam_mysql - SELECT returned no result. Dec 18 21:24:11 ispc saslauthd[2013148]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:24:11 ispc saslauthd[2013148]: do_auth : auth failure: [user=tutor] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:25:01 ispc CRON[2013170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:25:01 ispc CRON[2013171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:25:01 ispc CRON[2013172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:25:01 ispc CRON[2013173]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:25:01 ispc CRON[2013171]: pam_unix(cron:session): session closed for user root Dec 18 21:25:01 ispc CRON[2013173]: pam_unix(cron:session): session closed for user getmail Dec 18 21:25:02 ispc CRON[2013172]: pam_unix(cron:session): session closed for user root Dec 18 21:25:03 ispc CRON[2013170]: pam_unix(cron:session): session closed for user root Dec 18 21:26:01 ispc CRON[2013278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:26:02 ispc CRON[2013278]: pam_unix(cron:session): session closed for user root Dec 18 21:26:28 ispc sshd[2013301]: Invalid user ftp from 45.119.213.109 Dec 18 21:27:01 ispc CRON[2013322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:27:02 ispc CRON[2013322]: pam_unix(cron:session): session closed for user root Dec 18 21:28:01 ispc CRON[2013374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:28:02 ispc CRON[2013374]: pam_unix(cron:session): session closed for user root Dec 18 21:29:01 ispc CRON[2013411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:29:02 ispc CRON[2013411]: pam_unix(cron:session): session closed for user root Dec 18 21:29:43 ispc postfix/smtpd[2013443]: sql auxprop plugin using mysql engine Dec 18 21:29:44 ispc saslauthd[2013446]: pam_mysql - SELECT returned no result. Dec 18 21:29:44 ispc saslauthd[2013446]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:29:44 ispc saslauthd[2013446]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:30:01 ispc CRON[2013451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:30:01 ispc CRON[2013452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:30:01 ispc CRON[2013453]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:30:01 ispc CRON[2013454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:30:01 ispc CRON[2013455]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:30:01 ispc CRON[2013452]: pam_unix(cron:session): session closed for user root Dec 18 21:30:01 ispc CRON[2013453]: pam_unix(cron:session): session closed for user www-data Dec 18 21:30:01 ispc CRON[2013455]: pam_unix(cron:session): session closed for user getmail Dec 18 21:30:03 ispc CRON[2013454]: pam_unix(cron:session): session closed for user root Dec 18 21:30:04 ispc CRON[2013451]: pam_unix(cron:session): session closed for user root Dec 18 21:31:01 ispc CRON[2013557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:31:02 ispc CRON[2013557]: pam_unix(cron:session): session closed for user root Dec 18 21:32:01 ispc CRON[2013598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:32:02 ispc CRON[2013598]: pam_unix(cron:session): session closed for user root Dec 18 21:33:01 ispc CRON[2013645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:33:02 ispc CRON[2013645]: pam_unix(cron:session): session closed for user root Dec 18 21:34:01 ispc CRON[2013682]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:34:01 ispc sshd[2013681]: Did not receive identification string from 147.185.132.222 Dec 18 21:34:01 ispc CRON[2013682]: pam_unix(cron:session): session closed for user root Dec 18 21:34:10 ispc sshd[2013697]: Invalid user ziplines from 116.120.58.228 Dec 18 21:34:13 ispc postfix/smtpd[2013700]: sql auxprop plugin using mysql engine Dec 18 21:34:14 ispc saslauthd[2013704]: pam_mysql - SELECT returned no result. Dec 18 21:34:14 ispc saslauthd[2013704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:34:14 ispc saslauthd[2013704]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 21:34:45 ispc sshd[2013721]: Invalid user ziplines from 51.159.91.86 Dec 18 21:35:01 ispc CRON[2013731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:35:01 ispc CRON[2013732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:35:01 ispc CRON[2013733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:35:01 ispc CRON[2013734]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:35:01 ispc CRON[2013732]: pam_unix(cron:session): session closed for user root Dec 18 21:35:02 ispc CRON[2013734]: pam_unix(cron:session): session closed for user getmail Dec 18 21:35:02 ispc CRON[2013733]: pam_unix(cron:session): session closed for user root Dec 18 21:35:03 ispc CRON[2013731]: pam_unix(cron:session): session closed for user root Dec 18 21:35:08 ispc sshd[2013811]: Invalid user stone from 62.60.131.157 Dec 18 21:36:01 ispc CRON[2013837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:36:02 ispc CRON[2013837]: pam_unix(cron:session): session closed for user root Dec 18 21:36:17 ispc postfix/smtpd[2013854]: sql auxprop plugin using mysql engine Dec 18 21:36:17 ispc CRON[2012702]: pam_unix(cron:session): session closed for user root Dec 18 21:37:01 ispc CRON[2013861]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:37:02 ispc CRON[2013861]: pam_unix(cron:session): session closed for user root Dec 18 21:37:06 ispc sshd[2013873]: Invalid user diamantdi from 213.165.71.107 Dec 18 21:38:01 ispc CRON[2013896]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:38:02 ispc CRON[2013896]: pam_unix(cron:session): session closed for user root Dec 18 21:38:17 ispc saslauthd[2013909]: pam_mysql - SELECT returned no result. Dec 18 21:38:17 ispc saslauthd[2013909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:38:17 ispc saslauthd[2013909]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:39:01 ispc CRON[2013914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:39:01 ispc CRON[2013915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:39:02 ispc CRON[2013914]: pam_unix(cron:session): session closed for user root Dec 18 21:39:02 ispc saslauthd[2013935]: pam_mysql - SELECT returned no result. Dec 18 21:39:02 ispc saslauthd[2013935]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:39:02 ispc saslauthd[2013935]: do_auth : auth failure: [user=umountfs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:39:02 ispc postfix/smtpd[2013937]: sql auxprop plugin using mysql engine Dec 18 21:39:02 ispc CRON[2013915]: pam_unix(cron:session): session closed for user root Dec 18 21:39:07 ispc sshd[2013942]: Invalid user blceu from 51.159.91.86 Dec 18 21:40:01 ispc CRON[2013946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:40:01 ispc CRON[2013947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:40:01 ispc CRON[2013948]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:40:01 ispc CRON[2013949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:40:01 ispc CRON[2013950]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:40:01 ispc CRON[2013948]: pam_unix(cron:session): session closed for user www-data Dec 18 21:40:01 ispc CRON[2013947]: pam_unix(cron:session): session closed for user root Dec 18 21:40:01 ispc CRON[2013950]: pam_unix(cron:session): session closed for user getmail Dec 18 21:40:02 ispc CRON[2013946]: pam_unix(cron:session): session closed for user root Dec 18 21:40:37 ispc CRON[2013949]: pam_unix(cron:session): session closed for user root Dec 18 21:41:01 ispc CRON[2014065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:42:01 ispc CRON[2014123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:42:02 ispc CRON[2014123]: pam_unix(cron:session): session closed for user root Dec 18 21:43:01 ispc CRON[2014176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:43:03 ispc CRON[2014176]: pam_unix(cron:session): session closed for user root Dec 18 21:43:05 ispc postfix/smtpd[2014189]: sql auxprop plugin using mysql engine Dec 18 21:44:01 ispc CRON[2014238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:44:02 ispc CRON[2014238]: pam_unix(cron:session): session closed for user root Dec 18 21:45:01 ispc CRON[2014287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:45:01 ispc CRON[2014288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:45:01 ispc CRON[2014289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:45:01 ispc CRON[2014290]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:45:01 ispc CRON[2014288]: pam_unix(cron:session): session closed for user root Dec 18 21:45:01 ispc CRON[2014290]: pam_unix(cron:session): session closed for user getmail Dec 18 21:45:02 ispc CRON[2014289]: pam_unix(cron:session): session closed for user root Dec 18 21:45:03 ispc CRON[2014287]: pam_unix(cron:session): session closed for user root Dec 18 21:46:01 ispc CRON[2014396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:46:02 ispc CRON[2014396]: pam_unix(cron:session): session closed for user root Dec 18 21:46:08 ispc sshd[2014409]: Invalid user klape from 103.164.20.29 Dec 18 21:46:10 ispc sshd[2014411]: Invalid user ubuntu from 103.164.20.29 Dec 18 21:46:27 ispc postfix/smtpd[2014422]: sql auxprop plugin using mysql engine Dec 18 21:46:28 ispc saslauthd[2014425]: pam_mysql - SELECT returned no result. Dec 18 21:46:28 ispc saslauthd[2014425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:46:28 ispc saslauthd[2014425]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:47:01 ispc CRON[2014439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:47:01 ispc CRON[2014439]: pam_unix(cron:session): session closed for user root Dec 18 21:48:01 ispc CRON[2014486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:48:02 ispc CRON[2014486]: pam_unix(cron:session): session closed for user root Dec 18 21:49:01 ispc CRON[2014524]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:49:01 ispc CRON[2014524]: pam_unix(cron:session): session closed for user root Dec 18 21:50:01 ispc CRON[2014562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:50:01 ispc CRON[2014563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:50:01 ispc CRON[2014564]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 21:50:01 ispc CRON[2014565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:50:01 ispc CRON[2014566]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:50:01 ispc CRON[2014563]: pam_unix(cron:session): session closed for user root Dec 18 21:50:01 ispc CRON[2014564]: pam_unix(cron:session): session closed for user www-data Dec 18 21:50:02 ispc CRON[2014566]: pam_unix(cron:session): session closed for user getmail Dec 18 21:50:02 ispc CRON[2014565]: pam_unix(cron:session): session closed for user root Dec 18 21:50:03 ispc CRON[2014562]: pam_unix(cron:session): session closed for user root Dec 18 21:51:01 ispc CRON[2014667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:51:01 ispc CRON[2014667]: pam_unix(cron:session): session closed for user root Dec 18 21:52:01 ispc CRON[2014704]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:52:01 ispc CRON[2014705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:52:02 ispc CRON[2014705]: pam_unix(cron:session): session closed for user root Dec 18 21:53:01 ispc CRON[2014756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:53:02 ispc CRON[2014756]: pam_unix(cron:session): session closed for user root Dec 18 21:53:49 ispc postfix/smtpd[2014785]: sql auxprop plugin using mysql engine Dec 18 21:53:50 ispc saslauthd[2014788]: pam_mysql - SELECT returned no result. Dec 18 21:53:50 ispc saslauthd[2014788]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:53:50 ispc saslauthd[2014788]: do_auth : auth failure: [user=umountfsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:54:01 ispc CRON[2014796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:54:02 ispc CRON[2014796]: pam_unix(cron:session): session closed for user root Dec 18 21:54:55 ispc saslauthd[2014836]: pam_mysql - SELECT returned no result. Dec 18 21:54:55 ispc saslauthd[2014836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 21:54:55 ispc saslauthd[2014836]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 21:55:01 ispc CRON[2014837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:55:01 ispc CRON[2014838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:55:01 ispc CRON[2014839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:55:01 ispc CRON[2014840]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 21:55:02 ispc CRON[2014838]: pam_unix(cron:session): session closed for user root Dec 18 21:55:02 ispc CRON[2014840]: pam_unix(cron:session): session closed for user getmail Dec 18 21:55:02 ispc CRON[2014837]: pam_unix(cron:session): session closed for user root Dec 18 21:55:02 ispc CRON[2014839]: pam_unix(cron:session): session closed for user root Dec 18 21:55:19 ispc CRON[2014704]: pam_unix(cron:session): session closed for user root Dec 18 21:56:01 ispc CRON[2014940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:56:02 ispc CRON[2014940]: pam_unix(cron:session): session closed for user root Dec 18 21:56:26 ispc sshd[2014959]: Did not receive identification string from 192.227.134.84 Dec 18 21:57:01 ispc CRON[2014979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:57:01 ispc CRON[2014979]: pam_unix(cron:session): session closed for user root Dec 18 21:58:01 ispc CRON[2015025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:58:02 ispc CRON[2015025]: pam_unix(cron:session): session closed for user root Dec 18 21:59:01 ispc CRON[2015066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 21:59:01 ispc CRON[2015066]: pam_unix(cron:session): session closed for user root Dec 18 22:00:01 ispc CRON[2015102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:00:01 ispc CRON[2015103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:00:01 ispc CRON[2015104]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:00:01 ispc CRON[2015105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:00:01 ispc CRON[2015106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:00:01 ispc CRON[2015107]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:00:01 ispc CRON[2015104]: pam_unix(cron:session): session closed for user www-data Dec 18 22:00:01 ispc CRON[2015103]: pam_unix(cron:session): session closed for user root Dec 18 22:00:01 ispc CRON[2015107]: pam_unix(cron:session): session closed for user getmail Dec 18 22:00:02 ispc CRON[2015106]: pam_unix(cron:session): session closed for user root Dec 18 22:00:02 ispc CRON[2015102]: pam_unix(cron:session): session closed for user root Dec 18 22:00:02 ispc CRON[2015105]: pam_unix(cron:session): session closed for user root Dec 18 22:01:01 ispc CRON[2015288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:01:02 ispc CRON[2015288]: pam_unix(cron:session): session closed for user root Dec 18 22:01:29 ispc CRON[2014065]: pam_unix(cron:session): session closed for user root Dec 18 22:01:29 ispc postfix/smtpd[2015311]: sql auxprop plugin using mysql engine Dec 18 22:02:01 ispc CRON[2015316]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 22:02:01 ispc CRON[2015317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:02:02 ispc CRON[2015317]: pam_unix(cron:session): session closed for user root Dec 18 22:03:01 ispc CRON[2016297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:03:02 ispc CRON[2016297]: pam_unix(cron:session): session closed for user root Dec 18 22:03:04 ispc CRON[2015316]: pam_unix(cron:session): session closed for user logcheck Dec 18 22:03:08 ispc postfix/smtpd[2016366]: sql auxprop plugin using mysql engine Dec 18 22:03:19 ispc saslauthd[2016369]: pam_mysql - SELECT returned no result. Dec 18 22:03:19 ispc saslauthd[2016369]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:03:19 ispc saslauthd[2016369]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:03:21 ispc sshd[2016370]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:04:01 ispc CRON[2016372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:04:02 ispc CRON[2016372]: pam_unix(cron:session): session closed for user root Dec 18 22:05:01 ispc CRON[2016396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:05:01 ispc CRON[2016397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:05:01 ispc CRON[2016398]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:05:01 ispc CRON[2016399]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:05:01 ispc CRON[2016397]: pam_unix(cron:session): session closed for user root Dec 18 22:05:01 ispc CRON[2016399]: pam_unix(cron:session): session closed for user getmail Dec 18 22:05:02 ispc CRON[2016396]: pam_unix(cron:session): session closed for user root Dec 18 22:05:39 ispc CRON[2016398]: pam_unix(cron:session): session closed for user root Dec 18 22:05:44 ispc sshd[2016505]: Invalid user martof from 222.236.46.74 Dec 18 22:06:01 ispc CRON[2016508]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:07:01 ispc CRON[2016543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:07:02 ispc CRON[2016543]: pam_unix(cron:session): session closed for user root Dec 18 22:08:01 ispc CRON[2016589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:08:01 ispc CRON[2016589]: pam_unix(cron:session): session closed for user root Dec 18 22:08:21 ispc sshd[2016609]: Did not receive identification string from 153.36.239.250 Dec 18 22:08:32 ispc postfix/smtpd[2016619]: sql auxprop plugin using mysql engine Dec 18 22:08:34 ispc saslauthd[2016622]: pam_mysql - SELECT returned no result. Dec 18 22:08:34 ispc saslauthd[2016622]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:08:34 ispc saslauthd[2016622]: do_auth : auth failure: [user=umountsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:09:01 ispc CRON[2016636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:09:01 ispc CRON[2016637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:09:01 ispc CRON[2016636]: pam_unix(cron:session): session closed for user root Dec 18 22:09:02 ispc postfix/smtpd[2016654]: sql auxprop plugin using mysql engine Dec 18 22:09:03 ispc CRON[2016637]: pam_unix(cron:session): session closed for user root Dec 18 22:10:01 ispc CRON[2016687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:10:01 ispc CRON[2016688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:10:01 ispc CRON[2016689]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:10:01 ispc CRON[2016690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:10:01 ispc CRON[2016691]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:10:01 ispc CRON[2016688]: pam_unix(cron:session): session closed for user root Dec 18 22:10:01 ispc CRON[2016689]: pam_unix(cron:session): session closed for user www-data Dec 18 22:10:01 ispc CRON[2016691]: pam_unix(cron:session): session closed for user getmail Dec 18 22:10:01 ispc CRON[2016690]: pam_unix(cron:session): session closed for user root Dec 18 22:10:03 ispc CRON[2016687]: pam_unix(cron:session): session closed for user root Dec 18 22:11:01 ispc CRON[2016794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:11:02 ispc CRON[2016794]: pam_unix(cron:session): session closed for user root Dec 18 22:11:34 ispc postfix/smtpd[2016818]: sql auxprop plugin using mysql engine Dec 18 22:11:34 ispc postfix/smtpd[2016820]: sql auxprop plugin using mysql engine Dec 18 22:12:01 ispc CRON[2016842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:12:03 ispc CRON[2016842]: pam_unix(cron:session): session closed for user root Dec 18 22:13:01 ispc CRON[2016892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:13:01 ispc CRON[2016892]: pam_unix(cron:session): session closed for user root Dec 18 22:13:04 ispc postfix/smtpd[2016904]: sql auxprop plugin using mysql engine Dec 18 22:13:05 ispc saslauthd[2016905]: pam_mysql - SELECT returned no result. Dec 18 22:13:05 ispc saslauthd[2016905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:13:05 ispc saslauthd[2016905]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:13:33 ispc sshd[2016919]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:13:33 ispc sshd[2016919]: Invalid user blceu from 193.110.157.47 Dec 18 22:14:01 ispc CRON[2016935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:14:02 ispc CRON[2016935]: pam_unix(cron:session): session closed for user root Dec 18 22:15:01 ispc CRON[2016969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:15:01 ispc CRON[2016970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:15:01 ispc CRON[2016971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:15:01 ispc CRON[2016972]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:15:01 ispc CRON[2016970]: pam_unix(cron:session): session closed for user root Dec 18 22:15:01 ispc CRON[2016972]: pam_unix(cron:session): session closed for user getmail Dec 18 22:15:02 ispc CRON[2016969]: pam_unix(cron:session): session closed for user root Dec 18 22:15:02 ispc CRON[2016971]: pam_unix(cron:session): session closed for user root Dec 18 22:16:01 ispc CRON[2017075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:16:02 ispc CRON[2017075]: pam_unix(cron:session): session closed for user root Dec 18 22:16:29 ispc sshd[2017100]: Invalid user ziplines from 118.218.219.250 Dec 18 22:17:01 ispc CRON[2017115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:17:01 ispc CRON[2017115]: pam_unix(cron:session): session closed for user root Dec 18 22:17:45 ispc postfix/smtpd[2017146]: sql auxprop plugin using mysql engine Dec 18 22:18:01 ispc CRON[2017167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:18:02 ispc CRON[2017167]: pam_unix(cron:session): session closed for user root Dec 18 22:19:01 ispc CRON[2017206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:19:02 ispc CRON[2017206]: pam_unix(cron:session): session closed for user root Dec 18 22:20:01 ispc CRON[2017249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:20:01 ispc CRON[2017246]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:20:01 ispc CRON[2017248]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:20:01 ispc CRON[2017250]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:20:01 ispc CRON[2017247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:20:01 ispc CRON[2017248]: pam_unix(cron:session): session closed for user www-data Dec 18 22:20:01 ispc CRON[2017250]: pam_unix(cron:session): session closed for user getmail Dec 18 22:20:01 ispc CRON[2017247]: pam_unix(cron:session): session closed for user root Dec 18 22:20:01 ispc CRON[2017249]: pam_unix(cron:session): session closed for user root Dec 18 22:20:02 ispc CRON[2017246]: pam_unix(cron:session): session closed for user root Dec 18 22:21:01 ispc CRON[2017351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:21:01 ispc CRON[2017350]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:21:01 ispc CRON[2017350]: pam_unix(cron:session): session closed for user root Dec 18 22:21:01 ispc CRON[2017351]: pam_unix(cron:session): session closed for user root Dec 18 22:21:43 ispc sshd[2017383]: Invalid user martof from 118.218.219.250 Dec 18 22:22:01 ispc CRON[2017394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:22:02 ispc CRON[2017394]: pam_unix(cron:session): session closed for user root Dec 18 22:22:23 ispc postfix/smtpd[2017413]: sql auxprop plugin using mysql engine Dec 18 22:22:23 ispc saslauthd[2017416]: pam_mysql - SELECT returned no result. Dec 18 22:22:23 ispc saslauthd[2017416]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:22:23 ispc saslauthd[2017416]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:23:01 ispc CRON[2017441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:23:01 ispc CRON[2017441]: pam_unix(cron:session): session closed for user root Dec 18 22:23:24 ispc saslauthd[2017462]: pam_mysql - SELECT returned no result. Dec 18 22:23:24 ispc saslauthd[2017462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:23:24 ispc saslauthd[2017462]: do_auth : auth failure: [user=unix] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:24:01 ispc CRON[2017484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:24:02 ispc CRON[2017484]: pam_unix(cron:session): session closed for user root Dec 18 22:25:01 ispc CRON[2017516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:25:01 ispc CRON[2017517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:25:01 ispc CRON[2017518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:25:01 ispc CRON[2017519]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:25:01 ispc CRON[2017517]: pam_unix(cron:session): session closed for user root Dec 18 22:25:01 ispc CRON[2017519]: pam_unix(cron:session): session closed for user getmail Dec 18 22:25:01 ispc CRON[2017518]: pam_unix(cron:session): session closed for user root Dec 18 22:25:02 ispc CRON[2017516]: pam_unix(cron:session): session closed for user root Dec 18 22:26:01 ispc CRON[2017620]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:26:01 ispc CRON[2017620]: pam_unix(cron:session): session closed for user root Dec 18 22:26:22 ispc postfix/smtpd[2017642]: sql auxprop plugin using mysql engine Dec 18 22:26:22 ispc CRON[2016508]: pam_unix(cron:session): session closed for user root Dec 18 22:26:51 ispc saslauthd[2017648]: pam_mysql - SELECT returned no result. Dec 18 22:26:51 ispc saslauthd[2017648]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:26:51 ispc saslauthd[2017648]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:27:01 ispc CRON[2017656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:27:02 ispc CRON[2017656]: pam_unix(cron:session): session closed for user root Dec 18 22:28:01 ispc CRON[2017695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:28:01 ispc CRON[2017695]: pam_unix(cron:session): session closed for user root Dec 18 22:29:01 ispc CRON[2017721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:29:02 ispc CRON[2017721]: pam_unix(cron:session): session closed for user root Dec 18 22:30:01 ispc CRON[2017737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:30:01 ispc CRON[2017736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:30:01 ispc CRON[2017738]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:30:01 ispc CRON[2017739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:30:01 ispc CRON[2017740]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:30:01 ispc CRON[2017738]: pam_unix(cron:session): session closed for user www-data Dec 18 22:30:01 ispc CRON[2017737]: pam_unix(cron:session): session closed for user root Dec 18 22:30:01 ispc CRON[2017740]: pam_unix(cron:session): session closed for user getmail Dec 18 22:30:02 ispc CRON[2017736]: pam_unix(cron:session): session closed for user root Dec 18 22:30:41 ispc CRON[2017739]: pam_unix(cron:session): session closed for user root Dec 18 22:30:58 ispc saslauthd[2017924]: pam_mysql - SELECT returned no result. Dec 18 22:30:58 ispc saslauthd[2017924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:30:58 ispc saslauthd[2017924]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:31:01 ispc CRON[2017925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:31:38 ispc postfix/smtpd[2017951]: sql auxprop plugin using mysql engine Dec 18 22:32:01 ispc saslauthd[2017963]: pam_mysql - SELECT returned no result. Dec 18 22:32:01 ispc saslauthd[2017963]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:32:01 ispc saslauthd[2017963]: do_auth : auth failure: [user=oracle@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 22:32:01 ispc CRON[2017964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:32:02 ispc CRON[2017964]: pam_unix(cron:session): session closed for user root Dec 18 22:33:01 ispc CRON[2018009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:33:01 ispc CRON[2018009]: pam_unix(cron:session): session closed for user root Dec 18 22:33:17 ispc sshd[2018030]: Invalid user klape from 36.50.177.171 Dec 18 22:33:22 ispc sshd[2018032]: Invalid user ubuntu from 36.50.177.171 Dec 18 22:34:01 ispc CRON[2018057]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:34:02 ispc CRON[2018057]: pam_unix(cron:session): session closed for user root Dec 18 22:35:01 ispc CRON[2018098]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:35:01 ispc CRON[2018095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:35:01 ispc CRON[2018096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:35:01 ispc CRON[2018097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:35:01 ispc CRON[2018098]: pam_unix(cron:session): session closed for user getmail Dec 18 22:35:01 ispc CRON[2018096]: pam_unix(cron:session): session closed for user root Dec 18 22:35:01 ispc CRON[2018097]: pam_unix(cron:session): session closed for user root Dec 18 22:35:01 ispc CRON[2018095]: pam_unix(cron:session): session closed for user root Dec 18 22:36:01 ispc CRON[2018200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:36:02 ispc CRON[2018200]: pam_unix(cron:session): session closed for user root Dec 18 22:36:27 ispc sshd[2018221]: Did not receive identification string from 192.227.134.84 Dec 18 22:37:01 ispc CRON[2018240]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:37:02 ispc CRON[2018240]: pam_unix(cron:session): session closed for user root Dec 18 22:38:01 ispc CRON[2018293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:38:02 ispc CRON[2018293]: pam_unix(cron:session): session closed for user root Dec 18 22:38:14 ispc postfix/smtpd[2018310]: sql auxprop plugin using mysql engine Dec 18 22:38:16 ispc saslauthd[2018313]: pam_mysql - SELECT returned no result. Dec 18 22:38:16 ispc saslauthd[2018313]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:38:16 ispc saslauthd[2018313]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:39:01 ispc CRON[2018336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:39:01 ispc CRON[2018335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:39:01 ispc CRON[2018335]: pam_unix(cron:session): session closed for user root Dec 18 22:39:01 ispc CRON[2018336]: pam_unix(cron:session): session closed for user root Dec 18 22:39:45 ispc saslauthd[2018376]: pam_mysql - SELECT returned no result. Dec 18 22:39:45 ispc saslauthd[2018376]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:39:45 ispc saslauthd[2018376]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:40:01 ispc CRON[2018387]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:40:01 ispc CRON[2018386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:40:01 ispc CRON[2018388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:40:01 ispc CRON[2018387]: pam_unix(cron:session): session closed for user www-data Dec 18 22:40:01 ispc CRON[2018389]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:40:01 ispc CRON[2018385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:40:01 ispc CRON[2018386]: pam_unix(cron:session): session closed for user root Dec 18 22:40:01 ispc CRON[2018389]: pam_unix(cron:session): session closed for user getmail Dec 18 22:40:02 ispc CRON[2018388]: pam_unix(cron:session): session closed for user root Dec 18 22:40:02 ispc CRON[2018385]: pam_unix(cron:session): session closed for user root Dec 18 22:41:01 ispc CRON[2018492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:41:01 ispc CRON[2018492]: pam_unix(cron:session): session closed for user root Dec 18 22:42:01 ispc CRON[2018535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:42:02 ispc CRON[2018535]: pam_unix(cron:session): session closed for user root Dec 18 22:43:01 ispc CRON[2018582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:43:01 ispc CRON[2018582]: pam_unix(cron:session): session closed for user root Dec 18 22:44:01 ispc CRON[2018618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:44:03 ispc CRON[2018618]: pam_unix(cron:session): session closed for user root Dec 18 22:44:54 ispc sshd[2018654]: Invalid user martof from 85.143.173.172 Dec 18 22:45:01 ispc CRON[2018660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:45:01 ispc CRON[2018661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:45:01 ispc CRON[2018662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:45:01 ispc CRON[2018663]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:45:01 ispc CRON[2018661]: pam_unix(cron:session): session closed for user root Dec 18 22:45:01 ispc CRON[2018663]: pam_unix(cron:session): session closed for user getmail Dec 18 22:45:02 ispc CRON[2018662]: pam_unix(cron:session): session closed for user root Dec 18 22:45:03 ispc CRON[2018660]: pam_unix(cron:session): session closed for user root Dec 18 22:46:01 ispc CRON[2018764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:46:03 ispc CRON[2018764]: pam_unix(cron:session): session closed for user root Dec 18 22:46:14 ispc sshd[2018780]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:15 ispc sshd[2018782]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:15 ispc sshd[2018784]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:16 ispc sshd[2018786]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:16 ispc sshd[2018788]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:17 ispc sshd[2018794]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:18 ispc sshd[2018796]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:18 ispc sshd[2018798]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:19 ispc sshd[2018800]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:21 ispc sshd[2018802]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:22 ispc sshd[2018804]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:22 ispc sshd[2018806]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:23 ispc sshd[2018808]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:24 ispc sshd[2018810]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:25 ispc sshd[2018812]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:46:26 ispc sshd[2018815]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 18 22:47:01 ispc CRON[2018835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:47:02 ispc CRON[2018835]: pam_unix(cron:session): session closed for user root Dec 18 22:48:01 ispc CRON[2018883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:48:02 ispc CRON[2018883]: pam_unix(cron:session): session closed for user root Dec 18 22:48:34 ispc postfix/smtpd[2018908]: sql auxprop plugin using mysql engine Dec 18 22:48:35 ispc saslauthd[2018911]: pam_mysql - SELECT returned no result. Dec 18 22:48:35 ispc saslauthd[2018911]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:48:35 ispc saslauthd[2018911]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:49:01 ispc CRON[2018926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:49:01 ispc CRON[2018926]: pam_unix(cron:session): session closed for user root Dec 18 22:50:01 ispc CRON[2018963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:50:01 ispc CRON[2018964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:50:01 ispc CRON[2018965]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 22:50:01 ispc CRON[2018966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:50:01 ispc CRON[2018967]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:50:02 ispc CRON[2018965]: pam_unix(cron:session): session closed for user www-data Dec 18 22:50:02 ispc CRON[2018964]: pam_unix(cron:session): session closed for user root Dec 18 22:50:02 ispc CRON[2018967]: pam_unix(cron:session): session closed for user getmail Dec 18 22:50:03 ispc CRON[2018966]: pam_unix(cron:session): session closed for user root Dec 18 22:50:04 ispc CRON[2018963]: pam_unix(cron:session): session closed for user root Dec 18 22:51:01 ispc CRON[2019069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:51:02 ispc CRON[2019069]: pam_unix(cron:session): session closed for user root Dec 18 22:51:24 ispc postfix/smtpd[2019092]: sql auxprop plugin using mysql engine Dec 18 22:51:24 ispc CRON[2017925]: pam_unix(cron:session): session closed for user root Dec 18 22:51:53 ispc sshd[2019095]: Invalid user arely from 62.60.131.157 Dec 18 22:52:01 ispc CRON[2019098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:52:02 ispc CRON[2019098]: pam_unix(cron:session): session closed for user root Dec 18 22:53:01 ispc CRON[2019123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:53:03 ispc CRON[2019123]: pam_unix(cron:session): session closed for user root Dec 18 22:53:07 ispc saslauthd[2019137]: pam_mysql - SELECT returned no result. Dec 18 22:53:07 ispc saslauthd[2019137]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:53:07 ispc saslauthd[2019137]: do_auth : auth failure: [user=username] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:54:01 ispc CRON[2019141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:54:02 ispc CRON[2019141]: pam_unix(cron:session): session closed for user root Dec 18 22:54:49 ispc sshd[2019160]: Did not receive identification string from 45.140.17.97 Dec 18 22:55:01 ispc CRON[2019161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:55:01 ispc CRON[2019162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:55:01 ispc CRON[2019163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:55:01 ispc CRON[2019164]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 22:55:01 ispc CRON[2019162]: pam_unix(cron:session): session closed for user root Dec 18 22:55:01 ispc CRON[2019164]: pam_unix(cron:session): session closed for user getmail Dec 18 22:55:02 ispc CRON[2019161]: pam_unix(cron:session): session closed for user root Dec 18 22:55:37 ispc CRON[2019163]: pam_unix(cron:session): session closed for user root Dec 18 22:56:01 ispc CRON[2019270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:57:01 ispc CRON[2019307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:57:01 ispc CRON[2019307]: pam_unix(cron:session): session closed for user root Dec 18 22:57:07 ispc postfix/smtpd[2019322]: sql auxprop plugin using mysql engine Dec 18 22:57:08 ispc saslauthd[2019324]: pam_mysql - SELECT returned no result. Dec 18 22:57:08 ispc saslauthd[2019324]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 22:57:08 ispc saslauthd[2019324]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 22:58:01 ispc CRON[2019356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:58:02 ispc CRON[2019356]: pam_unix(cron:session): session closed for user root Dec 18 22:59:01 ispc CRON[2019393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 22:59:02 ispc CRON[2019393]: pam_unix(cron:session): session closed for user root Dec 18 23:00:01 ispc CRON[2019432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:00:01 ispc CRON[2019433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:00:01 ispc CRON[2019435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:00:01 ispc CRON[2019436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:00:01 ispc CRON[2019437]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:00:01 ispc CRON[2019433]: pam_unix(cron:session): session closed for user root Dec 18 23:00:01 ispc CRON[2019434]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:00:01 ispc CRON[2019434]: pam_unix(cron:session): session closed for user www-data Dec 18 23:00:01 ispc CRON[2019437]: pam_unix(cron:session): session closed for user getmail Dec 18 23:00:01 ispc CRON[2019436]: pam_unix(cron:session): session closed for user root Dec 18 23:00:02 ispc CRON[2019435]: pam_unix(cron:session): session closed for user root Dec 18 23:00:03 ispc CRON[2019432]: pam_unix(cron:session): session closed for user root Dec 18 23:00:49 ispc sshd[2019611]: Invalid user blceu from 85.143.173.172 Dec 18 23:01:01 ispc CRON[2019618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:01:02 ispc CRON[2019618]: pam_unix(cron:session): session closed for user root Dec 18 23:02:01 ispc CRON[2019659]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 18 23:02:01 ispc CRON[2019660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:02:02 ispc CRON[2019660]: pam_unix(cron:session): session closed for user root Dec 18 23:03:01 ispc CRON[2020546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:03:02 ispc CRON[2020546]: pam_unix(cron:session): session closed for user root Dec 18 23:03:13 ispc CRON[2019659]: pam_unix(cron:session): session closed for user logcheck Dec 18 23:03:20 ispc postfix/smtpd[2020738]: sql auxprop plugin using mysql engine Dec 18 23:04:01 ispc CRON[2020761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:04:02 ispc CRON[2020761]: pam_unix(cron:session): session closed for user root Dec 18 23:04:32 ispc postfix/smtpd[2020784]: sql auxprop plugin using mysql engine Dec 18 23:05:01 ispc CRON[2020805]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:05:01 ispc CRON[2020806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:05:01 ispc CRON[2020807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:05:01 ispc CRON[2020808]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:05:01 ispc CRON[2020806]: pam_unix(cron:session): session closed for user root Dec 18 23:05:01 ispc CRON[2020808]: pam_unix(cron:session): session closed for user getmail Dec 18 23:05:01 ispc CRON[2020807]: pam_unix(cron:session): session closed for user root Dec 18 23:05:01 ispc CRON[2020805]: pam_unix(cron:session): session closed for user root Dec 18 23:05:28 ispc saslauthd[2020890]: pam_mysql - SELECT returned no result. Dec 18 23:05:28 ispc saslauthd[2020890]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:05:28 ispc saslauthd[2020890]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:06:01 ispc CRON[2020908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:06:02 ispc CRON[2020908]: pam_unix(cron:session): session closed for user root Dec 18 23:07:01 ispc CRON[2020948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:07:02 ispc CRON[2020948]: pam_unix(cron:session): session closed for user root Dec 18 23:07:53 ispc postfix/smtpd[2020992]: sql auxprop plugin using mysql engine Dec 18 23:07:55 ispc saslauthd[2020993]: pam_mysql - SELECT returned no result. Dec 18 23:07:55 ispc saslauthd[2020993]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:07:55 ispc saslauthd[2020993]: do_auth : auth failure: [user=uucp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:08:01 ispc CRON[2021002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:08:01 ispc CRON[2021002]: pam_unix(cron:session): session closed for user root Dec 18 23:09:01 ispc CRON[2021042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:09:01 ispc CRON[2021043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:09:02 ispc CRON[2021042]: pam_unix(cron:session): session closed for user root Dec 18 23:09:02 ispc CRON[2021043]: pam_unix(cron:session): session closed for user root Dec 18 23:10:01 ispc CRON[2021087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:10:01 ispc CRON[2021088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:10:01 ispc CRON[2021089]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:10:01 ispc CRON[2021090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:10:01 ispc CRON[2021091]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:10:01 ispc CRON[2021089]: pam_unix(cron:session): session closed for user www-data Dec 18 23:10:01 ispc CRON[2021088]: pam_unix(cron:session): session closed for user root Dec 18 23:10:01 ispc CRON[2021091]: pam_unix(cron:session): session closed for user getmail Dec 18 23:10:03 ispc CRON[2021090]: pam_unix(cron:session): session closed for user root Dec 18 23:10:04 ispc CRON[2021087]: pam_unix(cron:session): session closed for user root Dec 18 23:11:01 ispc CRON[2021196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:11:02 ispc CRON[2021196]: pam_unix(cron:session): session closed for user root Dec 18 23:11:17 ispc sshd[2021216]: Invalid user ziplines from 185.181.182.252 Dec 18 23:12:01 ispc CRON[2021235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:12:03 ispc CRON[2021235]: pam_unix(cron:session): session closed for user root Dec 18 23:12:55 ispc sshd[2021279]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 23:13:01 ispc CRON[2021284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:13:02 ispc CRON[2021284]: pam_unix(cron:session): session closed for user root Dec 18 23:13:40 ispc postfix/smtpd[2021312]: sql auxprop plugin using mysql engine Dec 18 23:13:41 ispc saslauthd[2021315]: pam_mysql - SELECT returned no result. Dec 18 23:13:41 ispc saslauthd[2021315]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:13:41 ispc saslauthd[2021315]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:14:01 ispc CRON[2021324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:14:02 ispc CRON[2021324]: pam_unix(cron:session): session closed for user root Dec 18 23:15:01 ispc CRON[2021363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:15:01 ispc CRON[2021364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:15:01 ispc CRON[2021365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:15:01 ispc CRON[2021366]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:15:01 ispc CRON[2021364]: pam_unix(cron:session): session closed for user root Dec 18 23:15:02 ispc CRON[2021366]: pam_unix(cron:session): session closed for user getmail Dec 18 23:15:02 ispc CRON[2021365]: pam_unix(cron:session): session closed for user root Dec 18 23:15:04 ispc CRON[2021363]: pam_unix(cron:session): session closed for user root Dec 18 23:16:01 ispc CRON[2021466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:16:01 ispc CRON[2021466]: pam_unix(cron:session): session closed for user root Dec 18 23:16:16 ispc postfix/smtpd[2021484]: sql auxprop plugin using mysql engine Dec 18 23:16:16 ispc CRON[2019270]: pam_unix(cron:session): session closed for user root Dec 18 23:17:02 ispc CRON[2021490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:17:02 ispc CRON[2021490]: pam_unix(cron:session): session closed for user root Dec 18 23:17:16 ispc sshd[2021504]: Invalid user martof from 51.159.91.86 Dec 18 23:17:35 ispc sshd[2021507]: Did not receive identification string from 192.227.134.84 Dec 18 23:18:01 ispc CRON[2021517]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:18:02 ispc CRON[2021517]: pam_unix(cron:session): session closed for user root Dec 18 23:19:01 ispc CRON[2021534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:19:03 ispc CRON[2021534]: pam_unix(cron:session): session closed for user root Dec 18 23:20:01 ispc CRON[2021550]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:20:01 ispc CRON[2021551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:20:01 ispc CRON[2021552]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:20:01 ispc CRON[2021553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:20:01 ispc CRON[2021554]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:20:01 ispc CRON[2021552]: pam_unix(cron:session): session closed for user www-data Dec 18 23:20:01 ispc CRON[2021551]: pam_unix(cron:session): session closed for user root Dec 18 23:20:01 ispc CRON[2021554]: pam_unix(cron:session): session closed for user getmail Dec 18 23:20:02 ispc CRON[2021550]: pam_unix(cron:session): session closed for user root Dec 18 23:20:38 ispc CRON[2021553]: pam_unix(cron:session): session closed for user root Dec 18 23:20:44 ispc postfix/smtpd[2021660]: sql auxprop plugin using mysql engine Dec 18 23:21:01 ispc CRON[2021664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:21:01 ispc CRON[2021665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:21:01 ispc CRON[2021664]: pam_unix(cron:session): session closed for user root Dec 18 23:22:00 ispc postfix/smtpd[2021703]: sql auxprop plugin using mysql engine Dec 18 23:22:01 ispc saslauthd[2021705]: pam_mysql - SELECT returned no result. Dec 18 23:22:01 ispc saslauthd[2021705]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:22:01 ispc saslauthd[2021705]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:22:01 ispc CRON[2021706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:22:01 ispc CRON[2021706]: pam_unix(cron:session): session closed for user root Dec 18 23:22:02 ispc sshd[2021708]: Invalid user martof from 5.133.121.104 Dec 18 23:22:37 ispc saslauthd[2021737]: pam_mysql - SELECT returned no result. Dec 18 23:22:37 ispc saslauthd[2021737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:22:37 ispc saslauthd[2021737]: do_auth : auth failure: [user=uucpadm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:23:01 ispc CRON[2021757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:23:02 ispc CRON[2021757]: pam_unix(cron:session): session closed for user root Dec 18 23:24:01 ispc CRON[2021800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:24:02 ispc CRON[2021800]: pam_unix(cron:session): session closed for user root Dec 18 23:25:01 ispc CRON[2021844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:25:01 ispc CRON[2021845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:25:01 ispc CRON[2021846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:25:01 ispc CRON[2021847]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:25:01 ispc CRON[2021845]: pam_unix(cron:session): session closed for user root Dec 18 23:25:01 ispc CRON[2021847]: pam_unix(cron:session): session closed for user getmail Dec 18 23:25:02 ispc CRON[2021846]: pam_unix(cron:session): session closed for user root Dec 18 23:25:03 ispc CRON[2021844]: pam_unix(cron:session): session closed for user root Dec 18 23:25:59 ispc sshd[2021947]: Invalid user blceu from 118.218.219.250 Dec 18 23:26:01 ispc CRON[2021949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:26:02 ispc CRON[2021949]: pam_unix(cron:session): session closed for user root Dec 18 23:26:39 ispc postfix/smtpd[2021978]: sql auxprop plugin using mysql engine Dec 18 23:27:01 ispc CRON[2021991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:27:02 ispc CRON[2021991]: pam_unix(cron:session): session closed for user root Dec 18 23:27:31 ispc postfix/smtpd[2022015]: sql auxprop plugin using mysql engine Dec 18 23:27:32 ispc saslauthd[2022017]: pam_mysql - SELECT returned no result. Dec 18 23:27:32 ispc saslauthd[2022017]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:27:32 ispc saslauthd[2022017]: do_auth : auth failure: [user=support@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 18 23:28:01 ispc CRON[2022041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:28:02 ispc CRON[2022041]: pam_unix(cron:session): session closed for user root Dec 18 23:29:01 ispc CRON[2022081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:29:02 ispc CRON[2022081]: pam_unix(cron:session): session closed for user root Dec 18 23:29:23 ispc sshd[2022102]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 23:30:01 ispc CRON[2022123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:30:01 ispc CRON[2022124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:30:01 ispc CRON[2022125]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:30:01 ispc CRON[2022126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:30:01 ispc CRON[2022127]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:30:01 ispc CRON[2022124]: pam_unix(cron:session): session closed for user root Dec 18 23:30:01 ispc CRON[2022125]: pam_unix(cron:session): session closed for user www-data Dec 18 23:30:01 ispc CRON[2022127]: pam_unix(cron:session): session closed for user getmail Dec 18 23:30:02 ispc CRON[2022123]: pam_unix(cron:session): session closed for user root Dec 18 23:30:02 ispc CRON[2022126]: pam_unix(cron:session): session closed for user root Dec 18 23:30:12 ispc postfix/smtpd[2022207]: sql auxprop plugin using mysql engine Dec 18 23:30:12 ispc saslauthd[2022209]: pam_mysql - SELECT returned no result. Dec 18 23:30:12 ispc saslauthd[2022209]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:30:12 ispc saslauthd[2022209]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:31:01 ispc CRON[2022232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:31:02 ispc CRON[2022232]: pam_unix(cron:session): session closed for user root Dec 18 23:32:01 ispc CRON[2022268]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:32:03 ispc CRON[2022268]: pam_unix(cron:session): session closed for user root Dec 18 23:32:13 ispc sshd[2022286]: Invalid user blceu from 116.120.58.228 Dec 18 23:33:01 ispc CRON[2022328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:33:01 ispc CRON[2022328]: pam_unix(cron:session): session closed for user root Dec 18 23:34:01 ispc CRON[2022365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:34:03 ispc CRON[2022365]: pam_unix(cron:session): session closed for user root Dec 18 23:35:01 ispc CRON[2022400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:35:01 ispc CRON[2022401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:35:01 ispc CRON[2022402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:35:01 ispc CRON[2022403]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:35:01 ispc CRON[2022401]: pam_unix(cron:session): session closed for user root Dec 18 23:35:01 ispc CRON[2022403]: pam_unix(cron:session): session closed for user getmail Dec 18 23:35:02 ispc CRON[2022402]: pam_unix(cron:session): session closed for user root Dec 18 23:35:03 ispc CRON[2022400]: pam_unix(cron:session): session closed for user root Dec 18 23:36:01 ispc CRON[2022504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:36:02 ispc CRON[2022504]: pam_unix(cron:session): session closed for user root Dec 18 23:37:01 ispc CRON[2022542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:37:02 ispc CRON[2022542]: pam_unix(cron:session): session closed for user root Dec 18 23:37:24 ispc postfix/smtpd[2022565]: sql auxprop plugin using mysql engine Dec 18 23:37:25 ispc saslauthd[2022568]: pam_mysql - SELECT returned no result. Dec 18 23:37:25 ispc saslauthd[2022568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:37:25 ispc saslauthd[2022568]: do_auth : auth failure: [user=uwmadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:37:43 ispc postfix/smtpd[2022575]: sql auxprop plugin using mysql engine Dec 18 23:38:01 ispc CRON[2022594]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:38:02 ispc CRON[2022594]: pam_unix(cron:session): session closed for user root Dec 18 23:38:14 ispc postfix/smtpd[2022613]: sql auxprop plugin using mysql engine Dec 18 23:38:47 ispc saslauthd[2022630]: pam_mysql - SELECT returned no result. Dec 18 23:38:47 ispc saslauthd[2022630]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:38:47 ispc saslauthd[2022630]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:39:01 ispc CRON[2022637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:39:01 ispc CRON[2022638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:39:01 ispc CRON[2022637]: pam_unix(cron:session): session closed for user root Dec 18 23:39:01 ispc CRON[2022638]: pam_unix(cron:session): session closed for user root Dec 18 23:39:33 ispc sshd[2022675]: Invalid user ziplines from 45.119.213.109 Dec 18 23:40:01 ispc CRON[2022690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:40:01 ispc CRON[2022691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:40:01 ispc CRON[2022692]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:40:01 ispc CRON[2022693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:40:01 ispc CRON[2022694]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:40:01 ispc CRON[2022691]: pam_unix(cron:session): session closed for user root Dec 18 23:40:01 ispc CRON[2022692]: pam_unix(cron:session): session closed for user www-data Dec 18 23:40:01 ispc CRON[2022694]: pam_unix(cron:session): session closed for user getmail Dec 18 23:40:02 ispc CRON[2022693]: pam_unix(cron:session): session closed for user root Dec 18 23:40:02 ispc CRON[2022690]: pam_unix(cron:session): session closed for user root Dec 18 23:41:01 ispc CRON[2022797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:41:02 ispc CRON[2022797]: pam_unix(cron:session): session closed for user root Dec 18 23:41:17 ispc postfix/smtpd[2022816]: sql auxprop plugin using mysql engine Dec 18 23:41:17 ispc CRON[2021665]: pam_unix(cron:session): session closed for user root Dec 18 23:41:23 ispc saslauthd[2022819]: pam_mysql - SELECT returned no result. Dec 18 23:41:23 ispc saslauthd[2022819]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:41:23 ispc saslauthd[2022819]: do_auth : auth failure: [user=anna] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:42:01 ispc CRON[2022822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:42:03 ispc CRON[2022822]: pam_unix(cron:session): session closed for user root Dec 18 23:42:44 ispc sshd[2022837]: Invalid user martof from 45.119.213.109 Dec 18 23:43:01 ispc CRON[2022847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:43:02 ispc CRON[2022847]: pam_unix(cron:session): session closed for user root Dec 18 23:44:01 ispc CRON[2022863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:44:02 ispc CRON[2022863]: pam_unix(cron:session): session closed for user root Dec 18 23:45:01 ispc CRON[2022878]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:45:01 ispc CRON[2022879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:45:01 ispc CRON[2022880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:45:01 ispc CRON[2022881]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:45:01 ispc CRON[2022879]: pam_unix(cron:session): session closed for user root Dec 18 23:45:01 ispc CRON[2022881]: pam_unix(cron:session): session closed for user getmail Dec 18 23:45:02 ispc CRON[2022878]: pam_unix(cron:session): session closed for user root Dec 18 23:45:43 ispc CRON[2022880]: pam_unix(cron:session): session closed for user root Dec 18 23:46:01 ispc CRON[2023069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:47:01 ispc CRON[2023102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:47:01 ispc CRON[2023102]: pam_unix(cron:session): session closed for user root Dec 18 23:47:31 ispc postfix/smtpd[2023125]: sql auxprop plugin using mysql engine Dec 18 23:47:32 ispc saslauthd[2023127]: pam_mysql - SELECT returned no result. Dec 18 23:47:32 ispc saslauthd[2023127]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:47:32 ispc saslauthd[2023127]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:48:01 ispc CRON[2023152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:48:02 ispc CRON[2023152]: pam_unix(cron:session): session closed for user root Dec 18 23:49:01 ispc CRON[2023192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:49:02 ispc CRON[2023192]: pam_unix(cron:session): session closed for user root Dec 18 23:49:44 ispc sshd[2023219]: Invalid user martof from 118.69.109.194 Dec 18 23:50:01 ispc CRON[2023231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:50:01 ispc CRON[2023232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:50:01 ispc CRON[2023233]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 18 23:50:01 ispc CRON[2023234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:50:01 ispc CRON[2023235]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:50:01 ispc CRON[2023233]: pam_unix(cron:session): session closed for user www-data Dec 18 23:50:01 ispc CRON[2023232]: pam_unix(cron:session): session closed for user root Dec 18 23:50:01 ispc CRON[2023235]: pam_unix(cron:session): session closed for user getmail Dec 18 23:50:02 ispc CRON[2023234]: pam_unix(cron:session): session closed for user root Dec 18 23:50:03 ispc CRON[2023231]: pam_unix(cron:session): session closed for user root Dec 18 23:51:01 ispc CRON[2023338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:51:03 ispc CRON[2023338]: pam_unix(cron:session): session closed for user root Dec 18 23:52:01 ispc CRON[2023375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:52:01 ispc CRON[2023375]: pam_unix(cron:session): session closed for user root Dec 18 23:52:14 ispc postfix/smtpd[2023391]: sql auxprop plugin using mysql engine Dec 18 23:52:15 ispc saslauthd[2023394]: pam_mysql - SELECT returned no result. Dec 18 23:52:15 ispc saslauthd[2023394]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:52:15 ispc saslauthd[2023394]: do_auth : auth failure: [user=vcr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:52:43 ispc sshd[2023410]: Invalid user martof from 211.45.175.153 Dec 18 23:52:45 ispc sshd[2023412]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 23:52:47 ispc sshd[2023414]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 23:52:47 ispc sshd[2023414]: Invalid user klape from 189.89.20.45 Dec 18 23:52:49 ispc sshd[2023418]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 18 23:52:49 ispc sshd[2023418]: Invalid user ubuntu from 189.89.20.45 Dec 18 23:52:54 ispc postfix/smtpd[2023438]: sql auxprop plugin using mysql engine Dec 18 23:53:01 ispc CRON[2023452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:53:03 ispc CRON[2023452]: pam_unix(cron:session): session closed for user root Dec 18 23:54:01 ispc CRON[2023489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:54:02 ispc CRON[2023489]: pam_unix(cron:session): session closed for user root Dec 18 23:55:01 ispc CRON[2023529]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:55:01 ispc CRON[2023530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:55:01 ispc CRON[2023531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:55:01 ispc CRON[2023532]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 18 23:55:01 ispc CRON[2023530]: pam_unix(cron:session): session closed for user root Dec 18 23:55:01 ispc CRON[2023532]: pam_unix(cron:session): session closed for user getmail Dec 18 23:55:02 ispc CRON[2023531]: pam_unix(cron:session): session closed for user root Dec 18 23:55:03 ispc CRON[2023529]: pam_unix(cron:session): session closed for user root Dec 18 23:55:58 ispc sshd[2023626]: Invalid user bluecap from 120.48.125.223 Dec 18 23:56:01 ispc CRON[2023628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:56:01 ispc CRON[2023628]: pam_unix(cron:session): session closed for user root Dec 18 23:56:07 ispc postfix/smtpd[2023646]: sql auxprop plugin using mysql engine Dec 18 23:56:08 ispc saslauthd[2023648]: pam_mysql - SELECT returned no result. Dec 18 23:56:08 ispc saslauthd[2023648]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 18 23:56:08 ispc saslauthd[2023648]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 18 23:56:48 ispc sshd[2023670]: Did not receive identification string from 192.227.134.84 Dec 18 23:57:01 ispc CRON[2023678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:57:02 ispc CRON[2023678]: pam_unix(cron:session): session closed for user root Dec 18 23:58:01 ispc CRON[2023726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:58:02 ispc CRON[2023726]: pam_unix(cron:session): session closed for user root Dec 18 23:58:03 ispc sshd[2023733]: Invalid user blceu from 165.227.38.205 Dec 18 23:58:08 ispc sshd[2023743]: Did not receive identification string from 37.59.110.221 Dec 18 23:59:01 ispc CRON[2023767]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 18 23:59:02 ispc CRON[2023767]: pam_unix(cron:session): session closed for user root Dec 19 00:00:01 ispc CRON[2023803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:00:01 ispc CRON[2023804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:00:01 ispc CRON[2023805]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:00:01 ispc CRON[2023806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:00:01 ispc CRON[2023807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:00:01 ispc CRON[2023808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:00:01 ispc CRON[2023809]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:00:01 ispc CRON[2023804]: pam_unix(cron:session): session closed for user root Dec 19 00:00:01 ispc CRON[2023805]: pam_unix(cron:session): session closed for user www-data Dec 19 00:00:01 ispc CRON[2023809]: pam_unix(cron:session): session closed for user getmail Dec 19 00:00:01 ispc CRON[2023807]: pam_unix(cron:session): session closed for user root Dec 19 00:00:02 ispc CRON[2023808]: pam_unix(cron:session): session closed for user root Dec 19 00:00:02 ispc CRON[2023803]: pam_unix(cron:session): session closed for user root Dec 19 00:00:02 ispc CRON[2023806]: pam_unix(cron:session): session closed for user root Dec 19 00:00:49 ispc sshd[2023989]: Invalid user matlbula from 117.50.70.169 Dec 19 00:01:01 ispc CRON[2023999]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:01:02 ispc CRON[2023999]: pam_unix(cron:session): session closed for user root Dec 19 00:02:01 ispc CRON[2024031]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 00:02:01 ispc CRON[2024032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:02:02 ispc CRON[2024032]: pam_unix(cron:session): session closed for user root Dec 19 00:03:01 ispc CRON[2024912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:03:02 ispc CRON[2024912]: pam_unix(cron:session): session closed for user root Dec 19 00:03:25 ispc CRON[2024031]: pam_unix(cron:session): session closed for user logcheck Dec 19 00:03:31 ispc postfix/smtpd[2025116]: sql auxprop plugin using mysql engine Dec 19 00:04:01 ispc CRON[2025134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:04:02 ispc CRON[2025134]: pam_unix(cron:session): session closed for user root Dec 19 00:04:37 ispc postfix/smtpd[2025164]: sql auxprop plugin using mysql engine Dec 19 00:04:38 ispc saslauthd[2025167]: pam_mysql - SELECT returned no result. Dec 19 00:04:38 ispc saslauthd[2025167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:04:38 ispc saslauthd[2025167]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:05:01 ispc CRON[2025177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:05:01 ispc CRON[2025178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:05:01 ispc CRON[2025179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:05:01 ispc CRON[2025180]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:05:01 ispc CRON[2025178]: pam_unix(cron:session): session closed for user root Dec 19 00:05:01 ispc CRON[2025180]: pam_unix(cron:session): session closed for user getmail Dec 19 00:05:02 ispc CRON[2025177]: pam_unix(cron:session): session closed for user root Dec 19 00:05:02 ispc CRON[2025179]: pam_unix(cron:session): session closed for user root Dec 19 00:05:48 ispc sshd[2025275]: Invalid user martof from 185.208.181.152 Dec 19 00:06:01 ispc CRON[2025283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:06:02 ispc CRON[2025283]: pam_unix(cron:session): session closed for user root Dec 19 00:06:25 ispc CRON[2023069]: pam_unix(cron:session): session closed for user root Dec 19 00:06:25 ispc postfix/smtpd[2025304]: sql auxprop plugin using mysql engine Dec 19 00:07:01 ispc CRON[2025312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:07:02 ispc CRON[2025312]: pam_unix(cron:session): session closed for user root Dec 19 00:07:04 ispc saslauthd[2025324]: pam_mysql - SELECT returned no result. Dec 19 00:07:04 ispc saslauthd[2025324]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:07:04 ispc saslauthd[2025324]: do_auth : auth failure: [user=vgnadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:07:33 ispc sshd[2025330]: Invalid user ziplines from 27.254.144.183 Dec 19 00:07:55 ispc sshd[2025339]: Invalid user kaia from 62.60.131.157 Dec 19 00:08:01 ispc CRON[2025347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:08:02 ispc CRON[2025347]: pam_unix(cron:session): session closed for user root Dec 19 00:09:01 ispc CRON[2025360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:09:01 ispc CRON[2025361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:09:01 ispc CRON[2025360]: pam_unix(cron:session): session closed for user root Dec 19 00:09:02 ispc CRON[2025361]: pam_unix(cron:session): session closed for user root Dec 19 00:10:01 ispc CRON[2025388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:10:01 ispc CRON[2025389]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:10:01 ispc CRON[2025390]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:10:01 ispc CRON[2025391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:10:01 ispc CRON[2025392]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:10:01 ispc CRON[2025390]: pam_unix(cron:session): session closed for user www-data Dec 19 00:10:01 ispc CRON[2025389]: pam_unix(cron:session): session closed for user root Dec 19 00:10:01 ispc CRON[2025392]: pam_unix(cron:session): session closed for user getmail Dec 19 00:10:04 ispc CRON[2025388]: pam_unix(cron:session): session closed for user root Dec 19 00:10:44 ispc CRON[2025391]: pam_unix(cron:session): session closed for user root Dec 19 00:11:01 ispc CRON[2025502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:11:13 ispc sshd[2025514]: Invalid user test from 221.151.181.65 Dec 19 00:11:23 ispc postfix/smtpd[2025527]: sql auxprop plugin using mysql engine Dec 19 00:12:01 ispc CRON[2025542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:12:02 ispc CRON[2025542]: pam_unix(cron:session): session closed for user root Dec 19 00:12:23 ispc sshd[2025561]: Invalid user blceu from 35.239.77.168 Dec 19 00:13:01 ispc CRON[2025591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:13:02 ispc CRON[2025591]: pam_unix(cron:session): session closed for user root Dec 19 00:13:17 ispc postfix/smtpd[2025620]: sql auxprop plugin using mysql engine Dec 19 00:13:18 ispc saslauthd[2025623]: pam_mysql - SELECT returned no result. Dec 19 00:13:18 ispc saslauthd[2025623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:13:18 ispc saslauthd[2025623]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:14:01 ispc CRON[2025654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:14:02 ispc CRON[2025654]: pam_unix(cron:session): session closed for user root Dec 19 00:14:30 ispc sshd[2025677]: Did not receive identification string from 193.32.162.151 Dec 19 00:15:01 ispc CRON[2025693]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:15:01 ispc CRON[2025694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:15:01 ispc CRON[2025695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:15:01 ispc CRON[2025696]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:15:01 ispc CRON[2025694]: pam_unix(cron:session): session closed for user root Dec 19 00:15:02 ispc CRON[2025696]: pam_unix(cron:session): session closed for user getmail Dec 19 00:15:02 ispc CRON[2025695]: pam_unix(cron:session): session closed for user root Dec 19 00:15:03 ispc CRON[2025693]: pam_unix(cron:session): session closed for user root Dec 19 00:16:01 ispc CRON[2025794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:16:01 ispc CRON[2025794]: pam_unix(cron:session): session closed for user root Dec 19 00:17:01 ispc CRON[2025831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:17:02 ispc CRON[2025831]: pam_unix(cron:session): session closed for user root Dec 19 00:17:46 ispc sshd[2025866]: Invalid user klape from 103.164.20.29 Dec 19 00:17:47 ispc sshd[2025868]: Invalid user ubuntu from 103.164.20.29 Dec 19 00:18:01 ispc CRON[2025883]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 00:18:01 ispc CRON[2025884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:18:02 ispc CRON[2025884]: pam_unix(cron:session): session closed for user root Dec 19 00:18:06 ispc CRON[2025883]: pam_unix(cron:session): session closed for user amavis Dec 19 00:18:07 ispc postfix/smtpd[2025911]: sql auxprop plugin using mysql engine Dec 19 00:18:26 ispc sshd[2025927]: Invalid user admin from 193.32.162.151 Dec 19 00:19:01 ispc CRON[2025944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:19:02 ispc CRON[2025944]: pam_unix(cron:session): session closed for user root Dec 19 00:20:01 ispc CRON[2025980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:20:01 ispc CRON[2025981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:20:01 ispc CRON[2025982]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:20:01 ispc CRON[2025983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:20:01 ispc CRON[2025984]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:20:01 ispc CRON[2025981]: pam_unix(cron:session): session closed for user root Dec 19 00:20:01 ispc CRON[2025982]: pam_unix(cron:session): session closed for user www-data Dec 19 00:20:02 ispc CRON[2025984]: pam_unix(cron:session): session closed for user getmail Dec 19 00:20:02 ispc CRON[2025983]: pam_unix(cron:session): session closed for user root Dec 19 00:20:03 ispc CRON[2025980]: pam_unix(cron:session): session closed for user root Dec 19 00:21:01 ispc CRON[2026088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:21:01 ispc CRON[2026087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:21:01 ispc CRON[2026087]: pam_unix(cron:session): session closed for user root Dec 19 00:21:01 ispc CRON[2026088]: pam_unix(cron:session): session closed for user root Dec 19 00:21:44 ispc sshd[2026118]: Invalid user oracle from 193.32.162.151 Dec 19 00:21:45 ispc postfix/smtpd[2026120]: sql auxprop plugin using mysql engine Dec 19 00:21:45 ispc saslauthd[2026123]: pam_mysql - SELECT returned no result. Dec 19 00:21:45 ispc saslauthd[2026123]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:21:45 ispc saslauthd[2026123]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:21:49 ispc saslauthd[2026128]: pam_mysql - SELECT returned no result. Dec 19 00:21:49 ispc saslauthd[2026128]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:21:49 ispc saslauthd[2026128]: do_auth : auth failure: [user=viewer] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:22:01 ispc CRON[2026134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:22:02 ispc CRON[2026134]: pam_unix(cron:session): session closed for user root Dec 19 00:22:27 ispc saslauthd[2026156]: pam_mysql - SELECT returned no result. Dec 19 00:22:27 ispc saslauthd[2026156]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:22:27 ispc saslauthd[2026156]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 00:23:01 ispc CRON[2026183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:23:01 ispc CRON[2026183]: pam_unix(cron:session): session closed for user root Dec 19 00:23:02 ispc sshd[2026181]: Invalid user blceu from 103.110.84.105 Dec 19 00:23:10 ispc sshd[2026198]: Invalid user test from 221.151.181.65 Dec 19 00:24:01 ispc CRON[2026222]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:24:03 ispc CRON[2026222]: pam_unix(cron:session): session closed for user root Dec 19 00:24:27 ispc sshd[2026243]: Invalid user test from 221.151.181.65 Dec 19 00:25:01 ispc CRON[2026260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:25:01 ispc CRON[2026262]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:25:01 ispc CRON[2026261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:25:01 ispc CRON[2026259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:25:01 ispc CRON[2026260]: pam_unix(cron:session): session closed for user root Dec 19 00:25:01 ispc CRON[2026262]: pam_unix(cron:session): session closed for user getmail Dec 19 00:25:01 ispc CRON[2026261]: pam_unix(cron:session): session closed for user root Dec 19 00:25:03 ispc CRON[2026259]: pam_unix(cron:session): session closed for user root Dec 19 00:25:06 ispc sshd[2026339]: Invalid user hmsftp from 193.32.162.151 Dec 19 00:25:30 ispc sshd[2026351]: Invalid user ziplines from 141.94.71.131 Dec 19 00:26:01 ispc CRON[2026365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:26:01 ispc CRON[2026365]: pam_unix(cron:session): session closed for user root Dec 19 00:26:29 ispc sshd[2026389]: Invalid user test from 221.151.181.65 Dec 19 00:27:01 ispc CRON[2026410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:27:02 ispc CRON[2026410]: pam_unix(cron:session): session closed for user root Dec 19 00:28:01 ispc CRON[2026456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:28:02 ispc CRON[2026456]: pam_unix(cron:session): session closed for user root Dec 19 00:28:15 ispc sshd[2026471]: Invalid user loginuser from 193.32.162.151 Dec 19 00:29:01 ispc CRON[2026497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:29:02 ispc CRON[2026497]: pam_unix(cron:session): session closed for user root Dec 19 00:30:01 ispc CRON[2026530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:30:01 ispc CRON[2026531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:30:01 ispc CRON[2026532]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:30:01 ispc CRON[2026533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:30:01 ispc CRON[2026534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:30:01 ispc CRON[2026535]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:30:01 ispc CRON[2026532]: pam_unix(cron:session): session closed for user www-data Dec 19 00:30:01 ispc CRON[2026531]: pam_unix(cron:session): session closed for user root Dec 19 00:30:02 ispc CRON[2026535]: pam_unix(cron:session): session closed for user getmail Dec 19 00:30:02 ispc CRON[2026534]: pam_unix(cron:session): session closed for user root Dec 19 00:30:03 ispc CRON[2026530]: pam_unix(cron:session): session closed for user root Dec 19 00:30:07 ispc sshd[2026701]: Invalid user blceu from 211.45.175.153 Dec 19 00:30:14 ispc sshd[2026745]: Invalid user lanovacentra from 35.239.77.168 Dec 19 00:30:19 ispc postfix/smtpd[2026747]: sql auxprop plugin using mysql engine Dec 19 00:30:20 ispc saslauthd[2026750]: pam_mysql - SELECT returned no result. Dec 19 00:30:20 ispc saslauthd[2026750]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:30:20 ispc saslauthd[2026750]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:31:01 ispc CRON[2026770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:31:02 ispc CRON[2026770]: pam_unix(cron:session): session closed for user root Dec 19 00:31:28 ispc sshd[2026795]: Invalid user loginuser from 193.32.162.151 Dec 19 00:31:35 ispc CRON[2025502]: pam_unix(cron:session): session closed for user root Dec 19 00:32:01 ispc CRON[2026804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:32:03 ispc postfix/smtpd[2026815]: sql auxprop plugin using mysql engine Dec 19 00:32:03 ispc CRON[2026804]: pam_unix(cron:session): session closed for user root Dec 19 00:32:26 ispc sshd[2026819]: Invalid user ziplines from 5.133.121.104 Dec 19 00:33:01 ispc CRON[2026829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:33:02 ispc CRON[2026829]: pam_unix(cron:session): session closed for user root Dec 19 00:33:31 ispc sshd[2026843]: Invalid user blceu from 5.133.121.104 Dec 19 00:34:01 ispc CRON[2026848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:34:04 ispc CRON[2026848]: pam_unix(cron:session): session closed for user root Dec 19 00:34:38 ispc sshd[2026862]: Invalid user loginuser from 193.32.162.151 Dec 19 00:35:01 ispc CRON[2026873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:35:01 ispc CRON[2026874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:35:01 ispc CRON[2026875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:35:01 ispc CRON[2026876]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:35:01 ispc CRON[2026874]: pam_unix(cron:session): session closed for user root Dec 19 00:35:01 ispc CRON[2026876]: pam_unix(cron:session): session closed for user getmail Dec 19 00:35:02 ispc CRON[2026873]: pam_unix(cron:session): session closed for user root Dec 19 00:35:22 ispc sshd[2026980]: Invalid user blceu from 185.208.181.152 Dec 19 00:35:41 ispc CRON[2026875]: pam_unix(cron:session): session closed for user root Dec 19 00:36:01 ispc CRON[2026983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:36:08 ispc sshd[2026998]: Did not receive identification string from 45.140.17.97 Dec 19 00:36:34 ispc saslauthd[2027014]: pam_mysql - SELECT returned no result. Dec 19 00:36:34 ispc saslauthd[2027014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:36:34 ispc saslauthd[2027014]: do_auth : auth failure: [user=viewuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:37:01 ispc CRON[2027024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:37:02 ispc CRON[2027024]: pam_unix(cron:session): session closed for user root Dec 19 00:37:38 ispc sshd[2027053]: Did not receive identification string from 192.227.134.84 Dec 19 00:38:01 ispc CRON[2027076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:38:02 ispc CRON[2027076]: pam_unix(cron:session): session closed for user root Dec 19 00:38:22 ispc sshd[2027098]: Invalid user martof from 52.232.19.79 Dec 19 00:38:49 ispc postfix/smtpd[2027115]: sql auxprop plugin using mysql engine Dec 19 00:38:49 ispc saslauthd[2027117]: pam_mysql - SELECT returned no result. Dec 19 00:38:49 ispc saslauthd[2027117]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:38:49 ispc saslauthd[2027117]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:39:01 ispc CRON[2027122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:39:01 ispc CRON[2027123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:39:02 ispc CRON[2027122]: pam_unix(cron:session): session closed for user root Dec 19 00:39:02 ispc CRON[2027123]: pam_unix(cron:session): session closed for user root Dec 19 00:39:04 ispc sshd[2027140]: Did not receive identification string from 220.197.15.251 Dec 19 00:39:07 ispc sshd[2027149]: Invalid user wqmarlduiqkmgs from 220.197.15.251 Dec 19 00:39:11 ispc sshd[2027153]: Invalid user admin from 220.197.15.251 Dec 19 00:39:13 ispc sshd[2027155]: Invalid user user from 220.197.15.251 Dec 19 00:39:16 ispc sshd[2027161]: Invalid user test from 220.197.15.251 Dec 19 00:39:20 ispc sshd[2027163]: Invalid user ubnt from 220.197.15.251 Dec 19 00:39:22 ispc sshd[2027165]: Invalid user ubnt from 220.197.15.251 Dec 19 00:39:35 ispc sshd[2027472]: Invalid user blceu from 202.46.29.79 Dec 19 00:40:01 ispc CRON[2027482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:40:01 ispc CRON[2027483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:40:01 ispc CRON[2027484]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:40:01 ispc CRON[2027485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:40:01 ispc CRON[2027486]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:40:01 ispc CRON[2027484]: pam_unix(cron:session): session closed for user www-data Dec 19 00:40:01 ispc CRON[2027483]: pam_unix(cron:session): session closed for user root Dec 19 00:40:02 ispc CRON[2027486]: pam_unix(cron:session): session closed for user getmail Dec 19 00:40:02 ispc CRON[2027485]: pam_unix(cron:session): session closed for user root Dec 19 00:40:03 ispc CRON[2027482]: pam_unix(cron:session): session closed for user root Dec 19 00:41:01 ispc CRON[2027588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:41:02 ispc CRON[2027588]: pam_unix(cron:session): session closed for user root Dec 19 00:42:01 ispc CRON[2027627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:42:02 ispc CRON[2027627]: pam_unix(cron:session): session closed for user root Dec 19 00:43:01 ispc CRON[2027674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:43:02 ispc CRON[2027674]: pam_unix(cron:session): session closed for user root Dec 19 00:44:01 ispc CRON[2027714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:44:02 ispc CRON[2027714]: pam_unix(cron:session): session closed for user root Dec 19 00:44:02 ispc sshd[2027711]: Invalid user blceu from 27.254.144.183 Dec 19 00:45:01 ispc CRON[2027751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:45:01 ispc CRON[2027752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:45:01 ispc CRON[2027753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:45:01 ispc CRON[2027754]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:45:01 ispc CRON[2027752]: pam_unix(cron:session): session closed for user root Dec 19 00:45:01 ispc CRON[2027754]: pam_unix(cron:session): session closed for user getmail Dec 19 00:45:01 ispc CRON[2027753]: pam_unix(cron:session): session closed for user root Dec 19 00:45:03 ispc CRON[2027751]: pam_unix(cron:session): session closed for user root Dec 19 00:46:01 ispc CRON[2027854]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:46:01 ispc CRON[2027854]: pam_unix(cron:session): session closed for user root Dec 19 00:47:01 ispc CRON[2027892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:47:02 ispc CRON[2027892]: pam_unix(cron:session): session closed for user root Dec 19 00:47:12 ispc sshd[2027908]: Invalid user ziplines from 52.232.19.79 Dec 19 00:47:33 ispc postfix/smtpd[2027922]: sql auxprop plugin using mysql engine Dec 19 00:47:33 ispc saslauthd[2027925]: pam_mysql - SELECT returned no result. Dec 19 00:47:33 ispc saslauthd[2027925]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:47:33 ispc saslauthd[2027925]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:47:58 ispc sshd[2027939]: Invalid user blceu from 222.236.46.74 Dec 19 00:48:01 ispc CRON[2027950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:48:01 ispc CRON[2027950]: pam_unix(cron:session): session closed for user root Dec 19 00:48:47 ispc sshd[2027982]: Did not receive identification string from 117.162.140.162 Dec 19 00:49:01 ispc CRON[2027992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:49:03 ispc CRON[2027992]: pam_unix(cron:session): session closed for user root Dec 19 00:50:01 ispc CRON[2028026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:50:01 ispc CRON[2028027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:50:01 ispc CRON[2028028]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 00:50:01 ispc CRON[2028029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:50:01 ispc CRON[2028030]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:50:01 ispc CRON[2028027]: pam_unix(cron:session): session closed for user root Dec 19 00:50:01 ispc CRON[2028028]: pam_unix(cron:session): session closed for user www-data Dec 19 00:50:01 ispc CRON[2028030]: pam_unix(cron:session): session closed for user getmail Dec 19 00:50:02 ispc CRON[2028029]: pam_unix(cron:session): session closed for user root Dec 19 00:50:03 ispc CRON[2028026]: pam_unix(cron:session): session closed for user root Dec 19 00:51:01 ispc CRON[2028130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:51:03 ispc CRON[2028130]: pam_unix(cron:session): session closed for user root Dec 19 00:51:23 ispc postfix/smtpd[2028155]: sql auxprop plugin using mysql engine Dec 19 00:51:24 ispc saslauthd[2028158]: pam_mysql - SELECT returned no result. Dec 19 00:51:24 ispc saslauthd[2028158]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:51:24 ispc saslauthd[2028158]: do_auth : auth failure: [user=voadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:52:01 ispc CRON[2028172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:52:01 ispc CRON[2028173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:52:02 ispc CRON[2028173]: pam_unix(cron:session): session closed for user root Dec 19 00:53:01 ispc CRON[2028226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:53:02 ispc CRON[2028226]: pam_unix(cron:session): session closed for user root Dec 19 00:54:01 ispc CRON[2028269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:54:01 ispc CRON[2028269]: pam_unix(cron:session): session closed for user root Dec 19 00:55:01 ispc CRON[2028306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:55:01 ispc CRON[2028307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:55:01 ispc CRON[2028308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:55:01 ispc CRON[2028309]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 00:55:02 ispc CRON[2028307]: pam_unix(cron:session): session closed for user root Dec 19 00:55:02 ispc CRON[2028309]: pam_unix(cron:session): session closed for user getmail Dec 19 00:55:02 ispc CRON[2028308]: pam_unix(cron:session): session closed for user root Dec 19 00:55:04 ispc CRON[2028306]: pam_unix(cron:session): session closed for user root Dec 19 00:55:19 ispc CRON[2028172]: pam_unix(cron:session): session closed for user root Dec 19 00:55:23 ispc sshd[2028393]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 00:55:53 ispc postfix/smtpd[2028407]: sql auxprop plugin using mysql engine Dec 19 00:55:54 ispc saslauthd[2028410]: pam_mysql - SELECT returned no result. Dec 19 00:55:54 ispc saslauthd[2028410]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:55:54 ispc saslauthd[2028410]: do_auth : auth failure: [user=tech] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:56:01 ispc CRON[2028421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:56:01 ispc CRON[2028421]: pam_unix(cron:session): session closed for user root Dec 19 00:56:15 ispc saslauthd[2028437]: pam_mysql - SELECT returned no result. Dec 19 00:56:15 ispc saslauthd[2028437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 00:56:15 ispc saslauthd[2028437]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 00:56:20 ispc CRON[2026983]: pam_unix(cron:session): session closed for user root Dec 19 00:57:01 ispc CRON[2028450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:57:02 ispc CRON[2028450]: pam_unix(cron:session): session closed for user root Dec 19 00:57:58 ispc sshd[2028471]: Invalid user ziplines from 118.218.219.250 Dec 19 00:58:01 ispc CRON[2028476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:58:02 ispc CRON[2028476]: pam_unix(cron:session): session closed for user root Dec 19 00:59:01 ispc CRON[2028488]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 00:59:03 ispc CRON[2028488]: pam_unix(cron:session): session closed for user root Dec 19 00:59:43 ispc postfix/smtpd[2028503]: sql auxprop plugin using mysql engine Dec 19 01:00:01 ispc CRON[2028509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:00:01 ispc CRON[2028510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:00:01 ispc CRON[2028511]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:00:01 ispc CRON[2028512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:00:01 ispc CRON[2028513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:00:01 ispc CRON[2028514]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:00:01 ispc CRON[2028510]: pam_unix(cron:session): session closed for user root Dec 19 01:00:01 ispc CRON[2028511]: pam_unix(cron:session): session closed for user www-data Dec 19 01:00:01 ispc CRON[2028514]: pam_unix(cron:session): session closed for user getmail Dec 19 01:00:02 ispc CRON[2028512]: pam_unix(cron:session): session closed for user root Dec 19 01:00:03 ispc CRON[2028509]: pam_unix(cron:session): session closed for user root Dec 19 01:00:20 ispc CRON[2028513]: pam_unix(cron:session): session closed for user root Dec 19 01:01:01 ispc CRON[2028803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:01:03 ispc CRON[2028803]: pam_unix(cron:session): session closed for user root Dec 19 01:02:01 ispc CRON[2028819]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 01:02:01 ispc CRON[2028820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:02:02 ispc CRON[2028820]: pam_unix(cron:session): session closed for user root Dec 19 01:02:27 ispc sshd[2029259]: Invalid user martof from 202.46.29.79 Dec 19 01:03:01 ispc CRON[2029678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:03:03 ispc CRON[2029678]: pam_unix(cron:session): session closed for user root Dec 19 01:03:13 ispc sshd[2029816]: Invalid user martof from 118.218.219.250 Dec 19 01:03:18 ispc CRON[2028819]: pam_unix(cron:session): session closed for user logcheck Dec 19 01:03:30 ispc postfix/smtpd[2029879]: sql auxprop plugin using mysql engine Dec 19 01:04:01 ispc CRON[2029886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:04:03 ispc CRON[2029886]: pam_unix(cron:session): session closed for user root Dec 19 01:05:01 ispc CRON[2029900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:05:01 ispc CRON[2029901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:05:01 ispc CRON[2029902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:05:01 ispc CRON[2029903]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:05:01 ispc CRON[2029901]: pam_unix(cron:session): session closed for user root Dec 19 01:05:01 ispc CRON[2029903]: pam_unix(cron:session): session closed for user getmail Dec 19 01:05:01 ispc CRON[2029900]: pam_unix(cron:session): session closed for user root Dec 19 01:05:04 ispc CRON[2029902]: pam_unix(cron:session): session closed for user root Dec 19 01:05:11 ispc saslauthd[2030019]: pam_mysql - SELECT returned no result. Dec 19 01:05:11 ispc saslauthd[2030019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:05:11 ispc saslauthd[2030019]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:06:01 ispc CRON[2030022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:06:02 ispc CRON[2030022]: pam_unix(cron:session): session closed for user root Dec 19 01:06:15 ispc saslauthd[2030036]: pam_mysql - SELECT returned no result. Dec 19 01:06:15 ispc saslauthd[2030036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:06:15 ispc saslauthd[2030036]: do_auth : auth failure: [user=volition] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:07:01 ispc CRON[2030041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:07:03 ispc CRON[2030041]: pam_unix(cron:session): session closed for user root Dec 19 01:08:01 ispc CRON[2030065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:08:02 ispc CRON[2030065]: pam_unix(cron:session): session closed for user root Dec 19 01:09:01 ispc CRON[2030078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:09:01 ispc CRON[2030079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:09:01 ispc CRON[2030078]: pam_unix(cron:session): session closed for user root Dec 19 01:09:01 ispc CRON[2030079]: pam_unix(cron:session): session closed for user root Dec 19 01:10:01 ispc CRON[2030103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:10:01 ispc CRON[2030104]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:10:02 ispc CRON[2030105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:10:02 ispc CRON[2030106]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:10:02 ispc CRON[2030102]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:10:02 ispc CRON[2030104]: pam_unix(cron:session): session closed for user www-data Dec 19 01:10:02 ispc CRON[2030103]: pam_unix(cron:session): session closed for user root Dec 19 01:10:02 ispc CRON[2030106]: pam_unix(cron:session): session closed for user getmail Dec 19 01:10:04 ispc CRON[2030102]: pam_unix(cron:session): session closed for user root Dec 19 01:10:09 ispc CRON[2030105]: pam_unix(cron:session): session closed for user root Dec 19 01:11:01 ispc CRON[2030232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:11:02 ispc CRON[2030232]: pam_unix(cron:session): session closed for user root Dec 19 01:12:01 ispc CRON[2030245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:12:03 ispc CRON[2030245]: pam_unix(cron:session): session closed for user root Dec 19 01:12:44 ispc sshd[2030263]: Invalid user test from 221.151.181.65 Dec 19 01:13:01 ispc CRON[2030277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:13:02 ispc CRON[2030277]: pam_unix(cron:session): session closed for user root Dec 19 01:13:51 ispc saslauthd[2030289]: pam_mysql - SELECT returned no result. Dec 19 01:13:51 ispc saslauthd[2030289]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:13:51 ispc saslauthd[2030289]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:14:01 ispc CRON[2030290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:14:02 ispc CRON[2030290]: pam_unix(cron:session): session closed for user root Dec 19 01:14:03 ispc CRON[2026533]: pam_unix(cron:session): session closed for user root Dec 19 01:15:01 ispc CRON[2030305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:15:01 ispc CRON[2030306]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:15:01 ispc CRON[2030307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:15:01 ispc CRON[2030308]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:15:01 ispc CRON[2030306]: pam_unix(cron:session): session closed for user root Dec 19 01:15:01 ispc CRON[2030308]: pam_unix(cron:session): session closed for user getmail Dec 19 01:15:02 ispc CRON[2030305]: pam_unix(cron:session): session closed for user root Dec 19 01:15:15 ispc CRON[2030307]: pam_unix(cron:session): session closed for user root Dec 19 01:15:35 ispc postfix/smtpd[2030508]: sql auxprop plugin using mysql engine Dec 19 01:15:36 ispc postfix/smtpd[2030511]: sql auxprop plugin using mysql engine Dec 19 01:16:01 ispc CRON[2030519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:16:02 ispc CRON[2030519]: pam_unix(cron:session): session closed for user root Dec 19 01:17:01 ispc CRON[2030532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:17:02 ispc CRON[2030532]: pam_unix(cron:session): session closed for user root Dec 19 01:17:11 ispc sshd[2030545]: Invalid user diamantdi from 35.239.77.168 Dec 19 01:17:39 ispc saslauthd[2030552]: pam_mysql - SELECT returned no result. Dec 19 01:17:39 ispc saslauthd[2030552]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:17:39 ispc saslauthd[2030552]: do_auth : auth failure: [user=data@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 01:18:01 ispc CRON[2030564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:18:02 ispc CRON[2030564]: pam_unix(cron:session): session closed for user root Dec 19 01:19:01 ispc CRON[2030576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:19:02 ispc CRON[2030576]: pam_unix(cron:session): session closed for user root Dec 19 01:19:49 ispc sshd[2030590]: Invalid user ziplines from 202.46.29.79 Dec 19 01:20:01 ispc CRON[2030597]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:20:01 ispc CRON[2030599]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:20:01 ispc CRON[2030600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:20:01 ispc CRON[2030601]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:20:01 ispc CRON[2030598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:20:02 ispc CRON[2030598]: pam_unix(cron:session): session closed for user root Dec 19 01:20:02 ispc CRON[2030599]: pam_unix(cron:session): session closed for user www-data Dec 19 01:20:02 ispc CRON[2030601]: pam_unix(cron:session): session closed for user getmail Dec 19 01:20:02 ispc CRON[2030597]: pam_unix(cron:session): session closed for user root Dec 19 01:20:07 ispc sshd[2030596]: reverse mapping checking getaddrinfo for 192-227-134-84-host.colocrossing.com [192.227.134.84] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 01:20:28 ispc saslauthd[2030710]: pam_mysql - SELECT returned no result. Dec 19 01:20:28 ispc saslauthd[2030710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:20:28 ispc saslauthd[2030710]: do_auth : auth failure: [user=vpasp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:20:35 ispc CRON[2030600]: pam_unix(cron:session): session closed for user root Dec 19 01:21:01 ispc CRON[2030713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:21:01 ispc CRON[2030714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:21:01 ispc CRON[2030713]: pam_unix(cron:session): session closed for user root Dec 19 01:21:02 ispc sshd[2030711]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 01:21:02 ispc sshd[2030711]: Invalid user martof from 114.7.163.154 Dec 19 01:22:01 ispc CRON[2030754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:22:02 ispc CRON[2030754]: pam_unix(cron:session): session closed for user root Dec 19 01:22:25 ispc postfix/smtpd[2030779]: sql auxprop plugin using mysql engine Dec 19 01:22:26 ispc saslauthd[2030781]: pam_mysql - SELECT returned no result. Dec 19 01:22:26 ispc saslauthd[2030781]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:22:26 ispc saslauthd[2030781]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:23:01 ispc CRON[2030802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:23:02 ispc CRON[2030802]: pam_unix(cron:session): session closed for user root Dec 19 01:23:10 ispc sshd[2030817]: Invalid user misty from 62.60.131.157 Dec 19 01:24:01 ispc CRON[2030845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:24:01 ispc CRON[2030845]: pam_unix(cron:session): session closed for user root Dec 19 01:24:30 ispc sshd[2030871]: Invalid user ziplines from 222.236.46.74 Dec 19 01:25:01 ispc CRON[2030891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:25:01 ispc CRON[2030892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:25:01 ispc CRON[2030893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:25:01 ispc CRON[2030894]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:25:02 ispc CRON[2030892]: pam_unix(cron:session): session closed for user root Dec 19 01:25:02 ispc CRON[2030894]: pam_unix(cron:session): session closed for user getmail Dec 19 01:25:02 ispc CRON[2030893]: pam_unix(cron:session): session closed for user root Dec 19 01:25:03 ispc CRON[2030891]: pam_unix(cron:session): session closed for user root Dec 19 01:26:01 ispc CRON[2030991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:26:02 ispc CRON[2030991]: pam_unix(cron:session): session closed for user root Dec 19 01:26:07 ispc sshd[2031006]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 01:26:07 ispc sshd[2031006]: Invalid user martof from 193.110.157.47 Dec 19 01:27:01 ispc CRON[2031034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:27:01 ispc CRON[2031034]: pam_unix(cron:session): session closed for user root Dec 19 01:27:32 ispc sshd[2031060]: Invalid user ziplines from 103.110.84.105 Dec 19 01:28:01 ispc CRON[2031082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:28:02 ispc CRON[2031082]: pam_unix(cron:session): session closed for user root Dec 19 01:29:01 ispc CRON[2031127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:29:02 ispc CRON[2031127]: pam_unix(cron:session): session closed for user root Dec 19 01:30:01 ispc CRON[2031167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:30:01 ispc CRON[2031168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:30:01 ispc CRON[2031169]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:30:01 ispc CRON[2031170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:30:01 ispc CRON[2031171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:30:01 ispc CRON[2031168]: pam_unix(cron:session): session closed for user root Dec 19 01:30:01 ispc CRON[2031169]: pam_unix(cron:session): session closed for user www-data Dec 19 01:30:01 ispc CRON[2031171]: pam_unix(cron:session): session closed for user getmail Dec 19 01:30:01 ispc CRON[2031170]: pam_unix(cron:session): session closed for user root Dec 19 01:30:02 ispc CRON[2031167]: pam_unix(cron:session): session closed for user root Dec 19 01:31:01 ispc CRON[2031273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:31:02 ispc CRON[2031273]: pam_unix(cron:session): session closed for user root Dec 19 01:31:06 ispc postfix/smtpd[2031284]: sql auxprop plugin using mysql engine Dec 19 01:31:06 ispc saslauthd[2031287]: pam_mysql - SELECT returned no result. Dec 19 01:31:06 ispc saslauthd[2031287]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:31:06 ispc saslauthd[2031287]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:31:33 ispc sshd[2031305]: Invalid user klape from 36.50.177.171 Dec 19 01:31:37 ispc sshd[2031307]: Invalid user ubuntu from 36.50.177.171 Dec 19 01:32:01 ispc CRON[2031321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:32:02 ispc CRON[2031321]: pam_unix(cron:session): session closed for user root Dec 19 01:33:01 ispc CRON[2031369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:33:02 ispc CRON[2031369]: pam_unix(cron:session): session closed for user root Dec 19 01:34:01 ispc CRON[2031401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:34:02 ispc CRON[2031401]: pam_unix(cron:session): session closed for user root Dec 19 01:35:01 ispc CRON[2031443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:35:01 ispc CRON[2031444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:35:01 ispc CRON[2031445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:35:01 ispc CRON[2031446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:35:01 ispc CRON[2031444]: pam_unix(cron:session): session closed for user root Dec 19 01:35:01 ispc CRON[2031446]: pam_unix(cron:session): session closed for user getmail Dec 19 01:35:01 ispc CRON[2031445]: pam_unix(cron:session): session closed for user root Dec 19 01:35:02 ispc CRON[2031443]: pam_unix(cron:session): session closed for user root Dec 19 01:35:13 ispc postfix/smtpd[2031527]: sql auxprop plugin using mysql engine Dec 19 01:35:14 ispc saslauthd[2031530]: pam_mysql - SELECT returned no result. Dec 19 01:35:14 ispc saslauthd[2031530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:35:14 ispc saslauthd[2031530]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:35:54 ispc sshd[2031550]: Invalid user blceu from 52.232.19.79 Dec 19 01:36:01 ispc CRON[2031552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:36:02 ispc CRON[2031552]: pam_unix(cron:session): session closed for user root Dec 19 01:37:01 ispc CRON[2031590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:37:01 ispc CRON[2031590]: pam_unix(cron:session): session closed for user root Dec 19 01:38:01 ispc CRON[2031637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:38:02 ispc CRON[2031637]: pam_unix(cron:session): session closed for user root Dec 19 01:39:01 ispc CRON[2031673]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:39:01 ispc CRON[2031674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:39:01 ispc CRON[2031673]: pam_unix(cron:session): session closed for user root Dec 19 01:39:02 ispc CRON[2031674]: pam_unix(cron:session): session closed for user root Dec 19 01:39:39 ispc postfix/smtpd[2031713]: sql auxprop plugin using mysql engine Dec 19 01:39:40 ispc saslauthd[2031716]: pam_mysql - SELECT returned no result. Dec 19 01:39:40 ispc saslauthd[2031716]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:39:40 ispc saslauthd[2031716]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:39:43 ispc sshd[2031717]: Invalid user ziplines from 85.143.173.172 Dec 19 01:40:01 ispc CRON[2031728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:40:01 ispc CRON[2031729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:40:01 ispc CRON[2031730]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:40:01 ispc CRON[2031731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:40:01 ispc CRON[2031732]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:40:01 ispc CRON[2031729]: pam_unix(cron:session): session closed for user root Dec 19 01:40:01 ispc CRON[2031730]: pam_unix(cron:session): session closed for user www-data Dec 19 01:40:01 ispc CRON[2031732]: pam_unix(cron:session): session closed for user getmail Dec 19 01:40:02 ispc CRON[2031728]: pam_unix(cron:session): session closed for user root Dec 19 01:40:02 ispc CRON[2031731]: pam_unix(cron:session): session closed for user root Dec 19 01:40:32 ispc sshd[2031828]: Invalid user antiqkabinet from 152.53.188.144 Dec 19 01:41:01 ispc CRON[2031845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:41:02 ispc CRON[2031845]: pam_unix(cron:session): session closed for user root Dec 19 01:41:15 ispc CRON[2030714]: pam_unix(cron:session): session closed for user root Dec 19 01:42:01 ispc CRON[2031865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:42:03 ispc CRON[2031865]: pam_unix(cron:session): session closed for user root Dec 19 01:43:01 ispc CRON[2031894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:43:02 ispc CRON[2031894]: pam_unix(cron:session): session closed for user root Dec 19 01:44:01 ispc CRON[2031909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:44:03 ispc CRON[2031909]: pam_unix(cron:session): session closed for user root Dec 19 01:45:01 ispc CRON[2031923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:45:01 ispc CRON[2031924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:45:01 ispc CRON[2031925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:45:01 ispc CRON[2031926]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:45:01 ispc CRON[2031924]: pam_unix(cron:session): session closed for user root Dec 19 01:45:01 ispc CRON[2031926]: pam_unix(cron:session): session closed for user getmail Dec 19 01:45:01 ispc CRON[2031923]: pam_unix(cron:session): session closed for user root Dec 19 01:45:38 ispc postfix/smtpd[2032110]: sql auxprop plugin using mysql engine Dec 19 01:45:40 ispc CRON[2031925]: pam_unix(cron:session): session closed for user root Dec 19 01:45:47 ispc saslauthd[2032113]: pam_mysql - SELECT returned no result. Dec 19 01:45:47 ispc saslauthd[2032113]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:45:47 ispc saslauthd[2032113]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 01:45:56 ispc saslauthd[2032114]: pam_mysql - SELECT returned no result. Dec 19 01:45:56 ispc saslauthd[2032114]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:45:56 ispc saslauthd[2032114]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:46:01 ispc CRON[2032115]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:47:01 ispc CRON[2032149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:47:02 ispc CRON[2032149]: pam_unix(cron:session): session closed for user root Dec 19 01:47:29 ispc sshd[2032174]: Invalid user test from 221.151.181.65 Dec 19 01:48:01 ispc CRON[2032203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:48:02 ispc CRON[2032203]: pam_unix(cron:session): session closed for user root Dec 19 01:48:36 ispc postfix/smtpd[2032235]: sql auxprop plugin using mysql engine Dec 19 01:48:43 ispc postfix/smtpd[2032251]: sql auxprop plugin using mysql engine Dec 19 01:49:01 ispc CRON[2032265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:49:02 ispc CRON[2032265]: pam_unix(cron:session): session closed for user root Dec 19 01:49:08 ispc postfix/smtpd[2032281]: sql auxprop plugin using mysql engine Dec 19 01:49:56 ispc saslauthd[2032308]: pam_mysql - SELECT returned no result. Dec 19 01:49:56 ispc saslauthd[2032308]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:49:56 ispc saslauthd[2032308]: do_auth : auth failure: [user=web_api] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:50:01 ispc CRON[2032309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:50:01 ispc CRON[2032310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:50:01 ispc CRON[2032311]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 01:50:01 ispc CRON[2032312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:50:01 ispc CRON[2032313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:50:01 ispc CRON[2032310]: pam_unix(cron:session): session closed for user root Dec 19 01:50:01 ispc CRON[2032311]: pam_unix(cron:session): session closed for user www-data Dec 19 01:50:02 ispc CRON[2032313]: pam_unix(cron:session): session closed for user getmail Dec 19 01:50:03 ispc CRON[2032312]: pam_unix(cron:session): session closed for user root Dec 19 01:50:04 ispc CRON[2032309]: pam_unix(cron:session): session closed for user root Dec 19 01:50:59 ispc saslauthd[2032431]: pam_mysql - SELECT returned no result. Dec 19 01:50:59 ispc saslauthd[2032431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 01:50:59 ispc saslauthd[2032431]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 01:51:01 ispc CRON[2032432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:51:03 ispc CRON[2032432]: pam_unix(cron:session): session closed for user root Dec 19 01:52:01 ispc CRON[2032469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:52:02 ispc CRON[2032469]: pam_unix(cron:session): session closed for user root Dec 19 01:53:01 ispc CRON[2032515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:53:02 ispc CRON[2032515]: pam_unix(cron:session): session closed for user root Dec 19 01:54:01 ispc CRON[2032562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:54:03 ispc CRON[2032562]: pam_unix(cron:session): session closed for user root Dec 19 01:55:01 ispc CRON[2032600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:55:01 ispc CRON[2032601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:55:01 ispc CRON[2032602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:55:01 ispc CRON[2032603]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 01:55:01 ispc CRON[2032601]: pam_unix(cron:session): session closed for user root Dec 19 01:55:01 ispc CRON[2032603]: pam_unix(cron:session): session closed for user getmail Dec 19 01:55:01 ispc CRON[2032602]: pam_unix(cron:session): session closed for user root Dec 19 01:55:02 ispc CRON[2032600]: pam_unix(cron:session): session closed for user root Dec 19 01:56:01 ispc CRON[2032705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:56:02 ispc CRON[2032705]: pam_unix(cron:session): session closed for user root Dec 19 01:57:01 ispc CRON[2032743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:57:02 ispc CRON[2032743]: pam_unix(cron:session): session closed for user root Dec 19 01:57:14 ispc sshd[2032758]: Invalid user tshombeknife from 120.48.125.223 Dec 19 01:58:01 ispc CRON[2032789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:58:02 ispc CRON[2032789]: pam_unix(cron:session): session closed for user root Dec 19 01:58:35 ispc sshd[2032815]: Invalid user martof from 103.110.84.105 Dec 19 01:59:01 ispc CRON[2032826]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 01:59:01 ispc CRON[2032826]: pam_unix(cron:session): session closed for user root Dec 19 02:00:01 ispc CRON[2032863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:00:01 ispc CRON[2032864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:00:01 ispc CRON[2032865]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:00:01 ispc CRON[2032866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:00:01 ispc CRON[2032867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:00:01 ispc CRON[2032868]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:00:02 ispc CRON[2032865]: pam_unix(cron:session): session closed for user www-data Dec 19 02:00:02 ispc CRON[2032864]: pam_unix(cron:session): session closed for user root Dec 19 02:00:02 ispc CRON[2032868]: pam_unix(cron:session): session closed for user getmail Dec 19 02:00:02 ispc CRON[2032867]: pam_unix(cron:session): session closed for user root Dec 19 02:00:03 ispc CRON[2032863]: pam_unix(cron:session): session closed for user root Dec 19 02:00:04 ispc su[2033036]: Successful su for root by root Dec 19 02:00:04 ispc su[2033036]: + ??? root:root Dec 19 02:00:04 ispc su[2033036]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:04 ispc su[2033036]: pam_unix(su:session): session closed for user root Dec 19 02:00:04 ispc su[2033041]: Successful su for root by root Dec 19 02:00:04 ispc su[2033041]: + ??? root:root Dec 19 02:00:04 ispc su[2033041]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:04 ispc su[2033041]: pam_unix(su:session): session closed for user root Dec 19 02:00:04 ispc su[2033044]: Successful su for root by root Dec 19 02:00:04 ispc su[2033044]: + ??? root:root Dec 19 02:00:04 ispc su[2033044]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:05 ispc su[2033044]: pam_unix(su:session): session closed for user root Dec 19 02:00:05 ispc su[2033050]: Successful su for root by root Dec 19 02:00:05 ispc su[2033050]: + ??? root:root Dec 19 02:00:05 ispc su[2033050]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:05 ispc su[2033050]: pam_unix(su:session): session closed for user root Dec 19 02:00:05 ispc su[2033053]: Successful su for root by root Dec 19 02:00:05 ispc su[2033053]: + ??? root:root Dec 19 02:00:05 ispc su[2033053]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:06 ispc su[2033053]: pam_unix(su:session): session closed for user root Dec 19 02:00:06 ispc su[2033063]: Successful su for root by root Dec 19 02:00:06 ispc su[2033063]: + ??? root:root Dec 19 02:00:06 ispc su[2033063]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:06 ispc su[2033063]: pam_unix(su:session): session closed for user root Dec 19 02:00:06 ispc su[2033066]: Successful su for root by root Dec 19 02:00:06 ispc su[2033066]: + ??? root:root Dec 19 02:00:06 ispc su[2033066]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:12 ispc su[2033066]: pam_unix(su:session): session closed for user root Dec 19 02:00:12 ispc su[2033072]: Successful su for root by root Dec 19 02:00:12 ispc su[2033072]: + ??? root:root Dec 19 02:00:12 ispc su[2033072]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:12 ispc su[2033072]: pam_unix(su:session): session closed for user root Dec 19 02:00:12 ispc su[2033075]: Successful su for root by root Dec 19 02:00:13 ispc su[2033075]: + ??? root:root Dec 19 02:00:13 ispc su[2033075]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:14 ispc su[2033075]: pam_unix(su:session): session closed for user root Dec 19 02:00:14 ispc su[2033083]: Successful su for root by root Dec 19 02:00:14 ispc su[2033083]: + ??? root:root Dec 19 02:00:14 ispc su[2033083]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:14 ispc su[2033083]: pam_unix(su:session): session closed for user root Dec 19 02:00:14 ispc su[2033086]: Successful su for root by root Dec 19 02:00:15 ispc su[2033086]: + ??? root:root Dec 19 02:00:15 ispc su[2033086]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:19 ispc su[2033086]: pam_unix(su:session): session closed for user root Dec 19 02:00:19 ispc su[2033097]: Successful su for root by root Dec 19 02:00:19 ispc su[2033097]: + ??? root:root Dec 19 02:00:19 ispc su[2033097]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:20 ispc su[2033097]: pam_unix(su:session): session closed for user root Dec 19 02:00:20 ispc su[2033100]: Successful su for root by root Dec 19 02:00:20 ispc su[2033100]: + ??? root:root Dec 19 02:00:20 ispc su[2033100]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:20 ispc su[2033100]: pam_unix(su:session): session closed for user root Dec 19 02:00:20 ispc su[2033107]: Successful su for root by root Dec 19 02:00:20 ispc su[2033107]: + ??? root:root Dec 19 02:00:20 ispc su[2033107]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:20 ispc su[2033107]: pam_unix(su:session): session closed for user root Dec 19 02:00:20 ispc su[2033111]: Successful su for root by root Dec 19 02:00:21 ispc su[2033111]: + ??? root:root Dec 19 02:00:21 ispc su[2033111]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:21 ispc postfix/smtpd[2033106]: sql auxprop plugin using mysql engine Dec 19 02:00:21 ispc saslauthd[2033116]: pam_mysql - SELECT returned no result. Dec 19 02:00:21 ispc saslauthd[2033116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:00:21 ispc saslauthd[2033116]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:00:27 ispc su[2033111]: pam_unix(su:session): session closed for user root Dec 19 02:00:27 ispc su[2033123]: Successful su for root by root Dec 19 02:00:27 ispc su[2033123]: + ??? root:root Dec 19 02:00:27 ispc su[2033123]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:27 ispc su[2033123]: pam_unix(su:session): session closed for user root Dec 19 02:00:27 ispc su[2033126]: Successful su for root by root Dec 19 02:00:27 ispc su[2033126]: + ??? root:root Dec 19 02:00:27 ispc su[2033126]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:28 ispc su[2033126]: pam_unix(su:session): session closed for user root Dec 19 02:00:28 ispc su[2033132]: Successful su for root by root Dec 19 02:00:28 ispc su[2033132]: + ??? root:root Dec 19 02:00:28 ispc su[2033132]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:28 ispc su[2033132]: pam_unix(su:session): session closed for user root Dec 19 02:00:28 ispc su[2033135]: Successful su for root by root Dec 19 02:00:28 ispc su[2033135]: + ??? root:root Dec 19 02:00:28 ispc su[2033135]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:43 ispc su[2033135]: pam_unix(su:session): session closed for user root Dec 19 02:00:43 ispc su[2033145]: Successful su for root by root Dec 19 02:00:43 ispc su[2033145]: + ??? root:root Dec 19 02:00:43 ispc su[2033145]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:43 ispc su[2033145]: pam_unix(su:session): session closed for user root Dec 19 02:00:43 ispc su[2033148]: Successful su for root by root Dec 19 02:00:44 ispc su[2033148]: + ??? root:root Dec 19 02:00:44 ispc su[2033148]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:44 ispc su[2033148]: pam_unix(su:session): session closed for user root Dec 19 02:00:44 ispc su[2033154]: Successful su for root by root Dec 19 02:00:45 ispc su[2033154]: + ??? root:root Dec 19 02:00:45 ispc su[2033154]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:45 ispc su[2033154]: pam_unix(su:session): session closed for user root Dec 19 02:00:45 ispc su[2033157]: Successful su for root by root Dec 19 02:00:45 ispc su[2033157]: + ??? root:root Dec 19 02:00:45 ispc su[2033157]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:45 ispc su[2033157]: pam_unix(su:session): session closed for user root Dec 19 02:00:46 ispc su[2033163]: Successful su for root by root Dec 19 02:00:46 ispc su[2033163]: + ??? root:root Dec 19 02:00:46 ispc su[2033163]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:00:46 ispc su[2033163]: pam_unix(su:session): session closed for user root Dec 19 02:00:46 ispc su[2033166]: Successful su for root by root Dec 19 02:00:46 ispc su[2033166]: + ??? root:root Dec 19 02:00:46 ispc su[2033166]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:01:01 ispc CRON[2033179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:01:01 ispc CRON[2033179]: pam_unix(cron:session): session closed for user root Dec 19 02:01:28 ispc sshd[2033200]: Did not receive identification string from 192.227.134.84 Dec 19 02:02:01 ispc CRON[2033219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:02:01 ispc CRON[2033218]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 02:02:02 ispc CRON[2033219]: pam_unix(cron:session): session closed for user root Dec 19 02:02:20 ispc sshd[2033571]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:02:20 ispc sshd[2033571]: Invalid user ziplines from 114.7.163.154 Dec 19 02:03:01 ispc CRON[2034120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:03:02 ispc CRON[2034120]: pam_unix(cron:session): session closed for user root Dec 19 02:03:15 ispc CRON[2033218]: pam_unix(cron:session): session closed for user logcheck Dec 19 02:03:25 ispc postfix/smtpd[2034313]: sql auxprop plugin using mysql engine Dec 19 02:03:59 ispc postfix/smtpd[2034332]: sql auxprop plugin using mysql engine Dec 19 02:04:01 ispc CRON[2034337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:04:02 ispc CRON[2034337]: pam_unix(cron:session): session closed for user root Dec 19 02:04:41 ispc postfix/smtpd[2034365]: sql auxprop plugin using mysql engine Dec 19 02:04:42 ispc saslauthd[2034366]: pam_mysql - SELECT returned no result. Dec 19 02:04:42 ispc saslauthd[2034366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:04:42 ispc saslauthd[2034366]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:05:01 ispc CRON[2034378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:05:01 ispc CRON[2034379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:05:01 ispc CRON[2034380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:05:01 ispc CRON[2034381]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:05:01 ispc CRON[2034379]: pam_unix(cron:session): session closed for user root Dec 19 02:05:01 ispc CRON[2034381]: pam_unix(cron:session): session closed for user getmail Dec 19 02:05:02 ispc CRON[2034380]: pam_unix(cron:session): session closed for user root Dec 19 02:05:02 ispc CRON[2034378]: pam_unix(cron:session): session closed for user root Dec 19 02:05:56 ispc su[2033166]: pam_unix(su:session): session closed for user root Dec 19 02:05:56 ispc su[2034478]: Successful su for root by root Dec 19 02:05:56 ispc su[2034478]: + ??? root:root Dec 19 02:05:56 ispc su[2034478]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:05:56 ispc su[2034478]: pam_unix(su:session): session closed for user root Dec 19 02:05:56 ispc su[2034481]: Successful su for root by root Dec 19 02:05:56 ispc su[2034481]: + ??? root:root Dec 19 02:05:56 ispc su[2034481]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:05:58 ispc su[2034481]: pam_unix(su:session): session closed for user root Dec 19 02:05:58 ispc su[2034487]: Successful su for root by root Dec 19 02:05:58 ispc su[2034487]: + ??? root:root Dec 19 02:05:58 ispc su[2034487]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:05:58 ispc su[2034487]: pam_unix(su:session): session closed for user root Dec 19 02:05:58 ispc su[2034490]: Successful su for root by root Dec 19 02:05:58 ispc su[2034490]: + ??? root:root Dec 19 02:05:58 ispc su[2034490]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:00 ispc su[2034490]: pam_unix(su:session): session closed for user root Dec 19 02:06:00 ispc su[2034496]: Successful su for root by root Dec 19 02:06:00 ispc su[2034496]: + ??? root:root Dec 19 02:06:00 ispc su[2034496]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:00 ispc su[2034496]: pam_unix(su:session): session closed for user root Dec 19 02:06:00 ispc su[2034499]: Successful su for root by root Dec 19 02:06:00 ispc su[2034499]: + ??? root:root Dec 19 02:06:00 ispc su[2034499]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:00 ispc su[2034499]: pam_unix(su:session): session closed for user root Dec 19 02:06:00 ispc su[2034505]: Successful su for root by root Dec 19 02:06:00 ispc su[2034505]: + ??? root:root Dec 19 02:06:00 ispc su[2034505]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:00 ispc su[2034505]: pam_unix(su:session): session closed for user root Dec 19 02:06:00 ispc su[2034508]: Successful su for root by root Dec 19 02:06:00 ispc su[2034508]: + ??? root:root Dec 19 02:06:00 ispc su[2034508]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:01 ispc CRON[2034512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:06:01 ispc CRON[2034512]: pam_unix(cron:session): session closed for user root Dec 19 02:06:02 ispc su[2034508]: pam_unix(su:session): session closed for user root Dec 19 02:06:02 ispc su[2034529]: Successful su for root by root Dec 19 02:06:02 ispc su[2034529]: + ??? root:root Dec 19 02:06:02 ispc su[2034529]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:02 ispc su[2034529]: pam_unix(su:session): session closed for user root Dec 19 02:06:02 ispc su[2034532]: Successful su for root by root Dec 19 02:06:02 ispc su[2034532]: + ??? root:root Dec 19 02:06:02 ispc su[2034532]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:12 ispc su[2034532]: pam_unix(su:session): session closed for user root Dec 19 02:06:12 ispc su[2034543]: Successful su for root by root Dec 19 02:06:12 ispc su[2034543]: + ??? root:root Dec 19 02:06:12 ispc su[2034543]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:12 ispc su[2034543]: pam_unix(su:session): session closed for user root Dec 19 02:06:12 ispc su[2034546]: Successful su for root by root Dec 19 02:06:12 ispc su[2034546]: + ??? root:root Dec 19 02:06:12 ispc su[2034546]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:22 ispc CRON[2032115]: pam_unix(cron:session): session closed for user root Dec 19 02:06:43 ispc su[2034546]: pam_unix(su:session): session closed for user root Dec 19 02:06:43 ispc su[2034557]: Successful su for root by root Dec 19 02:06:43 ispc su[2034557]: + ??? root:root Dec 19 02:06:43 ispc su[2034557]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:43 ispc su[2034557]: pam_unix(su:session): session closed for user root Dec 19 02:06:43 ispc su[2034561]: Successful su for root by root Dec 19 02:06:43 ispc su[2034561]: + ??? root:root Dec 19 02:06:43 ispc su[2034561]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:44 ispc su[2034561]: pam_unix(su:session): session closed for user root Dec 19 02:06:44 ispc su[2034567]: Successful su for root by root Dec 19 02:06:44 ispc su[2034567]: + ??? root:root Dec 19 02:06:44 ispc su[2034567]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:06:44 ispc su[2034567]: pam_unix(su:session): session closed for user root Dec 19 02:06:44 ispc su[2034570]: Successful su for root by root Dec 19 02:06:44 ispc su[2034570]: + ??? root:root Dec 19 02:06:44 ispc su[2034570]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:07:01 ispc CRON[2034574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:07:02 ispc CRON[2034574]: pam_unix(cron:session): session closed for user root Dec 19 02:08:01 ispc CRON[2034595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:08:01 ispc CRON[2034595]: pam_unix(cron:session): session closed for user root Dec 19 02:08:44 ispc saslauthd[2034613]: pam_mysql - SELECT returned no result. Dec 19 02:08:44 ispc saslauthd[2034613]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:08:44 ispc saslauthd[2034613]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:09:01 ispc CRON[2034615]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:09:01 ispc CRON[2034614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:09:02 ispc CRON[2034614]: pam_unix(cron:session): session closed for user root Dec 19 02:09:02 ispc CRON[2034615]: pam_unix(cron:session): session closed for user root Dec 19 02:09:33 ispc sshd[2034639]: Invalid user martof from 185.208.181.153 Dec 19 02:09:43 ispc su[2034570]: pam_unix(su:session): session closed for user root Dec 19 02:09:43 ispc su[2034646]: Successful su for root by root Dec 19 02:09:43 ispc su[2034646]: + ??? root:root Dec 19 02:09:43 ispc su[2034646]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:09:43 ispc su[2034646]: pam_unix(su:session): session closed for user root Dec 19 02:09:43 ispc su[2034650]: Successful su for root by root Dec 19 02:09:43 ispc su[2034650]: + ??? root:root Dec 19 02:09:43 ispc su[2034650]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:10:01 ispc CRON[2034654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:10:01 ispc CRON[2034655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:10:01 ispc CRON[2034656]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:10:01 ispc CRON[2034657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:10:01 ispc CRON[2034658]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:10:01 ispc CRON[2034656]: pam_unix(cron:session): session closed for user www-data Dec 19 02:10:01 ispc CRON[2034655]: pam_unix(cron:session): session closed for user root Dec 19 02:10:01 ispc CRON[2034658]: pam_unix(cron:session): session closed for user getmail Dec 19 02:10:02 ispc CRON[2034654]: pam_unix(cron:session): session closed for user root Dec 19 02:10:18 ispc saslauthd[2034767]: pam_mysql - SELECT returned no result. Dec 19 02:10:18 ispc saslauthd[2034767]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:10:18 ispc saslauthd[2034767]: do_auth : auth failure: [user=shop] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:10:42 ispc CRON[2034657]: pam_unix(cron:session): session closed for user root Dec 19 02:11:01 ispc CRON[2034770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:11:18 ispc su[2034650]: pam_unix(su:session): session closed for user root Dec 19 02:11:18 ispc su[2034788]: Successful su for root by root Dec 19 02:11:18 ispc su[2034788]: + ??? root:root Dec 19 02:11:18 ispc su[2034788]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:18 ispc su[2034788]: pam_unix(su:session): session closed for user root Dec 19 02:11:18 ispc su[2034791]: Successful su for root by root Dec 19 02:11:18 ispc su[2034791]: + ??? root:root Dec 19 02:11:18 ispc su[2034791]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:20 ispc su[2034791]: pam_unix(su:session): session closed for user root Dec 19 02:11:20 ispc su[2034797]: Successful su for root by root Dec 19 02:11:20 ispc su[2034797]: + ??? root:root Dec 19 02:11:20 ispc su[2034797]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:21 ispc su[2034797]: pam_unix(su:session): session closed for user root Dec 19 02:11:21 ispc su[2034800]: Successful su for root by root Dec 19 02:11:21 ispc su[2034800]: + ??? root:root Dec 19 02:11:21 ispc su[2034800]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:36 ispc su[2034800]: pam_unix(su:session): session closed for user root Dec 19 02:11:36 ispc su[2034816]: Successful su for root by root Dec 19 02:11:36 ispc su[2034816]: + ??? root:root Dec 19 02:11:36 ispc su[2034816]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:36 ispc su[2034816]: pam_unix(su:session): session closed for user root Dec 19 02:11:36 ispc su[2034819]: Successful su for root by root Dec 19 02:11:36 ispc su[2034819]: + ??? root:root Dec 19 02:11:36 ispc su[2034819]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:39 ispc su[2034819]: pam_unix(su:session): session closed for user root Dec 19 02:11:39 ispc su[2034825]: Successful su for root by root Dec 19 02:11:39 ispc su[2034825]: + ??? root:root Dec 19 02:11:39 ispc su[2034825]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:39 ispc su[2034825]: pam_unix(su:session): session closed for user root Dec 19 02:11:39 ispc su[2034828]: Successful su for root by root Dec 19 02:11:39 ispc su[2034828]: + ??? root:root Dec 19 02:11:39 ispc su[2034828]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:40 ispc su[2034828]: pam_unix(su:session): session closed for user root Dec 19 02:11:40 ispc su[2034834]: Successful su for root by root Dec 19 02:11:40 ispc su[2034834]: + ??? root:root Dec 19 02:11:40 ispc su[2034834]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:40 ispc su[2034834]: pam_unix(su:session): session closed for user root Dec 19 02:11:40 ispc su[2034837]: Successful su for root by root Dec 19 02:11:40 ispc su[2034837]: + ??? root:root Dec 19 02:11:40 ispc su[2034837]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:47 ispc su[2034837]: pam_unix(su:session): session closed for user root Dec 19 02:11:47 ispc su[2034848]: Successful su for root by root Dec 19 02:11:47 ispc su[2034848]: + ??? root:root Dec 19 02:11:47 ispc su[2034848]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:47 ispc su[2034848]: pam_unix(su:session): session closed for user root Dec 19 02:11:47 ispc su[2034851]: Successful su for root by root Dec 19 02:11:47 ispc su[2034851]: + ??? root:root Dec 19 02:11:47 ispc su[2034851]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:48 ispc su[2034851]: pam_unix(su:session): session closed for user root Dec 19 02:11:48 ispc su[2034857]: Successful su for root by root Dec 19 02:11:48 ispc su[2034857]: + ??? root:root Dec 19 02:11:48 ispc su[2034857]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:48 ispc su[2034857]: pam_unix(su:session): session closed for user root Dec 19 02:11:48 ispc su[2034860]: Successful su for root by root Dec 19 02:11:48 ispc su[2034860]: + ??? root:root Dec 19 02:11:48 ispc su[2034860]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:49 ispc su[2034860]: pam_unix(su:session): session closed for user root Dec 19 02:11:49 ispc su[2034866]: Successful su for root by root Dec 19 02:11:49 ispc su[2034866]: + ??? root:root Dec 19 02:11:49 ispc su[2034866]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:49 ispc su[2034866]: pam_unix(su:session): session closed for user root Dec 19 02:11:49 ispc su[2034869]: Successful su for root by root Dec 19 02:11:49 ispc su[2034869]: + ??? root:root Dec 19 02:11:49 ispc su[2034869]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:50 ispc su[2034869]: pam_unix(su:session): session closed for user root Dec 19 02:11:50 ispc su[2034876]: Successful su for root by root Dec 19 02:11:50 ispc su[2034876]: + ??? root:root Dec 19 02:11:50 ispc su[2034876]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:50 ispc su[2034876]: pam_unix(su:session): session closed for user root Dec 19 02:11:50 ispc su[2034879]: Successful su for root by root Dec 19 02:11:50 ispc su[2034879]: + ??? root:root Dec 19 02:11:50 ispc su[2034879]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:52 ispc su[2034879]: pam_unix(su:session): session closed for user root Dec 19 02:11:52 ispc su[2034885]: Successful su for root by root Dec 19 02:11:52 ispc su[2034885]: + ??? root:root Dec 19 02:11:52 ispc su[2034885]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:52 ispc su[2034885]: pam_unix(su:session): session closed for user root Dec 19 02:11:52 ispc su[2034888]: Successful su for root by root Dec 19 02:11:52 ispc su[2034888]: + ??? root:root Dec 19 02:11:52 ispc su[2034888]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:54 ispc su[2034888]: pam_unix(su:session): session closed for user root Dec 19 02:11:54 ispc su[2034898]: Successful su for root by root Dec 19 02:11:54 ispc su[2034898]: + ??? root:root Dec 19 02:11:54 ispc su[2034898]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:11:54 ispc su[2034898]: pam_unix(su:session): session closed for user root Dec 19 02:11:54 ispc su[2034901]: Successful su for root by root Dec 19 02:11:54 ispc su[2034901]: + ??? root:root Dec 19 02:11:54 ispc su[2034901]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:01 ispc CRON[2034905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:12:01 ispc CRON[2034905]: pam_unix(cron:session): session closed for user root Dec 19 02:12:01 ispc su[2034901]: pam_unix(su:session): session closed for user root Dec 19 02:12:01 ispc su[2034918]: Successful su for root by root Dec 19 02:12:01 ispc su[2034918]: + ??? root:root Dec 19 02:12:01 ispc su[2034918]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:01 ispc su[2034918]: pam_unix(su:session): session closed for user root Dec 19 02:12:01 ispc su[2034921]: Successful su for root by root Dec 19 02:12:01 ispc su[2034921]: + ??? root:root Dec 19 02:12:01 ispc su[2034921]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:01 ispc su[2034921]: pam_unix(su:session): session closed for user root Dec 19 02:12:01 ispc su[2034927]: Successful su for root by root Dec 19 02:12:01 ispc su[2034927]: + ??? root:root Dec 19 02:12:01 ispc su[2034927]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:02 ispc su[2034927]: pam_unix(su:session): session closed for user root Dec 19 02:12:02 ispc su[2034930]: Successful su for root by root Dec 19 02:12:02 ispc su[2034930]: + ??? root:root Dec 19 02:12:02 ispc su[2034930]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:04 ispc su[2034930]: pam_unix(su:session): session closed for user root Dec 19 02:12:04 ispc su[2034940]: Successful su for root by root Dec 19 02:12:04 ispc su[2034940]: + ??? root:root Dec 19 02:12:04 ispc su[2034940]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:04 ispc su[2034940]: pam_unix(su:session): session closed for user root Dec 19 02:12:04 ispc su[2034943]: Successful su for root by root Dec 19 02:12:04 ispc su[2034943]: + ??? root:root Dec 19 02:12:04 ispc su[2034943]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:05 ispc su[2034943]: pam_unix(su:session): session closed for user root Dec 19 02:12:05 ispc su[2034949]: Successful su for root by root Dec 19 02:12:05 ispc su[2034949]: + ??? root:root Dec 19 02:12:05 ispc su[2034949]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:05 ispc su[2034949]: pam_unix(su:session): session closed for user root Dec 19 02:12:05 ispc su[2034952]: Successful su for root by root Dec 19 02:12:05 ispc su[2034952]: + ??? root:root Dec 19 02:12:05 ispc su[2034952]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:23 ispc su[2034952]: pam_unix(su:session): session closed for user root Dec 19 02:12:23 ispc su[2034966]: Successful su for root by root Dec 19 02:12:23 ispc su[2034966]: + ??? root:root Dec 19 02:12:23 ispc su[2034966]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:23 ispc su[2034966]: pam_unix(su:session): session closed for user root Dec 19 02:12:23 ispc su[2034969]: Successful su for root by root Dec 19 02:12:23 ispc su[2034969]: + ??? root:root Dec 19 02:12:23 ispc su[2034969]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:12:55 ispc sshd[2034994]: Invalid user diamantdi from 213.165.71.107 Dec 19 02:13:01 ispc CRON[2034996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:13:01 ispc CRON[2034996]: pam_unix(cron:session): session closed for user root Dec 19 02:14:01 ispc CRON[2035036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:14:02 ispc CRON[2035036]: pam_unix(cron:session): session closed for user root Dec 19 02:14:15 ispc su[2034969]: pam_unix(su:session): session closed for user root Dec 19 02:14:16 ispc su[2035054]: Successful su for root by root Dec 19 02:14:16 ispc su[2035054]: + ??? root:root Dec 19 02:14:16 ispc su[2035054]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:16 ispc su[2035054]: pam_unix(su:session): session closed for user root Dec 19 02:14:16 ispc su[2035061]: Successful su for root by root Dec 19 02:14:16 ispc su[2035061]: + ??? root:root Dec 19 02:14:16 ispc su[2035061]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:17 ispc su[2035061]: pam_unix(su:session): session closed for user root Dec 19 02:14:17 ispc su[2035067]: Successful su for root by root Dec 19 02:14:18 ispc su[2035067]: + ??? root:root Dec 19 02:14:18 ispc su[2035067]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:18 ispc su[2035067]: pam_unix(su:session): session closed for user root Dec 19 02:14:18 ispc su[2035070]: Successful su for root by root Dec 19 02:14:18 ispc su[2035070]: + ??? root:root Dec 19 02:14:18 ispc su[2035070]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:35 ispc su[2035070]: pam_unix(su:session): session closed for user root Dec 19 02:14:35 ispc su[2035082]: Successful su for root by root Dec 19 02:14:35 ispc su[2035082]: + ??? root:root Dec 19 02:14:35 ispc su[2035082]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:36 ispc su[2035082]: pam_unix(su:session): session closed for user root Dec 19 02:14:36 ispc su[2035087]: Successful su for root by root Dec 19 02:14:36 ispc su[2035087]: + ??? root:root Dec 19 02:14:36 ispc su[2035087]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:37 ispc su[2035087]: pam_unix(su:session): session closed for user root Dec 19 02:14:37 ispc su[2035097]: Successful su for root by root Dec 19 02:14:37 ispc su[2035097]: + ??? root:root Dec 19 02:14:37 ispc su[2035097]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:37 ispc su[2035097]: pam_unix(su:session): session closed for user root Dec 19 02:14:37 ispc su[2035100]: Successful su for root by root Dec 19 02:14:37 ispc su[2035100]: + ??? root:root Dec 19 02:14:37 ispc su[2035100]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:38 ispc su[2035100]: pam_unix(su:session): session closed for user root Dec 19 02:14:38 ispc su[2035106]: Successful su for root by root Dec 19 02:14:38 ispc su[2035106]: + ??? root:root Dec 19 02:14:38 ispc su[2035106]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:38 ispc su[2035106]: pam_unix(su:session): session closed for user root Dec 19 02:14:38 ispc su[2035109]: Successful su for root by root Dec 19 02:14:38 ispc su[2035109]: + ??? root:root Dec 19 02:14:38 ispc su[2035109]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:39 ispc su[2035109]: pam_unix(su:session): session closed for user root Dec 19 02:14:39 ispc su[2035115]: Successful su for root by root Dec 19 02:14:39 ispc su[2035115]: + ??? root:root Dec 19 02:14:39 ispc su[2035115]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:40 ispc su[2035115]: pam_unix(su:session): session closed for user root Dec 19 02:14:40 ispc su[2035118]: Successful su for root by root Dec 19 02:14:40 ispc su[2035118]: + ??? root:root Dec 19 02:14:40 ispc su[2035118]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:45 ispc su[2035118]: pam_unix(su:session): session closed for user root Dec 19 02:14:45 ispc su[2035124]: Successful su for root by root Dec 19 02:14:45 ispc su[2035124]: + ??? root:root Dec 19 02:14:45 ispc su[2035124]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:45 ispc su[2035124]: pam_unix(su:session): session closed for user root Dec 19 02:14:45 ispc su[2035127]: Successful su for root by root Dec 19 02:14:45 ispc su[2035127]: + ??? root:root Dec 19 02:14:45 ispc su[2035127]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:47 ispc su[2035127]: pam_unix(su:session): session closed for user root Dec 19 02:14:47 ispc su[2035134]: Successful su for root by root Dec 19 02:14:47 ispc su[2035134]: + ??? root:root Dec 19 02:14:47 ispc su[2035134]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:14:47 ispc su[2035134]: pam_unix(su:session): session closed for user root Dec 19 02:14:47 ispc su[2035140]: Successful su for root by root Dec 19 02:14:47 ispc su[2035140]: + ??? root:root Dec 19 02:14:47 ispc su[2035140]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:01 ispc CRON[2035148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:15:01 ispc CRON[2035149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:15:01 ispc CRON[2035151]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:15:01 ispc CRON[2035150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:15:01 ispc CRON[2035149]: pam_unix(cron:session): session closed for user root Dec 19 02:15:01 ispc CRON[2035151]: pam_unix(cron:session): session closed for user getmail Dec 19 02:15:02 ispc CRON[2035150]: pam_unix(cron:session): session closed for user root Dec 19 02:15:02 ispc CRON[2035148]: pam_unix(cron:session): session closed for user root Dec 19 02:15:10 ispc su[2035140]: pam_unix(su:session): session closed for user root Dec 19 02:15:10 ispc su[2035230]: Successful su for root by root Dec 19 02:15:10 ispc su[2035230]: + ??? root:root Dec 19 02:15:10 ispc su[2035230]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:10 ispc su[2035230]: pam_unix(su:session): session closed for user root Dec 19 02:15:10 ispc su[2035233]: Successful su for root by root Dec 19 02:15:10 ispc su[2035233]: + ??? root:root Dec 19 02:15:10 ispc su[2035233]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:10 ispc su[2035233]: pam_unix(su:session): session closed for user root Dec 19 02:15:10 ispc su[2035239]: Successful su for root by root Dec 19 02:15:10 ispc su[2035239]: + ??? root:root Dec 19 02:15:10 ispc su[2035239]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:10 ispc su[2035239]: pam_unix(su:session): session closed for user root Dec 19 02:15:10 ispc su[2035242]: Successful su for root by root Dec 19 02:15:10 ispc su[2035242]: + ??? root:root Dec 19 02:15:10 ispc su[2035242]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:17 ispc su[2035242]: pam_unix(su:session): session closed for user root Dec 19 02:15:17 ispc su[2035248]: Successful su for root by root Dec 19 02:15:17 ispc su[2035248]: + ??? root:root Dec 19 02:15:17 ispc su[2035248]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:17 ispc su[2035248]: pam_unix(su:session): session closed for user root Dec 19 02:15:17 ispc su[2035252]: Successful su for root by root Dec 19 02:15:17 ispc su[2035252]: + ??? root:root Dec 19 02:15:17 ispc su[2035252]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:19 ispc su[2035252]: pam_unix(su:session): session closed for user root Dec 19 02:15:19 ispc su[2035261]: Successful su for root by root Dec 19 02:15:19 ispc su[2035261]: + ??? root:root Dec 19 02:15:19 ispc su[2035261]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:19 ispc su[2035261]: pam_unix(su:session): session closed for user root Dec 19 02:15:19 ispc su[2035264]: Successful su for root by root Dec 19 02:15:19 ispc su[2035264]: + ??? root:root Dec 19 02:15:19 ispc su[2035264]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:29 ispc su[2035264]: pam_unix(su:session): session closed for user root Dec 19 02:15:29 ispc su[2035274]: Successful su for root by root Dec 19 02:15:29 ispc su[2035274]: + ??? root:root Dec 19 02:15:29 ispc su[2035274]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:29 ispc su[2035274]: pam_unix(su:session): session closed for user root Dec 19 02:15:29 ispc su[2035277]: Successful su for root by root Dec 19 02:15:29 ispc su[2035277]: + ??? root:root Dec 19 02:15:29 ispc su[2035277]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:31 ispc su[2035277]: pam_unix(su:session): session closed for user root Dec 19 02:15:31 ispc su[2035283]: Successful su for root by root Dec 19 02:15:31 ispc su[2035283]: + ??? root:root Dec 19 02:15:31 ispc su[2035283]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:31 ispc su[2035283]: pam_unix(su:session): session closed for user root Dec 19 02:15:31 ispc su[2035286]: Successful su for root by root Dec 19 02:15:31 ispc su[2035286]: + ??? root:root Dec 19 02:15:31 ispc su[2035286]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:38 ispc postfix/smtpd[2035292]: sql auxprop plugin using mysql engine Dec 19 02:15:38 ispc saslauthd[2035299]: pam_mysql - SELECT returned no result. Dec 19 02:15:38 ispc saslauthd[2035299]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:15:38 ispc saslauthd[2035299]: do_auth : auth failure: [user=account@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:15:49 ispc su[2035286]: pam_unix(su:session): session closed for user root Dec 19 02:15:49 ispc su[2035307]: Successful su for root by root Dec 19 02:15:49 ispc su[2035307]: + ??? root:root Dec 19 02:15:49 ispc su[2035307]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:49 ispc su[2035307]: pam_unix(su:session): session closed for user root Dec 19 02:15:49 ispc su[2035310]: Successful su for root by root Dec 19 02:15:49 ispc su[2035310]: + ??? root:root Dec 19 02:15:49 ispc su[2035310]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:50 ispc su[2035310]: pam_unix(su:session): session closed for user root Dec 19 02:15:50 ispc su[2035316]: Successful su for root by root Dec 19 02:15:50 ispc su[2035316]: + ??? root:root Dec 19 02:15:50 ispc su[2035316]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:50 ispc su[2035316]: pam_unix(su:session): session closed for user root Dec 19 02:15:50 ispc su[2035319]: Successful su for root by root Dec 19 02:15:50 ispc su[2035319]: + ??? root:root Dec 19 02:15:50 ispc su[2035319]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:51 ispc su[2035319]: pam_unix(su:session): session closed for user root Dec 19 02:15:51 ispc su[2035325]: Successful su for root by root Dec 19 02:15:51 ispc su[2035325]: + ??? root:root Dec 19 02:15:51 ispc su[2035325]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:52 ispc su[2035325]: pam_unix(su:session): session closed for user root Dec 19 02:15:52 ispc su[2035328]: Successful su for root by root Dec 19 02:15:52 ispc su[2035328]: + ??? root:root Dec 19 02:15:52 ispc su[2035328]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:52 ispc su[2035328]: pam_unix(su:session): session closed for user root Dec 19 02:15:52 ispc su[2035334]: Successful su for root by root Dec 19 02:15:52 ispc su[2035334]: + ??? root:root Dec 19 02:15:52 ispc su[2035334]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:15:52 ispc su[2035334]: pam_unix(su:session): session closed for user root Dec 19 02:15:52 ispc su[2035337]: Successful su for root by root Dec 19 02:15:52 ispc su[2035337]: + ??? root:root Dec 19 02:15:52 ispc su[2035337]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:01 ispc CRON[2035345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:16:01 ispc CRON[2035345]: pam_unix(cron:session): session closed for user root Dec 19 02:16:19 ispc su[2035337]: pam_unix(su:session): session closed for user root Dec 19 02:16:19 ispc su[2035366]: Successful su for root by root Dec 19 02:16:19 ispc su[2035366]: + ??? root:root Dec 19 02:16:19 ispc su[2035366]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:19 ispc su[2035366]: pam_unix(su:session): session closed for user root Dec 19 02:16:19 ispc su[2035369]: Successful su for root by root Dec 19 02:16:19 ispc su[2035369]: + ??? root:root Dec 19 02:16:19 ispc su[2035369]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:20 ispc su[2035369]: pam_unix(su:session): session closed for user root Dec 19 02:16:20 ispc su[2035377]: Successful su for root by root Dec 19 02:16:20 ispc su[2035377]: + ??? root:root Dec 19 02:16:20 ispc su[2035377]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:20 ispc su[2035377]: pam_unix(su:session): session closed for user root Dec 19 02:16:20 ispc su[2035380]: Successful su for root by root Dec 19 02:16:20 ispc su[2035380]: + ??? root:root Dec 19 02:16:20 ispc su[2035380]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:22 ispc su[2035380]: pam_unix(su:session): session closed for user root Dec 19 02:16:22 ispc su[2035386]: Successful su for root by root Dec 19 02:16:22 ispc su[2035386]: + ??? root:root Dec 19 02:16:22 ispc su[2035386]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:22 ispc su[2035386]: pam_unix(su:session): session closed for user root Dec 19 02:16:22 ispc su[2035389]: Successful su for root by root Dec 19 02:16:22 ispc su[2035389]: + ??? root:root Dec 19 02:16:22 ispc su[2035389]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:22 ispc su[2035389]: pam_unix(su:session): session closed for user root Dec 19 02:16:22 ispc su[2035395]: Successful su for root by root Dec 19 02:16:22 ispc su[2035395]: + ??? root:root Dec 19 02:16:22 ispc su[2035395]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:22 ispc su[2035395]: pam_unix(su:session): session closed for user root Dec 19 02:16:22 ispc su[2035398]: Successful su for root by root Dec 19 02:16:22 ispc su[2035398]: + ??? root:root Dec 19 02:16:22 ispc su[2035398]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:23 ispc su[2035398]: pam_unix(su:session): session closed for user root Dec 19 02:16:23 ispc su[2035404]: Successful su for root by root Dec 19 02:16:23 ispc su[2035404]: + ??? root:root Dec 19 02:16:23 ispc su[2035404]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:23 ispc su[2035404]: pam_unix(su:session): session closed for user root Dec 19 02:16:23 ispc su[2035407]: Successful su for root by root Dec 19 02:16:23 ispc su[2035407]: + ??? root:root Dec 19 02:16:23 ispc su[2035407]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:23 ispc su[2035407]: pam_unix(su:session): session closed for user root Dec 19 02:16:23 ispc su[2035413]: Successful su for root by root Dec 19 02:16:23 ispc su[2035413]: + ??? root:root Dec 19 02:16:23 ispc su[2035413]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:23 ispc su[2035413]: pam_unix(su:session): session closed for user root Dec 19 02:16:23 ispc su[2035416]: Successful su for root by root Dec 19 02:16:24 ispc su[2035416]: + ??? root:root Dec 19 02:16:24 ispc su[2035416]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:24 ispc su[2035416]: pam_unix(su:session): session closed for user root Dec 19 02:16:24 ispc su[2035422]: Successful su for root by root Dec 19 02:16:24 ispc su[2035422]: + ??? root:root Dec 19 02:16:24 ispc su[2035422]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:24 ispc su[2035422]: pam_unix(su:session): session closed for user root Dec 19 02:16:24 ispc su[2035425]: Successful su for root by root Dec 19 02:16:24 ispc su[2035425]: + ??? root:root Dec 19 02:16:24 ispc su[2035425]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:25 ispc su[2035425]: pam_unix(su:session): session closed for user root Dec 19 02:16:25 ispc su[2035431]: Successful su for root by root Dec 19 02:16:25 ispc su[2035431]: + ??? root:root Dec 19 02:16:25 ispc su[2035431]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:25 ispc su[2035431]: pam_unix(su:session): session closed for user root Dec 19 02:16:25 ispc su[2035434]: Successful su for root by root Dec 19 02:16:25 ispc su[2035434]: + ??? root:root Dec 19 02:16:25 ispc su[2035434]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:27 ispc su[2035434]: pam_unix(su:session): session closed for user root Dec 19 02:16:27 ispc su[2035440]: Successful su for root by root Dec 19 02:16:27 ispc su[2035440]: + ??? root:root Dec 19 02:16:27 ispc su[2035440]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:27 ispc su[2035440]: pam_unix(su:session): session closed for user root Dec 19 02:16:27 ispc su[2035443]: Successful su for root by root Dec 19 02:16:27 ispc su[2035443]: + ??? root:root Dec 19 02:16:27 ispc su[2035443]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:27 ispc su[2035443]: pam_unix(su:session): session closed for user root Dec 19 02:16:27 ispc su[2035449]: Successful su for root by root Dec 19 02:16:27 ispc su[2035449]: + ??? root:root Dec 19 02:16:27 ispc su[2035449]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:27 ispc su[2035449]: pam_unix(su:session): session closed for user root Dec 19 02:16:27 ispc su[2035452]: Successful su for root by root Dec 19 02:16:27 ispc su[2035452]: + ??? root:root Dec 19 02:16:27 ispc su[2035452]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:28 ispc su[2035452]: pam_unix(su:session): session closed for user root Dec 19 02:16:28 ispc su[2035458]: Successful su for root by root Dec 19 02:16:28 ispc su[2035458]: + ??? root:root Dec 19 02:16:28 ispc su[2035458]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:28 ispc su[2035458]: pam_unix(su:session): session closed for user root Dec 19 02:16:28 ispc su[2035461]: Successful su for root by root Dec 19 02:16:28 ispc su[2035461]: + ??? root:root Dec 19 02:16:28 ispc su[2035461]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:30 ispc su[2035461]: pam_unix(su:session): session closed for user root Dec 19 02:16:30 ispc su[2035471]: Successful su for root by root Dec 19 02:16:30 ispc su[2035471]: + ??? root:root Dec 19 02:16:30 ispc su[2035471]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:30 ispc su[2035471]: pam_unix(su:session): session closed for user root Dec 19 02:16:30 ispc su[2035474]: Successful su for root by root Dec 19 02:16:31 ispc su[2035474]: + ??? root:root Dec 19 02:16:31 ispc su[2035474]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:31 ispc su[2035474]: pam_unix(su:session): session closed for user root Dec 19 02:16:31 ispc su[2035480]: Successful su for root by root Dec 19 02:16:31 ispc su[2035480]: + ??? root:root Dec 19 02:16:31 ispc su[2035480]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:31 ispc su[2035480]: pam_unix(su:session): session closed for user root Dec 19 02:16:31 ispc su[2035483]: Successful su for root by root Dec 19 02:16:31 ispc su[2035483]: + ??? root:root Dec 19 02:16:31 ispc su[2035483]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:33 ispc su[2035483]: pam_unix(su:session): session closed for user root Dec 19 02:16:33 ispc su[2035489]: Successful su for root by root Dec 19 02:16:33 ispc su[2035489]: + ??? root:root Dec 19 02:16:33 ispc su[2035489]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:33 ispc su[2035489]: pam_unix(su:session): session closed for user root Dec 19 02:16:33 ispc su[2035492]: Successful su for root by root Dec 19 02:16:33 ispc su[2035492]: + ??? root:root Dec 19 02:16:33 ispc su[2035492]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:52 ispc su[2035492]: pam_unix(su:session): session closed for user root Dec 19 02:16:52 ispc su[2035510]: Successful su for root by root Dec 19 02:16:52 ispc su[2035510]: + ??? root:root Dec 19 02:16:52 ispc su[2035510]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:52 ispc su[2035510]: pam_unix(su:session): session closed for user root Dec 19 02:16:52 ispc su[2035513]: Successful su for root by root Dec 19 02:16:52 ispc su[2035513]: + ??? root:root Dec 19 02:16:52 ispc su[2035513]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:57 ispc su[2035513]: pam_unix(su:session): session closed for user root Dec 19 02:16:57 ispc su[2035519]: Successful su for root by root Dec 19 02:16:57 ispc su[2035519]: + ??? root:root Dec 19 02:16:57 ispc su[2035519]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:16:57 ispc su[2035519]: pam_unix(su:session): session closed for user root Dec 19 02:16:57 ispc su[2035522]: Successful su for root by root Dec 19 02:16:57 ispc su[2035522]: + ??? root:root Dec 19 02:16:57 ispc su[2035522]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:01 ispc su[2035522]: pam_unix(su:session): session closed for user root Dec 19 02:17:01 ispc su[2035532]: Successful su for root by root Dec 19 02:17:01 ispc su[2035532]: + ??? root:root Dec 19 02:17:01 ispc su[2035532]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:01 ispc su[2035532]: pam_unix(su:session): session closed for user root Dec 19 02:17:01 ispc su[2035535]: Successful su for root by root Dec 19 02:17:01 ispc su[2035535]: + ??? root:root Dec 19 02:17:01 ispc su[2035535]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:01 ispc su[2035535]: pam_unix(su:session): session closed for user root Dec 19 02:17:01 ispc su[2035541]: Successful su for root by root Dec 19 02:17:01 ispc su[2035541]: + ??? root:root Dec 19 02:17:01 ispc su[2035541]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:01 ispc CRON[2035543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:17:01 ispc su[2035541]: pam_unix(su:session): session closed for user root Dec 19 02:17:01 ispc su[2035545]: Successful su for root by root Dec 19 02:17:02 ispc su[2035545]: + ??? root:root Dec 19 02:17:02 ispc su[2035545]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:02 ispc CRON[2035543]: pam_unix(cron:session): session closed for user root Dec 19 02:17:12 ispc su[2035545]: pam_unix(su:session): session closed for user root Dec 19 02:17:12 ispc su[2035565]: Successful su for root by root Dec 19 02:17:12 ispc su[2035565]: + ??? root:root Dec 19 02:17:12 ispc su[2035565]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:12 ispc su[2035565]: pam_unix(su:session): session closed for user root Dec 19 02:17:12 ispc su[2035568]: Successful su for root by root Dec 19 02:17:12 ispc su[2035568]: + ??? root:root Dec 19 02:17:12 ispc su[2035568]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:15 ispc su[2035568]: pam_unix(su:session): session closed for user root Dec 19 02:17:15 ispc su[2035574]: Successful su for root by root Dec 19 02:17:15 ispc su[2035574]: + ??? root:root Dec 19 02:17:15 ispc su[2035574]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:15 ispc su[2035574]: pam_unix(su:session): session closed for user root Dec 19 02:17:15 ispc su[2035577]: Successful su for root by root Dec 19 02:17:15 ispc su[2035577]: + ??? root:root Dec 19 02:17:15 ispc su[2035577]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:17 ispc su[2035577]: pam_unix(su:session): session closed for user root Dec 19 02:17:17 ispc su[2035583]: Successful su for root by root Dec 19 02:17:17 ispc su[2035583]: + ??? root:root Dec 19 02:17:17 ispc su[2035583]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:17 ispc su[2035583]: pam_unix(su:session): session closed for user root Dec 19 02:17:17 ispc su[2035586]: Successful su for root by root Dec 19 02:17:17 ispc su[2035586]: + ??? root:root Dec 19 02:17:17 ispc su[2035586]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:20 ispc su[2035586]: pam_unix(su:session): session closed for user root Dec 19 02:17:20 ispc su[2035596]: Successful su for root by root Dec 19 02:17:20 ispc su[2035596]: + ??? root:root Dec 19 02:17:20 ispc su[2035596]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:20 ispc su[2035596]: pam_unix(su:session): session closed for user root Dec 19 02:17:20 ispc su[2035599]: Successful su for root by root Dec 19 02:17:20 ispc su[2035599]: + ??? root:root Dec 19 02:17:20 ispc su[2035599]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:21 ispc su[2035599]: pam_unix(su:session): session closed for user root Dec 19 02:17:21 ispc su[2035605]: Successful su for root by root Dec 19 02:17:21 ispc su[2035605]: + ??? root:root Dec 19 02:17:21 ispc su[2035605]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:21 ispc su[2035605]: pam_unix(su:session): session closed for user root Dec 19 02:17:21 ispc su[2035608]: Successful su for root by root Dec 19 02:17:21 ispc su[2035608]: + ??? root:root Dec 19 02:17:21 ispc su[2035608]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:17:28 ispc postfix/smtpd[2035614]: sql auxprop plugin using mysql engine Dec 19 02:17:29 ispc saslauthd[2035616]: pam_mysql - SELECT returned no result. Dec 19 02:17:29 ispc saslauthd[2035616]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:17:29 ispc saslauthd[2035616]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:18:01 ispc CRON[2035641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:18:02 ispc CRON[2035641]: pam_unix(cron:session): session closed for user root Dec 19 02:18:07 ispc su[2035608]: pam_unix(su:session): session closed for user root Dec 19 02:18:07 ispc su[2035654]: Successful su for root by root Dec 19 02:18:07 ispc su[2035654]: + ??? root:root Dec 19 02:18:07 ispc su[2035654]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:07 ispc su[2035654]: pam_unix(su:session): session closed for user root Dec 19 02:18:07 ispc su[2035657]: Successful su for root by root Dec 19 02:18:07 ispc su[2035657]: + ??? root:root Dec 19 02:18:07 ispc su[2035657]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:19 ispc sshd[2035665]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:18:19 ispc sshd[2035665]: Invalid user blceu from 114.7.163.154 Dec 19 02:18:31 ispc sshd[2035671]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:18:31 ispc sshd[2035671]: Invalid user ziplines from 193.110.157.47 Dec 19 02:18:35 ispc su[2035657]: pam_unix(su:session): session closed for user root Dec 19 02:18:35 ispc su[2035679]: Successful su for root by root Dec 19 02:18:35 ispc su[2035679]: + ??? root:root Dec 19 02:18:35 ispc su[2035679]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:35 ispc su[2035679]: pam_unix(su:session): session closed for user root Dec 19 02:18:35 ispc su[2035682]: Successful su for root by root Dec 19 02:18:35 ispc su[2035682]: + ??? root:root Dec 19 02:18:35 ispc su[2035682]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:37 ispc su[2035682]: pam_unix(su:session): session closed for user root Dec 19 02:18:37 ispc su[2035688]: Successful su for root by root Dec 19 02:18:37 ispc su[2035688]: + ??? root:root Dec 19 02:18:37 ispc su[2035688]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:37 ispc su[2035688]: pam_unix(su:session): session closed for user root Dec 19 02:18:37 ispc su[2035691]: Successful su for root by root Dec 19 02:18:37 ispc su[2035691]: + ??? root:root Dec 19 02:18:37 ispc su[2035691]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:37 ispc su[2035691]: pam_unix(su:session): session closed for user root Dec 19 02:18:37 ispc su[2035697]: Successful su for root by root Dec 19 02:18:37 ispc su[2035697]: + ??? root:root Dec 19 02:18:37 ispc su[2035697]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:38 ispc su[2035697]: pam_unix(su:session): session closed for user root Dec 19 02:18:38 ispc su[2035700]: Successful su for root by root Dec 19 02:18:38 ispc su[2035700]: + ??? root:root Dec 19 02:18:38 ispc su[2035700]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:39 ispc su[2035700]: pam_unix(su:session): session closed for user root Dec 19 02:18:39 ispc su[2035706]: Successful su for root by root Dec 19 02:18:39 ispc su[2035706]: + ??? root:root Dec 19 02:18:39 ispc su[2035706]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:39 ispc su[2035706]: pam_unix(su:session): session closed for user root Dec 19 02:18:39 ispc su[2035709]: Successful su for root by root Dec 19 02:18:39 ispc su[2035709]: + ??? root:root Dec 19 02:18:39 ispc su[2035709]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:57 ispc su[2035709]: pam_unix(su:session): session closed for user root Dec 19 02:18:57 ispc su[2035724]: Successful su for root by root Dec 19 02:18:57 ispc su[2035724]: + ??? root:root Dec 19 02:18:57 ispc su[2035724]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:18:57 ispc su[2035724]: pam_unix(su:session): session closed for user root Dec 19 02:18:57 ispc su[2035727]: Successful su for root by root Dec 19 02:18:57 ispc su[2035727]: + ??? root:root Dec 19 02:18:57 ispc su[2035727]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:01 ispc su[2035727]: pam_unix(su:session): session closed for user root Dec 19 02:19:01 ispc su[2035734]: Successful su for root by root Dec 19 02:19:01 ispc su[2035734]: + ??? root:root Dec 19 02:19:01 ispc su[2035734]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:01 ispc CRON[2035736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:19:01 ispc su[2035734]: pam_unix(su:session): session closed for user root Dec 19 02:19:01 ispc su[2035741]: Successful su for root by root Dec 19 02:19:01 ispc su[2035741]: + ??? root:root Dec 19 02:19:01 ispc su[2035741]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:02 ispc su[2035741]: pam_unix(su:session): session closed for user root Dec 19 02:19:02 ispc su[2035758]: Successful su for root by root Dec 19 02:19:02 ispc su[2035758]: + ??? root:root Dec 19 02:19:02 ispc su[2035758]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:02 ispc CRON[2035736]: pam_unix(cron:session): session closed for user root Dec 19 02:19:02 ispc su[2035758]: pam_unix(su:session): session closed for user root Dec 19 02:19:02 ispc su[2035761]: Successful su for root by root Dec 19 02:19:02 ispc su[2035761]: + ??? root:root Dec 19 02:19:02 ispc su[2035761]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:02 ispc su[2035761]: pam_unix(su:session): session closed for user root Dec 19 02:19:02 ispc su[2035767]: Successful su for root by root Dec 19 02:19:02 ispc su[2035767]: + ??? root:root Dec 19 02:19:02 ispc su[2035767]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:02 ispc su[2035767]: pam_unix(su:session): session closed for user root Dec 19 02:19:02 ispc su[2035770]: Successful su for root by root Dec 19 02:19:02 ispc su[2035770]: + ??? root:root Dec 19 02:19:02 ispc su[2035770]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:03 ispc su[2035770]: pam_unix(su:session): session closed for user root Dec 19 02:19:03 ispc su[2035776]: Successful su for root by root Dec 19 02:19:03 ispc su[2035776]: + ??? root:root Dec 19 02:19:03 ispc su[2035776]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:03 ispc su[2035776]: pam_unix(su:session): session closed for user root Dec 19 02:19:03 ispc su[2035779]: Successful su for root by root Dec 19 02:19:03 ispc su[2035779]: + ??? root:root Dec 19 02:19:03 ispc su[2035779]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:07 ispc su[2035779]: pam_unix(su:session): session closed for user root Dec 19 02:19:07 ispc su[2035785]: Successful su for root by root Dec 19 02:19:07 ispc su[2035785]: + ??? root:root Dec 19 02:19:07 ispc su[2035785]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:07 ispc su[2035785]: pam_unix(su:session): session closed for user root Dec 19 02:19:07 ispc su[2035788]: Successful su for root by root Dec 19 02:19:07 ispc su[2035788]: + ??? root:root Dec 19 02:19:07 ispc su[2035788]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:08 ispc su[2035788]: pam_unix(su:session): session closed for user root Dec 19 02:19:08 ispc su[2035794]: Successful su for root by root Dec 19 02:19:08 ispc su[2035794]: + ??? root:root Dec 19 02:19:08 ispc su[2035794]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:08 ispc su[2035794]: pam_unix(su:session): session closed for user root Dec 19 02:19:08 ispc su[2035797]: Successful su for root by root Dec 19 02:19:08 ispc su[2035797]: + ??? root:root Dec 19 02:19:08 ispc su[2035797]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:16 ispc su[2035797]: pam_unix(su:session): session closed for user root Dec 19 02:19:16 ispc su[2035807]: Successful su for root by root Dec 19 02:19:16 ispc su[2035807]: + ??? root:root Dec 19 02:19:16 ispc su[2035807]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:16 ispc su[2035807]: pam_unix(su:session): session closed for user root Dec 19 02:19:16 ispc su[2035810]: Successful su for root by root Dec 19 02:19:16 ispc su[2035810]: + ??? root:root Dec 19 02:19:16 ispc su[2035810]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:19 ispc postfix/smtpd[2035814]: sql auxprop plugin using mysql engine Dec 19 02:19:25 ispc su[2035810]: pam_unix(su:session): session closed for user root Dec 19 02:19:25 ispc su[2035822]: Successful su for root by root Dec 19 02:19:25 ispc su[2035822]: + ??? root:root Dec 19 02:19:25 ispc su[2035822]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:25 ispc su[2035822]: pam_unix(su:session): session closed for user root Dec 19 02:19:25 ispc su[2035825]: Successful su for root by root Dec 19 02:19:25 ispc su[2035825]: + ??? root:root Dec 19 02:19:25 ispc su[2035825]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:32 ispc postfix/smtpd[2035830]: sql auxprop plugin using mysql engine Dec 19 02:19:33 ispc saslauthd[2035836]: pam_mysql - SELECT returned no result. Dec 19 02:19:33 ispc saslauthd[2035836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:19:33 ispc saslauthd[2035836]: do_auth : auth failure: [user=weblogic] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:19:46 ispc su[2035825]: pam_unix(su:session): session closed for user root Dec 19 02:19:46 ispc su[2035844]: Successful su for root by root Dec 19 02:19:46 ispc su[2035844]: + ??? root:root Dec 19 02:19:46 ispc su[2035844]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:46 ispc su[2035844]: pam_unix(su:session): session closed for user root Dec 19 02:19:46 ispc su[2035847]: Successful su for root by root Dec 19 02:19:46 ispc su[2035847]: + ??? root:root Dec 19 02:19:46 ispc su[2035847]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:49 ispc su[2035847]: pam_unix(su:session): session closed for user root Dec 19 02:19:49 ispc su[2035853]: Successful su for root by root Dec 19 02:19:49 ispc su[2035853]: + ??? root:root Dec 19 02:19:49 ispc su[2035853]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:49 ispc su[2035853]: pam_unix(su:session): session closed for user root Dec 19 02:19:49 ispc su[2035856]: Successful su for root by root Dec 19 02:19:49 ispc su[2035856]: + ??? root:root Dec 19 02:19:49 ispc su[2035856]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:57 ispc su[2035856]: pam_unix(su:session): session closed for user root Dec 19 02:19:57 ispc su[2035867]: Successful su for root by root Dec 19 02:19:57 ispc su[2035867]: + ??? root:root Dec 19 02:19:57 ispc su[2035867]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:57 ispc su[2035867]: pam_unix(su:session): session closed for user root Dec 19 02:19:57 ispc su[2035870]: Successful su for root by root Dec 19 02:19:57 ispc su[2035870]: + ??? root:root Dec 19 02:19:57 ispc su[2035870]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:58 ispc su[2035870]: pam_unix(su:session): session closed for user root Dec 19 02:19:58 ispc su[2035876]: Successful su for root by root Dec 19 02:19:58 ispc su[2035876]: + ??? root:root Dec 19 02:19:58 ispc su[2035876]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:58 ispc su[2035876]: pam_unix(su:session): session closed for user root Dec 19 02:19:58 ispc su[2035879]: Successful su for root by root Dec 19 02:19:58 ispc su[2035879]: + ??? root:root Dec 19 02:19:58 ispc su[2035879]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:59 ispc su[2035879]: pam_unix(su:session): session closed for user root Dec 19 02:19:59 ispc su[2035885]: Successful su for root by root Dec 19 02:19:59 ispc su[2035885]: + ??? root:root Dec 19 02:19:59 ispc su[2035885]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:59 ispc su[2035885]: pam_unix(su:session): session closed for user root Dec 19 02:19:59 ispc su[2035888]: Successful su for root by root Dec 19 02:19:59 ispc su[2035888]: + ??? root:root Dec 19 02:19:59 ispc su[2035888]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:59 ispc su[2035888]: pam_unix(su:session): session closed for user root Dec 19 02:19:59 ispc su[2035894]: Successful su for root by root Dec 19 02:19:59 ispc su[2035894]: + ??? root:root Dec 19 02:19:59 ispc su[2035894]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:19:59 ispc su[2035894]: pam_unix(su:session): session closed for user root Dec 19 02:19:59 ispc su[2035897]: Successful su for root by root Dec 19 02:19:59 ispc su[2035897]: + ??? root:root Dec 19 02:19:59 ispc su[2035897]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:01 ispc CRON[2035901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:20:01 ispc CRON[2035902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:20:01 ispc CRON[2035903]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:20:01 ispc CRON[2035904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:20:01 ispc CRON[2035905]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:20:01 ispc CRON[2035903]: pam_unix(cron:session): session closed for user www-data Dec 19 02:20:01 ispc CRON[2035902]: pam_unix(cron:session): session closed for user root Dec 19 02:20:01 ispc CRON[2035905]: pam_unix(cron:session): session closed for user getmail Dec 19 02:20:01 ispc CRON[2035904]: pam_unix(cron:session): session closed for user root Dec 19 02:20:02 ispc CRON[2035901]: pam_unix(cron:session): session closed for user root Dec 19 02:20:16 ispc su[2035897]: pam_unix(su:session): session closed for user root Dec 19 02:20:16 ispc su[2035989]: Successful su for root by root Dec 19 02:20:16 ispc su[2035989]: + ??? root:root Dec 19 02:20:16 ispc su[2035989]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:16 ispc su[2035989]: pam_unix(su:session): session closed for user root Dec 19 02:20:16 ispc su[2035992]: Successful su for root by root Dec 19 02:20:16 ispc su[2035992]: + ??? root:root Dec 19 02:20:16 ispc su[2035992]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:17 ispc su[2035992]: pam_unix(su:session): session closed for user root Dec 19 02:20:17 ispc su[2035998]: Successful su for root by root Dec 19 02:20:17 ispc su[2035998]: + ??? root:root Dec 19 02:20:17 ispc su[2035998]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:17 ispc su[2035998]: pam_unix(su:session): session closed for user root Dec 19 02:20:17 ispc su[2036001]: Successful su for root by root Dec 19 02:20:17 ispc su[2036001]: + ??? root:root Dec 19 02:20:17 ispc su[2036001]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:20 ispc su[2036001]: pam_unix(su:session): session closed for user root Dec 19 02:20:20 ispc su[2036007]: Successful su for root by root Dec 19 02:20:20 ispc su[2036007]: + ??? root:root Dec 19 02:20:21 ispc su[2036007]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:21 ispc su[2036007]: pam_unix(su:session): session closed for user root Dec 19 02:20:21 ispc su[2036010]: Successful su for root by root Dec 19 02:20:21 ispc su[2036010]: + ??? root:root Dec 19 02:20:21 ispc su[2036010]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:21 ispc su[2036010]: pam_unix(su:session): session closed for user root Dec 19 02:20:21 ispc su[2036016]: Successful su for root by root Dec 19 02:20:21 ispc su[2036016]: + ??? root:root Dec 19 02:20:21 ispc su[2036016]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:21 ispc su[2036016]: pam_unix(su:session): session closed for user root Dec 19 02:20:21 ispc su[2036019]: Successful su for root by root Dec 19 02:20:21 ispc su[2036019]: + ??? root:root Dec 19 02:20:21 ispc su[2036019]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:28 ispc su[2036019]: pam_unix(su:session): session closed for user root Dec 19 02:20:28 ispc su[2036029]: Successful su for root by root Dec 19 02:20:28 ispc su[2036029]: + ??? root:root Dec 19 02:20:28 ispc su[2036029]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:28 ispc su[2036029]: pam_unix(su:session): session closed for user root Dec 19 02:20:28 ispc su[2036032]: Successful su for root by root Dec 19 02:20:28 ispc su[2036032]: + ??? root:root Dec 19 02:20:28 ispc su[2036032]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:35 ispc su[2036032]: pam_unix(su:session): session closed for user root Dec 19 02:20:35 ispc su[2036042]: Successful su for root by root Dec 19 02:20:35 ispc su[2036042]: + ??? root:root Dec 19 02:20:35 ispc su[2036042]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:35 ispc su[2036042]: pam_unix(su:session): session closed for user root Dec 19 02:20:35 ispc su[2036045]: Successful su for root by root Dec 19 02:20:35 ispc su[2036045]: + ??? root:root Dec 19 02:20:35 ispc su[2036045]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:43 ispc su[2036045]: pam_unix(su:session): session closed for user root Dec 19 02:20:45 ispc su[2036140]: Successful su for root by root Dec 19 02:20:45 ispc su[2036140]: + ??? root:root Dec 19 02:20:45 ispc su[2036140]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:20:53 ispc su[2036140]: pam_unix(su:session): session closed for user root Dec 19 02:20:53 ispc su[2036144]: Successful su for root by root Dec 19 02:20:53 ispc su[2036144]: + ??? root:root Dec 19 02:20:53 ispc su[2036144]: pam_unix(su:session): session opened for user root by (uid=0) Dec 19 02:21:01 ispc CRON[2036150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:21:01 ispc CRON[2036151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:21:01 ispc CRON[2036150]: pam_unix(cron:session): session closed for user root Dec 19 02:21:01 ispc CRON[2036151]: pam_unix(cron:session): session closed for user root Dec 19 02:22:01 ispc CRON[2036198]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:22:02 ispc sshd[2036205]: Invalid user matlbula from 51.159.18.215 Dec 19 02:22:02 ispc CRON[2036198]: pam_unix(cron:session): session closed for user root Dec 19 02:22:22 ispc postfix/smtpd[2036219]: sql auxprop plugin using mysql engine Dec 19 02:22:26 ispc saslauthd[2036226]: pam_mysql - SELECT returned no result. Dec 19 02:22:26 ispc saslauthd[2036226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:22:26 ispc saslauthd[2036226]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:22:30 ispc saslauthd[2036227]: pam_mysql - SELECT returned no result. Dec 19 02:22:30 ispc saslauthd[2036227]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:22:30 ispc saslauthd[2036227]: do_auth : auth failure: [user=info@hyundai-cz.com] [service=smtp] [realm=hyundai-cz.com] [mech=pam] [reason=PAM auth error] Dec 19 02:23:01 ispc CRON[2036247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:23:02 ispc CRON[2036247]: pam_unix(cron:session): session closed for user root Dec 19 02:23:18 ispc sshd[2036266]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:24:01 ispc CRON[2036288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:24:02 ispc CRON[2036288]: pam_unix(cron:session): session closed for user root Dec 19 02:24:20 ispc sshd[2036308]: Invalid user lanovacentra from 51.159.18.215 Dec 19 02:25:01 ispc CRON[2036330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:25:01 ispc CRON[2036332]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:25:01 ispc CRON[2036329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:25:01 ispc CRON[2036331]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:25:01 ispc CRON[2036332]: pam_unix(cron:session): session closed for user getmail Dec 19 02:25:01 ispc CRON[2036330]: pam_unix(cron:session): session closed for user root Dec 19 02:25:01 ispc CRON[2036331]: pam_unix(cron:session): session closed for user root Dec 19 02:25:01 ispc CRON[2036329]: pam_unix(cron:session): session closed for user root Dec 19 02:26:01 ispc CRON[2036429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:26:02 ispc CRON[2036429]: pam_unix(cron:session): session closed for user root Dec 19 02:26:10 ispc postfix/smtpd[2036444]: sql auxprop plugin using mysql engine Dec 19 02:26:11 ispc saslauthd[2036447]: pam_mysql - SELECT returned no result. Dec 19 02:26:11 ispc saslauthd[2036447]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:26:11 ispc saslauthd[2036447]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:27:01 ispc CRON[2036468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:27:01 ispc CRON[2036468]: pam_unix(cron:session): session closed for user root Dec 19 02:27:30 ispc sshd[2036493]: Invalid user martof from 165.227.38.205 Dec 19 02:28:01 ispc CRON[2036516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:28:02 ispc CRON[2036516]: pam_unix(cron:session): session closed for user root Dec 19 02:29:01 ispc CRON[2036551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:29:02 ispc CRON[2036551]: pam_unix(cron:session): session closed for user root Dec 19 02:29:09 ispc postfix/smtpd[2036567]: sql auxprop plugin using mysql engine Dec 19 02:30:01 ispc CRON[2036589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:30:01 ispc CRON[2036590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:30:01 ispc CRON[2036591]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:30:01 ispc CRON[2036592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:30:01 ispc CRON[2036593]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:30:01 ispc CRON[2036590]: pam_unix(cron:session): session closed for user root Dec 19 02:30:01 ispc CRON[2036593]: pam_unix(cron:session): session closed for user getmail Dec 19 02:30:01 ispc CRON[2036591]: pam_unix(cron:session): session closed for user www-data Dec 19 02:30:01 ispc CRON[2036592]: pam_unix(cron:session): session closed for user root Dec 19 02:30:03 ispc CRON[2036589]: pam_unix(cron:session): session closed for user root Dec 19 02:31:01 ispc CRON[2036696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:31:02 ispc CRON[2036696]: pam_unix(cron:session): session closed for user root Dec 19 02:31:27 ispc postfix/smtpd[2036717]: sql auxprop plugin using mysql engine Dec 19 02:31:27 ispc CRON[2034770]: pam_unix(cron:session): session closed for user root Dec 19 02:32:01 ispc CRON[2036721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:32:02 ispc CRON[2036721]: pam_unix(cron:session): session closed for user root Dec 19 02:33:01 ispc CRON[2036745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:33:02 ispc CRON[2036745]: pam_unix(cron:session): session closed for user root Dec 19 02:34:01 ispc CRON[2036761]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:34:02 ispc CRON[2036761]: pam_unix(cron:session): session closed for user root Dec 19 02:34:20 ispc saslauthd[2036777]: pam_mysql - SELECT returned no result. Dec 19 02:34:20 ispc saslauthd[2036777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:34:20 ispc saslauthd[2036777]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:34:29 ispc saslauthd[2036778]: pam_mysql - SELECT returned no result. Dec 19 02:34:29 ispc saslauthd[2036778]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:34:29 ispc saslauthd[2036778]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:35:01 ispc CRON[2036779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:35:01 ispc CRON[2036781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:35:01 ispc CRON[2036782]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:35:01 ispc CRON[2036780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:35:01 ispc CRON[2036780]: pam_unix(cron:session): session closed for user root Dec 19 02:35:01 ispc CRON[2036782]: pam_unix(cron:session): session closed for user getmail Dec 19 02:35:02 ispc CRON[2036779]: pam_unix(cron:session): session closed for user root Dec 19 02:35:39 ispc CRON[2036781]: pam_unix(cron:session): session closed for user root Dec 19 02:36:01 ispc CRON[2036890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:37:01 ispc CRON[2036928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:37:02 ispc CRON[2036928]: pam_unix(cron:session): session closed for user root Dec 19 02:37:45 ispc sshd[2036959]: Invalid user anoraksro from 152.53.188.144 Dec 19 02:37:59 ispc postfix/smtpd[2036969]: sql auxprop plugin using mysql engine Dec 19 02:38:01 ispc CRON[2036971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:38:01 ispc CRON[2036971]: pam_unix(cron:session): session closed for user root Dec 19 02:38:36 ispc postfix/smtpd[2037002]: sql auxprop plugin using mysql engine Dec 19 02:38:37 ispc saslauthd[2037004]: pam_mysql - SELECT returned no result. Dec 19 02:38:37 ispc saslauthd[2037004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:37 ispc saslauthd[2037004]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:37 ispc saslauthd[2037005]: do_request : NULL password received Dec 19 02:38:37 ispc saslauthd[2037006]: pam_mysql - SELECT returned no result. Dec 19 02:38:37 ispc saslauthd[2037006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:37 ispc saslauthd[2037006]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:38 ispc saslauthd[2037007]: pam_mysql - SELECT returned no result. Dec 19 02:38:38 ispc saslauthd[2037007]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:38 ispc saslauthd[2037007]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:38 ispc saslauthd[2037008]: pam_mysql - SELECT returned no result. Dec 19 02:38:38 ispc saslauthd[2037008]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:38 ispc saslauthd[2037008]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:38 ispc saslauthd[2037009]: pam_mysql - SELECT returned no result. Dec 19 02:38:38 ispc saslauthd[2037009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:38 ispc saslauthd[2037009]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:39 ispc saslauthd[2037010]: pam_mysql - SELECT returned no result. Dec 19 02:38:39 ispc saslauthd[2037010]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:39 ispc saslauthd[2037010]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:39 ispc saslauthd[2037011]: pam_mysql - SELECT returned no result. Dec 19 02:38:39 ispc saslauthd[2037011]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:39 ispc saslauthd[2037011]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:39 ispc saslauthd[2037012]: pam_mysql - SELECT returned no result. Dec 19 02:38:39 ispc saslauthd[2037012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:39 ispc saslauthd[2037012]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:40 ispc saslauthd[2037013]: pam_mysql - SELECT returned no result. Dec 19 02:38:40 ispc saslauthd[2037013]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:40 ispc saslauthd[2037013]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:43 ispc saslauthd[2037014]: pam_mysql - SELECT returned no result. Dec 19 02:38:43 ispc saslauthd[2037014]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:43 ispc saslauthd[2037014]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:48 ispc saslauthd[2037019]: pam_mysql - SELECT returned no result. Dec 19 02:38:48 ispc saslauthd[2037019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:48 ispc saslauthd[2037019]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:52 ispc saslauthd[2037021]: pam_mysql - SELECT returned no result. Dec 19 02:38:52 ispc saslauthd[2037021]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:52 ispc saslauthd[2037021]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:38:56 ispc saslauthd[2037026]: pam_mysql - SELECT returned no result. Dec 19 02:38:56 ispc saslauthd[2037026]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:38:56 ispc saslauthd[2037026]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:01 ispc saslauthd[2037027]: pam_mysql - SELECT returned no result. Dec 19 02:39:01 ispc saslauthd[2037027]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:01 ispc saslauthd[2037027]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:01 ispc CRON[2037028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:39:01 ispc CRON[2037029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:39:01 ispc CRON[2037028]: pam_unix(cron:session): session closed for user root Dec 19 02:39:02 ispc CRON[2037029]: pam_unix(cron:session): session closed for user root Dec 19 02:39:05 ispc saslauthd[2037051]: pam_mysql - SELECT returned no result. Dec 19 02:39:05 ispc saslauthd[2037051]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:05 ispc saslauthd[2037051]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:10 ispc saslauthd[2037057]: pam_mysql - SELECT returned no result. Dec 19 02:39:10 ispc saslauthd[2037057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:10 ispc saslauthd[2037057]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:14 ispc saslauthd[2037059]: pam_mysql - SELECT returned no result. Dec 19 02:39:14 ispc saslauthd[2037059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:14 ispc saslauthd[2037059]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:19 ispc saslauthd[2037064]: pam_mysql - SELECT returned no result. Dec 19 02:39:19 ispc saslauthd[2037064]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:19 ispc saslauthd[2037064]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:39:23 ispc saslauthd[2037066]: pam_mysql - SELECT returned no result. Dec 19 02:39:23 ispc saslauthd[2037066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:39:23 ispc saslauthd[2037066]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 02:40:01 ispc CRON[2037091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:40:01 ispc CRON[2037094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:40:01 ispc CRON[2037092]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:40:01 ispc CRON[2037095]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:40:01 ispc CRON[2037093]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:40:01 ispc CRON[2037093]: pam_unix(cron:session): session closed for user www-data Dec 19 02:40:01 ispc CRON[2037092]: pam_unix(cron:session): session closed for user root Dec 19 02:40:01 ispc CRON[2037095]: pam_unix(cron:session): session closed for user getmail Dec 19 02:40:01 ispc CRON[2037094]: pam_unix(cron:session): session closed for user root Dec 19 02:40:02 ispc CRON[2037091]: pam_unix(cron:session): session closed for user root Dec 19 02:40:48 ispc sshd[2037185]: Invalid user antiqkabinet from 152.53.188.144 Dec 19 02:41:01 ispc CRON[2037196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:41:01 ispc CRON[2037196]: pam_unix(cron:session): session closed for user root Dec 19 02:42:01 ispc CRON[2037231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:42:03 ispc CRON[2037231]: pam_unix(cron:session): session closed for user root Dec 19 02:42:42 ispc sshd[2037259]: Did not receive identification string from 192.227.134.84 Dec 19 02:42:51 ispc postfix/smtpd[2037271]: sql auxprop plugin using mysql engine Dec 19 02:42:51 ispc saslauthd[2037273]: pam_mysql - SELECT returned no result. Dec 19 02:42:51 ispc saslauthd[2037273]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:42:51 ispc saslauthd[2037273]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:43:01 ispc CRON[2037278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:43:02 ispc CRON[2037278]: pam_unix(cron:session): session closed for user root Dec 19 02:44:01 ispc CRON[2037318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:44:02 ispc CRON[2037318]: pam_unix(cron:session): session closed for user root Dec 19 02:45:01 ispc CRON[2037356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:45:01 ispc CRON[2037357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:45:01 ispc CRON[2037358]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:45:01 ispc CRON[2037355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:45:01 ispc CRON[2037356]: pam_unix(cron:session): session closed for user root Dec 19 02:45:01 ispc CRON[2037358]: pam_unix(cron:session): session closed for user getmail Dec 19 02:45:01 ispc CRON[2037357]: pam_unix(cron:session): session closed for user root Dec 19 02:45:02 ispc CRON[2037355]: pam_unix(cron:session): session closed for user root Dec 19 02:46:01 ispc CRON[2037459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:46:02 ispc CRON[2037459]: pam_unix(cron:session): session closed for user root Dec 19 02:47:01 ispc CRON[2037495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:47:01 ispc CRON[2037495]: pam_unix(cron:session): session closed for user root Dec 19 02:47:26 ispc sshd[2037520]: Invalid user martof from 51.91.247.10 Dec 19 02:48:01 ispc CRON[2037545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:48:02 ispc CRON[2037545]: pam_unix(cron:session): session closed for user root Dec 19 02:49:01 ispc CRON[2037580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:49:02 ispc CRON[2037580]: pam_unix(cron:session): session closed for user root Dec 19 02:49:07 ispc postfix/smtpd[2037595]: sql auxprop plugin using mysql engine Dec 19 02:49:08 ispc saslauthd[2037598]: pam_mysql - SELECT returned no result. Dec 19 02:49:08 ispc saslauthd[2037598]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:49:08 ispc saslauthd[2037598]: do_auth : auth failure: [user=whd] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:49:37 ispc sshd[2037615]: Invalid user klape from 103.164.20.29 Dec 19 02:49:39 ispc sshd[2037617]: Invalid user ubuntu from 103.164.20.29 Dec 19 02:50:01 ispc CRON[2037627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:50:01 ispc CRON[2037628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:50:01 ispc CRON[2037629]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 02:50:01 ispc CRON[2037631]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:50:01 ispc CRON[2037630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:50:01 ispc CRON[2037628]: pam_unix(cron:session): session closed for user root Dec 19 02:50:01 ispc CRON[2037629]: pam_unix(cron:session): session closed for user www-data Dec 19 02:50:01 ispc CRON[2037631]: pam_unix(cron:session): session closed for user getmail Dec 19 02:50:01 ispc CRON[2037630]: pam_unix(cron:session): session closed for user root Dec 19 02:50:01 ispc CRON[2037627]: pam_unix(cron:session): session closed for user root Dec 19 02:50:42 ispc sshd[2037723]: Invalid user martof from 27.254.144.183 Dec 19 02:51:01 ispc CRON[2037735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:51:02 ispc CRON[2037735]: pam_unix(cron:session): session closed for user root Dec 19 02:51:03 ispc sshd[2037746]: Invalid user martof from 5.133.121.104 Dec 19 02:51:04 ispc postfix/smtpd[2037748]: sql auxprop plugin using mysql engine Dec 19 02:51:05 ispc saslauthd[2037750]: pam_mysql - SELECT returned no result. Dec 19 02:51:05 ispc saslauthd[2037750]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:51:05 ispc saslauthd[2037750]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:52:01 ispc CRON[2037777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:52:01 ispc CRON[2037777]: pam_unix(cron:session): session closed for user root Dec 19 02:52:49 ispc sshd[2037805]: Invalid user blceu from 45.119.213.109 Dec 19 02:52:59 ispc sshd[2037820]: Bad protocol version identification 'GET / HTTP/1.1' from 65.49.1.232 Dec 19 02:53:01 ispc CRON[2037825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:53:02 ispc CRON[2037825]: pam_unix(cron:session): session closed for user root Dec 19 02:54:01 ispc CRON[2037862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:54:02 ispc CRON[2037862]: pam_unix(cron:session): session closed for user root Dec 19 02:54:27 ispc sshd[2037885]: Bad protocol version identification '\026\003\001' from 74.82.47.5 Dec 19 02:55:01 ispc CRON[2037900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:55:01 ispc CRON[2037901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:55:01 ispc CRON[2037902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:55:01 ispc CRON[2037903]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 02:55:01 ispc CRON[2037901]: pam_unix(cron:session): session closed for user root Dec 19 02:55:01 ispc CRON[2037903]: pam_unix(cron:session): session closed for user getmail Dec 19 02:55:01 ispc CRON[2037902]: pam_unix(cron:session): session closed for user root Dec 19 02:55:01 ispc CRON[2037900]: pam_unix(cron:session): session closed for user root Dec 19 02:56:02 ispc CRON[2038004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:56:02 ispc CRON[2038004]: pam_unix(cron:session): session closed for user root Dec 19 02:56:36 ispc CRON[2036890]: pam_unix(cron:session): session closed for user root Dec 19 02:56:36 ispc postfix/smtpd[2038031]: sql auxprop plugin using mysql engine Dec 19 02:56:38 ispc postfix/smtpd[2038035]: sql auxprop plugin using mysql engine Dec 19 02:56:53 ispc saslauthd[2038037]: pam_mysql - SELECT returned no result. Dec 19 02:56:53 ispc saslauthd[2038037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:56:53 ispc saslauthd[2038037]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 02:57:01 ispc CRON[2038038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:57:02 ispc CRON[2038038]: pam_unix(cron:session): session closed for user root Dec 19 02:57:05 ispc postfix/smtpd[2038051]: sql auxprop plugin using mysql engine Dec 19 02:57:15 ispc saslauthd[2038054]: pam_mysql - SELECT returned no result. Dec 19 02:57:15 ispc saslauthd[2038054]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:57:15 ispc saslauthd[2038054]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 02:58:01 ispc CRON[2038065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:58:02 ispc CRON[2038065]: pam_unix(cron:session): session closed for user root Dec 19 02:58:47 ispc sshd[2038081]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:58:48 ispc sshd[2038083]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:58:48 ispc sshd[2038083]: Invalid user klape from 189.89.20.45 Dec 19 02:58:50 ispc sshd[2038085]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 02:58:50 ispc sshd[2038085]: Invalid user ubuntu from 189.89.20.45 Dec 19 02:59:01 ispc CRON[2038089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 02:59:03 ispc CRON[2038089]: pam_unix(cron:session): session closed for user root Dec 19 02:59:31 ispc saslauthd[2038102]: pam_mysql - SELECT returned no result. Dec 19 02:59:31 ispc saslauthd[2038102]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 02:59:31 ispc saslauthd[2038102]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:00:01 ispc CRON[2038103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:00:01 ispc CRON[2038104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:00:01 ispc CRON[2038105]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:00:01 ispc CRON[2038106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:00:01 ispc CRON[2038107]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:00:01 ispc CRON[2038108]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:00:01 ispc CRON[2038104]: pam_unix(cron:session): session closed for user root Dec 19 03:00:01 ispc CRON[2038105]: pam_unix(cron:session): session closed for user www-data Dec 19 03:00:01 ispc CRON[2038108]: pam_unix(cron:session): session closed for user getmail Dec 19 03:00:01 ispc CRON[2038106]: pam_unix(cron:session): session closed for user root Dec 19 03:00:02 ispc CRON[2038103]: pam_unix(cron:session): session closed for user root Dec 19 03:00:54 ispc CRON[2038107]: pam_unix(cron:session): session closed for user root Dec 19 03:01:01 ispc CRON[2038374]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:02:01 ispc CRON[2038409]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 03:02:01 ispc CRON[2038410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:02:02 ispc CRON[2038410]: pam_unix(cron:session): session closed for user root Dec 19 03:03:01 ispc CRON[2039298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:03:01 ispc CRON[2039298]: pam_unix(cron:session): session closed for user root Dec 19 03:03:07 ispc CRON[2038409]: pam_unix(cron:session): session closed for user logcheck Dec 19 03:03:16 ispc postfix/smtpd[2039498]: sql auxprop plugin using mysql engine Dec 19 03:03:47 ispc sshd[2039514]: Invalid user from 47.116.57.236 Dec 19 03:03:51 ispc postfix/smtpd[2039520]: sql auxprop plugin using mysql engine Dec 19 03:03:52 ispc saslauthd[2039523]: pam_mysql - SELECT returned no result. Dec 19 03:03:52 ispc saslauthd[2039523]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:03:53 ispc saslauthd[2039523]: do_auth : auth failure: [user=wlcsystem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:04:01 ispc CRON[2039528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:04:02 ispc CRON[2039528]: pam_unix(cron:session): session closed for user root Dec 19 03:04:33 ispc sshd[2039553]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 03:04:33 ispc sshd[2039553]: Invalid user ubuntu from 119.53.253.2 Dec 19 03:05:01 ispc CRON[2039570]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:05:01 ispc CRON[2039573]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:05:01 ispc CRON[2039571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:05:01 ispc CRON[2039572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:05:01 ispc CRON[2039571]: pam_unix(cron:session): session closed for user root Dec 19 03:05:01 ispc CRON[2039573]: pam_unix(cron:session): session closed for user getmail Dec 19 03:05:01 ispc CRON[2039572]: pam_unix(cron:session): session closed for user root Dec 19 03:05:01 ispc CRON[2039570]: pam_unix(cron:session): session closed for user root Dec 19 03:06:01 ispc CRON[2039671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:06:02 ispc CRON[2039671]: pam_unix(cron:session): session closed for user root Dec 19 03:06:54 ispc su[2036144]: pam_unix(su:session): session closed for user root Dec 19 03:06:54 ispc CRON[2032866]: pam_unix(cron:session): session closed for user root Dec 19 03:06:56 ispc postfix/smtpd[2039742]: sql auxprop plugin using mysql engine Dec 19 03:07:01 ispc CRON[2039748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:07:02 ispc CRON[2039748]: pam_unix(cron:session): session closed for user root Dec 19 03:07:50 ispc postfix/smtpd[2039783]: sql auxprop plugin using mysql engine Dec 19 03:07:52 ispc saslauthd[2039787]: pam_mysql - SELECT returned no result. Dec 19 03:07:52 ispc saslauthd[2039787]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:07:52 ispc saslauthd[2039787]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:08:01 ispc CRON[2039795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:08:01 ispc CRON[2039795]: pam_unix(cron:session): session closed for user root Dec 19 03:09:01 ispc CRON[2039834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:09:01 ispc CRON[2039833]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:09:01 ispc CRON[2039833]: pam_unix(cron:session): session closed for user root Dec 19 03:09:02 ispc CRON[2039834]: pam_unix(cron:session): session closed for user root Dec 19 03:10:01 ispc CRON[2039882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:10:01 ispc CRON[2039883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:10:01 ispc CRON[2039884]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:10:01 ispc CRON[2039885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:10:01 ispc CRON[2039886]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:10:01 ispc CRON[2039883]: pam_unix(cron:session): session closed for user root Dec 19 03:10:01 ispc CRON[2039884]: pam_unix(cron:session): session closed for user www-data Dec 19 03:10:01 ispc CRON[2039886]: pam_unix(cron:session): session closed for user getmail Dec 19 03:10:01 ispc CRON[2039885]: pam_unix(cron:session): session closed for user root Dec 19 03:10:02 ispc CRON[2039882]: pam_unix(cron:session): session closed for user root Dec 19 03:10:34 ispc postfix/smtpd[2039972]: sql auxprop plugin using mysql engine Dec 19 03:10:34 ispc saslauthd[2039974]: pam_mysql - SELECT returned no result. Dec 19 03:10:34 ispc saslauthd[2039974]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:10:34 ispc saslauthd[2039974]: do_auth : auth failure: [user=access@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 03:10:46 ispc sshd[2039979]: Invalid user ziplines from 165.227.38.205 Dec 19 03:11:01 ispc CRON[2039990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:11:01 ispc CRON[2039990]: pam_unix(cron:session): session closed for user root Dec 19 03:12:01 ispc CRON[2040024]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:12:02 ispc CRON[2040024]: pam_unix(cron:session): session closed for user root Dec 19 03:13:01 ispc CRON[2040069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:13:01 ispc CRON[2040069]: pam_unix(cron:session): session closed for user root Dec 19 03:14:01 ispc CRON[2040105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:14:02 ispc CRON[2040105]: pam_unix(cron:session): session closed for user root Dec 19 03:15:01 ispc CRON[2040145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:15:01 ispc CRON[2040147]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:15:01 ispc CRON[2040144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:15:01 ispc CRON[2040146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:15:01 ispc CRON[2040145]: pam_unix(cron:session): session closed for user root Dec 19 03:15:01 ispc CRON[2040147]: pam_unix(cron:session): session closed for user getmail Dec 19 03:15:01 ispc CRON[2040146]: pam_unix(cron:session): session closed for user root Dec 19 03:15:01 ispc CRON[2040144]: pam_unix(cron:session): session closed for user root Dec 19 03:16:01 ispc CRON[2040252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:16:01 ispc CRON[2040252]: pam_unix(cron:session): session closed for user root Dec 19 03:16:20 ispc postfix/smtpd[2040268]: sql auxprop plugin using mysql engine Dec 19 03:16:21 ispc saslauthd[2040271]: pam_mysql - SELECT returned no result. Dec 19 03:16:21 ispc saslauthd[2040271]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:16:21 ispc saslauthd[2040271]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:17:01 ispc CRON[2040289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:17:02 ispc CRON[2040289]: pam_unix(cron:session): session closed for user root Dec 19 03:18:01 ispc CRON[2040331]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 03:18:01 ispc CRON[2040332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:18:01 ispc CRON[2040332]: pam_unix(cron:session): session closed for user root Dec 19 03:18:04 ispc CRON[2040331]: pam_unix(cron:session): session closed for user amavis Dec 19 03:18:07 ispc postfix/smtpd[2040362]: sql auxprop plugin using mysql engine Dec 19 03:18:41 ispc postfix/smtpd[2040378]: sql auxprop plugin using mysql engine Dec 19 03:18:42 ispc saslauthd[2040380]: pam_mysql - SELECT returned no result. Dec 19 03:18:42 ispc saslauthd[2040380]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:18:42 ispc saslauthd[2040380]: do_auth : auth failure: [user=wlpisystem] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:19:01 ispc CRON[2040390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:19:01 ispc CRON[2040390]: pam_unix(cron:session): session closed for user root Dec 19 03:19:11 ispc sshd[2040405]: Invalid user blceu from 117.50.70.169 Dec 19 03:20:01 ispc CRON[2040432]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:20:01 ispc CRON[2040430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:20:01 ispc CRON[2040431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:20:01 ispc CRON[2040435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:20:01 ispc CRON[2040437]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:20:01 ispc CRON[2040432]: pam_unix(cron:session): session closed for user www-data Dec 19 03:20:02 ispc CRON[2040431]: pam_unix(cron:session): session closed for user root Dec 19 03:20:02 ispc CRON[2040437]: pam_unix(cron:session): session closed for user getmail Dec 19 03:20:02 ispc CRON[2040435]: pam_unix(cron:session): session closed for user root Dec 19 03:20:02 ispc CRON[2040430]: pam_unix(cron:session): session closed for user root Dec 19 03:21:01 ispc CRON[2040536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:21:01 ispc CRON[2040537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:21:01 ispc CRON[2040536]: pam_unix(cron:session): session closed for user root Dec 19 03:21:02 ispc CRON[2040537]: pam_unix(cron:session): session closed for user root Dec 19 03:21:30 ispc CRON[2038374]: pam_unix(cron:session): session closed for user root Dec 19 03:21:30 ispc postfix/smtpd[2040564]: sql auxprop plugin using mysql engine Dec 19 03:22:01 ispc CRON[2040569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:22:02 ispc CRON[2040569]: pam_unix(cron:session): session closed for user root Dec 19 03:23:01 ispc CRON[2040592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:23:01 ispc CRON[2040592]: pam_unix(cron:session): session closed for user root Dec 19 03:23:03 ispc sshd[2040603]: Did not receive identification string from 192.227.134.84 Dec 19 03:24:01 ispc CRON[2040614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:24:02 ispc CRON[2040614]: pam_unix(cron:session): session closed for user root Dec 19 03:25:01 ispc CRON[2040629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:25:01 ispc CRON[2040630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:25:01 ispc CRON[2040631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:25:01 ispc CRON[2040632]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:25:01 ispc CRON[2040630]: pam_unix(cron:session): session closed for user root Dec 19 03:25:01 ispc CRON[2040632]: pam_unix(cron:session): session closed for user getmail Dec 19 03:25:02 ispc CRON[2040629]: pam_unix(cron:session): session closed for user root Dec 19 03:25:06 ispc saslauthd[2040738]: pam_mysql - SELECT returned no result. Dec 19 03:25:06 ispc saslauthd[2040738]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:25:06 ispc saslauthd[2040738]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:25:07 ispc postfix/smtpd[2040739]: sql auxprop plugin using mysql engine Dec 19 03:25:07 ispc saslauthd[2040741]: pam_mysql - SELECT returned no result. Dec 19 03:25:07 ispc saslauthd[2040741]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:25:07 ispc saslauthd[2040741]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:25:38 ispc CRON[2040631]: pam_unix(cron:session): session closed for user root Dec 19 03:25:45 ispc sshd[2040745]: Invalid user hyundaicz from 114.246.241.87 Dec 19 03:25:48 ispc postfix/smtpd[2040747]: sql auxprop plugin using mysql engine Dec 19 03:26:01 ispc CRON[2040750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:27:01 ispc CRON[2040786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:27:01 ispc CRON[2040786]: pam_unix(cron:session): session closed for user root Dec 19 03:28:01 ispc CRON[2040828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:28:01 ispc CRON[2040828]: pam_unix(cron:session): session closed for user root Dec 19 03:29:02 ispc CRON[2040868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:29:02 ispc CRON[2040868]: pam_unix(cron:session): session closed for user root Dec 19 03:30:01 ispc CRON[2040904]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:30:01 ispc CRON[2040905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:30:01 ispc CRON[2040906]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:30:01 ispc CRON[2040907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:30:01 ispc CRON[2040908]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:30:01 ispc CRON[2040905]: pam_unix(cron:session): session closed for user root Dec 19 03:30:01 ispc CRON[2040906]: pam_unix(cron:session): session closed for user www-data Dec 19 03:30:01 ispc CRON[2040908]: pam_unix(cron:session): session closed for user getmail Dec 19 03:30:02 ispc CRON[2040904]: pam_unix(cron:session): session closed for user root Dec 19 03:30:02 ispc CRON[2040907]: pam_unix(cron:session): session closed for user root Dec 19 03:30:51 ispc sshd[2041006]: Invalid user blceu from 51.91.247.10 Dec 19 03:31:01 ispc CRON[2041012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:31:01 ispc CRON[2041012]: pam_unix(cron:session): session closed for user root Dec 19 03:32:01 ispc CRON[2041049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:32:02 ispc CRON[2041049]: pam_unix(cron:session): session closed for user root Dec 19 03:33:01 ispc CRON[2041096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:33:01 ispc CRON[2041096]: pam_unix(cron:session): session closed for user root Dec 19 03:33:09 ispc sshd[2041113]: Did not receive identification string from 45.140.17.97 Dec 19 03:33:09 ispc postfix/smtpd[2041114]: sql auxprop plugin using mysql engine Dec 19 03:33:25 ispc saslauthd[2041121]: pam_mysql - SELECT returned no result. Dec 19 03:33:25 ispc saslauthd[2041121]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:33:25 ispc saslauthd[2041121]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:33:29 ispc saslauthd[2041126]: pam_mysql - SELECT returned no result. Dec 19 03:33:29 ispc saslauthd[2041126]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:33:29 ispc saslauthd[2041126]: do_auth : auth failure: [user=wlse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:34:01 ispc CRON[2041139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:34:02 ispc CRON[2041139]: pam_unix(cron:session): session closed for user root Dec 19 03:34:11 ispc sshd[2041154]: Invalid user tshombeknife from 114.246.241.87 Dec 19 03:35:01 ispc CRON[2041183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:35:01 ispc CRON[2041184]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:35:01 ispc CRON[2041181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:35:01 ispc CRON[2041182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:35:01 ispc CRON[2041182]: pam_unix(cron:session): session closed for user root Dec 19 03:35:01 ispc CRON[2041184]: pam_unix(cron:session): session closed for user getmail Dec 19 03:35:01 ispc CRON[2041183]: pam_unix(cron:session): session closed for user root Dec 19 03:35:02 ispc CRON[2041181]: pam_unix(cron:session): session closed for user root Dec 19 03:36:01 ispc CRON[2041284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:36:01 ispc CRON[2041284]: pam_unix(cron:session): session closed for user root Dec 19 03:37:01 ispc CRON[2041323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:37:01 ispc CRON[2041323]: pam_unix(cron:session): session closed for user root Dec 19 03:37:54 ispc sshd[2041361]: Invalid user anoraksro from 152.53.188.144 Dec 19 03:38:01 ispc CRON[2041380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:38:02 ispc CRON[2041380]: pam_unix(cron:session): session closed for user root Dec 19 03:39:01 ispc CRON[2041417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:39:01 ispc CRON[2041416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:39:01 ispc CRON[2041416]: pam_unix(cron:session): session closed for user root Dec 19 03:39:02 ispc CRON[2041417]: pam_unix(cron:session): session closed for user root Dec 19 03:40:01 ispc CRON[2041466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:40:01 ispc CRON[2041467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:40:01 ispc CRON[2041468]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:40:01 ispc CRON[2041469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:40:01 ispc CRON[2041470]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:40:01 ispc CRON[2041467]: pam_unix(cron:session): session closed for user root Dec 19 03:40:01 ispc CRON[2041470]: pam_unix(cron:session): session closed for user getmail Dec 19 03:40:01 ispc CRON[2041468]: pam_unix(cron:session): session closed for user www-data Dec 19 03:40:01 ispc CRON[2041469]: pam_unix(cron:session): session closed for user root Dec 19 03:40:01 ispc CRON[2041466]: pam_unix(cron:session): session closed for user root Dec 19 03:40:56 ispc sshd[2041569]: Invalid user antiqkabinet from 152.53.188.144 Dec 19 03:40:59 ispc sshd[2041571]: Invalid user ziplines from 51.77.203.224 Dec 19 03:41:01 ispc CRON[2041573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:41:02 ispc CRON[2041573]: pam_unix(cron:session): session closed for user root Dec 19 03:41:36 ispc postfix/smtpd[2041596]: sql auxprop plugin using mysql engine Dec 19 03:41:36 ispc saslauthd[2041599]: pam_mysql - SELECT returned no result. Dec 19 03:41:36 ispc saslauthd[2041599]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:41:36 ispc saslauthd[2041599]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:42:01 ispc CRON[2041613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:42:01 ispc CRON[2041613]: pam_unix(cron:session): session closed for user root Dec 19 03:43:02 ispc CRON[2041660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:43:03 ispc CRON[2041660]: pam_unix(cron:session): session closed for user root Dec 19 03:44:01 ispc CRON[2041700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:44:01 ispc CRON[2041700]: pam_unix(cron:session): session closed for user root Dec 19 03:45:01 ispc CRON[2041733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:45:01 ispc CRON[2041734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:45:01 ispc CRON[2041735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:45:01 ispc CRON[2041736]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:45:01 ispc CRON[2041734]: pam_unix(cron:session): session closed for user root Dec 19 03:45:01 ispc CRON[2041736]: pam_unix(cron:session): session closed for user getmail Dec 19 03:45:02 ispc CRON[2041735]: pam_unix(cron:session): session closed for user root Dec 19 03:45:04 ispc CRON[2041733]: pam_unix(cron:session): session closed for user root Dec 19 03:46:01 ispc CRON[2041836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:46:02 ispc CRON[2041836]: pam_unix(cron:session): session closed for user root Dec 19 03:46:24 ispc postfix/smtpd[2041858]: sql auxprop plugin using mysql engine Dec 19 03:46:24 ispc CRON[2040750]: pam_unix(cron:session): session closed for user root Dec 19 03:47:01 ispc CRON[2041864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:47:02 ispc CRON[2041864]: pam_unix(cron:session): session closed for user root Dec 19 03:48:01 ispc CRON[2041893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:48:03 ispc CRON[2041893]: pam_unix(cron:session): session closed for user root Dec 19 03:48:16 ispc saslauthd[2041905]: pam_mysql - SELECT returned no result. Dec 19 03:48:16 ispc saslauthd[2041905]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:48:16 ispc saslauthd[2041905]: do_auth : auth failure: [user=wradmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:49:01 ispc CRON[2041912]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:49:01 ispc CRON[2041912]: pam_unix(cron:session): session closed for user root Dec 19 03:49:46 ispc saslauthd[2041926]: pam_mysql - SELECT returned no result. Dec 19 03:49:46 ispc saslauthd[2041926]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:49:46 ispc saslauthd[2041926]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:49:54 ispc sshd[2041927]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 03:50:01 ispc CRON[2041930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:50:01 ispc CRON[2041931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:50:01 ispc CRON[2041932]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 03:50:01 ispc CRON[2041933]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:50:01 ispc CRON[2041934]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:50:02 ispc CRON[2041931]: pam_unix(cron:session): session closed for user root Dec 19 03:50:02 ispc CRON[2041932]: pam_unix(cron:session): session closed for user www-data Dec 19 03:50:02 ispc CRON[2041934]: pam_unix(cron:session): session closed for user getmail Dec 19 03:50:03 ispc CRON[2041930]: pam_unix(cron:session): session closed for user root Dec 19 03:50:35 ispc CRON[2041933]: pam_unix(cron:session): session closed for user root Dec 19 03:51:01 ispc CRON[2042045]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:52:01 ispc CRON[2042082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:52:01 ispc CRON[2042083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:52:02 ispc CRON[2042083]: pam_unix(cron:session): session closed for user root Dec 19 03:52:58 ispc sshd[2042134]: Invalid user martof from 175.125.92.77 Dec 19 03:53:01 ispc CRON[2042136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:53:01 ispc CRON[2042136]: pam_unix(cron:session): session closed for user root Dec 19 03:54:01 ispc CRON[2042177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:54:02 ispc CRON[2042177]: pam_unix(cron:session): session closed for user root Dec 19 03:55:01 ispc CRON[2042217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:55:01 ispc CRON[2042218]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:55:01 ispc CRON[2042219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:55:01 ispc CRON[2042220]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 03:55:02 ispc CRON[2042218]: pam_unix(cron:session): session closed for user root Dec 19 03:55:02 ispc CRON[2042220]: pam_unix(cron:session): session closed for user getmail Dec 19 03:55:02 ispc CRON[2042219]: pam_unix(cron:session): session closed for user root Dec 19 03:55:03 ispc CRON[2042217]: pam_unix(cron:session): session closed for user root Dec 19 03:55:19 ispc CRON[2042082]: pam_unix(cron:session): session closed for user root Dec 19 03:56:01 ispc CRON[2042320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:56:02 ispc CRON[2042320]: pam_unix(cron:session): session closed for user root Dec 19 03:57:01 ispc CRON[2042363]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:57:03 ispc CRON[2042363]: pam_unix(cron:session): session closed for user root Dec 19 03:57:59 ispc sshd[2042402]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 03:57:59 ispc sshd[2042402]: Invalid user martof from 114.7.163.154 Dec 19 03:58:00 ispc postfix/smtpd[2042404]: sql auxprop plugin using mysql engine Dec 19 03:58:00 ispc saslauthd[2042411]: pam_mysql - SELECT returned no result. Dec 19 03:58:00 ispc saslauthd[2042411]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 03:58:00 ispc saslauthd[2042411]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 03:58:01 ispc CRON[2042416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:58:01 ispc CRON[2042416]: pam_unix(cron:session): session closed for user root Dec 19 03:59:00 ispc sshd[2042451]: Invalid user ziplines from 211.45.175.153 Dec 19 03:59:01 ispc CRON[2042458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 03:59:02 ispc CRON[2042458]: pam_unix(cron:session): session closed for user root Dec 19 03:59:32 ispc sshd[2042484]: Invalid user diamantdi from 51.159.18.215 Dec 19 04:00:01 ispc CRON[2042502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:00:01 ispc CRON[2042503]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:00:01 ispc CRON[2042505]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:00:01 ispc CRON[2042499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:00:01 ispc CRON[2042500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:00:01 ispc CRON[2042501]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:00:01 ispc CRON[2042504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:00:01 ispc CRON[2042501]: pam_unix(cron:session): session closed for user www-data Dec 19 04:00:01 ispc CRON[2042500]: pam_unix(cron:session): session closed for user root Dec 19 04:00:01 ispc CRON[2042503]: pam_unix(cron:session): session closed for user root Dec 19 04:00:01 ispc CRON[2042505]: pam_unix(cron:session): session closed for user getmail Dec 19 04:00:02 ispc CRON[2042499]: pam_unix(cron:session): session closed for user root Dec 19 04:00:02 ispc CRON[2042504]: pam_unix(cron:session): session closed for user root Dec 19 04:00:03 ispc CRON[2042502]: pam_unix(cron:session): session closed for user root Dec 19 04:00:56 ispc sshd[2042684]: Invalid user ziplines from 5.133.121.104 Dec 19 04:01:01 ispc CRON[2042687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:01:01 ispc CRON[2042688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:01:01 ispc CRON[2042688]: pam_unix(cron:session): session closed for user root Dec 19 04:01:52 ispc sshd[2043305]: Did not receive identification string from 193.32.162.146 Dec 19 04:02:01 ispc CRON[2043310]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 04:02:01 ispc CRON[2043311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:02:01 ispc CRON[2043311]: pam_unix(cron:session): session closed for user root Dec 19 04:02:03 ispc sshd[2043358]: Invalid user blceu from 5.133.121.104 Dec 19 04:03:01 ispc CRON[2044353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:03:02 ispc postfix/smtpd[2044363]: sql auxprop plugin using mysql engine Dec 19 04:03:03 ispc saslauthd[2044379]: pam_mysql - SELECT returned no result. Dec 19 04:03:03 ispc saslauthd[2044379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:03:03 ispc saslauthd[2044379]: do_auth : auth failure: [user=write] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:03:03 ispc CRON[2044353]: pam_unix(cron:session): session closed for user root Dec 19 04:03:06 ispc sshd[2044409]: Invalid user blceu from 51.77.203.224 Dec 19 04:03:23 ispc saslauthd[2044506]: pam_mysql - SELECT returned no result. Dec 19 04:03:23 ispc saslauthd[2044506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:03:23 ispc saslauthd[2044506]: do_auth : auth failure: [user=demo@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 04:03:35 ispc CRON[2043310]: pam_unix(cron:session): session closed for user logcheck Dec 19 04:03:41 ispc postfix/smtpd[2044677]: sql auxprop plugin using mysql engine Dec 19 04:04:01 ispc CRON[2044696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:04:01 ispc sshd[2044695]: Did not receive identification string from 192.227.134.84 Dec 19 04:04:01 ispc CRON[2044696]: pam_unix(cron:session): session closed for user root Dec 19 04:05:01 ispc CRON[2044736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:05:01 ispc CRON[2044737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:05:01 ispc CRON[2044738]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:05:01 ispc CRON[2044735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:05:01 ispc CRON[2044738]: pam_unix(cron:session): session closed for user getmail Dec 19 04:05:01 ispc CRON[2044736]: pam_unix(cron:session): session closed for user root Dec 19 04:05:02 ispc CRON[2044737]: pam_unix(cron:session): session closed for user root Dec 19 04:05:02 ispc CRON[2044735]: pam_unix(cron:session): session closed for user root Dec 19 04:05:38 ispc su[2044906]: Successful su for amavis by root Dec 19 04:05:38 ispc su[2044906]: + ??? root:amavis Dec 19 04:05:38 ispc su[2044906]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 19 04:05:40 ispc postfix/smtpd[2044913]: sql auxprop plugin using mysql engine Dec 19 04:05:44 ispc sshd[2044915]: Invalid user ubuntu from 193.32.162.146 Dec 19 04:05:56 ispc postfix/smtpd[2044928]: sql auxprop plugin using mysql engine Dec 19 04:05:57 ispc saslauthd[2044930]: pam_mysql - SELECT returned no result. Dec 19 04:05:57 ispc saslauthd[2044930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:05:57 ispc saslauthd[2044930]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:06:01 ispc CRON[2044931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:06:02 ispc CRON[2044931]: pam_unix(cron:session): session closed for user root Dec 19 04:06:03 ispc su[2044906]: pam_unix(su:session): session closed for user amavis Dec 19 04:07:01 ispc CRON[2045078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:07:03 ispc CRON[2045078]: pam_unix(cron:session): session closed for user root Dec 19 04:08:01 ispc CRON[2045120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:08:02 ispc CRON[2045120]: pam_unix(cron:session): session closed for user root Dec 19 04:09:01 ispc CRON[2045162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:09:01 ispc CRON[2045163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:09:01 ispc CRON[2045162]: pam_unix(cron:session): session closed for user root Dec 19 04:09:01 ispc sshd[2045179]: Invalid user validator from 193.32.162.146 Dec 19 04:09:02 ispc CRON[2045163]: pam_unix(cron:session): session closed for user root Dec 19 04:10:01 ispc CRON[2045211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:10:01 ispc CRON[2045212]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:10:01 ispc CRON[2045213]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:10:01 ispc CRON[2045214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:10:01 ispc CRON[2045215]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:10:01 ispc CRON[2045212]: pam_unix(cron:session): session closed for user root Dec 19 04:10:01 ispc CRON[2045213]: pam_unix(cron:session): session closed for user www-data Dec 19 04:10:01 ispc CRON[2045215]: pam_unix(cron:session): session closed for user getmail Dec 19 04:10:01 ispc CRON[2045214]: pam_unix(cron:session): session closed for user root Dec 19 04:10:01 ispc CRON[2045211]: pam_unix(cron:session): session closed for user root Dec 19 04:10:56 ispc CRON[2042687]: pam_unix(cron:session): session closed for user root Dec 19 04:10:58 ispc postfix/smtpd[2045720]: sql auxprop plugin using mysql engine Dec 19 04:11:01 ispc CRON[2045722]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:11:02 ispc CRON[2045722]: pam_unix(cron:session): session closed for user root Dec 19 04:11:22 ispc postfix/smtpd[2045747]: sql auxprop plugin using mysql engine Dec 19 04:11:23 ispc CRON[2042045]: pam_unix(cron:session): session closed for user root Dec 19 04:11:24 ispc sshd[2045750]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 04:12:01 ispc CRON[2045758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:12:03 ispc CRON[2045758]: pam_unix(cron:session): session closed for user root Dec 19 04:12:06 ispc postfix/smtpd[2045771]: sql auxprop plugin using mysql engine Dec 19 04:12:20 ispc sshd[2045776]: Invalid user ziplines from 185.208.181.153 Dec 19 04:12:21 ispc sshd[2045774]: Invalid user node from 193.32.162.146 Dec 19 04:13:01 ispc CRON[2045791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:13:02 ispc CRON[2045791]: pam_unix(cron:session): session closed for user root Dec 19 04:13:15 ispc sshd[2045809]: Invalid user ziplines from 5.129.195.224 Dec 19 04:14:01 ispc CRON[2045813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:14:02 ispc sshd[2045821]: Invalid user ziplines from 185.208.181.152 Dec 19 04:14:03 ispc CRON[2045813]: pam_unix(cron:session): session closed for user root Dec 19 04:14:15 ispc saslauthd[2045827]: pam_mysql - SELECT returned no result. Dec 19 04:14:15 ispc saslauthd[2045827]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:14:15 ispc saslauthd[2045827]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:14:18 ispc sshd[2045828]: Invalid user blceu from 51.159.18.215 Dec 19 04:15:01 ispc CRON[2045835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:15:01 ispc CRON[2045836]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:15:01 ispc CRON[2045837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:15:01 ispc CRON[2045838]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:15:01 ispc CRON[2045836]: pam_unix(cron:session): session closed for user root Dec 19 04:15:01 ispc CRON[2045838]: pam_unix(cron:session): session closed for user getmail Dec 19 04:15:03 ispc CRON[2045835]: pam_unix(cron:session): session closed for user root Dec 19 04:15:24 ispc sshd[2046023]: Invalid user blceu from 175.125.92.77 Dec 19 04:15:26 ispc sshd[2046025]: Invalid user solana from 193.32.162.146 Dec 19 04:15:41 ispc CRON[2045837]: pam_unix(cron:session): session closed for user root Dec 19 04:16:01 ispc CRON[2046034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:16:17 ispc sshd[2046050]: Invalid user ziplines from 175.125.92.77 Dec 19 04:17:01 ispc CRON[2046076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:17:02 ispc CRON[2046076]: pam_unix(cron:session): session closed for user root Dec 19 04:17:41 ispc postfix/smtpd[2046166]: sql auxprop plugin using mysql engine Dec 19 04:17:42 ispc saslauthd[2046168]: pam_mysql - SELECT returned no result. Dec 19 04:17:42 ispc saslauthd[2046168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:17:42 ispc saslauthd[2046168]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:18:01 ispc CRON[2046181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:18:02 ispc CRON[2046181]: pam_unix(cron:session): session closed for user root Dec 19 04:18:26 ispc sshd[2046215]: Invalid user sol from 193.32.162.146 Dec 19 04:18:38 ispc sshd[2046221]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 04:18:38 ispc sshd[2046221]: Invalid user blceu from 193.110.157.47 Dec 19 04:19:01 ispc CRON[2046232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:19:02 ispc CRON[2046232]: pam_unix(cron:session): session closed for user root Dec 19 04:20:01 ispc CRON[2046271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:20:01 ispc CRON[2046272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:20:01 ispc CRON[2046273]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:20:01 ispc CRON[2046274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:20:01 ispc CRON[2046275]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:20:01 ispc CRON[2046273]: pam_unix(cron:session): session closed for user www-data Dec 19 04:20:01 ispc CRON[2046272]: pam_unix(cron:session): session closed for user root Dec 19 04:20:01 ispc CRON[2046275]: pam_unix(cron:session): session closed for user getmail Dec 19 04:20:02 ispc CRON[2046274]: pam_unix(cron:session): session closed for user root Dec 19 04:20:02 ispc CRON[2046271]: pam_unix(cron:session): session closed for user root Dec 19 04:21:01 ispc CRON[2046382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:21:01 ispc CRON[2046381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:21:01 ispc CRON[2046381]: pam_unix(cron:session): session closed for user root Dec 19 04:21:02 ispc CRON[2046382]: pam_unix(cron:session): session closed for user root Dec 19 04:21:33 ispc sshd[2046409]: Invalid user sol from 193.32.162.146 Dec 19 04:22:01 ispc CRON[2046429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:22:02 ispc CRON[2046429]: pam_unix(cron:session): session closed for user root Dec 19 04:22:06 ispc postfix/smtpd[2046441]: sql auxprop plugin using mysql engine Dec 19 04:22:07 ispc saslauthd[2046447]: pam_mysql - SELECT returned no result. Dec 19 04:22:07 ispc saslauthd[2046447]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:22:07 ispc saslauthd[2046447]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:23:01 ispc CRON[2046483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:23:02 ispc CRON[2046483]: pam_unix(cron:session): session closed for user root Dec 19 04:24:01 ispc CRON[2046522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:24:02 ispc CRON[2046522]: pam_unix(cron:session): session closed for user root Dec 19 04:25:01 ispc CRON[2046558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:25:01 ispc CRON[2046559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:25:01 ispc CRON[2046560]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:25:01 ispc CRON[2046561]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:25:01 ispc CRON[2046561]: pam_unix(cron:session): session closed for user getmail Dec 19 04:25:01 ispc CRON[2046559]: pam_unix(cron:session): session closed for user root Dec 19 04:25:01 ispc CRON[2046560]: pam_unix(cron:session): session closed for user root Dec 19 04:25:02 ispc CRON[2046558]: pam_unix(cron:session): session closed for user root Dec 19 04:26:01 ispc CRON[2046663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:26:01 ispc CRON[2046663]: pam_unix(cron:session): session closed for user root Dec 19 04:27:01 ispc CRON[2046700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:27:02 ispc CRON[2046700]: pam_unix(cron:session): session closed for user root Dec 19 04:28:01 ispc CRON[2046745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:28:02 ispc CRON[2046745]: pam_unix(cron:session): session closed for user root Dec 19 04:28:03 ispc sshd[2046760]: Did not receive identification string from 167.99.32.156 Dec 19 04:29:01 ispc CRON[2046787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:29:03 ispc CRON[2046787]: pam_unix(cron:session): session closed for user root Dec 19 04:29:51 ispc postfix/smtpd[2046823]: sql auxprop plugin using mysql engine Dec 19 04:29:52 ispc saslauthd[2046826]: pam_mysql - SELECT returned no result. Dec 19 04:29:52 ispc saslauthd[2046826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:29:52 ispc saslauthd[2046826]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:30:01 ispc CRON[2046832]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:30:01 ispc CRON[2046834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:30:01 ispc CRON[2046833]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:30:01 ispc CRON[2046835]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:30:01 ispc CRON[2046831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:30:01 ispc CRON[2046832]: pam_unix(cron:session): session closed for user root Dec 19 04:30:01 ispc CRON[2046833]: pam_unix(cron:session): session closed for user www-data Dec 19 04:30:01 ispc CRON[2046835]: pam_unix(cron:session): session closed for user getmail Dec 19 04:30:02 ispc CRON[2046834]: pam_unix(cron:session): session closed for user root Dec 19 04:30:03 ispc CRON[2046831]: pam_unix(cron:session): session closed for user root Dec 19 04:31:01 ispc CRON[2046940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:31:02 ispc CRON[2046940]: pam_unix(cron:session): session closed for user root Dec 19 04:32:01 ispc CRON[2046984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:32:02 ispc CRON[2046984]: pam_unix(cron:session): session closed for user root Dec 19 04:32:21 ispc postfix/smtpd[2047005]: sql auxprop plugin using mysql engine Dec 19 04:32:27 ispc postfix/smtpd[2047011]: sql auxprop plugin using mysql engine Dec 19 04:32:28 ispc saslauthd[2047012]: pam_mysql - SELECT returned no result. Dec 19 04:32:28 ispc saslauthd[2047012]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:32:28 ispc saslauthd[2047012]: do_auth : auth failure: [user=xmi_demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:33:01 ispc CRON[2047033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:33:02 ispc CRON[2047033]: pam_unix(cron:session): session closed for user root Dec 19 04:34:01 ispc CRON[2047074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:34:02 ispc CRON[2047074]: pam_unix(cron:session): session closed for user root Dec 19 04:35:01 ispc CRON[2047116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:35:01 ispc CRON[2047117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:35:01 ispc CRON[2047118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:35:01 ispc CRON[2047119]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:35:01 ispc CRON[2047117]: pam_unix(cron:session): session closed for user root Dec 19 04:35:02 ispc CRON[2047119]: pam_unix(cron:session): session closed for user getmail Dec 19 04:35:02 ispc CRON[2047118]: pam_unix(cron:session): session closed for user root Dec 19 04:35:03 ispc CRON[2047116]: pam_unix(cron:session): session closed for user root Dec 19 04:35:41 ispc sshd[2047212]: Invalid user martof from 5.133.121.104 Dec 19 04:36:01 ispc CRON[2047223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:36:02 ispc CRON[2047223]: pam_unix(cron:session): session closed for user root Dec 19 04:36:18 ispc postfix/smtpd[2047242]: sql auxprop plugin using mysql engine Dec 19 04:36:18 ispc CRON[2046034]: pam_unix(cron:session): session closed for user root Dec 19 04:37:01 ispc CRON[2047252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:37:02 ispc CRON[2047252]: pam_unix(cron:session): session closed for user root Dec 19 04:37:50 ispc saslauthd[2047268]: pam_mysql - SELECT returned no result. Dec 19 04:37:50 ispc saslauthd[2047268]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:37:50 ispc saslauthd[2047268]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:38:01 ispc CRON[2047279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:38:02 ispc CRON[2047279]: pam_unix(cron:session): session closed for user root Dec 19 04:38:07 ispc sshd[2047290]: Invalid user ziplines from 51.91.247.10 Dec 19 04:38:38 ispc sshd[2047294]: Invalid user anoraksro from 152.53.188.144 Dec 19 04:39:01 ispc CRON[2047307]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:39:01 ispc CRON[2047308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:39:01 ispc CRON[2047307]: pam_unix(cron:session): session closed for user root Dec 19 04:39:02 ispc CRON[2047308]: pam_unix(cron:session): session closed for user root Dec 19 04:39:12 ispc sshd[2047334]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 04:39:12 ispc sshd[2047334]: Invalid user ziplines from 114.7.163.154 Dec 19 04:39:47 ispc saslauthd[2047338]: pam_mysql - SELECT returned no result. Dec 19 04:39:47 ispc saslauthd[2047338]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:39:47 ispc saslauthd[2047338]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:40:01 ispc CRON[2047339]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:40:01 ispc CRON[2047340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:40:01 ispc CRON[2047341]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:40:01 ispc CRON[2047342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:40:01 ispc CRON[2047343]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:40:01 ispc CRON[2047343]: pam_unix(cron:session): session closed for user getmail Dec 19 04:40:01 ispc CRON[2047340]: pam_unix(cron:session): session closed for user root Dec 19 04:40:01 ispc CRON[2047341]: pam_unix(cron:session): session closed for user www-data Dec 19 04:40:02 ispc CRON[2047339]: pam_unix(cron:session): session closed for user root Dec 19 04:40:31 ispc CRON[2047342]: pam_unix(cron:session): session closed for user root Dec 19 04:41:01 ispc CRON[2047457]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:42:01 ispc CRON[2047497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:42:02 ispc CRON[2047497]: pam_unix(cron:session): session closed for user root Dec 19 04:42:59 ispc sshd[2047545]: Invalid user ziplines from 51.159.91.86 Dec 19 04:43:01 ispc CRON[2047547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:43:02 ispc CRON[2047547]: pam_unix(cron:session): session closed for user root Dec 19 04:43:29 ispc sshd[2047576]: Invalid user anoraksro from 117.50.70.169 Dec 19 04:44:01 ispc CRON[2047592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:44:02 ispc CRON[2047592]: pam_unix(cron:session): session closed for user root Dec 19 04:45:01 ispc CRON[2047632]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:45:01 ispc CRON[2047633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:45:01 ispc CRON[2047634]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:45:01 ispc CRON[2047631]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:45:01 ispc CRON[2047632]: pam_unix(cron:session): session closed for user root Dec 19 04:45:01 ispc CRON[2047634]: pam_unix(cron:session): session closed for user getmail Dec 19 04:45:01 ispc CRON[2047633]: pam_unix(cron:session): session closed for user root Dec 19 04:45:03 ispc CRON[2047631]: pam_unix(cron:session): session closed for user root Dec 19 04:45:04 ispc sshd[2047704]: Did not receive identification string from 192.227.134.84 Dec 19 04:45:58 ispc postfix/smtpd[2047741]: sql auxprop plugin using mysql engine Dec 19 04:45:58 ispc saslauthd[2047744]: pam_mysql - SELECT returned no result. Dec 19 04:45:58 ispc saslauthd[2047744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:45:58 ispc saslauthd[2047744]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:46:01 ispc CRON[2047745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:46:01 ispc CRON[2047745]: pam_unix(cron:session): session closed for user root Dec 19 04:46:55 ispc sshd[2047780]: Invalid user admin from 167.99.32.156 Dec 19 04:47:01 ispc CRON[2047786]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:47:02 ispc CRON[2047786]: pam_unix(cron:session): session closed for user root Dec 19 04:47:14 ispc saslauthd[2047801]: pam_mysql - SELECT returned no result. Dec 19 04:47:14 ispc saslauthd[2047801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:47:14 ispc saslauthd[2047801]: do_auth : auth failure: [user=zyfwp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:47:22 ispc sshd[2047806]: Invalid user blceu from 51.159.91.86 Dec 19 04:47:28 ispc sshd[2047813]: Invalid user admin from 167.99.32.156 Dec 19 04:48:01 ispc sshd[2047841]: Invalid user admin from 167.99.32.156 Dec 19 04:48:01 ispc CRON[2047843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:48:02 ispc CRON[2047843]: pam_unix(cron:session): session closed for user root Dec 19 04:48:35 ispc sshd[2047868]: Invalid user admin from 167.99.32.156 Dec 19 04:49:01 ispc CRON[2047883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:49:02 ispc CRON[2047883]: pam_unix(cron:session): session closed for user root Dec 19 04:49:08 ispc sshd[2047898]: Invalid user admin from 167.99.32.156 Dec 19 04:49:42 ispc sshd[2047913]: Invalid user admin from 167.99.32.156 Dec 19 04:50:01 ispc CRON[2047931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:50:01 ispc CRON[2047932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:50:01 ispc CRON[2047933]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 04:50:01 ispc CRON[2047934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:50:01 ispc CRON[2047935]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:50:01 ispc CRON[2047932]: pam_unix(cron:session): session closed for user root Dec 19 04:50:01 ispc CRON[2047933]: pam_unix(cron:session): session closed for user www-data Dec 19 04:50:01 ispc CRON[2047935]: pam_unix(cron:session): session closed for user getmail Dec 19 04:50:02 ispc CRON[2047934]: pam_unix(cron:session): session closed for user root Dec 19 04:50:03 ispc CRON[2047931]: pam_unix(cron:session): session closed for user root Dec 19 04:51:01 ispc CRON[2048033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:51:02 ispc CRON[2048033]: pam_unix(cron:session): session closed for user root Dec 19 04:52:01 ispc CRON[2048071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:52:02 ispc CRON[2048071]: pam_unix(cron:session): session closed for user root Dec 19 04:53:01 ispc CRON[2048118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:53:02 ispc CRON[2048118]: pam_unix(cron:session): session closed for user root Dec 19 04:53:59 ispc postfix/smtpd[2048154]: sql auxprop plugin using mysql engine Dec 19 04:54:00 ispc saslauthd[2048162]: pam_mysql - SELECT returned no result. Dec 19 04:54:00 ispc saslauthd[2048162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:54:00 ispc saslauthd[2048162]: do_auth : auth failure: [user=luck@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 04:54:01 ispc CRON[2048163]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:54:01 ispc CRON[2048163]: pam_unix(cron:session): session closed for user root Dec 19 04:54:03 ispc sshd[2048174]: Did not receive identification string from 134.122.57.239 Dec 19 04:54:08 ispc saslauthd[2048175]: pam_mysql - SELECT returned no result. Dec 19 04:54:08 ispc saslauthd[2048175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:54:08 ispc saslauthd[2048175]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:55:01 ispc CRON[2048202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:55:01 ispc CRON[2048203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:55:01 ispc CRON[2048204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:55:01 ispc CRON[2048205]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 04:55:02 ispc CRON[2048203]: pam_unix(cron:session): session closed for user root Dec 19 04:55:02 ispc CRON[2048205]: pam_unix(cron:session): session closed for user getmail Dec 19 04:55:02 ispc CRON[2048204]: pam_unix(cron:session): session closed for user root Dec 19 04:55:02 ispc CRON[2048202]: pam_unix(cron:session): session closed for user root Dec 19 04:55:08 ispc sshd[2048279]: reverse mapping checking getaddrinfo for 114-7-163-154.resources.indosat.com [114.7.163.154] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 04:55:08 ispc sshd[2048279]: Invalid user blceu from 114.7.163.154 Dec 19 04:56:01 ispc CRON[2048314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:56:02 ispc CRON[2048314]: pam_unix(cron:session): session closed for user root Dec 19 04:56:57 ispc postfix/smtpd[2048353]: sql auxprop plugin using mysql engine Dec 19 04:57:01 ispc CRON[2048355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:57:01 ispc CRON[2048355]: pam_unix(cron:session): session closed for user root Dec 19 04:57:18 ispc postfix/smtpd[2048376]: sql auxprop plugin using mysql engine Dec 19 04:57:34 ispc saslauthd[2048389]: pam_mysql - SELECT returned no result. Dec 19 04:57:34 ispc saslauthd[2048389]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:57:34 ispc saslauthd[2048389]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 19 04:57:49 ispc saslauthd[2048395]: pam_mysql - SELECT returned no result. Dec 19 04:57:49 ispc saslauthd[2048395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 04:57:49 ispc saslauthd[2048395]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 04:58:01 ispc CRON[2048407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:58:02 ispc CRON[2048407]: pam_unix(cron:session): session closed for user root Dec 19 04:58:43 ispc postfix/smtpd[2048438]: sql auxprop plugin using mysql engine Dec 19 04:59:01 ispc CRON[2048451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 04:59:02 ispc CRON[2048451]: pam_unix(cron:session): session closed for user root Dec 19 05:00:01 ispc CRON[2048491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:00:01 ispc CRON[2048495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:00:01 ispc CRON[2048496]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:00:01 ispc CRON[2048492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:00:01 ispc CRON[2048493]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:00:01 ispc CRON[2048494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:00:01 ispc CRON[2048493]: pam_unix(cron:session): session closed for user www-data Dec 19 05:00:01 ispc CRON[2048496]: pam_unix(cron:session): session closed for user getmail Dec 19 05:00:01 ispc CRON[2048492]: pam_unix(cron:session): session closed for user root Dec 19 05:00:01 ispc CRON[2048494]: pam_unix(cron:session): session closed for user root Dec 19 05:00:01 ispc CRON[2048491]: pam_unix(cron:session): session closed for user root Dec 19 05:00:02 ispc CRON[2048495]: pam_unix(cron:session): session closed for user root Dec 19 05:00:43 ispc sshd[2048674]: Invalid user ziplines from 51.79.36.60 Dec 19 05:01:01 ispc CRON[2048686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:01:01 ispc CRON[2048686]: pam_unix(cron:session): session closed for user root Dec 19 05:01:15 ispc CRON[2047457]: pam_unix(cron:session): session closed for user root Dec 19 05:01:15 ispc postfix/smtpd[2048705]: sql auxprop plugin using mysql engine Dec 19 05:01:59 ispc saslauthd[2048714]: pam_mysql - SELECT returned no result. Dec 19 05:01:59 ispc saslauthd[2048714]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:01:59 ispc saslauthd[2048714]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:02:01 ispc CRON[2048715]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 05:02:01 ispc CRON[2048716]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:02:02 ispc CRON[2048716]: pam_unix(cron:session): session closed for user root Dec 19 05:02:04 ispc sshd[2048787]: Invalid user martof from 51.77.203.224 Dec 19 05:02:11 ispc saslauthd[2048930]: pam_mysql - SELECT returned no result. Dec 19 05:02:11 ispc saslauthd[2048930]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:02:11 ispc saslauthd[2048930]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:03:01 ispc CRON[2049602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:03:02 ispc CRON[2049602]: pam_unix(cron:session): session closed for user root Dec 19 05:03:13 ispc CRON[2048715]: pam_unix(cron:session): session closed for user logcheck Dec 19 05:03:18 ispc postfix/smtpd[2049784]: sql auxprop plugin using mysql engine Dec 19 05:03:39 ispc sshd[2049796]: Invalid user blceu from 211.45.175.153 Dec 19 05:03:57 ispc sshd[2049805]: Invalid user martof from 141.94.71.131 Dec 19 05:04:01 ispc CRON[2049807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:04:02 ispc CRON[2049807]: pam_unix(cron:session): session closed for user root Dec 19 05:05:01 ispc CRON[2049823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:05:01 ispc CRON[2049824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:05:01 ispc CRON[2049825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:05:01 ispc CRON[2049826]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:05:02 ispc CRON[2049824]: pam_unix(cron:session): session closed for user root Dec 19 05:05:02 ispc CRON[2049826]: pam_unix(cron:session): session closed for user getmail Dec 19 05:05:03 ispc CRON[2049823]: pam_unix(cron:session): session closed for user root Dec 19 05:05:24 ispc sshd[2049936]: Invalid user ziplines from 45.119.213.109 Dec 19 05:05:33 ispc CRON[2049825]: pam_unix(cron:session): session closed for user root Dec 19 05:06:01 ispc CRON[2049944]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:06:28 ispc postfix/smtpd[2049964]: sql auxprop plugin using mysql engine Dec 19 05:07:01 ispc CRON[2049980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:07:02 ispc CRON[2049980]: pam_unix(cron:session): session closed for user root Dec 19 05:07:52 ispc sshd[2050018]: Invalid user admin from 134.122.57.239 Dec 19 05:08:01 ispc CRON[2050034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:08:02 ispc CRON[2050034]: pam_unix(cron:session): session closed for user root Dec 19 05:08:31 ispc sshd[2050057]: Invalid user admin from 134.122.57.239 Dec 19 05:08:35 ispc sshd[2050059]: Invalid user martof from 45.119.213.109 Dec 19 05:09:01 ispc CRON[2050078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:09:01 ispc CRON[2050079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:09:01 ispc CRON[2050078]: pam_unix(cron:session): session closed for user root Dec 19 05:09:02 ispc CRON[2050079]: pam_unix(cron:session): session closed for user root Dec 19 05:09:13 ispc sshd[2050105]: Invalid user admin from 134.122.57.239 Dec 19 05:09:55 ispc sshd[2050126]: Invalid user admin from 134.122.57.239 Dec 19 05:10:01 ispc CRON[2050133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:10:01 ispc CRON[2050134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:10:01 ispc CRON[2050135]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:10:01 ispc CRON[2050136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:10:01 ispc CRON[2050137]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:10:01 ispc CRON[2050135]: pam_unix(cron:session): session closed for user www-data Dec 19 05:10:01 ispc CRON[2050134]: pam_unix(cron:session): session closed for user root Dec 19 05:10:01 ispc postfix/smtpd[2050145]: sql auxprop plugin using mysql engine Dec 19 05:10:01 ispc CRON[2050137]: pam_unix(cron:session): session closed for user getmail Dec 19 05:10:01 ispc CRON[2050136]: pam_unix(cron:session): session closed for user root Dec 19 05:10:01 ispc saslauthd[2050189]: pam_mysql - SELECT returned no result. Dec 19 05:10:01 ispc saslauthd[2050189]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:10:01 ispc saslauthd[2050189]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:10:02 ispc CRON[2050133]: pam_unix(cron:session): session closed for user root Dec 19 05:10:39 ispc sshd[2050234]: Invalid user admin from 134.122.57.239 Dec 19 05:10:49 ispc postfix/smtpd[2050240]: sql auxprop plugin using mysql engine Dec 19 05:11:01 ispc CRON[2050247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:11:01 ispc CRON[2050247]: pam_unix(cron:session): session closed for user root Dec 19 05:11:21 ispc sshd[2050267]: Invalid user admin from 134.122.57.239 Dec 19 05:11:32 ispc postfix/smtpd[2050281]: sql auxprop plugin using mysql engine Dec 19 05:11:41 ispc saslauthd[2050290]: pam_mysql - SELECT returned no result. Dec 19 05:11:41 ispc saslauthd[2050290]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:11:41 ispc saslauthd[2050290]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 19 05:12:01 ispc CRON[2050300]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:12:02 ispc CRON[2050300]: pam_unix(cron:session): session closed for user root Dec 19 05:12:03 ispc saslauthd[2050311]: pam_mysql - SELECT returned no result. Dec 19 05:12:03 ispc saslauthd[2050311]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:12:03 ispc saslauthd[2050311]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:13:01 ispc CRON[2050349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:13:02 ispc CRON[2050349]: pam_unix(cron:session): session closed for user root Dec 19 05:13:15 ispc postfix/smtpd[2050367]: sql auxprop plugin using mysql engine Dec 19 05:13:54 ispc sshd[2050386]: Invalid user admin from 45.148.10.121 Dec 19 05:14:01 ispc CRON[2050392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:14:01 ispc CRON[2050392]: pam_unix(cron:session): session closed for user root Dec 19 05:15:01 ispc CRON[2050434]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:15:01 ispc CRON[2050431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:15:01 ispc CRON[2050432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:15:01 ispc CRON[2050433]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:15:01 ispc CRON[2050432]: pam_unix(cron:session): session closed for user root Dec 19 05:15:01 ispc CRON[2050434]: pam_unix(cron:session): session closed for user getmail Dec 19 05:15:02 ispc CRON[2050433]: pam_unix(cron:session): session closed for user root Dec 19 05:15:02 ispc CRON[2050431]: pam_unix(cron:session): session closed for user root Dec 19 05:16:01 ispc CRON[2050533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:16:01 ispc CRON[2050533]: pam_unix(cron:session): session closed for user root Dec 19 05:16:04 ispc postfix/smtpd[2050544]: sql auxprop plugin using mysql engine Dec 19 05:16:06 ispc saslauthd[2050546]: pam_mysql - SELECT returned no result. Dec 19 05:16:06 ispc saslauthd[2050546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:16:06 ispc saslauthd[2050546]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:17:01 ispc CRON[2050578]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:17:01 ispc CRON[2050579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:17:02 ispc CRON[2050579]: pam_unix(cron:session): session closed for user root Dec 19 05:17:02 ispc CRON[2050578]: pam_unix(cron:session): session closed for user www-data Dec 19 05:17:03 ispc sshd[2050592]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 05:17:40 ispc sshd[2050611]: Did not receive identification string from 45.140.17.97 Dec 19 05:18:00 ispc saslauthd[2050624]: pam_mysql - SELECT returned no result. Dec 19 05:18:00 ispc saslauthd[2050624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:18:00 ispc saslauthd[2050624]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:18:01 ispc CRON[2050629]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:18:02 ispc CRON[2050629]: pam_unix(cron:session): session closed for user root Dec 19 05:19:01 ispc CRON[2050669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:19:01 ispc CRON[2050669]: pam_unix(cron:session): session closed for user root Dec 19 05:20:01 ispc CRON[2050706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:20:01 ispc CRON[2050707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:20:01 ispc CRON[2050708]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:20:01 ispc CRON[2050709]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:20:01 ispc CRON[2050710]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:20:01 ispc CRON[2050708]: pam_unix(cron:session): session closed for user www-data Dec 19 05:20:01 ispc CRON[2050707]: pam_unix(cron:session): session closed for user root Dec 19 05:20:01 ispc CRON[2050710]: pam_unix(cron:session): session closed for user getmail Dec 19 05:20:02 ispc CRON[2050709]: pam_unix(cron:session): session closed for user root Dec 19 05:20:03 ispc CRON[2050706]: pam_unix(cron:session): session closed for user root Dec 19 05:21:01 ispc CRON[2050806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:21:01 ispc CRON[2050807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:21:01 ispc CRON[2050806]: pam_unix(cron:session): session closed for user root Dec 19 05:21:01 ispc CRON[2050807]: pam_unix(cron:session): session closed for user root Dec 19 05:21:22 ispc sshd[2050831]: Invalid user klape from 103.164.20.29 Dec 19 05:21:23 ispc sshd[2050837]: Invalid user ubuntu from 103.164.20.29 Dec 19 05:22:01 ispc CRON[2050853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:22:02 ispc sshd[2050851]: reverse mapping checking getaddrinfo for c3-103.accessworld.net [103.233.56.103] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 05:22:02 ispc CRON[2050853]: pam_unix(cron:session): session closed for user root Dec 19 05:23:01 ispc CRON[2050899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:23:02 ispc CRON[2050899]: pam_unix(cron:session): session closed for user root Dec 19 05:23:16 ispc sshd[2050920]: Invalid user martof from 139.59.66.222 Dec 19 05:24:01 ispc CRON[2050941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:24:01 ispc CRON[2050941]: pam_unix(cron:session): session closed for user root Dec 19 05:24:59 ispc sshd[2050977]: Invalid user admin from 222.236.46.74 Dec 19 05:25:01 ispc CRON[2050979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:25:01 ispc CRON[2050980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:25:01 ispc CRON[2050981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:25:01 ispc CRON[2050982]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:25:01 ispc CRON[2050980]: pam_unix(cron:session): session closed for user root Dec 19 05:25:02 ispc CRON[2050982]: pam_unix(cron:session): session closed for user getmail Dec 19 05:25:02 ispc CRON[2050981]: pam_unix(cron:session): session closed for user root Dec 19 05:25:02 ispc CRON[2050979]: pam_unix(cron:session): session closed for user root Dec 19 05:26:01 ispc CRON[2051084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:26:02 ispc CRON[2051084]: pam_unix(cron:session): session closed for user root Dec 19 05:26:14 ispc CRON[2049944]: pam_unix(cron:session): session closed for user root Dec 19 05:26:15 ispc postfix/smtpd[2051101]: sql auxprop plugin using mysql engine Dec 19 05:26:17 ispc sshd[2051105]: Invalid user blceu from 57.131.22.60 Dec 19 05:26:17 ispc saslauthd[2051108]: pam_mysql - SELECT returned no result. Dec 19 05:26:17 ispc saslauthd[2051108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:26:17 ispc saslauthd[2051108]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:26:44 ispc sshd[2051116]: Did not receive identification string from 192.227.134.84 Dec 19 05:27:01 ispc CRON[2051118]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:27:01 ispc CRON[2051119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:27:03 ispc CRON[2051119]: pam_unix(cron:session): session closed for user root Dec 19 05:28:01 ispc CRON[2051147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:28:02 ispc CRON[2051147]: pam_unix(cron:session): session closed for user root Dec 19 05:28:13 ispc CRON[2051118]: pam_unix(cron:session): session closed for user www-data Dec 19 05:28:15 ispc postfix/smtpd[2051168]: sql auxprop plugin using mysql engine Dec 19 05:29:01 ispc CRON[2051171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:29:02 ispc CRON[2051171]: pam_unix(cron:session): session closed for user root Dec 19 05:30:01 ispc CRON[2051187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:30:01 ispc CRON[2051188]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:30:01 ispc CRON[2051189]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:30:01 ispc CRON[2051190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:30:01 ispc CRON[2051191]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:30:01 ispc CRON[2051188]: pam_unix(cron:session): session closed for user root Dec 19 05:30:01 ispc CRON[2051189]: pam_unix(cron:session): session closed for user www-data Dec 19 05:30:01 ispc CRON[2051191]: pam_unix(cron:session): session closed for user getmail Dec 19 05:30:03 ispc CRON[2051187]: pam_unix(cron:session): session closed for user root Dec 19 05:30:37 ispc CRON[2051190]: pam_unix(cron:session): session closed for user root Dec 19 05:30:46 ispc saslauthd[2051385]: pam_mysql - SELECT returned no result. Dec 19 05:30:46 ispc saslauthd[2051385]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:30:46 ispc saslauthd[2051385]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:31:01 ispc CRON[2051386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:32:01 ispc CRON[2051420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:32:02 ispc CRON[2051420]: pam_unix(cron:session): session closed for user root Dec 19 05:33:01 ispc CRON[2051465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:33:02 ispc CRON[2051465]: pam_unix(cron:session): session closed for user root Dec 19 05:34:01 ispc CRON[2051502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:34:02 ispc CRON[2051502]: pam_unix(cron:session): session closed for user root Dec 19 05:34:37 ispc postfix/smtpd[2051533]: sql auxprop plugin using mysql engine Dec 19 05:34:37 ispc saslauthd[2051536]: pam_mysql - SELECT returned no result. Dec 19 05:34:37 ispc saslauthd[2051536]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:34:37 ispc saslauthd[2051536]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:35:01 ispc CRON[2051545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:35:01 ispc CRON[2051546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:35:01 ispc CRON[2051547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:35:01 ispc CRON[2051548]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:35:01 ispc CRON[2051546]: pam_unix(cron:session): session closed for user root Dec 19 05:35:01 ispc CRON[2051548]: pam_unix(cron:session): session closed for user getmail Dec 19 05:35:01 ispc CRON[2051547]: pam_unix(cron:session): session closed for user root Dec 19 05:35:02 ispc CRON[2051545]: pam_unix(cron:session): session closed for user root Dec 19 05:35:58 ispc sshd[2051647]: Invalid user martof from 5.129.195.224 Dec 19 05:36:01 ispc CRON[2051650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:36:01 ispc CRON[2051650]: pam_unix(cron:session): session closed for user root Dec 19 05:37:01 ispc CRON[2051688]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:37:02 ispc CRON[2051688]: pam_unix(cron:session): session closed for user root Dec 19 05:38:01 ispc CRON[2051732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:38:02 ispc CRON[2051732]: pam_unix(cron:session): session closed for user root Dec 19 05:39:01 ispc CRON[2051776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:39:01 ispc CRON[2051775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:39:01 ispc CRON[2051775]: pam_unix(cron:session): session closed for user root Dec 19 05:39:02 ispc CRON[2051776]: pam_unix(cron:session): session closed for user root Dec 19 05:40:01 ispc CRON[2051824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:40:01 ispc CRON[2051825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:40:01 ispc CRON[2051826]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:40:01 ispc CRON[2051827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:40:01 ispc CRON[2051828]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:40:01 ispc CRON[2051825]: pam_unix(cron:session): session closed for user root Dec 19 05:40:01 ispc CRON[2051826]: pam_unix(cron:session): session closed for user www-data Dec 19 05:40:01 ispc CRON[2051828]: pam_unix(cron:session): session closed for user getmail Dec 19 05:40:02 ispc CRON[2051824]: pam_unix(cron:session): session closed for user root Dec 19 05:40:02 ispc CRON[2051827]: pam_unix(cron:session): session closed for user root Dec 19 05:41:01 ispc CRON[2051930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:41:02 ispc CRON[2051930]: pam_unix(cron:session): session closed for user root Dec 19 05:42:01 ispc CRON[2051967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:42:02 ispc CRON[2051967]: pam_unix(cron:session): session closed for user root Dec 19 05:42:39 ispc postfix/smtpd[2051991]: sql auxprop plugin using mysql engine Dec 19 05:42:40 ispc saslauthd[2051994]: pam_mysql - SELECT returned no result. Dec 19 05:42:40 ispc saslauthd[2051994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:42:40 ispc saslauthd[2051994]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:43:01 ispc CRON[2052017]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:43:02 ispc CRON[2052017]: pam_unix(cron:session): session closed for user root Dec 19 05:43:14 ispc sshd[2052033]: Invalid user blceu from 103.110.84.105 Dec 19 05:44:01 ispc CRON[2052056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:44:01 ispc CRON[2052056]: pam_unix(cron:session): session closed for user root Dec 19 05:44:09 ispc sshd[2052071]: Did not receive identification string from 188.166.148.64 Dec 19 05:45:01 ispc CRON[2052097]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:45:01 ispc CRON[2052099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:45:01 ispc CRON[2052098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:45:01 ispc CRON[2052100]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:45:01 ispc CRON[2052098]: pam_unix(cron:session): session closed for user root Dec 19 05:45:01 ispc CRON[2052100]: pam_unix(cron:session): session closed for user getmail Dec 19 05:45:01 ispc CRON[2052099]: pam_unix(cron:session): session closed for user root Dec 19 05:45:02 ispc CRON[2052097]: pam_unix(cron:session): session closed for user root Dec 19 05:45:30 ispc postfix/smtpd[2052186]: sql auxprop plugin using mysql engine Dec 19 05:45:31 ispc saslauthd[2052188]: pam_mysql - SELECT returned no result. Dec 19 05:45:31 ispc saslauthd[2052188]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:45:31 ispc saslauthd[2052188]: do_auth : auth failure: [user=guest] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:45:40 ispc saslauthd[2052193]: pam_mysql - SELECT returned no result. Dec 19 05:45:40 ispc saslauthd[2052193]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:45:40 ispc saslauthd[2052193]: do_auth : auth failure: [user=client@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 05:46:01 ispc CRON[2052203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:46:01 ispc CRON[2052203]: pam_unix(cron:session): session closed for user root Dec 19 05:46:17 ispc sshd[2052222]: Invalid user ziplines from 5.133.121.104 Dec 19 05:47:01 ispc CRON[2052244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:47:01 ispc CRON[2052244]: pam_unix(cron:session): session closed for user root Dec 19 05:47:08 ispc sshd[2052259]: Invalid user solv from 188.166.148.64 Dec 19 05:47:25 ispc sshd[2052267]: Invalid user blceu from 5.133.121.104 Dec 19 05:48:01 ispc CRON[2052299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:48:02 ispc CRON[2052299]: pam_unix(cron:session): session closed for user root Dec 19 05:49:01 ispc CRON[2052337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:49:02 ispc CRON[2052337]: pam_unix(cron:session): session closed for user root Dec 19 05:49:16 ispc sshd[2052353]: Invalid user solv from 188.166.148.64 Dec 19 05:50:01 ispc CRON[2052382]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 05:50:01 ispc CRON[2052380]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:50:01 ispc CRON[2052381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:50:01 ispc CRON[2052383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:50:01 ispc CRON[2052384]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:50:01 ispc CRON[2052382]: pam_unix(cron:session): session closed for user www-data Dec 19 05:50:01 ispc CRON[2052384]: pam_unix(cron:session): session closed for user getmail Dec 19 05:50:01 ispc CRON[2052381]: pam_unix(cron:session): session closed for user root Dec 19 05:50:01 ispc CRON[2052383]: pam_unix(cron:session): session closed for user root Dec 19 05:50:02 ispc CRON[2052380]: pam_unix(cron:session): session closed for user root Dec 19 05:50:42 ispc postfix/smtpd[2052475]: sql auxprop plugin using mysql engine Dec 19 05:50:43 ispc saslauthd[2052480]: pam_mysql - SELECT returned no result. Dec 19 05:50:43 ispc saslauthd[2052480]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:50:43 ispc saslauthd[2052480]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:50:43 ispc sshd[2052477]: Invalid user AdminGPON from 45.148.10.121 Dec 19 05:51:01 ispc CRON[2052493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:51:02 ispc CRON[2052493]: pam_unix(cron:session): session closed for user root Dec 19 05:51:19 ispc CRON[2051386]: pam_unix(cron:session): session closed for user root Dec 19 05:51:20 ispc sshd[2052514]: Invalid user solv from 188.166.148.64 Dec 19 05:52:01 ispc CRON[2052519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:52:02 ispc CRON[2052519]: pam_unix(cron:session): session closed for user root Dec 19 05:52:11 ispc sshd[2052532]: Invalid user blceu from 51.79.36.60 Dec 19 05:53:01 ispc CRON[2052548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:53:02 ispc CRON[2052548]: pam_unix(cron:session): session closed for user root Dec 19 05:53:15 ispc sshd[2052562]: Invalid user solv from 188.166.148.64 Dec 19 05:54:01 ispc CRON[2052574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:54:02 ispc CRON[2052574]: pam_unix(cron:session): session closed for user root Dec 19 05:54:32 ispc saslauthd[2052594]: pam_mysql - SELECT returned no result. Dec 19 05:54:32 ispc saslauthd[2052594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:54:32 ispc saslauthd[2052594]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:55:01 ispc CRON[2052602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:55:01 ispc CRON[2052603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:55:01 ispc CRON[2052604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:55:01 ispc CRON[2052605]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 05:55:01 ispc CRON[2052603]: pam_unix(cron:session): session closed for user root Dec 19 05:55:01 ispc CRON[2052605]: pam_unix(cron:session): session closed for user getmail Dec 19 05:55:02 ispc CRON[2052602]: pam_unix(cron:session): session closed for user root Dec 19 05:55:13 ispc sshd[2052708]: Invalid user solv from 188.166.148.64 Dec 19 05:55:35 ispc CRON[2052604]: pam_unix(cron:session): session closed for user root Dec 19 05:56:01 ispc CRON[2052717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:57:01 ispc CRON[2052763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:57:02 ispc CRON[2052763]: pam_unix(cron:session): session closed for user root Dec 19 05:57:09 ispc sshd[2052778]: Invalid user solv from 188.166.148.64 Dec 19 05:58:01 ispc CRON[2052816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:58:02 ispc CRON[2052816]: pam_unix(cron:session): session closed for user root Dec 19 05:58:24 ispc sshd[2052841]: Invalid user blceu from 185.208.181.153 Dec 19 05:58:28 ispc postfix/smtpd[2052848]: sql auxprop plugin using mysql engine Dec 19 05:58:29 ispc saslauthd[2052851]: pam_mysql - SELECT returned no result. Dec 19 05:58:29 ispc saslauthd[2052851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 05:58:29 ispc saslauthd[2052851]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 05:59:01 ispc CRON[2052874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 05:59:02 ispc CRON[2052874]: pam_unix(cron:session): session closed for user root Dec 19 06:00:01 ispc CRON[2052914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:00:01 ispc CRON[2052915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:00:01 ispc CRON[2052916]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:00:01 ispc CRON[2052917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:00:01 ispc CRON[2052918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:00:01 ispc CRON[2052919]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:00:01 ispc CRON[2052915]: pam_unix(cron:session): session closed for user root Dec 19 06:00:01 ispc CRON[2052916]: pam_unix(cron:session): session closed for user www-data Dec 19 06:00:01 ispc CRON[2052919]: pam_unix(cron:session): session closed for user getmail Dec 19 06:00:02 ispc CRON[2052918]: pam_unix(cron:session): session closed for user root Dec 19 06:00:02 ispc CRON[2052914]: pam_unix(cron:session): session closed for user root Dec 19 06:00:02 ispc CRON[2052917]: pam_unix(cron:session): session closed for user root Dec 19 06:00:17 ispc postfix/smtpd[2053081]: sql auxprop plugin using mysql engine Dec 19 06:00:19 ispc saslauthd[2053083]: pam_mysql - SELECT returned no result. Dec 19 06:00:19 ispc saslauthd[2053083]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:00:19 ispc saslauthd[2053083]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:01:01 ispc CRON[2053108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:01:02 ispc CRON[2053108]: pam_unix(cron:session): session closed for user root Dec 19 06:02:01 ispc CRON[2053148]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 06:02:01 ispc CRON[2053149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:02:02 ispc CRON[2053149]: pam_unix(cron:session): session closed for user root Dec 19 06:02:33 ispc sshd[2053749]: Invalid user blceu from 141.94.71.131 Dec 19 06:03:01 ispc CRON[2054027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:03:03 ispc CRON[2054027]: pam_unix(cron:session): session closed for user root Dec 19 06:03:21 ispc CRON[2053148]: pam_unix(cron:session): session closed for user logcheck Dec 19 06:03:31 ispc postfix/smtpd[2054232]: sql auxprop plugin using mysql engine Dec 19 06:04:01 ispc CRON[2054250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:04:02 ispc CRON[2054250]: pam_unix(cron:session): session closed for user root Dec 19 06:04:33 ispc sshd[2054275]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:04:35 ispc sshd[2054277]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:04:35 ispc sshd[2054277]: Invalid user klape from 189.89.20.45 Dec 19 06:04:37 ispc sshd[2054279]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:04:37 ispc sshd[2054279]: Invalid user ubuntu from 189.89.20.45 Dec 19 06:05:01 ispc CRON[2054296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:05:01 ispc CRON[2054297]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:05:01 ispc CRON[2054298]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:05:01 ispc CRON[2054299]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:05:01 ispc CRON[2054297]: pam_unix(cron:session): session closed for user root Dec 19 06:05:01 ispc CRON[2054299]: pam_unix(cron:session): session closed for user getmail Dec 19 06:05:02 ispc CRON[2054298]: pam_unix(cron:session): session closed for user root Dec 19 06:05:03 ispc CRON[2054296]: pam_unix(cron:session): session closed for user root Dec 19 06:06:01 ispc CRON[2054399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:06:02 ispc CRON[2054399]: pam_unix(cron:session): session closed for user root Dec 19 06:06:44 ispc postfix/smtpd[2054429]: sql auxprop plugin using mysql engine Dec 19 06:06:45 ispc saslauthd[2054432]: pam_mysql - SELECT returned no result. Dec 19 06:06:45 ispc saslauthd[2054432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:06:45 ispc saslauthd[2054432]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:07:01 ispc CRON[2054442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:07:02 ispc CRON[2054442]: pam_unix(cron:session): session closed for user root Dec 19 06:08:01 ispc CRON[2054483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:08:02 ispc CRON[2054483]: pam_unix(cron:session): session closed for user root Dec 19 06:09:01 ispc CRON[2054526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:09:01 ispc CRON[2054527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:09:01 ispc CRON[2054526]: pam_unix(cron:session): session closed for user root Dec 19 06:09:02 ispc CRON[2054527]: pam_unix(cron:session): session closed for user root Dec 19 06:10:01 ispc CRON[2054574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:10:01 ispc CRON[2054575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:10:01 ispc CRON[2054576]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:10:01 ispc CRON[2054577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:10:01 ispc CRON[2054578]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:10:01 ispc CRON[2054576]: pam_unix(cron:session): session closed for user www-data Dec 19 06:10:01 ispc CRON[2054575]: pam_unix(cron:session): session closed for user root Dec 19 06:10:01 ispc CRON[2054578]: pam_unix(cron:session): session closed for user getmail Dec 19 06:10:01 ispc CRON[2054577]: pam_unix(cron:session): session closed for user root Dec 19 06:10:03 ispc CRON[2054574]: pam_unix(cron:session): session closed for user root Dec 19 06:11:01 ispc CRON[2054681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:11:02 ispc CRON[2054681]: pam_unix(cron:session): session closed for user root Dec 19 06:12:01 ispc CRON[2054714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:12:02 ispc CRON[2054714]: pam_unix(cron:session): session closed for user root Dec 19 06:13:01 ispc CRON[2054757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:13:02 ispc CRON[2054757]: pam_unix(cron:session): session closed for user root Dec 19 06:13:03 ispc sshd[2054764]: Did not receive identification string from 192.227.134.84 Dec 19 06:14:01 ispc CRON[2054796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:14:02 ispc CRON[2054796]: pam_unix(cron:session): session closed for user root Dec 19 06:14:42 ispc postfix/smtpd[2054827]: sql auxprop plugin using mysql engine Dec 19 06:14:43 ispc saslauthd[2054830]: pam_mysql - SELECT returned no result. Dec 19 06:14:43 ispc saslauthd[2054830]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:14:43 ispc saslauthd[2054830]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:15:01 ispc CRON[2054839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:15:01 ispc CRON[2054840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:15:01 ispc CRON[2054841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:15:01 ispc CRON[2054842]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:15:01 ispc CRON[2054840]: pam_unix(cron:session): session closed for user root Dec 19 06:15:01 ispc CRON[2054842]: pam_unix(cron:session): session closed for user getmail Dec 19 06:15:02 ispc CRON[2054841]: pam_unix(cron:session): session closed for user root Dec 19 06:15:03 ispc CRON[2054839]: pam_unix(cron:session): session closed for user root Dec 19 06:15:06 ispc saslauthd[2054919]: pam_mysql - SELECT returned no result. Dec 19 06:15:06 ispc saslauthd[2054919]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:15:06 ispc saslauthd[2054919]: do_auth : auth failure: [user=adm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:16:01 ispc CRON[2054950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:16:02 ispc CRON[2054950]: pam_unix(cron:session): session closed for user root Dec 19 06:16:16 ispc CRON[2052717]: pam_unix(cron:session): session closed for user root Dec 19 06:17:01 ispc CRON[2054974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:17:02 ispc CRON[2054974]: pam_unix(cron:session): session closed for user root Dec 19 06:18:01 ispc CRON[2054992]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 06:18:01 ispc CRON[2054993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:18:02 ispc CRON[2054993]: pam_unix(cron:session): session closed for user root Dec 19 06:18:04 ispc sshd[2055005]: Invalid user ziplines from 211.45.175.153 Dec 19 06:18:07 ispc CRON[2054992]: pam_unix(cron:session): session closed for user amavis Dec 19 06:18:08 ispc postfix/smtpd[2055022]: sql auxprop plugin using mysql engine Dec 19 06:19:01 ispc CRON[2055033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:19:02 ispc CRON[2055033]: pam_unix(cron:session): session closed for user root Dec 19 06:20:01 ispc CRON[2055048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:20:01 ispc CRON[2055050]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:20:01 ispc CRON[2055051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:20:01 ispc CRON[2055052]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:20:01 ispc CRON[2055049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:20:01 ispc CRON[2055050]: pam_unix(cron:session): session closed for user www-data Dec 19 06:20:01 ispc CRON[2055049]: pam_unix(cron:session): session closed for user root Dec 19 06:20:01 ispc CRON[2055052]: pam_unix(cron:session): session closed for user getmail Dec 19 06:20:03 ispc CRON[2055048]: pam_unix(cron:session): session closed for user root Dec 19 06:20:33 ispc postfix/smtpd[2055160]: sql auxprop plugin using mysql engine Dec 19 06:20:36 ispc CRON[2055051]: pam_unix(cron:session): session closed for user root Dec 19 06:21:01 ispc CRON[2055164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:21:01 ispc CRON[2055165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:21:02 ispc CRON[2055164]: pam_unix(cron:session): session closed for user root Dec 19 06:22:01 ispc CRON[2055203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:22:01 ispc CRON[2055203]: pam_unix(cron:session): session closed for user root Dec 19 06:22:30 ispc postfix/smtpd[2055228]: sql auxprop plugin using mysql engine Dec 19 06:22:31 ispc saslauthd[2055230]: pam_mysql - SELECT returned no result. Dec 19 06:22:31 ispc saslauthd[2055230]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:22:31 ispc saslauthd[2055230]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:23:02 ispc CRON[2055256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:23:03 ispc CRON[2055256]: pam_unix(cron:session): session closed for user root Dec 19 06:23:35 ispc sshd[2055284]: Invalid user martof from 51.159.91.86 Dec 19 06:24:01 ispc CRON[2055294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:24:02 ispc CRON[2055294]: pam_unix(cron:session): session closed for user root Dec 19 06:24:22 ispc sshd[2055315]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:22 ispc sshd[2055317]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:23 ispc sshd[2055319]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:24 ispc sshd[2055321]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:24 ispc sshd[2055323]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:25 ispc sshd[2055325]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:25 ispc sshd[2055327]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:27 ispc sshd[2055334]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:28 ispc sshd[2055336]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:28 ispc sshd[2055338]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:29 ispc sshd[2055340]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:29 ispc sshd[2055342]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:30 ispc sshd[2055344]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:31 ispc sshd[2055346]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:32 ispc sshd[2055348]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:32 ispc sshd[2055350]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:32 ispc sshd[2055352]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:33 ispc sshd[2055354]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:34 ispc sshd[2055356]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:34 ispc sshd[2055356]: Invalid user Antminer from 179.43.184.242 Dec 19 06:24:34 ispc sshd[2055358]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:34 ispc sshd[2055358]: Invalid user Antminer from 179.43.184.242 Dec 19 06:24:35 ispc sshd[2055360]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:36 ispc sshd[2055362]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:36 ispc sshd[2055368]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:37 ispc sshd[2055370]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:37 ispc sshd[2055372]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:38 ispc sshd[2055374]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:38 ispc sshd[2055374]: Invalid user admin from 179.43.184.242 Dec 19 06:24:38 ispc sshd[2055376]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:24:38 ispc sshd[2055376]: Invalid user baikal from 179.43.184.242 Dec 19 06:25:01 ispc CRON[2055386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:25:01 ispc CRON[2055387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:25:01 ispc CRON[2055390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:25:01 ispc CRON[2055391]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:25:01 ispc CRON[2055387]: pam_unix(cron:session): session closed for user root Dec 19 06:25:01 ispc CRON[2055391]: pam_unix(cron:session): session closed for user getmail Dec 19 06:25:01 ispc CRON[2055390]: pam_unix(cron:session): session closed for user root Dec 19 06:25:02 ispc CRON[2055386]: pam_unix(cron:session): session closed for user root Dec 19 06:26:01 ispc CRON[2055492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:26:01 ispc CRON[2055492]: pam_unix(cron:session): session closed for user root Dec 19 06:26:22 ispc postfix/smtpd[2055511]: sql auxprop plugin using mysql engine Dec 19 06:27:01 ispc CRON[2055532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:27:01 ispc CRON[2055532]: pam_unix(cron:session): session closed for user root Dec 19 06:28:01 ispc CRON[2055576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:28:02 ispc CRON[2055576]: pam_unix(cron:session): session closed for user root Dec 19 06:29:01 ispc CRON[2055619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:29:01 ispc CRON[2055619]: pam_unix(cron:session): session closed for user root Dec 19 06:29:26 ispc sshd[2055639]: Invalid user blceu from 185.12.204.239 Dec 19 06:29:47 ispc postfix/smtpd[2055649]: sql auxprop plugin using mysql engine Dec 19 06:29:48 ispc saslauthd[2055652]: pam_mysql - SELECT returned no result. Dec 19 06:29:48 ispc saslauthd[2055652]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:29:48 ispc saslauthd[2055652]: do_auth : auth failure: [user=mysql] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:30:01 ispc CRON[2055661]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:30:01 ispc CRON[2055662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:30:01 ispc CRON[2055665]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:30:01 ispc CRON[2055663]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:30:01 ispc CRON[2055664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:30:01 ispc CRON[2055662]: pam_unix(cron:session): session closed for user root Dec 19 06:30:01 ispc CRON[2055663]: pam_unix(cron:session): session closed for user www-data Dec 19 06:30:01 ispc CRON[2055665]: pam_unix(cron:session): session closed for user getmail Dec 19 06:30:01 ispc CRON[2055664]: pam_unix(cron:session): session closed for user root Dec 19 06:30:01 ispc CRON[2055661]: pam_unix(cron:session): session closed for user root Dec 19 06:30:34 ispc saslauthd[2055756]: pam_mysql - SELECT returned no result. Dec 19 06:30:34 ispc saslauthd[2055756]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:30:34 ispc saslauthd[2055756]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:31:01 ispc CRON[2055770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:31:01 ispc CRON[2055770]: pam_unix(cron:session): session closed for user root Dec 19 06:32:01 ispc CRON[2055804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:32:02 ispc CRON[2055804]: pam_unix(cron:session): session closed for user root Dec 19 06:33:01 ispc CRON[2055855]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:33:02 ispc CRON[2055855]: pam_unix(cron:session): session closed for user root Dec 19 06:34:01 ispc CRON[2055894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:34:01 ispc CRON[2055894]: pam_unix(cron:session): session closed for user root Dec 19 06:35:01 ispc CRON[2055940]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:35:01 ispc CRON[2055937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:35:01 ispc CRON[2055938]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:35:01 ispc CRON[2055939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:35:01 ispc CRON[2055938]: pam_unix(cron:session): session closed for user root Dec 19 06:35:01 ispc CRON[2055940]: pam_unix(cron:session): session closed for user getmail Dec 19 06:35:02 ispc CRON[2055939]: pam_unix(cron:session): session closed for user root Dec 19 06:35:02 ispc CRON[2055937]: pam_unix(cron:session): session closed for user root Dec 19 06:36:01 ispc CRON[2056039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:36:02 ispc CRON[2056039]: pam_unix(cron:session): session closed for user root Dec 19 06:37:01 ispc CRON[2056083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:37:01 ispc CRON[2056083]: pam_unix(cron:session): session closed for user root Dec 19 06:37:51 ispc postfix/smtpd[2056123]: sql auxprop plugin using mysql engine Dec 19 06:37:52 ispc saslauthd[2056125]: pam_mysql - SELECT returned no result. Dec 19 06:37:52 ispc saslauthd[2056125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:37:52 ispc saslauthd[2056125]: do_auth : auth failure: [user=root@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 06:38:01 ispc CRON[2056131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:38:02 ispc CRON[2056131]: pam_unix(cron:session): session closed for user root Dec 19 06:39:01 ispc CRON[2056177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:39:01 ispc CRON[2056178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:39:01 ispc CRON[2056177]: pam_unix(cron:session): session closed for user root Dec 19 06:39:01 ispc CRON[2056178]: pam_unix(cron:session): session closed for user root Dec 19 06:40:01 ispc CRON[2056225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:40:01 ispc CRON[2056226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:40:01 ispc CRON[2056227]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:40:01 ispc CRON[2056228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:40:01 ispc CRON[2056229]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:40:01 ispc CRON[2056227]: pam_unix(cron:session): session closed for user www-data Dec 19 06:40:01 ispc CRON[2056226]: pam_unix(cron:session): session closed for user root Dec 19 06:40:01 ispc CRON[2056229]: pam_unix(cron:session): session closed for user getmail Dec 19 06:40:02 ispc CRON[2056228]: pam_unix(cron:session): session closed for user root Dec 19 06:40:03 ispc CRON[2056225]: pam_unix(cron:session): session closed for user root Dec 19 06:40:09 ispc postfix/smtpd[2056308]: sql auxprop plugin using mysql engine Dec 19 06:40:10 ispc saslauthd[2056310]: pam_mysql - SELECT returned no result. Dec 19 06:40:10 ispc saslauthd[2056310]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:40:10 ispc saslauthd[2056310]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:41:00 ispc postfix/smtpd[2056341]: sql auxprop plugin using mysql engine Dec 19 06:41:01 ispc CRON[2056343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:41:02 ispc CRON[2056343]: pam_unix(cron:session): session closed for user root Dec 19 06:41:26 ispc CRON[2055165]: pam_unix(cron:session): session closed for user root Dec 19 06:42:01 ispc CRON[2056379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:42:01 ispc CRON[2056379]: pam_unix(cron:session): session closed for user root Dec 19 06:43:01 ispc CRON[2056418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:43:03 ispc CRON[2056418]: pam_unix(cron:session): session closed for user root Dec 19 06:44:01 ispc CRON[2056432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:44:03 ispc CRON[2056432]: pam_unix(cron:session): session closed for user root Dec 19 06:44:26 ispc saslauthd[2056445]: pam_mysql - SELECT returned no result. Dec 19 06:44:26 ispc saslauthd[2056445]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:44:26 ispc saslauthd[2056445]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:44:39 ispc sshd[2056446]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 06:45:01 ispc CRON[2056450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:45:01 ispc CRON[2056452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:45:01 ispc CRON[2056453]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:45:01 ispc CRON[2056451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:45:01 ispc CRON[2056451]: pam_unix(cron:session): session closed for user root Dec 19 06:45:01 ispc CRON[2056453]: pam_unix(cron:session): session closed for user getmail Dec 19 06:45:01 ispc CRON[2056450]: pam_unix(cron:session): session closed for user root Dec 19 06:45:46 ispc sshd[2056639]: Invalid user martof from 211.45.175.153 Dec 19 06:45:50 ispc CRON[2056452]: pam_unix(cron:session): session closed for user root Dec 19 06:46:01 ispc CRON[2056641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:46:36 ispc sshd[2056666]: Invalid user martof from 52.232.19.79 Dec 19 06:46:45 ispc sshd[2056672]: Invalid user ziplines from 103.110.84.105 Dec 19 06:47:01 ispc CRON[2056680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:47:02 ispc CRON[2056680]: pam_unix(cron:session): session closed for user root Dec 19 06:47:19 ispc postfix/smtpd[2056699]: sql auxprop plugin using mysql engine Dec 19 06:47:25 ispc postfix/smtpd[2056711]: sql auxprop plugin using mysql engine Dec 19 06:48:01 ispc CRON[2056743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:48:02 ispc CRON[2056743]: pam_unix(cron:session): session closed for user root Dec 19 06:49:01 ispc CRON[2056780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:49:02 ispc CRON[2056780]: pam_unix(cron:session): session closed for user root Dec 19 06:49:26 ispc postfix/smtpd[2056805]: sql auxprop plugin using mysql engine Dec 19 06:50:01 ispc CRON[2056822]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 06:50:01 ispc CRON[2056820]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:50:01 ispc CRON[2056821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:50:01 ispc CRON[2056823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:50:01 ispc CRON[2056824]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:50:01 ispc CRON[2056821]: pam_unix(cron:session): session closed for user root Dec 19 06:50:01 ispc CRON[2056822]: pam_unix(cron:session): session closed for user www-data Dec 19 06:50:01 ispc CRON[2056824]: pam_unix(cron:session): session closed for user getmail Dec 19 06:50:01 ispc CRON[2056823]: pam_unix(cron:session): session closed for user root Dec 19 06:50:01 ispc CRON[2056820]: pam_unix(cron:session): session closed for user root Dec 19 06:51:01 ispc CRON[2056925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:51:02 ispc CRON[2056925]: pam_unix(cron:session): session closed for user root Dec 19 06:51:20 ispc postfix/smtpd[2056946]: sql auxprop plugin using mysql engine Dec 19 06:51:20 ispc saslauthd[2056948]: pam_mysql - SELECT returned no result. Dec 19 06:51:20 ispc saslauthd[2056948]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:51:21 ispc saslauthd[2056948]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 06:52:01 ispc CRON[2056968]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:52:01 ispc CRON[2056969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:52:02 ispc CRON[2056969]: pam_unix(cron:session): session closed for user root Dec 19 06:53:01 ispc CRON[2057016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:53:01 ispc CRON[2057016]: pam_unix(cron:session): session closed for user root Dec 19 06:53:34 ispc sshd[2057042]: Invalid user ziplines from 51.159.91.86 Dec 19 06:54:01 ispc CRON[2057057]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:54:01 ispc CRON[2057057]: pam_unix(cron:session): session closed for user root Dec 19 06:54:43 ispc postfix/smtpd[2057086]: sql auxprop plugin using mysql engine Dec 19 06:55:01 ispc CRON[2057098]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:55:01 ispc CRON[2057099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:55:01 ispc CRON[2057100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:55:01 ispc CRON[2057101]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 06:55:01 ispc CRON[2057099]: pam_unix(cron:session): session closed for user root Dec 19 06:55:01 ispc CRON[2057101]: pam_unix(cron:session): session closed for user getmail Dec 19 06:55:02 ispc CRON[2057100]: pam_unix(cron:session): session closed for user root Dec 19 06:55:02 ispc CRON[2057098]: pam_unix(cron:session): session closed for user root Dec 19 06:55:18 ispc CRON[2056968]: pam_unix(cron:session): session closed for user root Dec 19 06:55:37 ispc sshd[2057188]: Invalid user ziplines from 52.232.19.79 Dec 19 06:56:01 ispc CRON[2057203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:56:02 ispc CRON[2057203]: pam_unix(cron:session): session closed for user root Dec 19 06:57:01 ispc CRON[2057239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:57:01 ispc CRON[2057239]: pam_unix(cron:session): session closed for user root Dec 19 06:57:13 ispc sshd[2057254]: Invalid user pronajemplosin from 36.50.176.13 Dec 19 06:57:54 ispc sshd[2057280]: Invalid user blceu from 51.159.91.86 Dec 19 06:58:01 ispc CRON[2057286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:58:01 ispc CRON[2057286]: pam_unix(cron:session): session closed for user root Dec 19 06:58:09 ispc sshd[2057299]: Did not receive identification string from 14.103.124.209 Dec 19 06:59:01 ispc CRON[2057327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 06:59:02 ispc CRON[2057327]: pam_unix(cron:session): session closed for user root Dec 19 06:59:12 ispc postfix/smtpd[2057342]: sql auxprop plugin using mysql engine Dec 19 06:59:13 ispc saslauthd[2057345]: pam_mysql - SELECT returned no result. Dec 19 06:59:13 ispc saslauthd[2057345]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 06:59:13 ispc saslauthd[2057345]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:00:01 ispc CRON[2057368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:00:01 ispc CRON[2057370]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:00:01 ispc CRON[2057369]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:00:01 ispc CRON[2057371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:00:01 ispc CRON[2057372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:00:01 ispc CRON[2057373]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:00:01 ispc CRON[2057370]: pam_unix(cron:session): session closed for user www-data Dec 19 07:00:01 ispc CRON[2057369]: pam_unix(cron:session): session closed for user root Dec 19 07:00:01 ispc CRON[2057373]: pam_unix(cron:session): session closed for user getmail Dec 19 07:00:01 ispc CRON[2057372]: pam_unix(cron:session): session closed for user root Dec 19 07:00:01 ispc CRON[2057368]: pam_unix(cron:session): session closed for user root Dec 19 07:00:02 ispc CRON[2057371]: pam_unix(cron:session): session closed for user root Dec 19 07:00:49 ispc sshd[2057545]: Invalid user martof from 51.91.247.10 Dec 19 07:00:54 ispc sshd[2057551]: Did not receive identification string from 196.251.100.49 Dec 19 07:01:01 ispc CRON[2057553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:01:01 ispc CRON[2057553]: pam_unix(cron:session): session closed for user root Dec 19 07:01:20 ispc sshd[2057572]: Invalid user blceu from 139.59.66.222 Dec 19 07:02:01 ispc CRON[2057591]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 07:02:01 ispc CRON[2057592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:02:02 ispc CRON[2057592]: pam_unix(cron:session): session closed for user root Dec 19 07:02:04 ispc postfix/smtpd[2057729]: sql auxprop plugin using mysql engine Dec 19 07:02:04 ispc saslauthd[2057740]: pam_mysql - SELECT returned no result. Dec 19 07:02:04 ispc saslauthd[2057740]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:02:04 ispc saslauthd[2057740]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:02:30 ispc sshd[2058386]: Did not receive identification string from 45.140.17.97 Dec 19 07:02:45 ispc sshd[2058462]: Invalid user blceu from 165.227.38.205 Dec 19 07:02:54 ispc CRON[2057591]: pam_unix(cron:session): session closed for user logcheck Dec 19 07:02:58 ispc postfix/smtpd[2058656]: sql auxprop plugin using mysql engine Dec 19 07:03:01 ispc CRON[2058660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:03:01 ispc CRON[2058660]: pam_unix(cron:session): session closed for user root Dec 19 07:04:01 ispc CRON[2058700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:04:02 ispc CRON[2058700]: pam_unix(cron:session): session closed for user root Dec 19 07:04:14 ispc sshd[2058720]: Invalid user user from 45.148.10.121 Dec 19 07:04:29 ispc sshd[2058726]: Did not receive identification string from 192.227.134.84 Dec 19 07:05:01 ispc CRON[2058740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:05:01 ispc CRON[2058739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:05:01 ispc CRON[2058741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:05:01 ispc CRON[2058742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:05:01 ispc CRON[2058740]: pam_unix(cron:session): session closed for user root Dec 19 07:05:01 ispc CRON[2058742]: pam_unix(cron:session): session closed for user getmail Dec 19 07:05:01 ispc CRON[2058741]: pam_unix(cron:session): session closed for user root Dec 19 07:05:02 ispc CRON[2058739]: pam_unix(cron:session): session closed for user root Dec 19 07:05:48 ispc sshd[2058839]: Invalid user martof from 185.208.181.152 Dec 19 07:06:01 ispc CRON[2058845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:06:01 ispc CRON[2058845]: pam_unix(cron:session): session closed for user root Dec 19 07:06:17 ispc postfix/smtpd[2058864]: sql auxprop plugin using mysql engine Dec 19 07:06:17 ispc CRON[2056641]: pam_unix(cron:session): session closed for user root Dec 19 07:07:01 ispc CRON[2058869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:07:02 ispc CRON[2058869]: pam_unix(cron:session): session closed for user root Dec 19 07:08:01 ispc CRON[2058888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:08:02 ispc CRON[2058888]: pam_unix(cron:session): session closed for user root Dec 19 07:09:01 ispc CRON[2058906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:09:01 ispc CRON[2058907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:09:01 ispc CRON[2058906]: pam_unix(cron:session): session closed for user root Dec 19 07:09:01 ispc CRON[2058907]: pam_unix(cron:session): session closed for user root Dec 19 07:09:24 ispc saslauthd[2058932]: pam_mysql - SELECT returned no result. Dec 19 07:09:24 ispc saslauthd[2058932]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:09:24 ispc saslauthd[2058932]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:10:01 ispc CRON[2058936]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:10:01 ispc CRON[2058937]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:10:01 ispc CRON[2058938]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:10:01 ispc CRON[2058934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:10:01 ispc CRON[2058935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:10:01 ispc CRON[2058936]: pam_unix(cron:session): session closed for user www-data Dec 19 07:10:01 ispc CRON[2058935]: pam_unix(cron:session): session closed for user root Dec 19 07:10:01 ispc CRON[2058938]: pam_unix(cron:session): session closed for user getmail Dec 19 07:10:02 ispc CRON[2058934]: pam_unix(cron:session): session closed for user root Dec 19 07:10:35 ispc CRON[2058937]: pam_unix(cron:session): session closed for user root Dec 19 07:11:00 ispc saslauthd[2059047]: pam_mysql - SELECT returned no result. Dec 19 07:11:00 ispc saslauthd[2059047]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:11:00 ispc saslauthd[2059047]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:11:01 ispc CRON[2059048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:12:01 ispc CRON[2059093]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:12:02 ispc CRON[2059093]: pam_unix(cron:session): session closed for user root Dec 19 07:12:07 ispc sshd[2059108]: Invalid user ziplines from 139.59.66.222 Dec 19 07:12:34 ispc sshd[2059119]: Invalid user ziplines from 27.254.144.183 Dec 19 07:13:01 ispc CRON[2059140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:13:01 ispc CRON[2059140]: pam_unix(cron:session): session closed for user root Dec 19 07:13:57 ispc postfix/smtpd[2059180]: sql auxprop plugin using mysql engine Dec 19 07:13:58 ispc saslauthd[2059186]: pam_mysql - SELECT returned no result. Dec 19 07:13:58 ispc saslauthd[2059186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:13:58 ispc saslauthd[2059186]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:14:01 ispc CRON[2059187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:14:02 ispc CRON[2059187]: pam_unix(cron:session): session closed for user root Dec 19 07:15:01 ispc CRON[2059225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:15:01 ispc CRON[2059226]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:15:01 ispc CRON[2059228]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:15:01 ispc CRON[2059227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:15:01 ispc CRON[2059226]: pam_unix(cron:session): session closed for user root Dec 19 07:15:01 ispc CRON[2059228]: pam_unix(cron:session): session closed for user getmail Dec 19 07:15:02 ispc CRON[2059227]: pam_unix(cron:session): session closed for user root Dec 19 07:15:03 ispc CRON[2059225]: pam_unix(cron:session): session closed for user root Dec 19 07:15:43 ispc postfix/smtpd[2059318]: sql auxprop plugin using mysql engine Dec 19 07:15:44 ispc postfix/smtpd[2059320]: sql auxprop plugin using mysql engine Dec 19 07:16:01 ispc CRON[2059329]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:16:02 ispc CRON[2059329]: pam_unix(cron:session): session closed for user root Dec 19 07:17:01 ispc CRON[2059366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:17:01 ispc CRON[2059366]: pam_unix(cron:session): session closed for user root Dec 19 07:17:51 ispc sshd[2059414]: Invalid user martof from 103.110.84.105 Dec 19 07:18:01 ispc CRON[2059424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:18:03 ispc CRON[2059424]: pam_unix(cron:session): session closed for user root Dec 19 07:19:01 ispc CRON[2059466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:19:01 ispc CRON[2059466]: pam_unix(cron:session): session closed for user root Dec 19 07:19:36 ispc postfix/smtpd[2059493]: sql auxprop plugin using mysql engine Dec 19 07:19:36 ispc saslauthd[2059496]: pam_mysql - SELECT returned no result. Dec 19 07:19:36 ispc saslauthd[2059496]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:19:36 ispc saslauthd[2059496]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:20:01 ispc CRON[2059509]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:20:01 ispc CRON[2059510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:20:01 ispc CRON[2059511]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:20:01 ispc CRON[2059512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:20:01 ispc CRON[2059513]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:20:01 ispc CRON[2059511]: pam_unix(cron:session): session closed for user www-data Dec 19 07:20:01 ispc CRON[2059510]: pam_unix(cron:session): session closed for user root Dec 19 07:20:01 ispc CRON[2059513]: pam_unix(cron:session): session closed for user getmail Dec 19 07:20:02 ispc CRON[2059509]: pam_unix(cron:session): session closed for user root Dec 19 07:20:02 ispc CRON[2059512]: pam_unix(cron:session): session closed for user root Dec 19 07:21:01 ispc CRON[2059610]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:21:01 ispc CRON[2059611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:21:01 ispc CRON[2059610]: pam_unix(cron:session): session closed for user root Dec 19 07:21:02 ispc CRON[2059611]: pam_unix(cron:session): session closed for user root Dec 19 07:21:36 ispc sshd[2059640]: Invalid user matlbula from 35.239.77.168 Dec 19 07:22:01 ispc CRON[2059654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:22:01 ispc CRON[2059654]: pam_unix(cron:session): session closed for user root Dec 19 07:22:15 ispc postfix/smtpd[2059674]: sql auxprop plugin using mysql engine Dec 19 07:22:28 ispc sshd[2059680]: Invalid user diamantdi from 185.12.204.239 Dec 19 07:22:30 ispc sshd[2059682]: Invalid user blceu from 211.45.175.153 Dec 19 07:22:59 ispc sshd[2059705]: Invalid user ziplines from 148.216.54.17 Dec 19 07:23:01 ispc CRON[2059707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:23:02 ispc CRON[2059707]: pam_unix(cron:session): session closed for user root Dec 19 07:24:01 ispc CRON[2059742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:24:01 ispc CRON[2059742]: pam_unix(cron:session): session closed for user root Dec 19 07:24:33 ispc postfix/smtpd[2059778]: sql auxprop plugin using mysql engine Dec 19 07:25:01 ispc CRON[2059793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:25:01 ispc CRON[2059795]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:25:01 ispc CRON[2059796]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:25:01 ispc CRON[2059794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:25:01 ispc CRON[2059794]: pam_unix(cron:session): session closed for user root Dec 19 07:25:01 ispc CRON[2059796]: pam_unix(cron:session): session closed for user getmail Dec 19 07:25:01 ispc CRON[2059795]: pam_unix(cron:session): session closed for user root Dec 19 07:25:02 ispc CRON[2059793]: pam_unix(cron:session): session closed for user root Dec 19 07:26:01 ispc CRON[2059895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:26:01 ispc CRON[2059895]: pam_unix(cron:session): session closed for user root Dec 19 07:26:23 ispc postfix/smtpd[2059916]: sql auxprop plugin using mysql engine Dec 19 07:26:57 ispc sshd[2059933]: Invalid user blceu from 103.77.207.53 Dec 19 07:27:01 ispc CRON[2059939]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:27:01 ispc CRON[2059939]: pam_unix(cron:session): session closed for user root Dec 19 07:27:20 ispc sshd[2059956]: Invalid user klape from 36.50.177.171 Dec 19 07:27:21 ispc sshd[2059962]: Invalid user ubuntu from 36.50.177.171 Dec 19 07:28:01 ispc CRON[2059988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:28:02 ispc CRON[2059988]: pam_unix(cron:session): session closed for user root Dec 19 07:28:10 ispc postfix/smtpd[2060004]: sql auxprop plugin using mysql engine Dec 19 07:28:46 ispc saslauthd[2060024]: pam_mysql - SELECT returned no result. Dec 19 07:28:46 ispc saslauthd[2060024]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:28:46 ispc saslauthd[2060024]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:29:01 ispc CRON[2060034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:29:01 ispc CRON[2060034]: pam_unix(cron:session): session closed for user root Dec 19 07:29:22 ispc sshd[2060053]: Invalid user blceu from 185.208.181.152 Dec 19 07:29:27 ispc saslauthd[2060056]: pam_mysql - SELECT returned no result. Dec 19 07:29:27 ispc saslauthd[2060056]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:29:27 ispc saslauthd[2060056]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:30:01 ispc CRON[2060077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:30:01 ispc CRON[2060078]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:30:01 ispc CRON[2060074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:30:01 ispc CRON[2060075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:30:01 ispc CRON[2060076]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:30:01 ispc CRON[2060075]: pam_unix(cron:session): session closed for user root Dec 19 07:30:01 ispc CRON[2060076]: pam_unix(cron:session): session closed for user www-data Dec 19 07:30:01 ispc CRON[2060078]: pam_unix(cron:session): session closed for user getmail Dec 19 07:30:02 ispc CRON[2060077]: pam_unix(cron:session): session closed for user root Dec 19 07:30:02 ispc CRON[2060074]: pam_unix(cron:session): session closed for user root Dec 19 07:31:01 ispc CRON[2060183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:31:01 ispc CRON[2060183]: pam_unix(cron:session): session closed for user root Dec 19 07:31:19 ispc postfix/smtpd[2060200]: sql auxprop plugin using mysql engine Dec 19 07:31:19 ispc CRON[2059048]: pam_unix(cron:session): session closed for user root Dec 19 07:32:01 ispc CRON[2060208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:32:01 ispc CRON[2060208]: pam_unix(cron:session): session closed for user root Dec 19 07:32:59 ispc sshd[2060231]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 07:32:59 ispc sshd[2060231]: Invalid user martof from 193.110.157.47 Dec 19 07:33:01 ispc CRON[2060233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:33:02 ispc CRON[2060233]: pam_unix(cron:session): session closed for user root Dec 19 07:34:01 ispc CRON[2060261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:34:01 ispc CRON[2060261]: pam_unix(cron:session): session closed for user root Dec 19 07:35:02 ispc CRON[2060284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:35:02 ispc CRON[2060285]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:35:02 ispc CRON[2060282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:35:02 ispc CRON[2060283]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:35:02 ispc CRON[2060285]: pam_unix(cron:session): session closed for user getmail Dec 19 07:35:02 ispc CRON[2060283]: pam_unix(cron:session): session closed for user root Dec 19 07:35:03 ispc CRON[2060282]: pam_unix(cron:session): session closed for user root Dec 19 07:35:41 ispc CRON[2060284]: pam_unix(cron:session): session closed for user root Dec 19 07:36:01 ispc CRON[2060396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:36:57 ispc postfix/smtpd[2060432]: sql auxprop plugin using mysql engine Dec 19 07:36:58 ispc saslauthd[2060435]: pam_mysql - SELECT returned no result. Dec 19 07:36:58 ispc saslauthd[2060435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:36:58 ispc saslauthd[2060435]: do_auth : auth failure: [user=webmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 07:37:01 ispc CRON[2060437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:37:02 ispc CRON[2060437]: pam_unix(cron:session): session closed for user root Dec 19 07:38:01 ispc CRON[2060481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:38:01 ispc CRON[2060481]: pam_unix(cron:session): session closed for user root Dec 19 07:38:28 ispc saslauthd[2060516]: pam_mysql - SELECT returned no result. Dec 19 07:38:28 ispc saslauthd[2060516]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:38:28 ispc saslauthd[2060516]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:38:42 ispc sshd[2060522]: Bad protocol version identification 'GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1' from 142.93.4.137 Dec 19 07:39:01 ispc CRON[2060532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:39:01 ispc CRON[2060533]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:39:01 ispc CRON[2060532]: pam_unix(cron:session): session closed for user root Dec 19 07:39:02 ispc CRON[2060533]: pam_unix(cron:session): session closed for user root Dec 19 07:39:22 ispc postfix/smtpd[2060565]: sql auxprop plugin using mysql engine Dec 19 07:39:57 ispc sshd[2060586]: Invalid user martof from 139.59.66.222 Dec 19 07:40:01 ispc CRON[2060592]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:40:01 ispc CRON[2060588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:40:01 ispc CRON[2060589]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:40:01 ispc CRON[2060590]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:40:01 ispc CRON[2060591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:40:01 ispc CRON[2060589]: pam_unix(cron:session): session closed for user root Dec 19 07:40:01 ispc CRON[2060590]: pam_unix(cron:session): session closed for user www-data Dec 19 07:40:01 ispc CRON[2060592]: pam_unix(cron:session): session closed for user getmail Dec 19 07:40:01 ispc CRON[2060591]: pam_unix(cron:session): session closed for user root Dec 19 07:40:01 ispc CRON[2060588]: pam_unix(cron:session): session closed for user root Dec 19 07:40:56 ispc sshd[2060697]: Invalid user ubnt from 45.148.10.121 Dec 19 07:41:01 ispc CRON[2060699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:41:01 ispc CRON[2060699]: pam_unix(cron:session): session closed for user root Dec 19 07:41:50 ispc sshd[2060730]: Did not receive identification string from 73.60.44.234 Dec 19 07:42:01 ispc CRON[2060735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:42:02 ispc CRON[2060735]: pam_unix(cron:session): session closed for user root Dec 19 07:43:01 ispc CRON[2060793]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:43:02 ispc CRON[2060793]: pam_unix(cron:session): session closed for user root Dec 19 07:43:34 ispc sshd[2060816]: Invalid user blceu from 52.232.19.79 Dec 19 07:43:37 ispc postfix/smtpd[2060822]: sql auxprop plugin using mysql engine Dec 19 07:43:39 ispc saslauthd[2060825]: pam_mysql - SELECT returned no result. Dec 19 07:43:39 ispc saslauthd[2060825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:43:39 ispc saslauthd[2060825]: do_auth : auth failure: [user=pi] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:44:01 ispc CRON[2060839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:44:01 ispc CRON[2060839]: pam_unix(cron:session): session closed for user root Dec 19 07:44:15 ispc sshd[2060855]: Invalid user martof from 103.77.207.53 Dec 19 07:44:30 ispc sshd[2060866]: Invalid user blceu from 51.91.247.10 Dec 19 07:45:01 ispc CRON[2060882]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:45:01 ispc CRON[2060883]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:45:01 ispc CRON[2060884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:45:01 ispc CRON[2060885]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:45:01 ispc CRON[2060883]: pam_unix(cron:session): session closed for user root Dec 19 07:45:01 ispc CRON[2060885]: pam_unix(cron:session): session closed for user getmail Dec 19 07:45:02 ispc CRON[2060884]: pam_unix(cron:session): session closed for user root Dec 19 07:45:03 ispc CRON[2060882]: pam_unix(cron:session): session closed for user root Dec 19 07:46:01 ispc CRON[2060984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:46:02 ispc CRON[2060984]: pam_unix(cron:session): session closed for user root Dec 19 07:46:08 ispc postfix/smtpd[2060995]: sql auxprop plugin using mysql engine Dec 19 07:46:08 ispc saslauthd[2061001]: pam_mysql - SELECT returned no result. Dec 19 07:46:08 ispc saslauthd[2061001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:46:08 ispc saslauthd[2061001]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:46:50 ispc sshd[2061022]: Invalid user matlbula from 185.12.204.239 Dec 19 07:47:01 ispc CRON[2061028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:47:01 ispc CRON[2061028]: pam_unix(cron:session): session closed for user root Dec 19 07:47:14 ispc sshd[2061043]: Did not receive identification string from 192.227.134.84 Dec 19 07:48:01 ispc CRON[2061070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:48:02 ispc CRON[2061070]: pam_unix(cron:session): session closed for user root Dec 19 07:48:40 ispc sshd[2061101]: Invalid user ziplines from 141.94.71.131 Dec 19 07:49:01 ispc CRON[2061113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:49:01 ispc CRON[2061113]: pam_unix(cron:session): session closed for user root Dec 19 07:50:01 ispc CRON[2061149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:50:01 ispc CRON[2061153]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:50:01 ispc CRON[2061150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:50:01 ispc CRON[2061151]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 07:50:01 ispc CRON[2061152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:50:01 ispc CRON[2061151]: pam_unix(cron:session): session closed for user www-data Dec 19 07:50:01 ispc CRON[2061150]: pam_unix(cron:session): session closed for user root Dec 19 07:50:01 ispc CRON[2061153]: pam_unix(cron:session): session closed for user getmail Dec 19 07:50:01 ispc CRON[2061152]: pam_unix(cron:session): session closed for user root Dec 19 07:50:03 ispc CRON[2061149]: pam_unix(cron:session): session closed for user root Dec 19 07:51:01 ispc CRON[2061254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:51:02 ispc CRON[2061254]: pam_unix(cron:session): session closed for user root Dec 19 07:51:37 ispc postfix/smtpd[2061278]: sql auxprop plugin using mysql engine Dec 19 07:52:01 ispc CRON[2061294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:52:01 ispc CRON[2061294]: pam_unix(cron:session): session closed for user root Dec 19 07:52:37 ispc postfix/smtpd[2061324]: sql auxprop plugin using mysql engine Dec 19 07:53:01 ispc CRON[2061355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:53:02 ispc CRON[2061355]: pam_unix(cron:session): session closed for user root Dec 19 07:53:08 ispc sshd[2061368]: Invalid user klape from 103.164.20.29 Dec 19 07:53:10 ispc sshd[2061370]: Invalid user ubuntu from 103.164.20.29 Dec 19 07:53:47 ispc saslauthd[2061391]: pam_mysql - SELECT returned no result. Dec 19 07:53:47 ispc saslauthd[2061391]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:53:47 ispc saslauthd[2061391]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:53:57 ispc sshd[2061398]: Invalid user blceu from 27.254.144.183 Dec 19 07:54:01 ispc CRON[2061401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:54:02 ispc CRON[2061401]: pam_unix(cron:session): session closed for user root Dec 19 07:55:01 ispc CRON[2061439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:55:01 ispc CRON[2061440]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:55:01 ispc CRON[2061441]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:55:01 ispc CRON[2061442]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 07:55:01 ispc CRON[2061440]: pam_unix(cron:session): session closed for user root Dec 19 07:55:01 ispc CRON[2061442]: pam_unix(cron:session): session closed for user getmail Dec 19 07:55:01 ispc CRON[2061441]: pam_unix(cron:session): session closed for user root Dec 19 07:55:02 ispc CRON[2061439]: pam_unix(cron:session): session closed for user root Dec 19 07:56:01 ispc CRON[2061551]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:56:01 ispc CRON[2061551]: pam_unix(cron:session): session closed for user root Dec 19 07:56:14 ispc postfix/smtpd[2061569]: sql auxprop plugin using mysql engine Dec 19 07:56:14 ispc CRON[2060396]: pam_unix(cron:session): session closed for user root Dec 19 07:57:01 ispc CRON[2061576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:57:02 ispc CRON[2061576]: pam_unix(cron:session): session closed for user root Dec 19 07:58:01 ispc CRON[2061595]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:58:01 ispc CRON[2061595]: pam_unix(cron:session): session closed for user root Dec 19 07:58:26 ispc saslauthd[2061612]: pam_mysql - SELECT returned no result. Dec 19 07:58:26 ispc saslauthd[2061612]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 07:58:26 ispc saslauthd[2061612]: do_auth : auth failure: [user=puppet] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 07:59:01 ispc CRON[2061614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 07:59:02 ispc CRON[2061614]: pam_unix(cron:session): session closed for user root Dec 19 08:00:01 ispc CRON[2061633]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:00:01 ispc CRON[2061635]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:00:01 ispc CRON[2061637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:00:01 ispc CRON[2061636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:00:01 ispc CRON[2061638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:00:01 ispc CRON[2061639]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:00:01 ispc CRON[2061634]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:00:01 ispc CRON[2061635]: pam_unix(cron:session): session closed for user www-data Dec 19 08:00:01 ispc CRON[2061634]: pam_unix(cron:session): session closed for user root Dec 19 08:00:01 ispc CRON[2061637]: pam_unix(cron:session): session closed for user root Dec 19 08:00:01 ispc CRON[2061639]: pam_unix(cron:session): session closed for user getmail Dec 19 08:00:02 ispc CRON[2061636]: pam_unix(cron:session): session closed for user root Dec 19 08:00:02 ispc CRON[2061633]: pam_unix(cron:session): session closed for user root Dec 19 08:00:45 ispc CRON[2061638]: pam_unix(cron:session): session closed for user root Dec 19 08:00:48 ispc saslauthd[2061908]: pam_mysql - SELECT returned no result. Dec 19 08:00:48 ispc saslauthd[2061908]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:00:48 ispc saslauthd[2061908]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:01:01 ispc CRON[2061909]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:02:01 ispc CRON[2061945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:02:01 ispc CRON[2061944]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 08:02:02 ispc CRON[2061945]: pam_unix(cron:session): session closed for user root Dec 19 08:03:01 ispc CRON[2062797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:03:02 ispc CRON[2062797]: pam_unix(cron:session): session closed for user root Dec 19 08:03:46 ispc CRON[2061944]: pam_unix(cron:session): session closed for user logcheck Dec 19 08:03:51 ispc postfix/smtpd[2063040]: sql auxprop plugin using mysql engine Dec 19 08:04:01 ispc CRON[2063049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:04:02 ispc CRON[2063049]: pam_unix(cron:session): session closed for user root Dec 19 08:05:01 ispc CRON[2063085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:05:01 ispc CRON[2063086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:05:01 ispc CRON[2063087]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:05:01 ispc CRON[2063088]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:05:01 ispc CRON[2063086]: pam_unix(cron:session): session closed for user root Dec 19 08:05:01 ispc CRON[2063088]: pam_unix(cron:session): session closed for user getmail Dec 19 08:05:02 ispc CRON[2063087]: pam_unix(cron:session): session closed for user root Dec 19 08:05:03 ispc CRON[2063085]: pam_unix(cron:session): session closed for user root Dec 19 08:06:01 ispc CRON[2063189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:06:01 ispc CRON[2063189]: pam_unix(cron:session): session closed for user root Dec 19 08:06:17 ispc sshd[2063205]: Invalid user admin from 222.236.46.74 Dec 19 08:07:01 ispc CRON[2063224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:07:03 ispc CRON[2063224]: pam_unix(cron:session): session closed for user root Dec 19 08:08:01 ispc CRON[2063264]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:08:02 ispc CRON[2063264]: pam_unix(cron:session): session closed for user root Dec 19 08:08:02 ispc postfix/smtpd[2063278]: sql auxprop plugin using mysql engine Dec 19 08:08:03 ispc saslauthd[2063281]: pam_mysql - SELECT returned no result. Dec 19 08:08:03 ispc saslauthd[2063281]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:08:03 ispc saslauthd[2063281]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:09:01 ispc CRON[2063308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:09:01 ispc CRON[2063309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:09:01 ispc CRON[2063308]: pam_unix(cron:session): session closed for user root Dec 19 08:09:02 ispc CRON[2063309]: pam_unix(cron:session): session closed for user root Dec 19 08:10:01 ispc CRON[2063365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:10:01 ispc CRON[2063366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:10:01 ispc CRON[2063367]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:10:01 ispc CRON[2063368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:10:01 ispc CRON[2063369]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:10:01 ispc CRON[2063366]: pam_unix(cron:session): session closed for user root Dec 19 08:10:01 ispc CRON[2063367]: pam_unix(cron:session): session closed for user www-data Dec 19 08:10:01 ispc CRON[2063369]: pam_unix(cron:session): session closed for user getmail Dec 19 08:10:01 ispc CRON[2063368]: pam_unix(cron:session): session closed for user root Dec 19 08:10:01 ispc CRON[2063365]: pam_unix(cron:session): session closed for user root Dec 19 08:11:01 ispc CRON[2063472]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:11:02 ispc CRON[2063472]: pam_unix(cron:session): session closed for user root Dec 19 08:12:01 ispc CRON[2063511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:12:03 ispc CRON[2063511]: pam_unix(cron:session): session closed for user root Dec 19 08:12:04 ispc sshd[2063522]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 08:13:01 ispc CRON[2063561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:13:02 ispc CRON[2063561]: pam_unix(cron:session): session closed for user root Dec 19 08:13:18 ispc postfix/smtpd[2063576]: sql auxprop plugin using mysql engine Dec 19 08:13:20 ispc saslauthd[2063579]: pam_mysql - SELECT returned no result. Dec 19 08:13:20 ispc saslauthd[2063579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:13:20 ispc saslauthd[2063579]: do_auth : auth failure: [user=ansible] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:14:01 ispc CRON[2063598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:14:02 ispc CRON[2063598]: pam_unix(cron:session): session closed for user root Dec 19 08:15:01 ispc CRON[2063635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:15:01 ispc CRON[2063636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:15:01 ispc CRON[2063637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:15:01 ispc CRON[2063638]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:15:02 ispc CRON[2063636]: pam_unix(cron:session): session closed for user root Dec 19 08:15:02 ispc CRON[2063638]: pam_unix(cron:session): session closed for user getmail Dec 19 08:15:02 ispc CRON[2063637]: pam_unix(cron:session): session closed for user root Dec 19 08:15:02 ispc CRON[2063635]: pam_unix(cron:session): session closed for user root Dec 19 08:16:01 ispc CRON[2063737]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:16:02 ispc CRON[2063737]: pam_unix(cron:session): session closed for user root Dec 19 08:16:43 ispc saslauthd[2063765]: pam_mysql - SELECT returned no result. Dec 19 08:16:43 ispc saslauthd[2063765]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:16:43 ispc saslauthd[2063765]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:17:01 ispc CRON[2063777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:17:01 ispc CRON[2063777]: pam_unix(cron:session): session closed for user root Dec 19 08:17:09 ispc sshd[2063793]: Invalid user blceu from 45.119.213.109 Dec 19 08:17:35 ispc postfix/smtpd[2063804]: sql auxprop plugin using mysql engine Dec 19 08:17:44 ispc saslauthd[2063810]: pam_mysql - SELECT returned no result. Dec 19 08:17:44 ispc saslauthd[2063810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:17:44 ispc saslauthd[2063810]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 08:17:48 ispc sshd[2063815]: Invalid user admin from 45.148.10.121 Dec 19 08:18:01 ispc CRON[2063828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:18:02 ispc CRON[2063828]: pam_unix(cron:session): session closed for user root Dec 19 08:18:05 ispc saslauthd[2063844]: pam_mysql - SELECT returned no result. Dec 19 08:18:05 ispc saslauthd[2063844]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:18:05 ispc saslauthd[2063844]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:19:01 ispc CRON[2063874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:19:02 ispc CRON[2063874]: pam_unix(cron:session): session closed for user root Dec 19 08:20:01 ispc CRON[2063910]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:20:01 ispc CRON[2063911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:20:01 ispc CRON[2063912]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:20:01 ispc CRON[2063913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:20:01 ispc CRON[2063914]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:20:01 ispc CRON[2063912]: pam_unix(cron:session): session closed for user www-data Dec 19 08:20:01 ispc CRON[2063911]: pam_unix(cron:session): session closed for user root Dec 19 08:20:01 ispc CRON[2063914]: pam_unix(cron:session): session closed for user getmail Dec 19 08:20:02 ispc CRON[2063913]: pam_unix(cron:session): session closed for user root Dec 19 08:20:03 ispc CRON[2063910]: pam_unix(cron:session): session closed for user root Dec 19 08:21:01 ispc CRON[2064013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:21:01 ispc CRON[2064012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:21:01 ispc CRON[2064012]: pam_unix(cron:session): session closed for user root Dec 19 08:21:03 ispc CRON[2064013]: pam_unix(cron:session): session closed for user root Dec 19 08:21:34 ispc CRON[2061909]: pam_unix(cron:session): session closed for user root Dec 19 08:21:43 ispc sshd[2064044]: Invalid user martof from 51.79.36.60 Dec 19 08:22:01 ispc CRON[2064047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:22:02 ispc CRON[2064047]: pam_unix(cron:session): session closed for user root Dec 19 08:23:01 ispc CRON[2064078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:23:02 ispc CRON[2064078]: pam_unix(cron:session): session closed for user root Dec 19 08:23:29 ispc saslauthd[2064089]: pam_mysql - SELECT returned no result. Dec 19 08:23:29 ispc saslauthd[2064089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:23:29 ispc saslauthd[2064089]: do_auth : auth failure: [user=postmaster@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 08:23:44 ispc sshd[2064092]: Did not receive identification string from 134.209.84.181 Dec 19 08:24:01 ispc CRON[2064094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:24:02 ispc CRON[2064094]: pam_unix(cron:session): session closed for user root Dec 19 08:25:01 ispc CRON[2064118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:25:01 ispc CRON[2064119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:25:01 ispc CRON[2064120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:25:01 ispc CRON[2064121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:25:01 ispc CRON[2064121]: pam_unix(cron:session): session closed for user getmail Dec 19 08:25:01 ispc CRON[2064119]: pam_unix(cron:session): session closed for user root Dec 19 08:25:02 ispc CRON[2064118]: pam_unix(cron:session): session closed for user root Dec 19 08:25:03 ispc saslauthd[2064219]: pam_mysql - SELECT returned no result. Dec 19 08:25:03 ispc saslauthd[2064219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:25:03 ispc saslauthd[2064219]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:25:03 ispc postfix/smtpd[2064213]: sql auxprop plugin using mysql engine Dec 19 08:25:09 ispc sshd[2064227]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 08:25:09 ispc sshd[2064227]: Invalid user ziplines from 193.110.157.47 Dec 19 08:25:25 ispc saslauthd[2064235]: pam_mysql - SELECT returned no result. Dec 19 08:25:25 ispc saslauthd[2064235]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:25:25 ispc saslauthd[2064235]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:25:32 ispc CRON[2064120]: pam_unix(cron:session): session closed for user root Dec 19 08:26:01 ispc CRON[2064248]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:27:01 ispc CRON[2064294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:27:01 ispc CRON[2064294]: pam_unix(cron:session): session closed for user root Dec 19 08:28:01 ispc CRON[2064354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:28:03 ispc CRON[2064354]: pam_unix(cron:session): session closed for user root Dec 19 08:28:17 ispc postfix/smtpd[2064380]: sql auxprop plugin using mysql engine Dec 19 08:28:18 ispc saslauthd[2064382]: pam_mysql - SELECT returned no result. Dec 19 08:28:18 ispc saslauthd[2064382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:28:18 ispc saslauthd[2064382]: do_auth : auth failure: [user=ec2-user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:29:01 ispc CRON[2064409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:29:02 ispc CRON[2064409]: pam_unix(cron:session): session closed for user root Dec 19 08:30:01 ispc CRON[2064462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:30:01 ispc CRON[2064463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:30:01 ispc CRON[2064464]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:30:01 ispc CRON[2064465]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:30:01 ispc CRON[2064466]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:30:01 ispc CRON[2064464]: pam_unix(cron:session): session closed for user www-data Dec 19 08:30:01 ispc CRON[2064463]: pam_unix(cron:session): session closed for user root Dec 19 08:30:01 ispc CRON[2064466]: pam_unix(cron:session): session closed for user getmail Dec 19 08:30:02 ispc CRON[2064465]: pam_unix(cron:session): session closed for user root Dec 19 08:30:03 ispc CRON[2064462]: pam_unix(cron:session): session closed for user root Dec 19 08:30:14 ispc sshd[2064546]: Did not receive identification string from 192.227.134.84 Dec 19 08:31:01 ispc CRON[2064586]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:31:02 ispc sshd[2064590]: Invalid user martof from 185.208.181.153 Dec 19 08:31:02 ispc CRON[2064586]: pam_unix(cron:session): session closed for user root Dec 19 08:32:01 ispc CRON[2064637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:32:02 ispc CRON[2064637]: pam_unix(cron:session): session closed for user root Dec 19 08:32:28 ispc postfix/smtpd[2064668]: sql auxprop plugin using mysql engine Dec 19 08:32:29 ispc saslauthd[2064671]: pam_mysql - SELECT returned no result. Dec 19 08:32:29 ispc saslauthd[2064671]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:32:29 ispc saslauthd[2064671]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:33:01 ispc CRON[2064698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:33:02 ispc CRON[2064698]: pam_unix(cron:session): session closed for user root Dec 19 08:33:27 ispc sshd[2064725]: Invalid user martof from 51.159.91.86 Dec 19 08:34:01 ispc CRON[2064758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:34:02 ispc CRON[2064758]: pam_unix(cron:session): session closed for user root Dec 19 08:35:01 ispc CRON[2064806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:35:01 ispc CRON[2064808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:35:01 ispc CRON[2064809]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:35:01 ispc CRON[2064807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:35:01 ispc CRON[2064807]: pam_unix(cron:session): session closed for user root Dec 19 08:35:01 ispc CRON[2064809]: pam_unix(cron:session): session closed for user getmail Dec 19 08:35:02 ispc CRON[2064808]: pam_unix(cron:session): session closed for user root Dec 19 08:35:02 ispc CRON[2064806]: pam_unix(cron:session): session closed for user root Dec 19 08:35:39 ispc sshd[2064902]: Invalid user racingkennel from 185.12.204.239 Dec 19 08:36:01 ispc CRON[2064922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:36:02 ispc CRON[2064922]: pam_unix(cron:session): session closed for user root Dec 19 08:37:01 ispc CRON[2064966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:37:02 ispc CRON[2064966]: pam_unix(cron:session): session closed for user root Dec 19 08:38:01 ispc CRON[2065016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:38:02 ispc CRON[2065016]: pam_unix(cron:session): session closed for user root Dec 19 08:39:01 ispc CRON[2065067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:39:01 ispc CRON[2065068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:39:01 ispc CRON[2065067]: pam_unix(cron:session): session closed for user root Dec 19 08:39:02 ispc CRON[2065068]: pam_unix(cron:session): session closed for user root Dec 19 08:39:31 ispc sshd[2065102]: Invalid user matlbula from 35.239.77.168 Dec 19 08:40:01 ispc CRON[2065117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:40:01 ispc CRON[2065118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:40:01 ispc CRON[2065119]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:40:01 ispc CRON[2065120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:40:01 ispc CRON[2065121]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:40:01 ispc CRON[2065118]: pam_unix(cron:session): session closed for user root Dec 19 08:40:01 ispc CRON[2065119]: pam_unix(cron:session): session closed for user www-data Dec 19 08:40:01 ispc CRON[2065121]: pam_unix(cron:session): session closed for user getmail Dec 19 08:40:01 ispc postfix/smtpd[2065148]: sql auxprop plugin using mysql engine Dec 19 08:40:01 ispc CRON[2065120]: pam_unix(cron:session): session closed for user root Dec 19 08:40:01 ispc CRON[2065117]: pam_unix(cron:session): session closed for user root Dec 19 08:40:01 ispc saslauthd[2065198]: pam_mysql - SELECT returned no result. Dec 19 08:40:01 ispc saslauthd[2065198]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:40:01 ispc saslauthd[2065198]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:41:01 ispc CRON[2065232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:41:02 ispc CRON[2065232]: pam_unix(cron:session): session closed for user root Dec 19 08:42:01 ispc CRON[2065271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:42:01 ispc CRON[2065271]: pam_unix(cron:session): session closed for user root Dec 19 08:42:19 ispc sshd[2065290]: Did not receive identification string from 206.189.106.49 Dec 19 08:42:39 ispc sshd[2065299]: Invalid user admin from 222.236.46.74 Dec 19 08:43:01 ispc CRON[2065322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:43:01 ispc CRON[2065322]: pam_unix(cron:session): session closed for user root Dec 19 08:43:11 ispc postfix/smtpd[2065338]: sql auxprop plugin using mysql engine Dec 19 08:43:13 ispc saslauthd[2065340]: pam_mysql - SELECT returned no result. Dec 19 08:43:13 ispc saslauthd[2065340]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:43:13 ispc saslauthd[2065340]: do_auth : auth failure: [user=vagrant] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:44:01 ispc CRON[2065366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:44:02 ispc CRON[2065366]: pam_unix(cron:session): session closed for user root Dec 19 08:44:48 ispc sshd[2065396]: Invalid user blceu from 220.196.191.58 Dec 19 08:45:01 ispc CRON[2065409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:45:01 ispc CRON[2065408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:45:01 ispc CRON[2065410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:45:01 ispc CRON[2065411]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:45:01 ispc CRON[2065409]: pam_unix(cron:session): session closed for user root Dec 19 08:45:01 ispc CRON[2065411]: pam_unix(cron:session): session closed for user getmail Dec 19 08:45:01 ispc CRON[2065410]: pam_unix(cron:session): session closed for user root Dec 19 08:45:01 ispc CRON[2065408]: pam_unix(cron:session): session closed for user root Dec 19 08:46:01 ispc CRON[2065515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:46:02 ispc CRON[2065515]: pam_unix(cron:session): session closed for user root Dec 19 08:46:31 ispc postfix/smtpd[2065539]: sql auxprop plugin using mysql engine Dec 19 08:46:31 ispc CRON[2064248]: pam_unix(cron:session): session closed for user root Dec 19 08:47:01 ispc CRON[2065546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:47:02 ispc CRON[2065546]: pam_unix(cron:session): session closed for user root Dec 19 08:47:39 ispc sshd[2065565]: Did not receive identification string from 45.140.17.97 Dec 19 08:47:51 ispc saslauthd[2065572]: pam_mysql - SELECT returned no result. Dec 19 08:47:51 ispc saslauthd[2065572]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:47:51 ispc saslauthd[2065572]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:48:01 ispc CRON[2065575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:48:01 ispc CRON[2065575]: pam_unix(cron:session): session closed for user root Dec 19 08:49:01 ispc CRON[2065599]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:49:02 ispc CRON[2065599]: pam_unix(cron:session): session closed for user root Dec 19 08:50:01 ispc CRON[2065624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:50:01 ispc CRON[2065625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:50:01 ispc CRON[2065626]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 08:50:01 ispc CRON[2065627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:50:01 ispc CRON[2065628]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:50:01 ispc CRON[2065625]: pam_unix(cron:session): session closed for user root Dec 19 08:50:01 ispc CRON[2065626]: pam_unix(cron:session): session closed for user www-data Dec 19 08:50:02 ispc CRON[2065628]: pam_unix(cron:session): session closed for user getmail Dec 19 08:50:03 ispc CRON[2065624]: pam_unix(cron:session): session closed for user root Dec 19 08:50:36 ispc CRON[2065627]: pam_unix(cron:session): session closed for user root Dec 19 08:51:01 ispc CRON[2065738]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:52:01 ispc CRON[2065779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:52:01 ispc CRON[2065779]: pam_unix(cron:session): session closed for user root Dec 19 08:52:18 ispc sshd[2065801]: Invalid user ziplines from 51.91.247.10 Dec 19 08:53:02 ispc CRON[2065831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:53:02 ispc CRON[2065831]: pam_unix(cron:session): session closed for user root Dec 19 08:54:01 ispc CRON[2065872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:54:01 ispc CRON[2065872]: pam_unix(cron:session): session closed for user root Dec 19 08:54:54 ispc postfix/smtpd[2065913]: sql auxprop plugin using mysql engine Dec 19 08:54:59 ispc sshd[2065920]: Invalid user messagebus from 45.148.10.121 Dec 19 08:55:01 ispc CRON[2065928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:55:01 ispc CRON[2065929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:55:01 ispc CRON[2065930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:55:01 ispc CRON[2065931]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 08:55:02 ispc CRON[2065929]: pam_unix(cron:session): session closed for user root Dec 19 08:55:02 ispc CRON[2065931]: pam_unix(cron:session): session closed for user getmail Dec 19 08:55:02 ispc CRON[2065930]: pam_unix(cron:session): session closed for user root Dec 19 08:55:02 ispc CRON[2065928]: pam_unix(cron:session): session closed for user root Dec 19 08:55:37 ispc saslauthd[2066025]: pam_mysql - SELECT returned no result. Dec 19 08:55:37 ispc saslauthd[2066025]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:55:37 ispc saslauthd[2066025]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:56:01 ispc CRON[2066039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:56:02 ispc CRON[2066039]: pam_unix(cron:session): session closed for user root Dec 19 08:57:01 ispc CRON[2066085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:57:02 ispc CRON[2066085]: pam_unix(cron:session): session closed for user root Dec 19 08:58:01 ispc CRON[2066132]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:58:01 ispc CRON[2066132]: pam_unix(cron:session): session closed for user root Dec 19 08:58:16 ispc postfix/smtpd[2066150]: sql auxprop plugin using mysql engine Dec 19 08:58:18 ispc saslauthd[2066152]: pam_mysql - SELECT returned no result. Dec 19 08:58:18 ispc saslauthd[2066152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 08:58:18 ispc saslauthd[2066152]: do_auth : auth failure: [user=azureuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 08:59:01 ispc CRON[2066177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 08:59:02 ispc CRON[2066177]: pam_unix(cron:session): session closed for user root Dec 19 08:59:39 ispc sshd[2066205]: Invalid user diamantdi from 213.165.71.107 Dec 19 09:00:01 ispc CRON[2066224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:00:01 ispc CRON[2066227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:00:01 ispc CRON[2066225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:00:01 ispc CRON[2066226]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:00:01 ispc CRON[2066229]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:00:01 ispc CRON[2066228]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:00:01 ispc CRON[2066225]: pam_unix(cron:session): session closed for user root Dec 19 09:00:01 ispc CRON[2066226]: pam_unix(cron:session): session closed for user www-data Dec 19 09:00:01 ispc CRON[2066229]: pam_unix(cron:session): session closed for user getmail Dec 19 09:00:02 ispc CRON[2066228]: pam_unix(cron:session): session closed for user root Dec 19 09:00:02 ispc CRON[2066227]: pam_unix(cron:session): session closed for user root Dec 19 09:00:02 ispc CRON[2066224]: pam_unix(cron:session): session closed for user root Dec 19 09:01:01 ispc CRON[2066412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:01:01 ispc CRON[2066412]: pam_unix(cron:session): session closed for user root Dec 19 09:02:01 ispc CRON[2066454]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 09:02:01 ispc CRON[2066455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:02:02 ispc CRON[2066455]: pam_unix(cron:session): session closed for user root Dec 19 09:02:47 ispc sshd[2067319]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:02:56 ispc CRON[2066454]: pam_unix(cron:session): session closed for user logcheck Dec 19 09:03:00 ispc postfix/smtpd[2067514]: sql auxprop plugin using mysql engine Dec 19 09:03:01 ispc CRON[2067521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:03:01 ispc CRON[2067521]: pam_unix(cron:session): session closed for user root Dec 19 09:03:29 ispc postfix/smtpd[2067548]: sql auxprop plugin using mysql engine Dec 19 09:03:29 ispc saslauthd[2067551]: pam_mysql - SELECT returned no result. Dec 19 09:03:29 ispc saslauthd[2067551]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:03:29 ispc saslauthd[2067551]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:04:01 ispc CRON[2067569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:04:02 ispc CRON[2067569]: pam_unix(cron:session): session closed for user root Dec 19 09:05:01 ispc CRON[2067611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:05:01 ispc CRON[2067614]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:05:01 ispc CRON[2067613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:05:01 ispc CRON[2067612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:05:01 ispc CRON[2067612]: pam_unix(cron:session): session closed for user root Dec 19 09:05:01 ispc CRON[2067614]: pam_unix(cron:session): session closed for user getmail Dec 19 09:05:01 ispc CRON[2067613]: pam_unix(cron:session): session closed for user root Dec 19 09:05:01 ispc CRON[2067611]: pam_unix(cron:session): session closed for user root Dec 19 09:06:01 ispc CRON[2067715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:06:02 ispc CRON[2067715]: pam_unix(cron:session): session closed for user root Dec 19 09:06:17 ispc sshd[2067739]: Invalid user ziplines from 51.79.36.60 Dec 19 09:06:46 ispc sshd[2067749]: Invalid user matlbula from 117.50.70.169 Dec 19 09:07:01 ispc CRON[2067764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:07:01 ispc CRON[2067764]: pam_unix(cron:session): session closed for user root Dec 19 09:08:01 ispc CRON[2067810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:08:02 ispc CRON[2067810]: pam_unix(cron:session): session closed for user root Dec 19 09:09:01 ispc CRON[2067862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:09:01 ispc CRON[2067863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:09:01 ispc CRON[2067862]: pam_unix(cron:session): session closed for user root Dec 19 09:09:01 ispc CRON[2067863]: pam_unix(cron:session): session closed for user root Dec 19 09:10:01 ispc CRON[2067927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:10:01 ispc CRON[2067926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:10:01 ispc CRON[2067928]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:10:01 ispc CRON[2067929]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:10:01 ispc CRON[2067930]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:10:01 ispc CRON[2067927]: pam_unix(cron:session): session closed for user root Dec 19 09:10:01 ispc CRON[2067928]: pam_unix(cron:session): session closed for user www-data Dec 19 09:10:01 ispc CRON[2067930]: pam_unix(cron:session): session closed for user getmail Dec 19 09:10:02 ispc CRON[2067929]: pam_unix(cron:session): session closed for user root Dec 19 09:10:02 ispc CRON[2067926]: pam_unix(cron:session): session closed for user root Dec 19 09:10:15 ispc sshd[2068010]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:10:17 ispc sshd[2068012]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:10:17 ispc sshd[2068012]: Invalid user klape from 189.89.20.45 Dec 19 09:10:18 ispc postfix/smtpd[2068016]: sql auxprop plugin using mysql engine Dec 19 09:10:19 ispc sshd[2068014]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:10:19 ispc sshd[2068014]: Invalid user ubuntu from 189.89.20.45 Dec 19 09:10:38 ispc sshd[2068030]: Invalid user anoraksro from 185.12.204.239 Dec 19 09:11:01 ispc CRON[2068049]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:11:02 ispc CRON[2068049]: pam_unix(cron:session): session closed for user root Dec 19 09:11:13 ispc postfix/smtpd[2068064]: sql auxprop plugin using mysql engine Dec 19 09:11:14 ispc saslauthd[2068066]: pam_mysql - SELECT returned no result. Dec 19 09:11:14 ispc saslauthd[2068066]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:11:14 ispc saslauthd[2068066]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:11:20 ispc CRON[2065738]: pam_unix(cron:session): session closed for user root Dec 19 09:12:01 ispc CRON[2068078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:12:02 ispc CRON[2068078]: pam_unix(cron:session): session closed for user root Dec 19 09:12:30 ispc saslauthd[2068095]: pam_mysql - SELECT returned no result. Dec 19 09:12:30 ispc saslauthd[2068095]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:12:30 ispc saslauthd[2068095]: do_auth : auth failure: [user=web@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 09:12:40 ispc saslauthd[2068096]: pam_mysql - SELECT returned no result. Dec 19 09:12:40 ispc saslauthd[2068096]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:12:40 ispc saslauthd[2068096]: do_auth : auth failure: [user=Admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:13:01 ispc CRON[2068110]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:13:02 ispc CRON[2068110]: pam_unix(cron:session): session closed for user root Dec 19 09:14:01 ispc CRON[2068130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:14:01 ispc CRON[2068130]: pam_unix(cron:session): session closed for user root Dec 19 09:14:42 ispc sshd[2068145]: Did not receive identification string from 8.134.148.73 Dec 19 09:14:49 ispc sshd[2068149]: Invalid user NL5xUDpV2xRa from 8.134.148.73 Dec 19 09:15:02 ispc CRON[2068154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:15:02 ispc CRON[2068155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:15:02 ispc CRON[2068156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:15:02 ispc CRON[2068157]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:15:02 ispc CRON[2068155]: pam_unix(cron:session): session closed for user root Dec 19 09:15:02 ispc CRON[2068157]: pam_unix(cron:session): session closed for user getmail Dec 19 09:15:02 ispc CRON[2068154]: pam_unix(cron:session): session closed for user root Dec 19 09:15:43 ispc CRON[2068156]: pam_unix(cron:session): session closed for user root Dec 19 09:15:44 ispc postfix/smtpd[2068347]: sql auxprop plugin using mysql engine Dec 19 09:16:01 ispc CRON[2068352]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:16:03 ispc sshd[2068359]: Invalid user martof from 103.100.209.172 Dec 19 09:17:01 ispc CRON[2068394]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:17:01 ispc CRON[2068394]: pam_unix(cron:session): session closed for user root Dec 19 09:17:27 ispc postfix/smtpd[2068422]: sql auxprop plugin using mysql engine Dec 19 09:17:28 ispc saslauthd[2068424]: pam_mysql - SELECT returned no result. Dec 19 09:17:28 ispc saslauthd[2068424]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:17:28 ispc saslauthd[2068424]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:17:33 ispc saslauthd[2068429]: pam_mysql - SELECT returned no result. Dec 19 09:17:33 ispc saslauthd[2068429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:17:33 ispc saslauthd[2068429]: do_auth : auth failure: [user=postmaster@antiqkabinet.cz] [service=smtp] [realm=antiqkabinet.cz] [mech=pam] [reason=PAM auth error] Dec 19 09:17:42 ispc sshd[2068433]: Invalid user admin from 206.189.106.49 Dec 19 09:18:01 ispc CRON[2068449]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 09:18:01 ispc CRON[2068450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:18:02 ispc CRON[2068450]: pam_unix(cron:session): session closed for user root Dec 19 09:18:05 ispc CRON[2068449]: pam_unix(cron:session): session closed for user amavis Dec 19 09:18:06 ispc postfix/smtpd[2068480]: sql auxprop plugin using mysql engine Dec 19 09:18:18 ispc sshd[2068491]: Invalid user admin from 206.189.106.49 Dec 19 09:18:54 ispc sshd[2068511]: Invalid user admin from 206.189.106.49 Dec 19 09:19:01 ispc CRON[2068515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:19:02 ispc CRON[2068515]: pam_unix(cron:session): session closed for user root Dec 19 09:19:04 ispc saslauthd[2068530]: pam_mysql - SELECT returned no result. Dec 19 09:19:04 ispc saslauthd[2068530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:19:04 ispc saslauthd[2068530]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:19:08 ispc sshd[2068531]: Did not receive identification string from 192.227.134.84 Dec 19 09:19:29 ispc sshd[2068540]: Invalid user admin from 206.189.106.49 Dec 19 09:20:01 ispc CRON[2068556]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:20:01 ispc CRON[2068557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:20:01 ispc CRON[2068558]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:20:01 ispc CRON[2068559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:20:01 ispc CRON[2068560]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:20:01 ispc CRON[2068557]: pam_unix(cron:session): session closed for user root Dec 19 09:20:01 ispc CRON[2068558]: pam_unix(cron:session): session closed for user www-data Dec 19 09:20:01 ispc CRON[2068560]: pam_unix(cron:session): session closed for user getmail Dec 19 09:20:01 ispc CRON[2068559]: pam_unix(cron:session): session closed for user root Dec 19 09:20:01 ispc CRON[2068556]: pam_unix(cron:session): session closed for user root Dec 19 09:20:05 ispc sshd[2068639]: Invalid user admin from 206.189.106.49 Dec 19 09:20:42 ispc sshd[2068656]: Invalid user admin from 206.189.106.49 Dec 19 09:21:01 ispc CRON[2068683]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:21:01 ispc CRON[2068684]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:21:01 ispc CRON[2068683]: pam_unix(cron:session): session closed for user root Dec 19 09:21:02 ispc sshd[2068681]: Invalid user martof from 148.216.54.17 Dec 19 09:21:02 ispc CRON[2068684]: pam_unix(cron:session): session closed for user root Dec 19 09:22:01 ispc CRON[2068724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:22:02 ispc CRON[2068724]: pam_unix(cron:session): session closed for user root Dec 19 09:23:01 ispc CRON[2068770]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:23:02 ispc CRON[2068770]: pam_unix(cron:session): session closed for user root Dec 19 09:24:01 ispc CRON[2068811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:24:01 ispc CRON[2068811]: pam_unix(cron:session): session closed for user root Dec 19 09:25:01 ispc CRON[2068847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:25:01 ispc CRON[2068848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:25:01 ispc CRON[2068849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:25:01 ispc CRON[2068850]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:25:01 ispc CRON[2068848]: pam_unix(cron:session): session closed for user root Dec 19 09:25:01 ispc CRON[2068850]: pam_unix(cron:session): session closed for user getmail Dec 19 09:25:01 ispc CRON[2068849]: pam_unix(cron:session): session closed for user root Dec 19 09:25:02 ispc CRON[2068847]: pam_unix(cron:session): session closed for user root Dec 19 09:25:17 ispc sshd[2068930]: Invalid user martof from 203.146.21.153 Dec 19 09:26:01 ispc CRON[2068962]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:26:01 ispc CRON[2068962]: pam_unix(cron:session): session closed for user root Dec 19 09:26:53 ispc postfix/smtpd[2068998]: sql auxprop plugin using mysql engine Dec 19 09:26:53 ispc saslauthd[2069001]: pam_mysql - SELECT returned no result. Dec 19 09:26:53 ispc saslauthd[2069001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:26:53 ispc saslauthd[2069001]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:27:01 ispc CRON[2069002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:27:02 ispc CRON[2069002]: pam_unix(cron:session): session closed for user root Dec 19 09:27:36 ispc saslauthd[2069030]: pam_mysql - SELECT returned no result. Dec 19 09:27:36 ispc saslauthd[2069030]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:27:36 ispc saslauthd[2069030]: do_auth : auth failure: [user=Admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:28:01 ispc CRON[2069044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:28:02 ispc CRON[2069044]: pam_unix(cron:session): session closed for user root Dec 19 09:28:37 ispc sshd[2069079]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:29:01 ispc CRON[2069089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:29:01 ispc CRON[2069089]: pam_unix(cron:session): session closed for user root Dec 19 09:30:01 ispc CRON[2069128]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:30:01 ispc CRON[2069126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:30:01 ispc CRON[2069127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:30:01 ispc CRON[2069129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:30:01 ispc CRON[2069130]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:30:01 ispc CRON[2069128]: pam_unix(cron:session): session closed for user www-data Dec 19 09:30:01 ispc CRON[2069127]: pam_unix(cron:session): session closed for user root Dec 19 09:30:01 ispc CRON[2069130]: pam_unix(cron:session): session closed for user getmail Dec 19 09:30:02 ispc CRON[2069129]: pam_unix(cron:session): session closed for user root Dec 19 09:30:03 ispc CRON[2069126]: pam_unix(cron:session): session closed for user root Dec 19 09:31:01 ispc CRON[2069232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:31:01 ispc CRON[2069232]: pam_unix(cron:session): session closed for user root Dec 19 09:32:01 ispc CRON[2069272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:32:02 ispc CRON[2069272]: pam_unix(cron:session): session closed for user root Dec 19 09:32:43 ispc sshd[2069302]: Invalid user tshombeknife from 175.125.95.234 Dec 19 09:32:54 ispc postfix/smtpd[2069318]: sql auxprop plugin using mysql engine Dec 19 09:33:01 ispc CRON[2069323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:33:01 ispc CRON[2069323]: pam_unix(cron:session): session closed for user root Dec 19 09:34:01 ispc CRON[2069357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:34:02 ispc CRON[2069357]: pam_unix(cron:session): session closed for user root Dec 19 09:34:22 ispc sshd[2069379]: Invalid user ziplines from 103.100.209.172 Dec 19 09:34:28 ispc postfix/smtpd[2069385]: sql auxprop plugin using mysql engine Dec 19 09:34:29 ispc saslauthd[2069387]: pam_mysql - SELECT returned no result. Dec 19 09:34:29 ispc saslauthd[2069387]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:34:29 ispc saslauthd[2069387]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:35:01 ispc CRON[2069400]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:35:01 ispc CRON[2069401]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:35:01 ispc CRON[2069402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:35:01 ispc CRON[2069403]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:35:01 ispc CRON[2069401]: pam_unix(cron:session): session closed for user root Dec 19 09:35:01 ispc CRON[2069403]: pam_unix(cron:session): session closed for user getmail Dec 19 09:35:01 ispc CRON[2069402]: pam_unix(cron:session): session closed for user root Dec 19 09:35:01 ispc CRON[2069400]: pam_unix(cron:session): session closed for user root Dec 19 09:36:01 ispc CRON[2069505]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:36:01 ispc CRON[2069505]: pam_unix(cron:session): session closed for user root Dec 19 09:36:28 ispc postfix/smtpd[2069529]: sql auxprop plugin using mysql engine Dec 19 09:36:29 ispc CRON[2068352]: pam_unix(cron:session): session closed for user root Dec 19 09:37:01 ispc CRON[2069535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:37:02 ispc CRON[2069535]: pam_unix(cron:session): session closed for user root Dec 19 09:37:31 ispc sshd[2069549]: Invalid user ziplines from 203.146.21.153 Dec 19 09:38:01 ispc CRON[2069557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:38:02 ispc CRON[2069557]: pam_unix(cron:session): session closed for user root Dec 19 09:39:01 ispc CRON[2069578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:39:01 ispc CRON[2069579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:39:01 ispc CRON[2069578]: pam_unix(cron:session): session closed for user root Dec 19 09:39:01 ispc CRON[2069579]: pam_unix(cron:session): session closed for user root Dec 19 09:39:36 ispc sshd[2069603]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:40:01 ispc CRON[2069611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:40:02 ispc CRON[2069608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:40:02 ispc CRON[2069609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:40:02 ispc CRON[2069610]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:40:02 ispc CRON[2069612]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:40:02 ispc CRON[2069609]: pam_unix(cron:session): session closed for user root Dec 19 09:40:02 ispc CRON[2069610]: pam_unix(cron:session): session closed for user www-data Dec 19 09:40:02 ispc CRON[2069612]: pam_unix(cron:session): session closed for user getmail Dec 19 09:40:02 ispc CRON[2069608]: pam_unix(cron:session): session closed for user root Dec 19 09:40:15 ispc saslauthd[2069719]: pam_mysql - SELECT returned no result. Dec 19 09:40:15 ispc saslauthd[2069719]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:40:15 ispc saslauthd[2069719]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:40:40 ispc CRON[2069611]: pam_unix(cron:session): session closed for user root Dec 19 09:41:01 ispc CRON[2069721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:42:01 ispc CRON[2069766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:42:02 ispc CRON[2069766]: pam_unix(cron:session): session closed for user root Dec 19 09:42:08 ispc postfix/smtpd[2069783]: sql auxprop plugin using mysql engine Dec 19 09:42:08 ispc saslauthd[2069785]: pam_mysql - SELECT returned no result. Dec 19 09:42:08 ispc saslauthd[2069785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:42:08 ispc saslauthd[2069785]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:42:30 ispc saslauthd[2069797]: pam_mysql - SELECT returned no result. Dec 19 09:42:30 ispc saslauthd[2069797]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:42:30 ispc saslauthd[2069797]: do_auth : auth failure: [user=Admin5] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:43:01 ispc CRON[2069819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:43:01 ispc CRON[2069819]: pam_unix(cron:session): session closed for user root Dec 19 09:44:01 ispc CRON[2069858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:44:02 ispc CRON[2069858]: pam_unix(cron:session): session closed for user root Dec 19 09:45:01 ispc CRON[2069900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:45:01 ispc CRON[2069898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:45:01 ispc CRON[2069899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:45:01 ispc CRON[2069901]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:45:01 ispc CRON[2069899]: pam_unix(cron:session): session closed for user root Dec 19 09:45:01 ispc CRON[2069901]: pam_unix(cron:session): session closed for user getmail Dec 19 09:45:01 ispc CRON[2069900]: pam_unix(cron:session): session closed for user root Dec 19 09:45:01 ispc CRON[2069898]: pam_unix(cron:session): session closed for user root Dec 19 09:46:01 ispc CRON[2070002]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:46:02 ispc CRON[2070002]: pam_unix(cron:session): session closed for user root Dec 19 09:46:24 ispc sshd[2070026]: Bad protocol version identification '\003' from 185.243.96.116 Dec 19 09:47:01 ispc CRON[2070041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:47:01 ispc CRON[2070041]: pam_unix(cron:session): session closed for user root Dec 19 09:48:01 ispc CRON[2070081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:48:02 ispc CRON[2070081]: pam_unix(cron:session): session closed for user root Dec 19 09:49:01 ispc CRON[2070124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:49:01 ispc CRON[2070124]: pam_unix(cron:session): session closed for user root Dec 19 09:49:16 ispc sshd[2070140]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 09:49:16 ispc sshd[2070140]: Invalid user from 2.57.121.25 Dec 19 09:49:16 ispc sshd[2070142]: Invalid user martof from 165.227.38.205 Dec 19 09:49:48 ispc postfix/smtpd[2070163]: sql auxprop plugin using mysql engine Dec 19 09:49:48 ispc saslauthd[2070166]: pam_mysql - SELECT returned no result. Dec 19 09:49:48 ispc saslauthd[2070166]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:49:48 ispc saslauthd[2070166]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:50:01 ispc CRON[2070171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:50:01 ispc CRON[2070175]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:50:01 ispc CRON[2070172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:50:01 ispc CRON[2070174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:50:01 ispc CRON[2070173]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 09:50:01 ispc CRON[2070173]: pam_unix(cron:session): session closed for user www-data Dec 19 09:50:01 ispc CRON[2070175]: pam_unix(cron:session): session closed for user getmail Dec 19 09:50:01 ispc CRON[2070172]: pam_unix(cron:session): session closed for user root Dec 19 09:50:01 ispc CRON[2070174]: pam_unix(cron:session): session closed for user root Dec 19 09:50:02 ispc CRON[2070171]: pam_unix(cron:session): session closed for user root Dec 19 09:50:56 ispc sshd[2070272]: Invalid user tshombeknife from 185.12.204.239 Dec 19 09:51:01 ispc CRON[2070284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:51:01 ispc CRON[2070284]: pam_unix(cron:session): session closed for user root Dec 19 09:51:10 ispc sshd[2070300]: Invalid user ziplines from 57.131.22.60 Dec 19 09:52:01 ispc CRON[2070326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:52:01 ispc CRON[2070327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:52:02 ispc CRON[2070327]: pam_unix(cron:session): session closed for user root Dec 19 09:53:01 ispc CRON[2070381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:53:01 ispc CRON[2070381]: pam_unix(cron:session): session closed for user root Dec 19 09:53:13 ispc sshd[2070397]: Bad protocol version identification '\003' from 185.243.96.116 Dec 19 09:53:14 ispc sshd[2070398]: Did not receive identification string from 185.243.96.116 Dec 19 09:53:36 ispc sshd[2070409]: Invalid user blceu from 51.79.36.60 Dec 19 09:54:01 ispc CRON[2070424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:54:02 ispc CRON[2070424]: pam_unix(cron:session): session closed for user root Dec 19 09:55:01 ispc CRON[2070464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:55:01 ispc CRON[2070462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:55:02 ispc CRON[2070465]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 09:55:02 ispc CRON[2070463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:55:02 ispc CRON[2070463]: pam_unix(cron:session): session closed for user root Dec 19 09:55:02 ispc CRON[2070465]: pam_unix(cron:session): session closed for user getmail Dec 19 09:55:02 ispc CRON[2070464]: pam_unix(cron:session): session closed for user root Dec 19 09:55:02 ispc CRON[2070462]: pam_unix(cron:session): session closed for user root Dec 19 09:55:18 ispc CRON[2070326]: pam_unix(cron:session): session closed for user root Dec 19 09:56:01 ispc CRON[2070566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:56:03 ispc CRON[2070566]: pam_unix(cron:session): session closed for user root Dec 19 09:57:01 ispc CRON[2070605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:57:02 ispc CRON[2070605]: pam_unix(cron:session): session closed for user root Dec 19 09:57:17 ispc postfix/smtpd[2070625]: sql auxprop plugin using mysql engine Dec 19 09:57:18 ispc saslauthd[2070628]: pam_mysql - SELECT returned no result. Dec 19 09:57:18 ispc saslauthd[2070628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:57:18 ispc saslauthd[2070628]: do_auth : auth failure: [user=Administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:57:25 ispc saslauthd[2070633]: pam_mysql - SELECT returned no result. Dec 19 09:57:25 ispc saslauthd[2070633]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 09:57:25 ispc saslauthd[2070633]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 09:58:01 ispc CRON[2070650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:58:01 ispc CRON[2070650]: pam_unix(cron:session): session closed for user root Dec 19 09:59:01 ispc CRON[2070695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 09:59:01 ispc CRON[2070695]: pam_unix(cron:session): session closed for user root Dec 19 10:00:01 ispc CRON[2070732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:00:01 ispc CRON[2070737]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:00:01 ispc CRON[2070733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:00:01 ispc CRON[2070734]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:00:01 ispc CRON[2070735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:00:01 ispc CRON[2070736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:00:01 ispc CRON[2070734]: pam_unix(cron:session): session closed for user www-data Dec 19 10:00:01 ispc CRON[2070733]: pam_unix(cron:session): session closed for user root Dec 19 10:00:01 ispc CRON[2070737]: pam_unix(cron:session): session closed for user getmail Dec 19 10:00:02 ispc CRON[2070736]: pam_unix(cron:session): session closed for user root Dec 19 10:00:02 ispc CRON[2070732]: pam_unix(cron:session): session closed for user root Dec 19 10:00:03 ispc CRON[2070735]: pam_unix(cron:session): session closed for user root Dec 19 10:01:01 ispc CRON[2070918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:01:01 ispc CRON[2070918]: pam_unix(cron:session): session closed for user root Dec 19 10:01:14 ispc CRON[2069721]: pam_unix(cron:session): session closed for user root Dec 19 10:01:14 ispc postfix/smtpd[2070935]: sql auxprop plugin using mysql engine Dec 19 10:02:01 ispc CRON[2070942]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 10:02:01 ispc CRON[2070943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:02:01 ispc CRON[2070943]: pam_unix(cron:session): session closed for user root Dec 19 10:02:57 ispc CRON[2070942]: pam_unix(cron:session): session closed for user logcheck Dec 19 10:03:01 ispc CRON[2071979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:03:01 ispc postfix/smtpd[2071978]: sql auxprop plugin using mysql engine Dec 19 10:03:01 ispc CRON[2071979]: pam_unix(cron:session): session closed for user root Dec 19 10:03:33 ispc saslauthd[2072004]: pam_mysql - SELECT returned no result. Dec 19 10:03:33 ispc saslauthd[2072004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:03:33 ispc saslauthd[2072004]: do_auth : auth failure: [user=admin1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 10:04:01 ispc CRON[2072006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:04:01 ispc CRON[2072006]: pam_unix(cron:session): session closed for user root Dec 19 10:04:56 ispc saslauthd[2072019]: pam_mysql - SELECT returned no result. Dec 19 10:04:56 ispc saslauthd[2072019]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:04:56 ispc saslauthd[2072019]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:05:01 ispc CRON[2072020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:05:01 ispc CRON[2072021]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:05:01 ispc CRON[2072022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:05:01 ispc CRON[2072023]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:05:02 ispc CRON[2072021]: pam_unix(cron:session): session closed for user root Dec 19 10:05:02 ispc CRON[2072023]: pam_unix(cron:session): session closed for user getmail Dec 19 10:05:04 ispc CRON[2072020]: pam_unix(cron:session): session closed for user root Dec 19 10:05:33 ispc CRON[2072022]: pam_unix(cron:session): session closed for user root Dec 19 10:06:01 ispc CRON[2072133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:06:25 ispc sshd[2072154]: Did not receive identification string from 192.227.134.84 Dec 19 10:07:01 ispc CRON[2072168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:07:02 ispc CRON[2072168]: pam_unix(cron:session): session closed for user root Dec 19 10:08:01 ispc CRON[2072211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:08:01 ispc CRON[2072211]: pam_unix(cron:session): session closed for user root Dec 19 10:09:01 ispc CRON[2072251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:09:01 ispc CRON[2072252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:09:02 ispc CRON[2072251]: pam_unix(cron:session): session closed for user root Dec 19 10:09:02 ispc CRON[2072252]: pam_unix(cron:session): session closed for user root Dec 19 10:10:01 ispc CRON[2072302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:10:01 ispc CRON[2072303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:10:01 ispc CRON[2072305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:10:01 ispc CRON[2072306]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:10:01 ispc CRON[2072304]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:10:01 ispc CRON[2072304]: pam_unix(cron:session): session closed for user www-data Dec 19 10:10:01 ispc CRON[2072303]: pam_unix(cron:session): session closed for user root Dec 19 10:10:01 ispc CRON[2072306]: pam_unix(cron:session): session closed for user getmail Dec 19 10:10:02 ispc CRON[2072305]: pam_unix(cron:session): session closed for user root Dec 19 10:10:03 ispc CRON[2072302]: pam_unix(cron:session): session closed for user root Dec 19 10:10:59 ispc sshd[2072406]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 10:10:59 ispc sshd[2072406]: Invalid user ziplines from 103.146.203.212 Dec 19 10:11:01 ispc CRON[2072408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:11:02 ispc CRON[2072408]: pam_unix(cron:session): session closed for user root Dec 19 10:12:01 ispc CRON[2072450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:12:02 ispc CRON[2072450]: pam_unix(cron:session): session closed for user root Dec 19 10:12:12 ispc postfix/smtpd[2072465]: sql auxprop plugin using mysql engine Dec 19 10:12:13 ispc saslauthd[2072468]: pam_mysql - SELECT returned no result. Dec 19 10:12:13 ispc saslauthd[2072468]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:12:13 ispc saslauthd[2072468]: do_auth : auth failure: [user=AdvWebadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:12:36 ispc saslauthd[2072481]: pam_mysql - SELECT returned no result. Dec 19 10:12:36 ispc saslauthd[2072481]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:12:36 ispc saslauthd[2072481]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:13:01 ispc CRON[2072501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:13:03 ispc CRON[2072501]: pam_unix(cron:session): session closed for user root Dec 19 10:14:01 ispc CRON[2072539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:14:01 ispc CRON[2072539]: pam_unix(cron:session): session closed for user root Dec 19 10:14:55 ispc sshd[2072572]: Invalid user blceu from 5.129.195.224 Dec 19 10:15:01 ispc CRON[2072578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:15:01 ispc CRON[2072579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:15:01 ispc CRON[2072580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:15:01 ispc CRON[2072581]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:15:02 ispc CRON[2072579]: pam_unix(cron:session): session closed for user root Dec 19 10:15:02 ispc CRON[2072581]: pam_unix(cron:session): session closed for user getmail Dec 19 10:15:03 ispc CRON[2072580]: pam_unix(cron:session): session closed for user root Dec 19 10:15:04 ispc CRON[2072578]: pam_unix(cron:session): session closed for user root Dec 19 10:16:01 ispc CRON[2072681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:16:01 ispc CRON[2072681]: pam_unix(cron:session): session closed for user root Dec 19 10:17:01 ispc CRON[2072719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:17:03 ispc CRON[2072719]: pam_unix(cron:session): session closed for user root Dec 19 10:18:01 ispc CRON[2072755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:18:02 ispc CRON[2072755]: pam_unix(cron:session): session closed for user root Dec 19 10:18:31 ispc sshd[2072782]: Invalid user martof from 51.79.36.60 Dec 19 10:19:01 ispc CRON[2072799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:19:02 ispc CRON[2072799]: pam_unix(cron:session): session closed for user root Dec 19 10:20:01 ispc CRON[2072837]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:20:01 ispc CRON[2072838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:20:01 ispc CRON[2072839]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:20:01 ispc CRON[2072840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:20:01 ispc CRON[2072841]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:20:01 ispc CRON[2072838]: pam_unix(cron:session): session closed for user root Dec 19 10:20:01 ispc CRON[2072839]: pam_unix(cron:session): session closed for user www-data Dec 19 10:20:01 ispc CRON[2072841]: pam_unix(cron:session): session closed for user getmail Dec 19 10:20:01 ispc CRON[2072840]: pam_unix(cron:session): session closed for user root Dec 19 10:20:03 ispc CRON[2072837]: pam_unix(cron:session): session closed for user root Dec 19 10:20:19 ispc sshd[2072923]: Invalid user martof from 27.254.144.183 Dec 19 10:20:26 ispc postfix/smtpd[2072929]: sql auxprop plugin using mysql engine Dec 19 10:20:26 ispc saslauthd[2072932]: pam_mysql - SELECT returned no result. Dec 19 10:20:26 ispc saslauthd[2072932]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:20:26 ispc saslauthd[2072932]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:21:01 ispc CRON[2072946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:21:01 ispc CRON[2072945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:21:01 ispc CRON[2072945]: pam_unix(cron:session): session closed for user root Dec 19 10:21:01 ispc CRON[2072946]: pam_unix(cron:session): session closed for user root Dec 19 10:22:01 ispc CRON[2072987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:22:02 ispc CRON[2072987]: pam_unix(cron:session): session closed for user root Dec 19 10:22:46 ispc sshd[2073021]: Invalid user ziplines from 185.208.181.153 Dec 19 10:23:01 ispc CRON[2073036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:23:01 ispc CRON[2073036]: pam_unix(cron:session): session closed for user root Dec 19 10:23:17 ispc sshd[2073055]: Invalid user ziplines from 185.208.181.152 Dec 19 10:23:29 ispc sshd[2073064]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 10:23:29 ispc sshd[2073064]: Invalid user blceu from 193.110.157.47 Dec 19 10:23:44 ispc postfix/smtpd[2073071]: sql auxprop plugin using mysql engine Dec 19 10:24:01 ispc CRON[2073081]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:24:02 ispc CRON[2073081]: pam_unix(cron:session): session closed for user root Dec 19 10:25:01 ispc CRON[2073120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:25:01 ispc CRON[2073122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:25:01 ispc CRON[2073123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:25:01 ispc CRON[2073124]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:25:01 ispc CRON[2073122]: pam_unix(cron:session): session closed for user root Dec 19 10:25:01 ispc CRON[2073124]: pam_unix(cron:session): session closed for user getmail Dec 19 10:25:01 ispc CRON[2073123]: pam_unix(cron:session): session closed for user root Dec 19 10:25:01 ispc CRON[2073120]: pam_unix(cron:session): session closed for user root Dec 19 10:25:22 ispc sshd[2073206]: Invalid user klape from 103.164.20.29 Dec 19 10:25:24 ispc sshd[2073208]: Invalid user ubuntu from 103.164.20.29 Dec 19 10:26:01 ispc CRON[2073227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:26:01 ispc CRON[2073227]: pam_unix(cron:session): session closed for user root Dec 19 10:26:17 ispc postfix/smtpd[2073247]: sql auxprop plugin using mysql engine Dec 19 10:26:17 ispc CRON[2072133]: pam_unix(cron:session): session closed for user root Dec 19 10:27:00 ispc saslauthd[2073257]: pam_mysql - SELECT returned no result. Dec 19 10:27:00 ispc saslauthd[2073257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:27:00 ispc saslauthd[2073257]: do_auth : auth failure: [user=Airaya] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:27:01 ispc CRON[2073258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:27:02 ispc CRON[2073258]: pam_unix(cron:session): session closed for user root Dec 19 10:27:53 ispc sshd[2073274]: Invalid user martof from 119.205.233.162 Dec 19 10:28:01 ispc CRON[2073278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:28:02 ispc CRON[2073278]: pam_unix(cron:session): session closed for user root Dec 19 10:28:03 ispc saslauthd[2073291]: pam_mysql - SELECT returned no result. Dec 19 10:28:03 ispc saslauthd[2073291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:28:03 ispc saslauthd[2073291]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:28:20 ispc sshd[2073295]: Invalid user klape from 36.50.177.171 Dec 19 10:28:23 ispc sshd[2073297]: Invalid user ubuntu from 36.50.177.171 Dec 19 10:28:36 ispc sshd[2073299]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 10:28:36 ispc sshd[2073299]: Invalid user martof from 103.146.203.212 Dec 19 10:29:01 ispc CRON[2073302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:29:02 ispc CRON[2073302]: pam_unix(cron:session): session closed for user root Dec 19 10:29:26 ispc sshd[2073316]: Invalid user admin from 45.119.213.109 Dec 19 10:30:01 ispc CRON[2073320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:30:01 ispc CRON[2073321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:30:01 ispc CRON[2073322]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:30:01 ispc CRON[2073323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:30:01 ispc CRON[2073324]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:30:01 ispc CRON[2073321]: pam_unix(cron:session): session closed for user root Dec 19 10:30:01 ispc CRON[2073322]: pam_unix(cron:session): session closed for user www-data Dec 19 10:30:01 ispc CRON[2073324]: pam_unix(cron:session): session closed for user getmail Dec 19 10:30:04 ispc CRON[2073320]: pam_unix(cron:session): session closed for user root Dec 19 10:30:40 ispc CRON[2073323]: pam_unix(cron:session): session closed for user root Dec 19 10:31:01 ispc CRON[2073510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:32:01 ispc CRON[2073546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:32:01 ispc CRON[2073546]: pam_unix(cron:session): session closed for user root Dec 19 10:32:36 ispc sshd[2073574]: Invalid user admin from 45.119.213.109 Dec 19 10:33:01 ispc CRON[2073592]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:33:02 ispc CRON[2073592]: pam_unix(cron:session): session closed for user root Dec 19 10:33:13 ispc sshd[2073611]: Did not receive identification string from 45.140.17.97 Dec 19 10:33:13 ispc postfix/smtpd[2073612]: sql auxprop plugin using mysql engine Dec 19 10:34:01 ispc CRON[2073638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:34:01 ispc CRON[2073638]: pam_unix(cron:session): session closed for user root Dec 19 10:35:01 ispc CRON[2073675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:35:01 ispc CRON[2073676]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:35:01 ispc CRON[2073677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:35:01 ispc CRON[2073678]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:35:01 ispc CRON[2073676]: pam_unix(cron:session): session closed for user root Dec 19 10:35:01 ispc CRON[2073678]: pam_unix(cron:session): session closed for user getmail Dec 19 10:35:02 ispc CRON[2073677]: pam_unix(cron:session): session closed for user root Dec 19 10:35:03 ispc CRON[2073675]: pam_unix(cron:session): session closed for user root Dec 19 10:35:05 ispc sshd[2073751]: Invalid user martof from 85.143.173.172 Dec 19 10:36:01 ispc CRON[2073781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:36:02 ispc CRON[2073781]: pam_unix(cron:session): session closed for user root Dec 19 10:36:04 ispc sshd[2073792]: Bad protocol version identification '\026\003\001' from 118.26.111.94 Dec 19 10:36:23 ispc sshd[2073793]: Did not receive identification string from 118.26.111.94 Dec 19 10:36:25 ispc sshd[2073804]: Protocol major versions differ for 118.26.111.94: SSH-2.0-OpenSSH_5.1p1 Debian-5 vs. SSH-1.5-Server Dec 19 10:37:01 ispc CRON[2073821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:37:02 ispc CRON[2073821]: pam_unix(cron:session): session closed for user root Dec 19 10:38:01 ispc CRON[2073865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:38:01 ispc CRON[2073865]: pam_unix(cron:session): session closed for user root Dec 19 10:38:24 ispc postfix/smtpd[2073891]: sql auxprop plugin using mysql engine Dec 19 10:38:25 ispc saslauthd[2073894]: pam_mysql - SELECT returned no result. Dec 19 10:38:25 ispc saslauthd[2073894]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:38:25 ispc saslauthd[2073894]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:39:01 ispc CRON[2073913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:39:01 ispc CRON[2073914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:39:01 ispc CRON[2073913]: pam_unix(cron:session): session closed for user root Dec 19 10:39:02 ispc CRON[2073914]: pam_unix(cron:session): session closed for user root Dec 19 10:40:01 ispc CRON[2073963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:40:01 ispc CRON[2073964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:40:01 ispc CRON[2073965]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:40:01 ispc CRON[2073966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:40:01 ispc CRON[2073967]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:40:01 ispc CRON[2073964]: pam_unix(cron:session): session closed for user root Dec 19 10:40:01 ispc CRON[2073965]: pam_unix(cron:session): session closed for user www-data Dec 19 10:40:01 ispc CRON[2073967]: pam_unix(cron:session): session closed for user getmail Dec 19 10:40:01 ispc CRON[2073966]: pam_unix(cron:session): session closed for user root Dec 19 10:40:01 ispc CRON[2073963]: pam_unix(cron:session): session closed for user root Dec 19 10:41:01 ispc CRON[2074068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:41:02 ispc CRON[2074068]: pam_unix(cron:session): session closed for user root Dec 19 10:41:44 ispc postfix/smtpd[2074095]: sql auxprop plugin using mysql engine Dec 19 10:41:44 ispc sshd[2074097]: Invalid user matlbula from 51.159.18.215 Dec 19 10:41:45 ispc saslauthd[2074099]: pam_mysql - SELECT returned no result. Dec 19 10:41:45 ispc saslauthd[2074099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:41:45 ispc saslauthd[2074099]: do_auth : auth failure: [user=Any] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:42:01 ispc CRON[2074105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:42:01 ispc CRON[2074105]: pam_unix(cron:session): session closed for user root Dec 19 10:42:48 ispc sshd[2074137]: Invalid user blceu from 103.100.209.172 Dec 19 10:43:01 ispc CRON[2074150]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:43:02 ispc CRON[2074150]: pam_unix(cron:session): session closed for user root Dec 19 10:43:53 ispc sshd[2074183]: Invalid user ziplines from 211.45.175.153 Dec 19 10:44:01 ispc CRON[2074189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:44:03 ispc CRON[2074189]: pam_unix(cron:session): session closed for user root Dec 19 10:44:35 ispc sshd[2074217]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 10:44:35 ispc sshd[2074217]: Invalid user from 2.57.121.25 Dec 19 10:45:01 ispc CRON[2074230]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:45:01 ispc CRON[2074231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:45:01 ispc CRON[2074232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:45:01 ispc CRON[2074233]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:45:01 ispc CRON[2074231]: pam_unix(cron:session): session closed for user root Dec 19 10:45:01 ispc CRON[2074233]: pam_unix(cron:session): session closed for user getmail Dec 19 10:45:01 ispc CRON[2074232]: pam_unix(cron:session): session closed for user root Dec 19 10:45:01 ispc CRON[2074230]: pam_unix(cron:session): session closed for user root Dec 19 10:45:10 ispc postfix/smtpd[2074310]: sql auxprop plugin using mysql engine Dec 19 10:45:17 ispc postfix/smtpd[2074323]: sql auxprop plugin using mysql engine Dec 19 10:46:01 ispc CRON[2074351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:46:01 ispc CRON[2074351]: pam_unix(cron:session): session closed for user root Dec 19 10:46:05 ispc sshd[2074366]: Invalid user diamantdi from 213.165.71.107 Dec 19 10:47:01 ispc CRON[2074390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:47:02 ispc CRON[2074390]: pam_unix(cron:session): session closed for user root Dec 19 10:47:37 ispc postfix/smtpd[2074419]: sql auxprop plugin using mysql engine Dec 19 10:47:38 ispc saslauthd[2074421]: pam_mysql - SELECT returned no result. Dec 19 10:47:38 ispc saslauthd[2074421]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:47:38 ispc saslauthd[2074421]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:48:01 ispc CRON[2074436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:48:02 ispc CRON[2074436]: pam_unix(cron:session): session closed for user root Dec 19 10:48:12 ispc postfix/smtpd[2074453]: sql auxprop plugin using mysql engine Dec 19 10:48:12 ispc postfix/smtpd[2074455]: sql auxprop plugin using mysql engine Dec 19 10:48:23 ispc postfix/smtpd[2074461]: sql auxprop plugin using mysql engine Dec 19 10:49:01 ispc CRON[2074486]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:49:02 ispc CRON[2074486]: pam_unix(cron:session): session closed for user root Dec 19 10:50:01 ispc CRON[2074528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:50:01 ispc CRON[2074530]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:50:01 ispc CRON[2074531]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:50:01 ispc CRON[2074527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:50:01 ispc CRON[2074529]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 10:50:01 ispc CRON[2074528]: pam_unix(cron:session): session closed for user root Dec 19 10:50:01 ispc CRON[2074529]: pam_unix(cron:session): session closed for user www-data Dec 19 10:50:01 ispc CRON[2074531]: pam_unix(cron:session): session closed for user getmail Dec 19 10:50:01 ispc CRON[2074530]: pam_unix(cron:session): session closed for user root Dec 19 10:50:01 ispc CRON[2074527]: pam_unix(cron:session): session closed for user root Dec 19 10:51:01 ispc CRON[2074628]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:51:02 ispc CRON[2074628]: pam_unix(cron:session): session closed for user root Dec 19 10:51:23 ispc CRON[2073510]: pam_unix(cron:session): session closed for user root Dec 19 10:51:23 ispc postfix/smtpd[2074649]: sql auxprop plugin using mysql engine Dec 19 10:51:40 ispc sshd[2074654]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 10:51:40 ispc sshd[2074654]: Invalid user blceu from 103.146.203.212 Dec 19 10:51:44 ispc sshd[2074656]: Invalid user blceu from 85.143.173.172 Dec 19 10:52:01 ispc CRON[2074660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:52:02 ispc CRON[2074660]: pam_unix(cron:session): session closed for user root Dec 19 10:53:01 ispc CRON[2074685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:53:01 ispc CRON[2074685]: pam_unix(cron:session): session closed for user root Dec 19 10:53:09 ispc sshd[2074696]: Did not receive identification string from 192.227.134.84 Dec 19 10:54:01 ispc CRON[2074703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:54:02 ispc CRON[2074703]: pam_unix(cron:session): session closed for user root Dec 19 10:55:01 ispc CRON[2074719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:55:01 ispc CRON[2074720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:55:01 ispc CRON[2074721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:55:01 ispc CRON[2074722]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 10:55:01 ispc CRON[2074720]: pam_unix(cron:session): session closed for user root Dec 19 10:55:01 ispc CRON[2074722]: pam_unix(cron:session): session closed for user getmail Dec 19 10:55:02 ispc CRON[2074719]: pam_unix(cron:session): session closed for user root Dec 19 10:55:10 ispc saslauthd[2074827]: pam_mysql - SELECT returned no result. Dec 19 10:55:10 ispc saslauthd[2074827]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:55:10 ispc saslauthd[2074827]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:55:40 ispc CRON[2074721]: pam_unix(cron:session): session closed for user root Dec 19 10:56:01 ispc CRON[2074831]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:56:10 ispc saslauthd[2074843]: pam_mysql - SELECT returned no result. Dec 19 10:56:10 ispc saslauthd[2074843]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:56:10 ispc saslauthd[2074843]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:56:42 ispc saslauthd[2074858]: pam_mysql - SELECT returned no result. Dec 19 10:56:42 ispc saslauthd[2074858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:56:42 ispc saslauthd[2074858]: do_auth : auth failure: [user=Audrey] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 10:57:01 ispc CRON[2074868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:57:02 ispc CRON[2074868]: pam_unix(cron:session): session closed for user root Dec 19 10:58:01 ispc CRON[2074911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:58:01 ispc CRON[2074911]: pam_unix(cron:session): session closed for user root Dec 19 10:58:15 ispc saslauthd[2074934]: pam_mysql - SELECT returned no result. Dec 19 10:58:15 ispc saslauthd[2074934]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 10:58:15 ispc saslauthd[2074934]: do_auth : auth failure: [user=test1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 10:59:01 ispc CRON[2074953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 10:59:02 ispc CRON[2074953]: pam_unix(cron:session): session closed for user root Dec 19 10:59:33 ispc sshd[2074978]: Invalid user martof from 175.125.92.77 Dec 19 11:00:01 ispc CRON[2074997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:00:01 ispc CRON[2074998]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:00:01 ispc CRON[2074994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:00:01 ispc CRON[2074999]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:00:01 ispc CRON[2074995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:00:01 ispc CRON[2074996]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:00:01 ispc CRON[2074996]: pam_unix(cron:session): session closed for user www-data Dec 19 11:00:01 ispc CRON[2074995]: pam_unix(cron:session): session closed for user root Dec 19 11:00:01 ispc CRON[2074999]: pam_unix(cron:session): session closed for user getmail Dec 19 11:00:01 ispc CRON[2074998]: pam_unix(cron:session): session closed for user root Dec 19 11:00:01 ispc CRON[2074994]: pam_unix(cron:session): session closed for user root Dec 19 11:00:01 ispc CRON[2074997]: pam_unix(cron:session): session closed for user root Dec 19 11:01:01 ispc CRON[2075180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:01:01 ispc CRON[2075180]: pam_unix(cron:session): session closed for user root Dec 19 11:01:56 ispc sshd[2075217]: Invalid user ziplines from 51.79.36.60 Dec 19 11:02:01 ispc CRON[2075223]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 11:02:01 ispc CRON[2075224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:02:02 ispc CRON[2075224]: pam_unix(cron:session): session closed for user root Dec 19 11:03:01 ispc CRON[2076256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:03:01 ispc CRON[2076256]: pam_unix(cron:session): session closed for user root Dec 19 11:03:05 ispc CRON[2075223]: pam_unix(cron:session): session closed for user logcheck Dec 19 11:03:11 ispc postfix/smtpd[2076301]: sql auxprop plugin using mysql engine Dec 19 11:03:44 ispc sshd[2076324]: Invalid user blceu from 103.110.84.105 Dec 19 11:03:59 ispc postfix/smtpd[2076336]: sql auxprop plugin using mysql engine Dec 19 11:04:00 ispc saslauthd[2076339]: pam_mysql - SELECT returned no result. Dec 19 11:04:00 ispc saslauthd[2076339]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:04:00 ispc saslauthd[2076339]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:04:01 ispc CRON[2076342]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:04:01 ispc CRON[2076342]: pam_unix(cron:session): session closed for user root Dec 19 11:05:01 ispc CRON[2076381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:05:01 ispc CRON[2076382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:05:01 ispc CRON[2076383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:05:01 ispc CRON[2076384]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:05:01 ispc CRON[2076382]: pam_unix(cron:session): session closed for user root Dec 19 11:05:01 ispc CRON[2076384]: pam_unix(cron:session): session closed for user getmail Dec 19 11:05:02 ispc CRON[2076383]: pam_unix(cron:session): session closed for user root Dec 19 11:05:02 ispc CRON[2076381]: pam_unix(cron:session): session closed for user root Dec 19 11:06:01 ispc CRON[2076485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:06:02 ispc CRON[2076485]: pam_unix(cron:session): session closed for user root Dec 19 11:07:01 ispc CRON[2076526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:07:01 ispc CRON[2076526]: pam_unix(cron:session): session closed for user root Dec 19 11:07:38 ispc sshd[2076552]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 11:08:01 ispc CRON[2076568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:08:01 ispc CRON[2076568]: pam_unix(cron:session): session closed for user root Dec 19 11:09:01 ispc CRON[2076612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:09:01 ispc CRON[2076613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:09:01 ispc CRON[2076612]: pam_unix(cron:session): session closed for user root Dec 19 11:09:02 ispc CRON[2076613]: pam_unix(cron:session): session closed for user root Dec 19 11:09:52 ispc sshd[2076657]: Invalid user martof from 211.45.175.153 Dec 19 11:10:01 ispc CRON[2076664]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:10:01 ispc CRON[2076665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:10:01 ispc CRON[2076666]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:10:01 ispc CRON[2076667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:10:01 ispc CRON[2076668]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:10:01 ispc CRON[2076665]: pam_unix(cron:session): session closed for user root Dec 19 11:10:01 ispc CRON[2076666]: pam_unix(cron:session): session closed for user www-data Dec 19 11:10:01 ispc CRON[2076668]: pam_unix(cron:session): session closed for user getmail Dec 19 11:10:02 ispc CRON[2076667]: pam_unix(cron:session): session closed for user root Dec 19 11:10:02 ispc CRON[2076664]: pam_unix(cron:session): session closed for user root Dec 19 11:11:01 ispc CRON[2076769]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:11:01 ispc CRON[2076769]: pam_unix(cron:session): session closed for user root Dec 19 11:11:39 ispc postfix/smtpd[2076797]: sql auxprop plugin using mysql engine Dec 19 11:11:40 ispc saslauthd[2076801]: pam_mysql - SELECT returned no result. Dec 19 11:11:40 ispc saslauthd[2076801]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:11:40 ispc saslauthd[2076801]: do_auth : auth failure: [user=Yak] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:11:57 ispc saslauthd[2076812]: pam_mysql - SELECT returned no result. Dec 19 11:11:57 ispc saslauthd[2076812]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:11:57 ispc saslauthd[2076812]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:12:01 ispc CRON[2076814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:12:02 ispc CRON[2076814]: pam_unix(cron:session): session closed for user root Dec 19 11:12:35 ispc sshd[2076840]: Invalid user blceu from 148.216.54.17 Dec 19 11:13:01 ispc CRON[2076864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:13:01 ispc CRON[2076864]: pam_unix(cron:session): session closed for user root Dec 19 11:14:01 ispc CRON[2076906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:14:01 ispc CRON[2076906]: pam_unix(cron:session): session closed for user root Dec 19 11:14:51 ispc postfix/smtpd[2076937]: sql auxprop plugin using mysql engine Dec 19 11:15:01 ispc CRON[2076949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:15:01 ispc CRON[2076947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:15:01 ispc CRON[2076948]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:15:01 ispc CRON[2076950]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:15:01 ispc CRON[2076948]: pam_unix(cron:session): session closed for user root Dec 19 11:15:01 ispc CRON[2076950]: pam_unix(cron:session): session closed for user getmail Dec 19 11:15:02 ispc CRON[2076949]: pam_unix(cron:session): session closed for user root Dec 19 11:15:02 ispc CRON[2076947]: pam_unix(cron:session): session closed for user root Dec 19 11:15:39 ispc sshd[2077044]: Invalid user ziplines from 103.77.207.53 Dec 19 11:16:01 ispc CRON[2077054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:16:01 ispc CRON[2077054]: pam_unix(cron:session): session closed for user root Dec 19 11:16:18 ispc postfix/smtpd[2077073]: sql auxprop plugin using mysql engine Dec 19 11:16:19 ispc CRON[2074831]: pam_unix(cron:session): session closed for user root Dec 19 11:17:01 ispc CRON[2077082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:17:01 ispc CRON[2077082]: pam_unix(cron:session): session closed for user root Dec 19 11:18:01 ispc CRON[2077101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:18:01 ispc CRON[2077101]: pam_unix(cron:session): session closed for user root Dec 19 11:19:01 ispc CRON[2077120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:19:03 ispc CRON[2077120]: pam_unix(cron:session): session closed for user root Dec 19 11:19:10 ispc sshd[2077134]: Invalid user martof from 57.131.22.60 Dec 19 11:19:21 ispc sshd[2077138]: Did not receive identification string from 157.245.73.167 Dec 19 11:19:52 ispc saslauthd[2077140]: pam_mysql - SELECT returned no result. Dec 19 11:19:52 ispc saslauthd[2077140]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:19:52 ispc saslauthd[2077140]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:20:01 ispc CRON[2077141]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:20:01 ispc CRON[2077142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:20:01 ispc CRON[2077143]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:20:01 ispc CRON[2077144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:20:01 ispc CRON[2077145]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:20:01 ispc CRON[2077142]: pam_unix(cron:session): session closed for user root Dec 19 11:20:01 ispc CRON[2077143]: pam_unix(cron:session): session closed for user www-data Dec 19 11:20:01 ispc CRON[2077145]: pam_unix(cron:session): session closed for user getmail Dec 19 11:20:01 ispc CRON[2077141]: pam_unix(cron:session): session closed for user root Dec 19 11:20:25 ispc sshd[2077253]: Invalid user hyundaicz from 114.246.241.87 Dec 19 11:20:29 ispc CRON[2077144]: pam_unix(cron:session): session closed for user root Dec 19 11:20:41 ispc sshd[2077255]: Invalid user blceu from 175.125.92.77 Dec 19 11:21:00 ispc sshd[2077257]: Did not receive identification string from 157.245.68.217 Dec 19 11:21:01 ispc CRON[2077260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:21:01 ispc CRON[2077259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:21:01 ispc CRON[2077259]: pam_unix(cron:session): session closed for user root Dec 19 11:21:33 ispc sshd[2077283]: Invalid user ziplines from 175.125.92.77 Dec 19 11:21:54 ispc sshd[2077301]: Invalid user test1 from 157.245.68.217 Dec 19 11:22:01 ispc CRON[2077305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:22:01 ispc CRON[2077305]: pam_unix(cron:session): session closed for user root Dec 19 11:22:36 ispc sshd[2077335]: Invalid user test2 from 157.245.68.217 Dec 19 11:23:01 ispc CRON[2077355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:23:02 ispc CRON[2077355]: pam_unix(cron:session): session closed for user root Dec 19 11:23:19 ispc sshd[2077376]: Invalid user test3 from 157.245.68.217 Dec 19 11:24:01 ispc CRON[2077399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:24:01 ispc CRON[2077399]: pam_unix(cron:session): session closed for user root Dec 19 11:25:01 ispc CRON[2077443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:25:01 ispc CRON[2077444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:25:01 ispc CRON[2077445]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:25:01 ispc CRON[2077446]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:25:01 ispc CRON[2077444]: pam_unix(cron:session): session closed for user root Dec 19 11:25:01 ispc CRON[2077446]: pam_unix(cron:session): session closed for user getmail Dec 19 11:25:02 ispc CRON[2077443]: pam_unix(cron:session): session closed for user root Dec 19 11:25:02 ispc CRON[2077445]: pam_unix(cron:session): session closed for user root Dec 19 11:26:01 ispc CRON[2077552]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:26:02 ispc CRON[2077552]: pam_unix(cron:session): session closed for user root Dec 19 11:26:26 ispc postfix/smtpd[2077576]: sql auxprop plugin using mysql engine Dec 19 11:26:28 ispc saslauthd[2077579]: pam_mysql - SELECT returned no result. Dec 19 11:26:28 ispc saslauthd[2077579]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:26:28 ispc saslauthd[2077579]: do_auth : auth failure: [user=accounting] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:27:01 ispc CRON[2077604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:27:02 ispc CRON[2077604]: pam_unix(cron:session): session closed for user root Dec 19 11:28:01 ispc CRON[2077652]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:28:02 ispc CRON[2077652]: pam_unix(cron:session): session closed for user root Dec 19 11:28:39 ispc sshd[2077691]: Invalid user tshombeknife from 114.246.241.87 Dec 19 11:29:01 ispc CRON[2077702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:29:02 ispc CRON[2077702]: pam_unix(cron:session): session closed for user root Dec 19 11:29:06 ispc sshd[2077719]: Invalid user postgres from 157.245.68.217 Dec 19 11:29:15 ispc postfix/smtpd[2077727]: sql auxprop plugin using mysql engine Dec 19 11:29:15 ispc saslauthd[2077729]: pam_mysql - SELECT returned no result. Dec 19 11:29:15 ispc saslauthd[2077729]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:29:15 ispc saslauthd[2077729]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:29:43 ispc sshd[2077739]: Invalid user oracle from 157.245.68.217 Dec 19 11:30:01 ispc CRON[2077755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:30:01 ispc CRON[2077757]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:30:01 ispc CRON[2077758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:30:01 ispc CRON[2077759]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:30:01 ispc CRON[2077756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:30:01 ispc CRON[2077757]: pam_unix(cron:session): session closed for user www-data Dec 19 11:30:01 ispc CRON[2077756]: pam_unix(cron:session): session closed for user root Dec 19 11:30:01 ispc CRON[2077759]: pam_unix(cron:session): session closed for user getmail Dec 19 11:30:01 ispc CRON[2077758]: pam_unix(cron:session): session closed for user root Dec 19 11:30:01 ispc CRON[2077755]: pam_unix(cron:session): session closed for user root Dec 19 11:30:21 ispc sshd[2077842]: Invalid user user from 157.245.68.217 Dec 19 11:31:01 ispc CRON[2077871]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:31:02 ispc CRON[2077871]: pam_unix(cron:session): session closed for user root Dec 19 11:32:01 ispc CRON[2077911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:32:02 ispc CRON[2077911]: pam_unix(cron:session): session closed for user root Dec 19 11:33:01 ispc CRON[2077965]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:33:01 ispc CRON[2077965]: pam_unix(cron:session): session closed for user root Dec 19 11:34:01 ispc CRON[2078006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:34:02 ispc CRON[2078006]: pam_unix(cron:session): session closed for user root Dec 19 11:35:01 ispc CRON[2078046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:35:01 ispc CRON[2078048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:35:01 ispc CRON[2078049]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:35:01 ispc CRON[2078047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:35:01 ispc CRON[2078047]: pam_unix(cron:session): session closed for user root Dec 19 11:35:01 ispc CRON[2078049]: pam_unix(cron:session): session closed for user getmail Dec 19 11:35:01 ispc CRON[2078046]: pam_unix(cron:session): session closed for user root Dec 19 11:35:02 ispc CRON[2078048]: pam_unix(cron:session): session closed for user root Dec 19 11:35:52 ispc sshd[2078144]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 11:35:52 ispc sshd[2078144]: Invalid user ubnt from 2.57.121.25 Dec 19 11:36:01 ispc CRON[2078155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:36:01 ispc CRON[2078155]: pam_unix(cron:session): session closed for user root Dec 19 11:36:02 ispc sshd[2078166]: Invalid user admin from 157.245.73.167 Dec 19 11:36:49 ispc sshd[2078190]: Invalid user admin from 157.245.73.167 Dec 19 11:37:01 ispc CRON[2078196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:37:03 ispc CRON[2078196]: pam_unix(cron:session): session closed for user root Dec 19 11:37:36 ispc sshd[2078225]: Invalid user admin from 157.245.73.167 Dec 19 11:37:40 ispc postfix/smtpd[2078227]: sql auxprop plugin using mysql engine Dec 19 11:37:40 ispc saslauthd[2078230]: pam_mysql - SELECT returned no result. Dec 19 11:37:40 ispc saslauthd[2078230]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:37:40 ispc saslauthd[2078230]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:38:01 ispc CRON[2078243]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:38:01 ispc CRON[2078243]: pam_unix(cron:session): session closed for user root Dec 19 11:38:23 ispc sshd[2078265]: Invalid user admin from 157.245.73.167 Dec 19 11:38:41 ispc sshd[2078277]: Invalid user blceu from 119.205.233.162 Dec 19 11:39:01 ispc CRON[2078287]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:39:01 ispc CRON[2078288]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:39:02 ispc CRON[2078287]: pam_unix(cron:session): session closed for user root Dec 19 11:39:03 ispc CRON[2078288]: pam_unix(cron:session): session closed for user root Dec 19 11:39:09 ispc sshd[2078315]: Invalid user admin from 157.245.73.167 Dec 19 11:39:52 ispc sshd[2078334]: Invalid user admin from 157.245.73.167 Dec 19 11:40:01 ispc CRON[2078346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:40:01 ispc CRON[2078347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:40:01 ispc CRON[2078348]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:40:01 ispc CRON[2078349]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:40:01 ispc CRON[2078350]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:40:01 ispc CRON[2078347]: pam_unix(cron:session): session closed for user root Dec 19 11:40:01 ispc CRON[2078348]: pam_unix(cron:session): session closed for user www-data Dec 19 11:40:01 ispc CRON[2078350]: pam_unix(cron:session): session closed for user getmail Dec 19 11:40:02 ispc CRON[2078349]: pam_unix(cron:session): session closed for user root Dec 19 11:40:02 ispc CRON[2078346]: pam_unix(cron:session): session closed for user root Dec 19 11:41:01 ispc CRON[2078454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:41:02 ispc CRON[2078454]: pam_unix(cron:session): session closed for user root Dec 19 11:41:12 ispc sshd[2078469]: Did not receive identification string from 192.227.134.84 Dec 19 11:41:18 ispc postfix/smtpd[2078471]: sql auxprop plugin using mysql engine Dec 19 11:41:19 ispc saslauthd[2078478]: pam_mysql - SELECT returned no result. Dec 19 11:41:19 ispc saslauthd[2078478]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:41:19 ispc saslauthd[2078478]: do_auth : auth failure: [user=adfexc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:41:28 ispc CRON[2077260]: pam_unix(cron:session): session closed for user root Dec 19 11:42:01 ispc CRON[2078489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:42:02 ispc CRON[2078489]: pam_unix(cron:session): session closed for user root Dec 19 11:43:01 ispc CRON[2078514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:43:02 ispc CRON[2078514]: pam_unix(cron:session): session closed for user root Dec 19 11:44:01 ispc CRON[2078528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:44:02 ispc CRON[2078528]: pam_unix(cron:session): session closed for user root Dec 19 11:45:01 ispc CRON[2078547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:45:01 ispc CRON[2078548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:45:01 ispc CRON[2078549]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:45:01 ispc CRON[2078550]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:45:01 ispc CRON[2078548]: pam_unix(cron:session): session closed for user root Dec 19 11:45:01 ispc CRON[2078550]: pam_unix(cron:session): session closed for user getmail Dec 19 11:45:03 ispc CRON[2078547]: pam_unix(cron:session): session closed for user root Dec 19 11:45:34 ispc saslauthd[2078731]: pam_mysql - SELECT returned no result. Dec 19 11:45:34 ispc saslauthd[2078731]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:45:34 ispc saslauthd[2078731]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:45:41 ispc CRON[2078549]: pam_unix(cron:session): session closed for user root Dec 19 11:45:48 ispc sshd[2078732]: Invalid user blceu from 211.45.175.153 Dec 19 11:46:01 ispc CRON[2078734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:47:01 ispc CRON[2078775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:47:02 ispc CRON[2078775]: pam_unix(cron:session): session closed for user root Dec 19 11:48:01 ispc CRON[2078816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:48:03 ispc CRON[2078816]: pam_unix(cron:session): session closed for user root Dec 19 11:48:44 ispc sshd[2078848]: Invalid user blceu from 51.79.36.60 Dec 19 11:49:01 ispc CRON[2078867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:49:01 ispc CRON[2078867]: pam_unix(cron:session): session closed for user root Dec 19 11:50:01 ispc CRON[2078905]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:50:01 ispc CRON[2078906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:50:01 ispc CRON[2078907]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 11:50:01 ispc CRON[2078908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:50:01 ispc CRON[2078909]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:50:01 ispc CRON[2078906]: pam_unix(cron:session): session closed for user root Dec 19 11:50:02 ispc CRON[2078907]: pam_unix(cron:session): session closed for user www-data Dec 19 11:50:02 ispc CRON[2078909]: pam_unix(cron:session): session closed for user getmail Dec 19 11:50:02 ispc CRON[2078908]: pam_unix(cron:session): session closed for user root Dec 19 11:50:02 ispc CRON[2078905]: pam_unix(cron:session): session closed for user root Dec 19 11:51:01 ispc CRON[2079008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:51:02 ispc CRON[2079008]: pam_unix(cron:session): session closed for user root Dec 19 11:51:17 ispc postfix/smtpd[2079027]: sql auxprop plugin using mysql engine Dec 19 11:51:18 ispc saslauthd[2079030]: pam_mysql - SELECT returned no result. Dec 19 11:51:18 ispc saslauthd[2079030]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:51:18 ispc saslauthd[2079030]: do_auth : auth failure: [user=user1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 11:52:01 ispc CRON[2079054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:52:01 ispc CRON[2079054]: pam_unix(cron:session): session closed for user root Dec 19 11:53:01 ispc CRON[2079099]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:53:03 ispc CRON[2079099]: pam_unix(cron:session): session closed for user root Dec 19 11:53:34 ispc postfix/smtpd[2079122]: sql auxprop plugin using mysql engine Dec 19 11:53:49 ispc saslauthd[2079134]: pam_mysql - SELECT returned no result. Dec 19 11:53:49 ispc saslauthd[2079134]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:53:49 ispc saslauthd[2079134]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 11:53:50 ispc postfix/smtpd[2079135]: sql auxprop plugin using mysql engine Dec 19 11:53:51 ispc saslauthd[2079136]: pam_mysql - SELECT returned no result. Dec 19 11:53:51 ispc saslauthd[2079136]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:53:51 ispc saslauthd[2079136]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:54:01 ispc CRON[2079143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:54:02 ispc CRON[2079143]: pam_unix(cron:session): session closed for user root Dec 19 11:54:05 ispc saslauthd[2079155]: pam_mysql - SELECT returned no result. Dec 19 11:54:05 ispc saslauthd[2079155]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:54:05 ispc saslauthd[2079155]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:55:01 ispc CRON[2079182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:55:01 ispc CRON[2079183]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:55:01 ispc CRON[2079184]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:55:01 ispc CRON[2079185]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 11:55:01 ispc CRON[2079183]: pam_unix(cron:session): session closed for user root Dec 19 11:55:01 ispc CRON[2079185]: pam_unix(cron:session): session closed for user getmail Dec 19 11:55:01 ispc CRON[2079184]: pam_unix(cron:session): session closed for user root Dec 19 11:55:03 ispc CRON[2079182]: pam_unix(cron:session): session closed for user root Dec 19 11:56:01 ispc CRON[2079284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:56:02 ispc CRON[2079284]: pam_unix(cron:session): session closed for user root Dec 19 11:56:15 ispc postfix/smtpd[2079301]: sql auxprop plugin using mysql engine Dec 19 11:56:16 ispc saslauthd[2079303]: pam_mysql - SELECT returned no result. Dec 19 11:56:16 ispc saslauthd[2079303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:56:16 ispc saslauthd[2079303]: do_auth : auth failure: [user=adm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 11:57:01 ispc CRON[2079327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:57:01 ispc CRON[2079327]: pam_unix(cron:session): session closed for user root Dec 19 11:58:01 ispc CRON[2079372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:58:03 ispc CRON[2079372]: pam_unix(cron:session): session closed for user root Dec 19 11:58:42 ispc postfix/smtpd[2079403]: sql auxprop plugin using mysql engine Dec 19 11:58:43 ispc saslauthd[2079405]: pam_mysql - SELECT returned no result. Dec 19 11:58:43 ispc saslauthd[2079405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 11:58:43 ispc saslauthd[2079405]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 11:58:55 ispc sshd[2079410]: Invalid user ziplines from 119.205.233.162 Dec 19 11:59:01 ispc CRON[2079416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 11:59:02 ispc CRON[2079416]: pam_unix(cron:session): session closed for user root Dec 19 11:59:41 ispc sshd[2079443]: Did not receive identification string from 1.171.34.59 Dec 19 11:59:44 ispc sshd[2079444]: Invalid user a from 1.171.34.59 Dec 19 11:59:59 ispc sshd[2079453]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 11:59:59 ispc sshd[2079453]: Invalid user ziplines from 103.146.203.212 Dec 19 12:00:01 ispc CRON[2079459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:00:01 ispc CRON[2079460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:00:01 ispc CRON[2079461]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:00:01 ispc CRON[2079462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:00:01 ispc CRON[2079464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:00:01 ispc CRON[2079465]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:00:01 ispc CRON[2079463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:00:01 ispc CRON[2079461]: pam_unix(cron:session): session closed for user www-data Dec 19 12:00:01 ispc CRON[2079460]: pam_unix(cron:session): session closed for user root Dec 19 12:00:01 ispc CRON[2079463]: pam_unix(cron:session): session closed for user root Dec 19 12:00:01 ispc CRON[2079465]: pam_unix(cron:session): session closed for user getmail Dec 19 12:00:02 ispc CRON[2079464]: pam_unix(cron:session): session closed for user root Dec 19 12:00:02 ispc CRON[2079459]: pam_unix(cron:session): session closed for user root Dec 19 12:00:02 ispc CRON[2079462]: pam_unix(cron:session): session closed for user root Dec 19 12:00:42 ispc sshd[2079637]: Bad protocol version identification 'MGLNDD_109.105.49.240_22' from 20.65.195.117 Dec 19 12:01:01 ispc CRON[2079648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:01:02 ispc CRON[2079648]: pam_unix(cron:session): session closed for user root Dec 19 12:01:43 ispc postfix/smtpd[2079677]: sql auxprop plugin using mysql engine Dec 19 12:01:44 ispc saslauthd[2079679]: pam_mysql - SELECT returned no result. Dec 19 12:01:44 ispc saslauthd[2079679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:01:44 ispc saslauthd[2079679]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:02:01 ispc CRON[2079685]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 12:02:01 ispc CRON[2079686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:02:01 ispc CRON[2079686]: pam_unix(cron:session): session closed for user root Dec 19 12:03:01 ispc CRON[2080675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:03:01 ispc CRON[2080675]: pam_unix(cron:session): session closed for user root Dec 19 12:03:02 ispc CRON[2079685]: pam_unix(cron:session): session closed for user logcheck Dec 19 12:03:06 ispc postfix/smtpd[2080757]: sql auxprop plugin using mysql engine Dec 19 12:04:01 ispc CRON[2080782]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:04:01 ispc CRON[2080782]: pam_unix(cron:session): session closed for user root Dec 19 12:05:01 ispc CRON[2080825]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:05:01 ispc CRON[2080821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:05:01 ispc CRON[2080822]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:05:01 ispc CRON[2080823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:05:01 ispc CRON[2080824]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:05:01 ispc CRON[2080823]: pam_unix(cron:session): session closed for user root Dec 19 12:05:01 ispc CRON[2080825]: pam_unix(cron:session): session closed for user getmail Dec 19 12:05:02 ispc CRON[2080824]: pam_unix(cron:session): session closed for user root Dec 19 12:05:02 ispc CRON[2080822]: pam_unix(cron:session): session closed for user root Dec 19 12:05:03 ispc CRON[2080821]: pam_unix(cron:session): session closed for user root Dec 19 12:06:01 ispc CRON[2080926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:06:01 ispc CRON[2080926]: pam_unix(cron:session): session closed for user root Dec 19 12:06:16 ispc postfix/smtpd[2080945]: sql auxprop plugin using mysql engine Dec 19 12:06:16 ispc CRON[2078734]: pam_unix(cron:session): session closed for user root Dec 19 12:06:20 ispc sshd[2080947]: Did not receive identification string from 163.177.76.18 Dec 19 12:07:01 ispc CRON[2080952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:07:01 ispc CRON[2080952]: pam_unix(cron:session): session closed for user root Dec 19 12:07:35 ispc sshd[2080966]: Invalid user ziplines from 103.110.84.105 Dec 19 12:07:44 ispc sshd[2080969]: Invalid user blceu from 103.77.207.53 Dec 19 12:08:01 ispc CRON[2080977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:08:02 ispc CRON[2080977]: pam_unix(cron:session): session closed for user root Dec 19 12:08:31 ispc sshd[2080992]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:32 ispc sshd[2080994]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:33 ispc sshd[2080996]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:33 ispc sshd[2080998]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:34 ispc sshd[2081000]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:34 ispc sshd[2081002]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:35 ispc sshd[2081004]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:35 ispc sshd[2081006]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:36 ispc sshd[2081008]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:37 ispc sshd[2081010]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:38 ispc sshd[2081012]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:38 ispc sshd[2081014]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:39 ispc sshd[2081016]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:39 ispc sshd[2081018]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:40 ispc sshd[2081020]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:40 ispc sshd[2081022]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:41 ispc sshd[2081024]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:41 ispc sshd[2081026]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:42 ispc sshd[2081028]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:42 ispc sshd[2081028]: Invalid user Antminer from 179.43.184.242 Dec 19 12:08:43 ispc sshd[2081030]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:43 ispc sshd[2081030]: Invalid user Antminer from 179.43.184.242 Dec 19 12:08:43 ispc sshd[2081032]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:44 ispc sshd[2081034]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:45 ispc sshd[2081036]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:45 ispc sshd[2081038]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:46 ispc sshd[2081040]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:46 ispc sshd[2081042]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:46 ispc sshd[2081042]: Invalid user admin from 179.43.184.242 Dec 19 12:08:47 ispc sshd[2081044]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:08:47 ispc sshd[2081044]: Invalid user baikal from 179.43.184.242 Dec 19 12:09:01 ispc CRON[2081046]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:09:01 ispc CRON[2081047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:09:01 ispc CRON[2081046]: pam_unix(cron:session): session closed for user root Dec 19 12:09:02 ispc CRON[2081047]: pam_unix(cron:session): session closed for user root Dec 19 12:10:01 ispc CRON[2081077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:10:01 ispc CRON[2081074]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:10:01 ispc CRON[2081075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:10:01 ispc CRON[2081076]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:10:01 ispc CRON[2081078]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:10:01 ispc CRON[2081075]: pam_unix(cron:session): session closed for user root Dec 19 12:10:01 ispc CRON[2081076]: pam_unix(cron:session): session closed for user www-data Dec 19 12:10:01 ispc CRON[2081078]: pam_unix(cron:session): session closed for user getmail Dec 19 12:10:01 ispc CRON[2081074]: pam_unix(cron:session): session closed for user root Dec 19 12:10:02 ispc saslauthd[2081186]: pam_mysql - SELECT returned no result. Dec 19 12:10:02 ispc saslauthd[2081186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:10:02 ispc saslauthd[2081186]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:10:10 ispc saslauthd[2081189]: pam_mysql - SELECT returned no result. Dec 19 12:10:10 ispc saslauthd[2081189]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:10:10 ispc saslauthd[2081189]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:10:30 ispc CRON[2081077]: pam_unix(cron:session): session closed for user root Dec 19 12:11:01 ispc CRON[2081192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:11:11 ispc saslauthd[2081208]: pam_mysql - SELECT returned no result. Dec 19 12:11:11 ispc saslauthd[2081208]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:11:11 ispc saslauthd[2081208]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:12:01 ispc CRON[2081229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:12:02 ispc CRON[2081229]: pam_unix(cron:session): session closed for user root Dec 19 12:13:01 ispc CRON[2081274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:13:01 ispc CRON[2081274]: pam_unix(cron:session): session closed for user root Dec 19 12:14:01 ispc CRON[2081314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:14:02 ispc CRON[2081314]: pam_unix(cron:session): session closed for user root Dec 19 12:15:01 ispc CRON[2081354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:15:01 ispc CRON[2081353]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:15:01 ispc CRON[2081355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:15:01 ispc CRON[2081356]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:15:01 ispc CRON[2081354]: pam_unix(cron:session): session closed for user root Dec 19 12:15:01 ispc CRON[2081356]: pam_unix(cron:session): session closed for user getmail Dec 19 12:15:02 ispc CRON[2081353]: pam_unix(cron:session): session closed for user root Dec 19 12:15:02 ispc CRON[2081355]: pam_unix(cron:session): session closed for user root Dec 19 12:16:01 ispc CRON[2081454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:16:01 ispc CRON[2081454]: pam_unix(cron:session): session closed for user root Dec 19 12:16:57 ispc sshd[2081492]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:16:59 ispc sshd[2081494]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:16:59 ispc sshd[2081494]: Invalid user klape from 189.89.20.45 Dec 19 12:17:01 ispc sshd[2081500]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:17:01 ispc sshd[2081500]: Invalid user ubuntu from 189.89.20.45 Dec 19 12:17:01 ispc CRON[2081502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:17:02 ispc CRON[2081502]: pam_unix(cron:session): session closed for user root Dec 19 12:17:33 ispc sshd[2081525]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:17:33 ispc sshd[2081525]: Invalid user martof from 103.146.203.212 Dec 19 12:18:01 ispc CRON[2081543]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 12:18:01 ispc CRON[2081544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:18:01 ispc CRON[2081544]: pam_unix(cron:session): session closed for user root Dec 19 12:18:03 ispc CRON[2081543]: pam_unix(cron:session): session closed for user amavis Dec 19 12:18:04 ispc postfix/smtpd[2081572]: sql auxprop plugin using mysql engine Dec 19 12:18:15 ispc postfix/smtpd[2081580]: sql auxprop plugin using mysql engine Dec 19 12:18:15 ispc saslauthd[2081583]: pam_mysql - SELECT returned no result. Dec 19 12:18:15 ispc saslauthd[2081583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:18:15 ispc saslauthd[2081583]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:18:44 ispc sshd[2081597]: Did not receive identification string from 45.140.17.97 Dec 19 12:19:01 ispc CRON[2081603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:19:02 ispc CRON[2081603]: pam_unix(cron:session): session closed for user root Dec 19 12:20:01 ispc CRON[2081645]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:20:01 ispc CRON[2081644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:20:01 ispc CRON[2081646]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:20:01 ispc CRON[2081647]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:20:01 ispc CRON[2081643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:20:01 ispc CRON[2081644]: pam_unix(cron:session): session closed for user root Dec 19 12:20:01 ispc CRON[2081645]: pam_unix(cron:session): session closed for user www-data Dec 19 12:20:01 ispc CRON[2081647]: pam_unix(cron:session): session closed for user getmail Dec 19 12:20:01 ispc CRON[2081646]: pam_unix(cron:session): session closed for user root Dec 19 12:20:01 ispc CRON[2081643]: pam_unix(cron:session): session closed for user root Dec 19 12:21:01 ispc CRON[2081747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:21:01 ispc CRON[2081748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:21:01 ispc CRON[2081747]: pam_unix(cron:session): session closed for user root Dec 19 12:21:02 ispc CRON[2081748]: pam_unix(cron:session): session closed for user root Dec 19 12:22:00 ispc sshd[2081786]: Invalid user blceu from 185.208.181.153 Dec 19 12:22:01 ispc CRON[2081788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:22:02 ispc CRON[2081788]: pam_unix(cron:session): session closed for user root Dec 19 12:22:51 ispc sshd[2081822]: Did not receive identification string from 192.227.134.84 Dec 19 12:23:01 ispc CRON[2081835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:23:02 ispc CRON[2081835]: pam_unix(cron:session): session closed for user root Dec 19 12:23:21 ispc postfix/smtpd[2081855]: sql auxprop plugin using mysql engine Dec 19 12:23:21 ispc saslauthd[2081858]: pam_mysql - SELECT returned no result. Dec 19 12:23:21 ispc saslauthd[2081858]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:23:21 ispc saslauthd[2081858]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 12:24:01 ispc CRON[2081876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:24:02 ispc CRON[2081876]: pam_unix(cron:session): session closed for user root Dec 19 12:25:01 ispc CRON[2081916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:25:01 ispc CRON[2081917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:25:01 ispc CRON[2081918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:25:01 ispc CRON[2081919]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:25:01 ispc CRON[2081919]: pam_unix(cron:session): session closed for user getmail Dec 19 12:25:01 ispc CRON[2081917]: pam_unix(cron:session): session closed for user root Dec 19 12:25:02 ispc CRON[2081918]: pam_unix(cron:session): session closed for user root Dec 19 12:25:03 ispc CRON[2081916]: pam_unix(cron:session): session closed for user root Dec 19 12:25:05 ispc sshd[2081992]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:25:05 ispc sshd[2081992]: Invalid user user from 2.57.121.25 Dec 19 12:25:30 ispc sshd[2082007]: Invalid user martof from 103.77.207.53 Dec 19 12:26:01 ispc CRON[2082022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:26:02 ispc CRON[2082022]: pam_unix(cron:session): session closed for user root Dec 19 12:26:13 ispc postfix/smtpd[2082041]: sql auxprop plugin using mysql engine Dec 19 12:26:14 ispc saslauthd[2082043]: pam_mysql - SELECT returned no result. Dec 19 12:26:14 ispc saslauthd[2082043]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:26:14 ispc saslauthd[2082043]: do_auth : auth failure: [user=admin2] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:26:35 ispc saslauthd[2082055]: pam_mysql - SELECT returned no result. Dec 19 12:26:35 ispc saslauthd[2082055]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:26:35 ispc saslauthd[2082055]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:27:01 ispc CRON[2082068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:27:03 ispc CRON[2082068]: pam_unix(cron:session): session closed for user root Dec 19 12:28:01 ispc CRON[2082109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:28:02 ispc CRON[2082109]: pam_unix(cron:session): session closed for user root Dec 19 12:29:01 ispc CRON[2082152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:29:02 ispc CRON[2082152]: pam_unix(cron:session): session closed for user root Dec 19 12:30:01 ispc CRON[2082191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:30:01 ispc CRON[2082192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:30:01 ispc CRON[2082193]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:30:01 ispc CRON[2082194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:30:01 ispc CRON[2082195]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:30:01 ispc CRON[2082192]: pam_unix(cron:session): session closed for user root Dec 19 12:30:01 ispc CRON[2082193]: pam_unix(cron:session): session closed for user www-data Dec 19 12:30:01 ispc CRON[2082195]: pam_unix(cron:session): session closed for user getmail Dec 19 12:30:02 ispc CRON[2082194]: pam_unix(cron:session): session closed for user root Dec 19 12:30:02 ispc CRON[2082191]: pam_unix(cron:session): session closed for user root Dec 19 12:31:01 ispc CRON[2082294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:31:02 ispc CRON[2082294]: pam_unix(cron:session): session closed for user root Dec 19 12:31:24 ispc postfix/smtpd[2082317]: sql auxprop plugin using mysql engine Dec 19 12:31:24 ispc CRON[2081192]: pam_unix(cron:session): session closed for user root Dec 19 12:32:01 ispc CRON[2082327]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:32:03 ispc CRON[2082327]: pam_unix(cron:session): session closed for user root Dec 19 12:32:20 ispc postfix/smtpd[2082343]: sql auxprop plugin using mysql engine Dec 19 12:33:01 ispc CRON[2082367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:33:03 ispc CRON[2082367]: pam_unix(cron:session): session closed for user root Dec 19 12:33:46 ispc postfix/smtpd[2082385]: sql auxprop plugin using mysql engine Dec 19 12:34:01 ispc CRON[2082392]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:34:02 ispc CRON[2082392]: pam_unix(cron:session): session closed for user root Dec 19 12:34:43 ispc saslauthd[2082405]: pam_mysql - SELECT returned no result. Dec 19 12:34:43 ispc saslauthd[2082405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:34:43 ispc saslauthd[2082405]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:35:01 ispc CRON[2082407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:35:01 ispc CRON[2082408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:35:01 ispc CRON[2082409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:35:01 ispc CRON[2082410]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:35:01 ispc CRON[2082408]: pam_unix(cron:session): session closed for user root Dec 19 12:35:01 ispc CRON[2082410]: pam_unix(cron:session): session closed for user getmail Dec 19 12:35:03 ispc CRON[2082407]: pam_unix(cron:session): session closed for user root Dec 19 12:35:28 ispc sshd[2082517]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:35:40 ispc CRON[2082409]: pam_unix(cron:session): session closed for user root Dec 19 12:36:01 ispc CRON[2082522]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:36:15 ispc sshd[2082535]: Did not receive identification string from 47.93.97.12 Dec 19 12:36:18 ispc sshd[2082540]: Invalid user ziplines from 148.216.54.17 Dec 19 12:37:01 ispc CRON[2082561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:37:01 ispc CRON[2082561]: pam_unix(cron:session): session closed for user root Dec 19 12:38:01 ispc CRON[2082604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:38:03 ispc CRON[2082604]: pam_unix(cron:session): session closed for user root Dec 19 12:38:39 ispc sshd[2082640]: Did not receive identification string from 220.250.59.155 Dec 19 12:39:01 ispc CRON[2082650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:39:01 ispc CRON[2082651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:39:01 ispc CRON[2082650]: pam_unix(cron:session): session closed for user root Dec 19 12:39:01 ispc CRON[2082651]: pam_unix(cron:session): session closed for user root Dec 19 12:40:01 ispc CRON[2082698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:40:01 ispc CRON[2082699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:40:01 ispc CRON[2082700]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:40:01 ispc CRON[2082701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:40:01 ispc CRON[2082702]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:40:01 ispc CRON[2082700]: pam_unix(cron:session): session closed for user www-data Dec 19 12:40:01 ispc CRON[2082702]: pam_unix(cron:session): session closed for user getmail Dec 19 12:40:01 ispc CRON[2082699]: pam_unix(cron:session): session closed for user root Dec 19 12:40:02 ispc CRON[2082701]: pam_unix(cron:session): session closed for user root Dec 19 12:40:02 ispc CRON[2082698]: pam_unix(cron:session): session closed for user root Dec 19 12:40:07 ispc sshd[2082781]: Invalid user martof from 103.110.84.105 Dec 19 12:40:18 ispc sshd[2082783]: Invalid user melsac from 36.37.244.244 Dec 19 12:40:52 ispc sshd[2082803]: reverse mapping checking getaddrinfo for ip103-146-203-212.cloudhost.web.id [103.146.203.212] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 12:40:52 ispc sshd[2082803]: Invalid user blceu from 103.146.203.212 Dec 19 12:41:01 ispc CRON[2082816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:41:02 ispc CRON[2082816]: pam_unix(cron:session): session closed for user root Dec 19 12:41:15 ispc postfix/smtpd[2082831]: sql auxprop plugin using mysql engine Dec 19 12:41:16 ispc saslauthd[2082838]: pam_mysql - SELECT returned no result. Dec 19 12:41:16 ispc saslauthd[2082838]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:41:16 ispc saslauthd[2082838]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:41:50 ispc sshd[2082852]: Invalid user martof from 222.236.46.74 Dec 19 12:42:01 ispc CRON[2082858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:42:03 ispc CRON[2082858]: pam_unix(cron:session): session closed for user root Dec 19 12:42:24 ispc saslauthd[2082877]: pam_mysql - SELECT returned no result. Dec 19 12:42:24 ispc saslauthd[2082877]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:42:24 ispc saslauthd[2082877]: do_auth : auth failure: [user=scan1@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 12:42:50 ispc saslauthd[2082892]: pam_mysql - SELECT returned no result. Dec 19 12:42:50 ispc saslauthd[2082892]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:42:50 ispc saslauthd[2082892]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:43:01 ispc CRON[2082906]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:43:01 ispc CRON[2082906]: pam_unix(cron:session): session closed for user root Dec 19 12:44:01 ispc CRON[2082949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:44:02 ispc CRON[2082949]: pam_unix(cron:session): session closed for user root Dec 19 12:45:01 ispc CRON[2082988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:45:01 ispc CRON[2082989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:45:01 ispc CRON[2082990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:45:01 ispc CRON[2082991]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:45:01 ispc CRON[2082989]: pam_unix(cron:session): session closed for user root Dec 19 12:45:01 ispc CRON[2082991]: pam_unix(cron:session): session closed for user getmail Dec 19 12:45:02 ispc CRON[2082990]: pam_unix(cron:session): session closed for user root Dec 19 12:45:02 ispc CRON[2082988]: pam_unix(cron:session): session closed for user root Dec 19 12:45:33 ispc sshd[2083077]: Invalid user martof from 52.232.19.79 Dec 19 12:46:01 ispc CRON[2083096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:46:03 ispc CRON[2083096]: pam_unix(cron:session): session closed for user root Dec 19 12:47:01 ispc CRON[2083133]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:47:01 ispc CRON[2083133]: pam_unix(cron:session): session closed for user root Dec 19 12:48:01 ispc CRON[2083182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:48:03 ispc CRON[2083182]: pam_unix(cron:session): session closed for user root Dec 19 12:49:01 ispc CRON[2083223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:49:02 ispc CRON[2083223]: pam_unix(cron:session): session closed for user root Dec 19 12:50:01 ispc CRON[2083258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:50:01 ispc CRON[2083259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:50:01 ispc CRON[2083260]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 12:50:01 ispc CRON[2083261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:50:01 ispc CRON[2083262]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:50:01 ispc CRON[2083259]: pam_unix(cron:session): session closed for user root Dec 19 12:50:01 ispc CRON[2083262]: pam_unix(cron:session): session closed for user getmail Dec 19 12:50:01 ispc CRON[2083260]: pam_unix(cron:session): session closed for user www-data Dec 19 12:50:02 ispc CRON[2083261]: pam_unix(cron:session): session closed for user root Dec 19 12:50:03 ispc CRON[2083258]: pam_unix(cron:session): session closed for user root Dec 19 12:50:32 ispc postfix/smtpd[2083354]: sql auxprop plugin using mysql engine Dec 19 12:50:33 ispc saslauthd[2083361]: pam_mysql - SELECT returned no result. Dec 19 12:50:33 ispc saslauthd[2083361]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:50:33 ispc saslauthd[2083361]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:50:33 ispc sshd[2083362]: Invalid user martof from 141.94.71.131 Dec 19 12:51:02 ispc CRON[2083375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:51:02 ispc CRON[2083375]: pam_unix(cron:session): session closed for user root Dec 19 12:51:37 ispc sshd[2083405]: Invalid user ziplines from 103.77.207.53 Dec 19 12:52:01 ispc CRON[2083417]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:52:01 ispc CRON[2083418]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:52:02 ispc CRON[2083418]: pam_unix(cron:session): session closed for user root Dec 19 12:53:02 ispc CRON[2083470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:53:03 ispc CRON[2083470]: pam_unix(cron:session): session closed for user root Dec 19 12:54:01 ispc CRON[2083512]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:54:02 ispc CRON[2083512]: pam_unix(cron:session): session closed for user root Dec 19 12:54:07 ispc sshd[2083524]: Invalid user blceu from 117.50.70.169 Dec 19 12:54:09 ispc sshd[2083530]: Invalid user ziplines from 52.232.19.79 Dec 19 12:55:01 ispc CRON[2083566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:55:01 ispc CRON[2083567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:55:01 ispc CRON[2083568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:55:01 ispc CRON[2083569]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 12:55:01 ispc CRON[2083567]: pam_unix(cron:session): session closed for user root Dec 19 12:55:02 ispc CRON[2083569]: pam_unix(cron:session): session closed for user getmail Dec 19 12:55:02 ispc CRON[2083568]: pam_unix(cron:session): session closed for user root Dec 19 12:55:04 ispc CRON[2083566]: pam_unix(cron:session): session closed for user root Dec 19 12:55:19 ispc CRON[2083417]: pam_unix(cron:session): session closed for user root Dec 19 12:56:01 ispc CRON[2083674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:56:01 ispc CRON[2083674]: pam_unix(cron:session): session closed for user root Dec 19 12:56:18 ispc postfix/smtpd[2083698]: sql auxprop plugin using mysql engine Dec 19 12:56:19 ispc saslauthd[2083701]: pam_mysql - SELECT returned no result. Dec 19 12:56:19 ispc saslauthd[2083701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 12:56:19 ispc saslauthd[2083701]: do_auth : auth failure: [user=adminstrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 12:56:27 ispc CRON[2082522]: pam_unix(cron:session): session closed for user root Dec 19 12:57:01 ispc CRON[2083715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:57:03 ispc CRON[2083715]: pam_unix(cron:session): session closed for user root Dec 19 12:57:31 ispc sshd[2083727]: Invalid user ziplines from 211.45.175.153 Dec 19 12:58:01 ispc CRON[2083744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:58:01 ispc CRON[2083744]: pam_unix(cron:session): session closed for user root Dec 19 12:58:10 ispc sshd[2083765]: Invalid user klape from 103.164.20.29 Dec 19 12:58:11 ispc sshd[2083767]: Invalid user ubuntu from 103.164.20.29 Dec 19 12:59:01 ispc CRON[2083780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 12:59:02 ispc CRON[2083780]: pam_unix(cron:session): session closed for user root Dec 19 13:00:01 ispc CRON[2083812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:00:01 ispc CRON[2083813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:00:01 ispc CRON[2083814]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:00:01 ispc CRON[2083815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:00:01 ispc CRON[2083816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:00:01 ispc CRON[2083817]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:00:01 ispc CRON[2083817]: pam_unix(cron:session): session closed for user getmail Dec 19 13:00:01 ispc CRON[2083813]: pam_unix(cron:session): session closed for user root Dec 19 13:00:01 ispc CRON[2083814]: pam_unix(cron:session): session closed for user www-data Dec 19 13:00:02 ispc CRON[2083812]: pam_unix(cron:session): session closed for user root Dec 19 13:00:02 ispc CRON[2083815]: pam_unix(cron:session): session closed for user root Dec 19 13:00:34 ispc saslauthd[2084081]: pam_mysql - SELECT returned no result. Dec 19 13:00:34 ispc saslauthd[2084081]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:00:34 ispc saslauthd[2084081]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:00:41 ispc CRON[2083816]: pam_unix(cron:session): session closed for user root Dec 19 13:01:01 ispc CRON[2084091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:02:01 ispc CRON[2084130]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 13:02:01 ispc CRON[2084131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:02:02 ispc CRON[2084131]: pam_unix(cron:session): session closed for user root Dec 19 13:02:29 ispc postfix/smtpd[2084580]: sql auxprop plugin using mysql engine Dec 19 13:02:30 ispc saslauthd[2084585]: pam_mysql - SELECT returned no result. Dec 19 13:02:30 ispc saslauthd[2084585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:02:30 ispc saslauthd[2084585]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:03:01 ispc CRON[2084957]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:03:02 ispc CRON[2084957]: pam_unix(cron:session): session closed for user root Dec 19 13:03:39 ispc CRON[2084130]: pam_unix(cron:session): session closed for user logcheck Dec 19 13:03:45 ispc postfix/smtpd[2085245]: sql auxprop plugin using mysql engine Dec 19 13:04:01 ispc CRON[2085253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:04:02 ispc CRON[2085253]: pam_unix(cron:session): session closed for user root Dec 19 13:05:01 ispc CRON[2085294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:05:01 ispc CRON[2085295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:05:01 ispc CRON[2085296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:05:01 ispc CRON[2085297]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:05:01 ispc CRON[2085295]: pam_unix(cron:session): session closed for user root Dec 19 13:05:01 ispc CRON[2085297]: pam_unix(cron:session): session closed for user getmail Dec 19 13:05:01 ispc CRON[2085294]: pam_unix(cron:session): session closed for user root Dec 19 13:05:01 ispc CRON[2085296]: pam_unix(cron:session): session closed for user root Dec 19 13:05:06 ispc sshd[2085370]: Did not receive identification string from 192.227.134.84 Dec 19 13:06:01 ispc CRON[2085397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:06:02 ispc CRON[2085397]: pam_unix(cron:session): session closed for user root Dec 19 13:06:17 ispc sshd[2085416]: Invalid user martof from 51.91.76.213 Dec 19 13:06:53 ispc postfix/smtpd[2085431]: sql auxprop plugin using mysql engine Dec 19 13:06:53 ispc saslauthd[2085434]: pam_mysql - SELECT returned no result. Dec 19 13:06:53 ispc saslauthd[2085434]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:06:53 ispc saslauthd[2085434]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:07:01 ispc CRON[2085442]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:07:02 ispc CRON[2085442]: pam_unix(cron:session): session closed for user root Dec 19 13:08:01 ispc CRON[2085484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:08:02 ispc CRON[2085484]: pam_unix(cron:session): session closed for user root Dec 19 13:08:52 ispc postfix/smtpd[2085523]: sql auxprop plugin using mysql engine Dec 19 13:08:53 ispc saslauthd[2085525]: pam_mysql - SELECT returned no result. Dec 19 13:08:53 ispc saslauthd[2085525]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:08:53 ispc saslauthd[2085525]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:09:01 ispc CRON[2085531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:09:01 ispc CRON[2085532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:09:01 ispc CRON[2085531]: pam_unix(cron:session): session closed for user root Dec 19 13:09:02 ispc CRON[2085532]: pam_unix(cron:session): session closed for user root Dec 19 13:09:37 ispc saslauthd[2085568]: pam_mysql - SELECT returned no result. Dec 19 13:09:37 ispc saslauthd[2085568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:09:37 ispc saslauthd[2085568]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:10:01 ispc CRON[2085582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:10:01 ispc CRON[2085583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:10:01 ispc CRON[2085584]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:10:01 ispc CRON[2085585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:10:01 ispc CRON[2085586]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:10:01 ispc CRON[2085583]: pam_unix(cron:session): session closed for user root Dec 19 13:10:01 ispc CRON[2085584]: pam_unix(cron:session): session closed for user www-data Dec 19 13:10:01 ispc CRON[2085586]: pam_unix(cron:session): session closed for user getmail Dec 19 13:10:01 ispc CRON[2085585]: pam_unix(cron:session): session closed for user root Dec 19 13:10:03 ispc CRON[2085582]: pam_unix(cron:session): session closed for user root Dec 19 13:10:34 ispc saslauthd[2085673]: pam_mysql - SELECT returned no result. Dec 19 13:10:34 ispc saslauthd[2085673]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:10:34 ispc saslauthd[2085673]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:11:01 ispc CRON[2085687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:11:01 ispc CRON[2085687]: pam_unix(cron:session): session closed for user root Dec 19 13:11:20 ispc saslauthd[2085707]: pam_mysql - SELECT returned no result. Dec 19 13:11:20 ispc saslauthd[2085707]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:11:20 ispc saslauthd[2085707]: do_auth : auth failure: [user=admn] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:11:57 ispc saslauthd[2085723]: pam_mysql - SELECT returned no result. Dec 19 13:11:57 ispc saslauthd[2085723]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:11:57 ispc saslauthd[2085723]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:12:01 ispc CRON[2085728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:12:03 ispc CRON[2085728]: pam_unix(cron:session): session closed for user root Dec 19 13:12:03 ispc saslauthd[2085739]: pam_mysql - SELECT returned no result. Dec 19 13:12:03 ispc saslauthd[2085739]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:12:03 ispc saslauthd[2085739]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:13:01 ispc CRON[2085774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:13:01 ispc CRON[2085774]: pam_unix(cron:session): session closed for user root Dec 19 13:13:08 ispc saslauthd[2085785]: pam_mysql - SELECT returned no result. Dec 19 13:13:08 ispc saslauthd[2085785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:13:08 ispc saslauthd[2085785]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:13:39 ispc sshd[2085800]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 13:13:39 ispc sshd[2085800]: Invalid user user from 2.57.121.25 Dec 19 13:14:01 ispc CRON[2085815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:14:03 ispc CRON[2085815]: pam_unix(cron:session): session closed for user root Dec 19 13:14:32 ispc saslauthd[2085839]: pam_mysql - SELECT returned no result. Dec 19 13:14:32 ispc saslauthd[2085839]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:14:32 ispc saslauthd[2085839]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:15:01 ispc CRON[2085848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:15:01 ispc CRON[2085849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:15:01 ispc CRON[2085850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:15:01 ispc CRON[2085851]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:15:01 ispc CRON[2085849]: pam_unix(cron:session): session closed for user root Dec 19 13:15:01 ispc CRON[2085851]: pam_unix(cron:session): session closed for user getmail Dec 19 13:15:02 ispc CRON[2085850]: pam_unix(cron:session): session closed for user root Dec 19 13:15:02 ispc CRON[2085848]: pam_unix(cron:session): session closed for user root Dec 19 13:15:47 ispc saslauthd[2085946]: pam_mysql - SELECT returned no result. Dec 19 13:15:47 ispc saslauthd[2085946]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:15:47 ispc saslauthd[2085946]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:16:01 ispc CRON[2085953]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:16:03 ispc CRON[2085953]: pam_unix(cron:session): session closed for user root Dec 19 13:17:01 ispc CRON[2086001]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:17:02 ispc CRON[2086001]: pam_unix(cron:session): session closed for user root Dec 19 13:17:02 ispc postfix/smtpd[2086013]: sql auxprop plugin using mysql engine Dec 19 13:17:04 ispc saslauthd[2086022]: pam_mysql - SELECT returned no result. Dec 19 13:17:04 ispc saslauthd[2086022]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:17:04 ispc saslauthd[2086022]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:17:16 ispc sshd[2086027]: Invalid user blceu from 220.196.191.58 Dec 19 13:18:01 ispc CRON[2086059]: pam_unix(cron:session): session opened for user web324 by (uid=0) Dec 19 13:18:01 ispc CRON[2086060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:18:02 ispc CRON[2086060]: pam_unix(cron:session): session closed for user root Dec 19 13:18:03 ispc CRON[2086059]: pam_unix(cron:session): session closed for user web324 Dec 19 13:19:01 ispc CRON[2086101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:19:02 ispc CRON[2086101]: pam_unix(cron:session): session closed for user root Dec 19 13:19:10 ispc postfix/smtpd[2086116]: sql auxprop plugin using mysql engine Dec 19 13:19:10 ispc saslauthd[2086118]: pam_mysql - SELECT returned no result. Dec 19 13:19:10 ispc saslauthd[2086118]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:19:10 ispc saslauthd[2086118]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:20:01 ispc CRON[2086144]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:20:01 ispc CRON[2086146]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:20:01 ispc CRON[2086145]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:20:01 ispc CRON[2086147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:20:01 ispc CRON[2086148]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:20:01 ispc CRON[2086145]: pam_unix(cron:session): session closed for user root Dec 19 13:20:01 ispc CRON[2086146]: pam_unix(cron:session): session closed for user www-data Dec 19 13:20:01 ispc CRON[2086148]: pam_unix(cron:session): session closed for user getmail Dec 19 13:20:02 ispc CRON[2086147]: pam_unix(cron:session): session closed for user root Dec 19 13:20:02 ispc CRON[2086144]: pam_unix(cron:session): session closed for user root Dec 19 13:20:08 ispc saslauthd[2086222]: pam_mysql - SELECT returned no result. Dec 19 13:20:08 ispc saslauthd[2086222]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:20:08 ispc saslauthd[2086222]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:21:01 ispc CRON[2086256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:21:01 ispc CRON[2086257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:21:01 ispc CRON[2086256]: pam_unix(cron:session): session closed for user root Dec 19 13:21:02 ispc CRON[2086257]: pam_unix(cron:session): session closed for user root Dec 19 13:21:03 ispc saslauthd[2086270]: pam_mysql - SELECT returned no result. Dec 19 13:21:03 ispc saslauthd[2086270]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:21:03 ispc saslauthd[2086270]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:21:11 ispc saslauthd[2086275]: pam_mysql - SELECT returned no result. Dec 19 13:21:11 ispc saslauthd[2086275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:21:11 ispc saslauthd[2086275]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:21:20 ispc CRON[2084091]: pam_unix(cron:session): session closed for user root Dec 19 13:22:01 ispc CRON[2086285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:22:02 ispc CRON[2086285]: pam_unix(cron:session): session closed for user root Dec 19 13:22:08 ispc saslauthd[2086297]: pam_mysql - SELECT returned no result. Dec 19 13:22:08 ispc saslauthd[2086297]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:22:08 ispc saslauthd[2086297]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:22:48 ispc saslauthd[2086303]: pam_mysql - SELECT returned no result. Dec 19 13:22:48 ispc saslauthd[2086303]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:22:48 ispc saslauthd[2086303]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:22:52 ispc saslauthd[2086312]: pam_mysql - SELECT returned no result. Dec 19 13:22:52 ispc saslauthd[2086312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:22:52 ispc saslauthd[2086312]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:23:01 ispc CRON[2086313]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:23:02 ispc CRON[2086313]: pam_unix(cron:session): session closed for user root Dec 19 13:23:49 ispc saslauthd[2086327]: pam_mysql - SELECT returned no result. Dec 19 13:23:49 ispc saslauthd[2086327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:23:49 ispc saslauthd[2086327]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:24:01 ispc CRON[2086330]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:24:02 ispc CRON[2086330]: pam_unix(cron:session): session closed for user root Dec 19 13:24:26 ispc sshd[2086345]: Invalid user martof from 211.45.175.153 Dec 19 13:24:33 ispc sshd[2086349]: Invalid user klape from 36.50.177.171 Dec 19 13:24:36 ispc saslauthd[2086353]: pam_mysql - SELECT returned no result. Dec 19 13:24:36 ispc saslauthd[2086353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:24:36 ispc saslauthd[2086353]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:24:38 ispc sshd[2086351]: Invalid user ubuntu from 36.50.177.171 Dec 19 13:25:01 ispc CRON[2086356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:25:01 ispc CRON[2086357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:25:01 ispc CRON[2086358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:25:01 ispc CRON[2086359]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:25:01 ispc CRON[2086357]: pam_unix(cron:session): session closed for user root Dec 19 13:25:02 ispc CRON[2086359]: pam_unix(cron:session): session closed for user getmail Dec 19 13:25:02 ispc CRON[2086356]: pam_unix(cron:session): session closed for user root Dec 19 13:25:07 ispc saslauthd[2086462]: pam_mysql - SELECT returned no result. Dec 19 13:25:07 ispc saslauthd[2086462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:25:07 ispc saslauthd[2086462]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:25:33 ispc CRON[2086358]: pam_unix(cron:session): session closed for user root Dec 19 13:25:34 ispc saslauthd[2086470]: pam_mysql - SELECT returned no result. Dec 19 13:25:34 ispc saslauthd[2086470]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:25:34 ispc saslauthd[2086470]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:26:01 ispc CRON[2086476]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:26:08 ispc saslauthd[2086488]: pam_mysql - SELECT returned no result. Dec 19 13:26:08 ispc saslauthd[2086488]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:26:08 ispc saslauthd[2086488]: do_auth : auth failure: [user=alien] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:26:45 ispc saslauthd[2086508]: pam_mysql - SELECT returned no result. Dec 19 13:26:45 ispc saslauthd[2086508]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:26:45 ispc saslauthd[2086508]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:27:01 ispc CRON[2086514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:27:02 ispc CRON[2086514]: pam_unix(cron:session): session closed for user root Dec 19 13:28:01 ispc CRON[2086558]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:28:01 ispc CRON[2086558]: pam_unix(cron:session): session closed for user root Dec 19 13:28:16 ispc saslauthd[2086581]: pam_mysql - SELECT returned no result. Dec 19 13:28:16 ispc saslauthd[2086581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:28:16 ispc saslauthd[2086581]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:29:01 ispc CRON[2086598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:29:02 ispc CRON[2086598]: pam_unix(cron:session): session closed for user root Dec 19 13:30:01 ispc CRON[2086636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:30:01 ispc CRON[2086637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:30:01 ispc CRON[2086638]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:30:01 ispc CRON[2086639]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:30:01 ispc CRON[2086640]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:30:01 ispc CRON[2086637]: pam_unix(cron:session): session closed for user root Dec 19 13:30:01 ispc CRON[2086638]: pam_unix(cron:session): session closed for user www-data Dec 19 13:30:01 ispc CRON[2086640]: pam_unix(cron:session): session closed for user getmail Dec 19 13:30:01 ispc CRON[2086639]: pam_unix(cron:session): session closed for user root Dec 19 13:30:02 ispc CRON[2086636]: pam_unix(cron:session): session closed for user root Dec 19 13:30:05 ispc postfix/smtpd[2086715]: sql auxprop plugin using mysql engine Dec 19 13:30:06 ispc saslauthd[2086721]: pam_mysql - SELECT returned no result. Dec 19 13:30:06 ispc saslauthd[2086721]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:30:06 ispc saslauthd[2086721]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:30:17 ispc sshd[2086722]: Invalid user blceu from 175.125.95.234 Dec 19 13:30:53 ispc saslauthd[2086743]: pam_mysql - SELECT returned no result. Dec 19 13:30:53 ispc saslauthd[2086743]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:30:53 ispc saslauthd[2086743]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:31:01 ispc CRON[2086748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:31:02 ispc CRON[2086748]: pam_unix(cron:session): session closed for user root Dec 19 13:32:01 ispc CRON[2086783]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:32:02 ispc CRON[2086783]: pam_unix(cron:session): session closed for user root Dec 19 13:32:05 ispc saslauthd[2086794]: pam_mysql - SELECT returned no result. Dec 19 13:32:05 ispc saslauthd[2086794]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:32:05 ispc saslauthd[2086794]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:32:53 ispc sshd[2086828]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 13:32:53 ispc sshd[2086828]: Invalid user martof from 193.110.157.47 Dec 19 13:33:01 ispc CRON[2086835]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:33:01 ispc saslauthd[2086842]: pam_mysql - SELECT returned no result. Dec 19 13:33:01 ispc saslauthd[2086842]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:33:01 ispc saslauthd[2086842]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:33:02 ispc CRON[2086835]: pam_unix(cron:session): session closed for user root Dec 19 13:33:13 ispc saslauthd[2086852]: pam_mysql - SELECT returned no result. Dec 19 13:33:13 ispc saslauthd[2086852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:33:13 ispc saslauthd[2086852]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:34:01 ispc CRON[2086873]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:34:02 ispc CRON[2086873]: pam_unix(cron:session): session closed for user root Dec 19 13:34:18 ispc saslauthd[2086889]: pam_mysql - SELECT returned no result. Dec 19 13:34:18 ispc saslauthd[2086889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:34:18 ispc saslauthd[2086889]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:35:01 ispc CRON[2086913]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:35:01 ispc CRON[2086914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:35:01 ispc CRON[2086915]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:35:01 ispc CRON[2086916]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:35:01 ispc CRON[2086914]: pam_unix(cron:session): session closed for user root Dec 19 13:35:01 ispc CRON[2086916]: pam_unix(cron:session): session closed for user getmail Dec 19 13:35:02 ispc CRON[2086915]: pam_unix(cron:session): session closed for user root Dec 19 13:35:03 ispc CRON[2086913]: pam_unix(cron:session): session closed for user root Dec 19 13:35:10 ispc postfix/smtpd[2086994]: sql auxprop plugin using mysql engine Dec 19 13:35:25 ispc saslauthd[2087005]: pam_mysql - SELECT returned no result. Dec 19 13:35:25 ispc saslauthd[2087005]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:35:25 ispc saslauthd[2087005]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:36:01 ispc CRON[2087022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:36:02 ispc CRON[2087022]: pam_unix(cron:session): session closed for user root Dec 19 13:36:10 ispc saslauthd[2087038]: pam_mysql - SELECT returned no result. Dec 19 13:36:10 ispc saslauthd[2087038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:36:10 ispc saslauthd[2087038]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:36:35 ispc saslauthd[2087059]: pam_mysql - SELECT returned no result. Dec 19 13:36:35 ispc saslauthd[2087059]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:36:35 ispc saslauthd[2087059]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:37:01 ispc CRON[2087068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:37:02 ispc CRON[2087068]: pam_unix(cron:session): session closed for user root Dec 19 13:38:01 ispc CRON[2087113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:38:02 ispc CRON[2087113]: pam_unix(cron:session): session closed for user root Dec 19 13:38:11 ispc sshd[2087131]: Invalid user ziplines from 85.143.173.172 Dec 19 13:38:18 ispc postfix/smtpd[2087137]: sql auxprop plugin using mysql engine Dec 19 13:38:18 ispc saslauthd[2087139]: pam_mysql - SELECT returned no result. Dec 19 13:38:18 ispc saslauthd[2087139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:38:18 ispc saslauthd[2087139]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:39:01 ispc CRON[2087160]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:39:01 ispc CRON[2087161]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:39:01 ispc CRON[2087160]: pam_unix(cron:session): session closed for user root Dec 19 13:39:02 ispc CRON[2087161]: pam_unix(cron:session): session closed for user root Dec 19 13:39:28 ispc saslauthd[2087199]: pam_mysql - SELECT returned no result. Dec 19 13:39:28 ispc saslauthd[2087199]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:39:28 ispc saslauthd[2087199]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:40:01 ispc CRON[2087214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:40:01 ispc CRON[2087215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:40:01 ispc CRON[2087216]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:40:01 ispc CRON[2087217]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:40:01 ispc CRON[2087218]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:40:01 ispc CRON[2087215]: pam_unix(cron:session): session closed for user root Dec 19 13:40:01 ispc CRON[2087216]: pam_unix(cron:session): session closed for user www-data Dec 19 13:40:01 ispc CRON[2087218]: pam_unix(cron:session): session closed for user getmail Dec 19 13:40:02 ispc CRON[2087217]: pam_unix(cron:session): session closed for user root Dec 19 13:40:02 ispc CRON[2087214]: pam_unix(cron:session): session closed for user root Dec 19 13:41:01 ispc CRON[2087318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:41:02 ispc CRON[2087318]: pam_unix(cron:session): session closed for user root Dec 19 13:41:07 ispc saslauthd[2087329]: pam_mysql - SELECT returned no result. Dec 19 13:41:07 ispc saslauthd[2087329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:41:07 ispc saslauthd[2087329]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:41:09 ispc sshd[2087335]: Invalid user martof from 185.181.182.252 Dec 19 13:41:13 ispc saslauthd[2087337]: pam_mysql - SELECT returned no result. Dec 19 13:41:13 ispc saslauthd[2087337]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:41:13 ispc saslauthd[2087337]: do_auth : auth failure: [user=anon] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:41:25 ispc sshd[2087342]: Invalid user blceu from 52.232.19.79 Dec 19 13:42:01 ispc CRON[2087365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:42:02 ispc CRON[2087365]: pam_unix(cron:session): session closed for user root Dec 19 13:42:05 ispc sshd[2087376]: Invalid user admin from 45.119.213.109 Dec 19 13:42:17 ispc saslauthd[2087382]: pam_mysql - SELECT returned no result. Dec 19 13:42:17 ispc saslauthd[2087382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:42:17 ispc saslauthd[2087382]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:43:01 ispc CRON[2087411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:43:02 ispc CRON[2087411]: pam_unix(cron:session): session closed for user root Dec 19 13:43:46 ispc saslauthd[2087440]: pam_mysql - SELECT returned no result. Dec 19 13:43:46 ispc saslauthd[2087440]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:43:46 ispc saslauthd[2087440]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:43:53 ispc saslauthd[2087448]: pam_mysql - SELECT returned no result. Dec 19 13:43:53 ispc saslauthd[2087448]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:43:53 ispc saslauthd[2087448]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:44:01 ispc CRON[2087454]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:44:02 ispc CRON[2087454]: pam_unix(cron:session): session closed for user root Dec 19 13:45:01 ispc CRON[2087496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:45:01 ispc CRON[2087497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:45:01 ispc CRON[2087498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:45:01 ispc CRON[2087499]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:45:01 ispc CRON[2087497]: pam_unix(cron:session): session closed for user root Dec 19 13:45:01 ispc CRON[2087499]: pam_unix(cron:session): session closed for user getmail Dec 19 13:45:02 ispc CRON[2087498]: pam_unix(cron:session): session closed for user root Dec 19 13:45:02 ispc CRON[2087496]: pam_unix(cron:session): session closed for user root Dec 19 13:45:24 ispc saslauthd[2087580]: pam_mysql - SELECT returned no result. Dec 19 13:45:24 ispc saslauthd[2087580]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:45:24 ispc saslauthd[2087580]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:46:01 ispc CRON[2087603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:46:01 ispc CRON[2087603]: pam_unix(cron:session): session closed for user root Dec 19 13:46:04 ispc postfix/smtpd[2087615]: sql auxprop plugin using mysql engine Dec 19 13:46:05 ispc saslauthd[2087617]: pam_mysql - SELECT returned no result. Dec 19 13:46:05 ispc saslauthd[2087617]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:46:05 ispc saslauthd[2087617]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:46:20 ispc CRON[2086476]: pam_unix(cron:session): session closed for user root Dec 19 13:46:46 ispc sshd[2087627]: Did not receive identification string from 192.227.134.84 Dec 19 13:46:52 ispc saslauthd[2087628]: pam_mysql - SELECT returned no result. Dec 19 13:46:52 ispc saslauthd[2087628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:46:52 ispc saslauthd[2087628]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:47:01 ispc CRON[2087630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:47:02 ispc CRON[2087630]: pam_unix(cron:session): session closed for user root Dec 19 13:47:31 ispc sshd[2087644]: Invalid user blceu from 203.146.21.153 Dec 19 13:47:44 ispc sshd[2087648]: Invalid user blceu from 103.77.207.53 Dec 19 13:47:48 ispc saslauthd[2087650]: pam_mysql - SELECT returned no result. Dec 19 13:47:48 ispc saslauthd[2087650]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:47:48 ispc saslauthd[2087650]: do_auth : auth failure: [user=pass@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 13:48:01 ispc CRON[2087657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:48:03 ispc CRON[2087657]: pam_unix(cron:session): session closed for user root Dec 19 13:49:01 ispc CRON[2087679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:49:02 ispc CRON[2087679]: pam_unix(cron:session): session closed for user root Dec 19 13:49:10 ispc sshd[2087691]: Invalid user martof from 185.208.181.152 Dec 19 13:50:01 ispc CRON[2087696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:50:01 ispc CRON[2087698]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 13:50:01 ispc CRON[2087699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:50:01 ispc CRON[2087700]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:50:01 ispc CRON[2087697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:50:01 ispc CRON[2087698]: pam_unix(cron:session): session closed for user www-data Dec 19 13:50:01 ispc CRON[2087697]: pam_unix(cron:session): session closed for user root Dec 19 13:50:01 ispc CRON[2087700]: pam_unix(cron:session): session closed for user getmail Dec 19 13:50:02 ispc CRON[2087696]: pam_unix(cron:session): session closed for user root Dec 19 13:50:44 ispc CRON[2087699]: pam_unix(cron:session): session closed for user root Dec 19 13:50:54 ispc postfix/smtpd[2087805]: sql auxprop plugin using mysql engine Dec 19 13:50:55 ispc saslauthd[2087808]: pam_mysql - SELECT returned no result. Dec 19 13:50:55 ispc saslauthd[2087808]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:50:55 ispc saslauthd[2087808]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:50:56 ispc saslauthd[2087809]: pam_mysql - SELECT returned no result. Dec 19 13:50:56 ispc saslauthd[2087809]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:50:56 ispc saslauthd[2087809]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:51:01 ispc CRON[2087810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:51:14 ispc saslauthd[2087828]: pam_mysql - SELECT returned no result. Dec 19 13:51:14 ispc saslauthd[2087828]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:51:14 ispc saslauthd[2087828]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:51:30 ispc saslauthd[2087834]: pam_mysql - SELECT returned no result. Dec 19 13:51:30 ispc saslauthd[2087834]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:51:30 ispc saslauthd[2087834]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:52:01 ispc CRON[2087848]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:52:02 ispc CRON[2087848]: pam_unix(cron:session): session closed for user root Dec 19 13:52:05 ispc saslauthd[2087863]: pam_mysql - SELECT returned no result. Dec 19 13:52:05 ispc saslauthd[2087863]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:52:05 ispc saslauthd[2087863]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:52:29 ispc saslauthd[2087872]: pam_mysql - SELECT returned no result. Dec 19 13:52:29 ispc saslauthd[2087872]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:52:29 ispc saslauthd[2087872]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:53:01 ispc CRON[2087898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:53:02 ispc CRON[2087898]: pam_unix(cron:session): session closed for user root Dec 19 13:53:19 ispc saslauthd[2087921]: pam_mysql - SELECT returned no result. Dec 19 13:53:19 ispc saslauthd[2087921]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:53:19 ispc saslauthd[2087921]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:53:26 ispc postfix/smtpd[2087926]: sql auxprop plugin using mysql engine Dec 19 13:53:28 ispc saslauthd[2087928]: pam_mysql - SELECT returned no result. Dec 19 13:53:28 ispc saslauthd[2087928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:53:28 ispc saslauthd[2087928]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:54:01 ispc CRON[2087946]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:54:02 ispc CRON[2087946]: pam_unix(cron:session): session closed for user root Dec 19 13:54:03 ispc saslauthd[2087957]: pam_mysql - SELECT returned no result. Dec 19 13:54:03 ispc saslauthd[2087957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:54:03 ispc saslauthd[2087957]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:54:33 ispc sshd[2087976]: Invalid user blceu from 139.59.66.222 Dec 19 13:55:01 ispc CRON[2087991]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:55:01 ispc CRON[2087992]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:55:01 ispc CRON[2087993]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:55:01 ispc CRON[2087994]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 13:55:01 ispc CRON[2087992]: pam_unix(cron:session): session closed for user root Dec 19 13:55:01 ispc CRON[2087994]: pam_unix(cron:session): session closed for user getmail Dec 19 13:55:01 ispc CRON[2087993]: pam_unix(cron:session): session closed for user root Dec 19 13:55:03 ispc CRON[2087991]: pam_unix(cron:session): session closed for user root Dec 19 13:55:04 ispc saslauthd[2088067]: pam_mysql - SELECT returned no result. Dec 19 13:55:04 ispc saslauthd[2088067]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:55:04 ispc saslauthd[2088067]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:55:41 ispc postfix/smtpd[2088086]: sql auxprop plugin using mysql engine Dec 19 13:55:43 ispc saslauthd[2088088]: pam_mysql - SELECT returned no result. Dec 19 13:55:43 ispc saslauthd[2088088]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:55:43 ispc saslauthd[2088088]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:55:51 ispc sshd[2088095]: Invalid user blceu from 141.94.71.131 Dec 19 13:56:01 ispc CRON[2088105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:56:02 ispc CRON[2088105]: pam_unix(cron:session): session closed for user root Dec 19 13:56:04 ispc saslauthd[2088116]: pam_mysql - SELECT returned no result. Dec 19 13:56:04 ispc saslauthd[2088116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:56:04 ispc saslauthd[2088116]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:56:14 ispc saslauthd[2088123]: pam_mysql - SELECT returned no result. Dec 19 13:56:14 ispc saslauthd[2088123]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:56:14 ispc saslauthd[2088123]: do_auth : auth failure: [user=anonymous] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:57:01 ispc CRON[2088147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:57:02 ispc CRON[2088147]: pam_unix(cron:session): session closed for user root Dec 19 13:57:49 ispc saslauthd[2088174]: pam_mysql - SELECT returned no result. Dec 19 13:57:49 ispc saslauthd[2088174]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:57:49 ispc saslauthd[2088174]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:58:00 ispc postfix/smtpd[2088184]: sql auxprop plugin using mysql engine Dec 19 13:58:00 ispc saslauthd[2088186]: pam_mysql - SELECT returned no result. Dec 19 13:58:00 ispc saslauthd[2088186]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:58:00 ispc saslauthd[2088186]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:58:01 ispc CRON[2088187]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:58:01 ispc CRON[2088187]: pam_unix(cron:session): session closed for user root Dec 19 13:59:01 ispc CRON[2088232]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 13:59:02 ispc CRON[2088232]: pam_unix(cron:session): session closed for user root Dec 19 13:59:13 ispc saslauthd[2088248]: pam_mysql - SELECT returned no result. Dec 19 13:59:13 ispc saslauthd[2088248]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:59:13 ispc saslauthd[2088248]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 13:59:17 ispc saslauthd[2088253]: pam_mysql - SELECT returned no result. Dec 19 13:59:17 ispc saslauthd[2088253]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:59:17 ispc saslauthd[2088253]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 13:59:48 ispc saslauthd[2088266]: pam_mysql - SELECT returned no result. Dec 19 13:59:48 ispc saslauthd[2088266]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 13:59:48 ispc saslauthd[2088266]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:00:01 ispc CRON[2088271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:00:01 ispc CRON[2088272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:00:01 ispc CRON[2088273]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:00:01 ispc CRON[2088274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:00:01 ispc CRON[2088275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:00:01 ispc CRON[2088276]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:00:01 ispc CRON[2088272]: pam_unix(cron:session): session closed for user root Dec 19 14:00:01 ispc CRON[2088273]: pam_unix(cron:session): session closed for user www-data Dec 19 14:00:01 ispc CRON[2088276]: pam_unix(cron:session): session closed for user getmail Dec 19 14:00:01 ispc CRON[2088275]: pam_unix(cron:session): session closed for user root Dec 19 14:00:02 ispc CRON[2088271]: pam_unix(cron:session): session closed for user root Dec 19 14:00:02 ispc CRON[2088274]: pam_unix(cron:session): session closed for user root Dec 19 14:00:58 ispc saslauthd[2088454]: pam_mysql - SELECT returned no result. Dec 19 14:00:58 ispc saslauthd[2088454]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:00:58 ispc saslauthd[2088454]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:01:01 ispc CRON[2088458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:01:01 ispc CRON[2088458]: pam_unix(cron:session): session closed for user root Dec 19 14:01:03 ispc sshd[2088469]: Invalid user martof from 203.146.21.153 Dec 19 14:01:10 ispc sshd[2088475]: Invalid user blceu from 211.45.175.153 Dec 19 14:01:15 ispc sshd[2088483]: reverse mapping checking getaddrinfo for hosting25.tronicsat.com [2.57.121.25] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:01:15 ispc sshd[2088483]: Invalid user 1234 from 2.57.121.25 Dec 19 14:02:00 ispc sshd[2088512]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:02:01 ispc CRON[2088514]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 14:02:01 ispc CRON[2088515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:02:03 ispc CRON[2088515]: pam_unix(cron:session): session closed for user root Dec 19 14:02:06 ispc saslauthd[2088625]: pam_mysql - SELECT returned no result. Dec 19 14:02:06 ispc saslauthd[2088625]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:02:06 ispc saslauthd[2088625]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:02:56 ispc saslauthd[2089437]: pam_mysql - SELECT returned no result. Dec 19 14:02:56 ispc saslauthd[2089437]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:02:56 ispc saslauthd[2089437]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:03:01 ispc CRON[2089479]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:03:02 ispc CRON[2089479]: pam_unix(cron:session): session closed for user root Dec 19 14:03:17 ispc CRON[2088514]: pam_unix(cron:session): session closed for user logcheck Dec 19 14:03:18 ispc postfix/smtpd[2089722]: sql auxprop plugin using mysql engine Dec 19 14:03:20 ispc saslauthd[2089727]: pam_mysql - SELECT returned no result. Dec 19 14:03:20 ispc saslauthd[2089727]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:03:20 ispc saslauthd[2089727]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:03:24 ispc postfix/smtpd[2089737]: sql auxprop plugin using mysql engine Dec 19 14:03:31 ispc saslauthd[2089760]: pam_mysql - SELECT returned no result. Dec 19 14:03:31 ispc saslauthd[2089760]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:03:31 ispc saslauthd[2089760]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:03:41 ispc sshd[2089787]: Invalid user user from 85.120.229.34 Dec 19 14:03:42 ispc sshd[2089789]: Invalid user user from 85.120.229.34 Dec 19 14:03:45 ispc sshd[2089791]: Invalid user user from 85.120.229.34 Dec 19 14:03:46 ispc sshd[2089793]: Invalid user user from 85.120.229.34 Dec 19 14:03:47 ispc sshd[2089796]: Invalid user user from 85.120.229.34 Dec 19 14:03:48 ispc sshd[2089802]: Invalid user user from 85.120.229.34 Dec 19 14:03:49 ispc sshd[2089804]: Invalid user user from 85.120.229.34 Dec 19 14:04:01 ispc CRON[2089819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:04:02 ispc CRON[2089819]: pam_unix(cron:session): session closed for user root Dec 19 14:04:38 ispc sshd[2089848]: Did not receive identification string from 45.140.17.97 Dec 19 14:04:47 ispc saslauthd[2089853]: pam_mysql - SELECT returned no result. Dec 19 14:04:47 ispc saslauthd[2089853]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:04:47 ispc saslauthd[2089853]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:05:01 ispc CRON[2089858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:05:01 ispc CRON[2089859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:05:01 ispc CRON[2089860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:05:01 ispc CRON[2089861]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:05:01 ispc CRON[2089859]: pam_unix(cron:session): session closed for user root Dec 19 14:05:01 ispc CRON[2089861]: pam_unix(cron:session): session closed for user getmail Dec 19 14:05:02 ispc CRON[2089860]: pam_unix(cron:session): session closed for user root Dec 19 14:05:03 ispc CRON[2089858]: pam_unix(cron:session): session closed for user root Dec 19 14:05:10 ispc sshd[2089938]: Invalid user ziplines from 139.59.66.222 Dec 19 14:05:24 ispc saslauthd[2089945]: pam_mysql - SELECT returned no result. Dec 19 14:05:24 ispc saslauthd[2089945]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:05:24 ispc saslauthd[2089945]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:06:01 ispc CRON[2089967]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:06:03 ispc CRON[2089967]: pam_unix(cron:session): session closed for user root Dec 19 14:06:14 ispc saslauthd[2089984]: pam_mysql - SELECT returned no result. Dec 19 14:06:14 ispc saslauthd[2089984]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:06:14 ispc saslauthd[2089984]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:06:15 ispc sshd[2089982]: Invalid user anoraksro from 117.50.70.169 Dec 19 14:06:17 ispc saslauthd[2089985]: pam_mysql - SELECT returned no result. Dec 19 14:06:17 ispc saslauthd[2089985]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:06:17 ispc saslauthd[2089985]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:06:51 ispc saslauthd[2090002]: pam_mysql - SELECT returned no result. Dec 19 14:06:51 ispc saslauthd[2090002]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:06:51 ispc saslauthd[2090002]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:07:01 ispc CRON[2090007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:07:02 ispc CRON[2090007]: pam_unix(cron:session): session closed for user root Dec 19 14:07:14 ispc saslauthd[2090022]: pam_mysql - SELECT returned no result. Dec 19 14:07:14 ispc saslauthd[2090022]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:07:14 ispc saslauthd[2090022]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:07:18 ispc sshd[2090023]: Invalid user martof from 103.77.207.53 Dec 19 14:07:49 ispc sshd[2090045]: Did not receive identification string from 46.161.50.108 Dec 19 14:08:01 ispc CRON[2090056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:08:01 ispc CRON[2090056]: pam_unix(cron:session): session closed for user root Dec 19 14:08:11 ispc postfix/smtpd[2090078]: sql auxprop plugin using mysql engine Dec 19 14:08:11 ispc saslauthd[2090080]: pam_mysql - SELECT returned no result. Dec 19 14:08:11 ispc saslauthd[2090080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:08:11 ispc saslauthd[2090080]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:08:14 ispc saslauthd[2090086]: pam_mysql - SELECT returned no result. Dec 19 14:08:14 ispc saslauthd[2090086]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:08:14 ispc saslauthd[2090086]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:09:01 ispc CRON[2090105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:09:01 ispc CRON[2090106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:09:02 ispc CRON[2090105]: pam_unix(cron:session): session closed for user root Dec 19 14:09:02 ispc CRON[2090106]: pam_unix(cron:session): session closed for user root Dec 19 14:09:28 ispc sshd[2090085]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:09:31 ispc sshd[2090087]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:09:31 ispc sshd[2090087]: Invalid user klape from 119.53.253.2 Dec 19 14:09:36 ispc sshd[2090088]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:09:36 ispc sshd[2090088]: Invalid user ubuntu from 119.53.253.2 Dec 19 14:09:39 ispc saslauthd[2090146]: pam_mysql - SELECT returned no result. Dec 19 14:09:39 ispc saslauthd[2090146]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:09:39 ispc saslauthd[2090146]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:10:01 ispc CRON[2090155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:10:01 ispc CRON[2090156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:10:01 ispc CRON[2090157]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:10:01 ispc CRON[2090158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:10:01 ispc CRON[2090159]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:10:01 ispc CRON[2090156]: pam_unix(cron:session): session closed for user root Dec 19 14:10:01 ispc CRON[2090157]: pam_unix(cron:session): session closed for user www-data Dec 19 14:10:01 ispc CRON[2090159]: pam_unix(cron:session): session closed for user getmail Dec 19 14:10:02 ispc CRON[2090158]: pam_unix(cron:session): session closed for user root Dec 19 14:10:02 ispc CRON[2090155]: pam_unix(cron:session): session closed for user root Dec 19 14:10:59 ispc saslauthd[2090263]: pam_mysql - SELECT returned no result. Dec 19 14:10:59 ispc saslauthd[2090263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:10:59 ispc saslauthd[2090263]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:11:01 ispc CRON[2090265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:11:02 ispc CRON[2090265]: pam_unix(cron:session): session closed for user root Dec 19 14:11:24 ispc postfix/smtpd[2090284]: sql auxprop plugin using mysql engine Dec 19 14:11:26 ispc saslauthd[2090286]: pam_mysql - SELECT returned no result. Dec 19 14:11:26 ispc saslauthd[2090286]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:11:26 ispc saslauthd[2090286]: do_auth : auth failure: [user=aparker] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:11:28 ispc CRON[2087810]: pam_unix(cron:session): session closed for user root Dec 19 14:11:43 ispc saslauthd[2090291]: pam_mysql - SELECT returned no result. Dec 19 14:11:43 ispc saslauthd[2090291]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:11:43 ispc saslauthd[2090291]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:11:53 ispc sshd[2090292]: Did not receive identification string from 46.161.50.108 Dec 19 14:12:01 ispc CRON[2090295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:12:02 ispc CRON[2090295]: pam_unix(cron:session): session closed for user root Dec 19 14:12:32 ispc saslauthd[2090307]: pam_mysql - SELECT returned no result. Dec 19 14:12:32 ispc saslauthd[2090307]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:12:32 ispc saslauthd[2090307]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:13:01 ispc CRON[2090317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:13:03 ispc CRON[2090317]: pam_unix(cron:session): session closed for user root Dec 19 14:13:57 ispc saslauthd[2090335]: pam_mysql - SELECT returned no result. Dec 19 14:13:57 ispc saslauthd[2090335]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:13:57 ispc saslauthd[2090335]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:14:01 ispc CRON[2090336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:14:02 ispc CRON[2090336]: pam_unix(cron:session): session closed for user root Dec 19 14:14:04 ispc sshd[2090348]: Did not receive identification string from 209.38.104.103 Dec 19 14:14:10 ispc sshd[2090349]: Invalid user blceu from 185.208.181.152 Dec 19 14:14:17 ispc sshd[2090352]: Did not receive identification string from 188.166.74.177 Dec 19 14:14:18 ispc sshd[2090351]: Did not receive identification string from 161.35.218.223 Dec 19 14:14:35 ispc saslauthd[2090353]: pam_mysql - SELECT returned no result. Dec 19 14:14:35 ispc saslauthd[2090353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:14:35 ispc saslauthd[2090353]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:15:01 ispc CRON[2090357]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:15:01 ispc CRON[2090355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:15:01 ispc CRON[2090354]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:15:01 ispc CRON[2090356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:15:01 ispc CRON[2090355]: pam_unix(cron:session): session closed for user root Dec 19 14:15:01 ispc CRON[2090357]: pam_unix(cron:session): session closed for user getmail Dec 19 14:15:02 ispc CRON[2090354]: pam_unix(cron:session): session closed for user root Dec 19 14:15:07 ispc sshd[2090502]: Invalid user test1 from 188.166.74.177 Dec 19 14:15:18 ispc saslauthd[2090546]: pam_mysql - SELECT returned no result. Dec 19 14:15:18 ispc saslauthd[2090546]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:15:18 ispc saslauthd[2090546]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:15:18 ispc sshd[2090544]: Invalid user ziplines from 203.146.21.153 Dec 19 14:15:46 ispc CRON[2090356]: pam_unix(cron:session): session closed for user root Dec 19 14:15:48 ispc sshd[2090552]: Invalid user test2 from 188.166.74.177 Dec 19 14:16:01 ispc CRON[2090557]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:16:02 ispc saslauthd[2090569]: pam_mysql - SELECT returned no result. Dec 19 14:16:02 ispc saslauthd[2090569]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:16:02 ispc saslauthd[2090569]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:16:05 ispc saslauthd[2090572]: pam_mysql - SELECT returned no result. Dec 19 14:16:05 ispc saslauthd[2090572]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:16:05 ispc saslauthd[2090572]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:16:27 ispc sshd[2090581]: Invalid user test3 from 188.166.74.177 Dec 19 14:16:36 ispc saslauthd[2090587]: pam_mysql - SELECT returned no result. Dec 19 14:16:36 ispc saslauthd[2090587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:16:36 ispc saslauthd[2090587]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:16:51 ispc sshd[2090594]: Invalid user alfa from 217.60.38.20 Dec 19 14:17:01 ispc CRON[2090600]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:17:02 ispc CRON[2090600]: pam_unix(cron:session): session closed for user root Dec 19 14:18:01 ispc CRON[2090653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:18:01 ispc CRON[2090653]: pam_unix(cron:session): session closed for user root Dec 19 14:18:41 ispc postfix/smtpd[2090689]: sql auxprop plugin using mysql engine Dec 19 14:18:44 ispc saslauthd[2090691]: pam_mysql - SELECT returned no result. Dec 19 14:18:44 ispc saslauthd[2090691]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:18:44 ispc saslauthd[2090691]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:19:01 ispc CRON[2090702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:19:03 ispc CRON[2090702]: pam_unix(cron:session): session closed for user root Dec 19 14:20:01 ispc CRON[2090749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:20:01 ispc CRON[2090750]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:20:01 ispc CRON[2090751]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:20:01 ispc CRON[2090748]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:20:01 ispc CRON[2090752]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:20:01 ispc CRON[2090750]: pam_unix(cron:session): session closed for user www-data Dec 19 14:20:01 ispc CRON[2090749]: pam_unix(cron:session): session closed for user root Dec 19 14:20:01 ispc CRON[2090752]: pam_unix(cron:session): session closed for user getmail Dec 19 14:20:01 ispc CRON[2090751]: pam_unix(cron:session): session closed for user root Dec 19 14:20:02 ispc CRON[2090748]: pam_unix(cron:session): session closed for user root Dec 19 14:20:03 ispc saslauthd[2090826]: pam_mysql - SELECT returned no result. Dec 19 14:20:03 ispc saslauthd[2090826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:20:03 ispc saslauthd[2090826]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:21:01 ispc CRON[2090859]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:21:01 ispc CRON[2090860]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:21:01 ispc CRON[2090859]: pam_unix(cron:session): session closed for user root Dec 19 14:21:01 ispc CRON[2090860]: pam_unix(cron:session): session closed for user root Dec 19 14:21:16 ispc postfix/smtpd[2090885]: sql auxprop plugin using mysql engine Dec 19 14:21:16 ispc saslauthd[2090887]: pam_mysql - SELECT returned no result. Dec 19 14:21:16 ispc saslauthd[2090887]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:21:16 ispc saslauthd[2090887]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:21:20 ispc saslauthd[2090890]: pam_mysql - SELECT returned no result. Dec 19 14:21:20 ispc saslauthd[2090890]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:21:20 ispc saslauthd[2090890]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:21:39 ispc saslauthd[2090899]: pam_mysql - SELECT returned no result. Dec 19 14:21:39 ispc saslauthd[2090899]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:21:39 ispc saslauthd[2090899]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:21:45 ispc sshd[2090904]: Invalid user postgres from 188.166.74.177 Dec 19 14:21:51 ispc saslauthd[2090909]: pam_mysql - SELECT returned no result. Dec 19 14:21:51 ispc saslauthd[2090909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:21:51 ispc saslauthd[2090909]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:21:53 ispc saslauthd[2090915]: pam_mysql - SELECT returned no result. Dec 19 14:21:53 ispc saslauthd[2090915]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:21:53 ispc saslauthd[2090915]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:22:01 ispc CRON[2090918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:22:02 ispc CRON[2090918]: pam_unix(cron:session): session closed for user root Dec 19 14:22:17 ispc sshd[2090937]: Invalid user oracle from 188.166.74.177 Dec 19 14:22:51 ispc sshd[2090955]: Invalid user user from 188.166.74.177 Dec 19 14:22:54 ispc sshd[2090976]: Invalid user blceu from 185.181.182.252 Dec 19 14:22:59 ispc saslauthd[2090982]: pam_mysql - SELECT returned no result. Dec 19 14:22:59 ispc saslauthd[2090982]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:22:59 ispc saslauthd[2090982]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:23:01 ispc CRON[2090983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:23:03 ispc CRON[2090983]: pam_unix(cron:session): session closed for user root Dec 19 14:23:26 ispc sshd[2091009]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:23:26 ispc sshd[2091009]: Invalid user ziplines from 193.110.157.47 Dec 19 14:24:01 ispc CRON[2091026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:24:02 ispc CRON[2091026]: pam_unix(cron:session): session closed for user root Dec 19 14:24:09 ispc saslauthd[2091041]: pam_mysql - SELECT returned no result. Dec 19 14:24:09 ispc saslauthd[2091041]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:24:09 ispc saslauthd[2091041]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:25:01 ispc CRON[2091071]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:25:01 ispc CRON[2091072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:25:01 ispc CRON[2091073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:25:01 ispc CRON[2091074]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:25:02 ispc CRON[2091072]: pam_unix(cron:session): session closed for user root Dec 19 14:25:02 ispc CRON[2091074]: pam_unix(cron:session): session closed for user getmail Dec 19 14:25:02 ispc CRON[2091073]: pam_unix(cron:session): session closed for user root Dec 19 14:25:02 ispc CRON[2091071]: pam_unix(cron:session): session closed for user root Dec 19 14:25:13 ispc saslauthd[2091151]: pam_mysql - SELECT returned no result. Dec 19 14:25:13 ispc saslauthd[2091151]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:25:13 ispc saslauthd[2091151]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:26:01 ispc CRON[2091182]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:26:03 ispc CRON[2091182]: pam_unix(cron:session): session closed for user root Dec 19 14:26:36 ispc postfix/smtpd[2091211]: sql auxprop plugin using mysql engine Dec 19 14:26:37 ispc postfix/smtpd[2091213]: sql auxprop plugin using mysql engine Dec 19 14:26:39 ispc saslauthd[2091214]: pam_mysql - SELECT returned no result. Dec 19 14:26:39 ispc saslauthd[2091214]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:26:39 ispc saslauthd[2091214]: do_auth : auth failure: [user=apc] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:26:43 ispc saslauthd[2091216]: pam_mysql - SELECT returned no result. Dec 19 14:26:43 ispc saslauthd[2091216]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:26:43 ispc saslauthd[2091216]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:26:45 ispc saslauthd[2091219]: pam_mysql - SELECT returned no result. Dec 19 14:26:45 ispc saslauthd[2091219]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:26:45 ispc saslauthd[2091219]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:27:01 ispc CRON[2091239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:27:01 ispc CRON[2091239]: pam_unix(cron:session): session closed for user root Dec 19 14:27:42 ispc saslauthd[2091275]: pam_mysql - SELECT returned no result. Dec 19 14:27:42 ispc saslauthd[2091275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:27:42 ispc saslauthd[2091275]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:28:01 ispc CRON[2091296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:28:03 ispc CRON[2091296]: pam_unix(cron:session): session closed for user root Dec 19 14:29:01 ispc CRON[2091347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:29:01 ispc CRON[2091347]: pam_unix(cron:session): session closed for user root Dec 19 14:29:23 ispc saslauthd[2091372]: pam_mysql - SELECT returned no result. Dec 19 14:29:23 ispc saslauthd[2091372]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:29:23 ispc saslauthd[2091372]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:29:27 ispc postfix/smtpd[2091379]: sql auxprop plugin using mysql engine Dec 19 14:29:27 ispc saslauthd[2091381]: pam_mysql - SELECT returned no result. Dec 19 14:29:27 ispc saslauthd[2091381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:29:27 ispc saslauthd[2091381]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:30:01 ispc CRON[2091406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:30:01 ispc CRON[2091407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:30:01 ispc CRON[2091408]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:30:01 ispc CRON[2091409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:30:01 ispc CRON[2091410]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:30:01 ispc CRON[2091408]: pam_unix(cron:session): session closed for user www-data Dec 19 14:30:01 ispc CRON[2091407]: pam_unix(cron:session): session closed for user root Dec 19 14:30:01 ispc CRON[2091410]: pam_unix(cron:session): session closed for user getmail Dec 19 14:30:02 ispc CRON[2091409]: pam_unix(cron:session): session closed for user root Dec 19 14:30:02 ispc CRON[2091406]: pam_unix(cron:session): session closed for user root Dec 19 14:30:07 ispc sshd[2091484]: Did not receive identification string from 192.227.134.84 Dec 19 14:30:10 ispc saslauthd[2091489]: pam_mysql - SELECT returned no result. Dec 19 14:30:10 ispc saslauthd[2091489]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:30:10 ispc saslauthd[2091489]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:30:56 ispc saslauthd[2091523]: pam_mysql - SELECT returned no result. Dec 19 14:30:56 ispc saslauthd[2091523]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:30:56 ispc saslauthd[2091523]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:31:01 ispc sshd[2091529]: Invalid user admin from 209.38.104.103 Dec 19 14:31:01 ispc CRON[2091531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:31:02 ispc CRON[2091531]: pam_unix(cron:session): session closed for user root Dec 19 14:31:08 ispc sshd[2091544]: Invalid user martof from 139.59.66.222 Dec 19 14:31:30 ispc sshd[2091564]: Invalid user admin from 209.38.104.103 Dec 19 14:31:50 ispc saslauthd[2091581]: pam_mysql - SELECT returned no result. Dec 19 14:31:50 ispc saslauthd[2091581]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:31:50 ispc saslauthd[2091581]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:31:59 ispc sshd[2091585]: Invalid user admin from 209.38.104.103 Dec 19 14:32:01 ispc CRON[2091591]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:32:01 ispc CRON[2091591]: pam_unix(cron:session): session closed for user root Dec 19 14:32:28 ispc sshd[2091617]: Invalid user admin from 209.38.104.103 Dec 19 14:32:33 ispc saslauthd[2091623]: pam_mysql - SELECT returned no result. Dec 19 14:32:33 ispc saslauthd[2091623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:32:33 ispc saslauthd[2091623]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:32:57 ispc sshd[2091646]: Invalid user admin from 209.38.104.103 Dec 19 14:33:01 ispc CRON[2091655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:33:02 ispc CRON[2091655]: pam_unix(cron:session): session closed for user root Dec 19 14:33:23 ispc saslauthd[2091680]: pam_mysql - SELECT returned no result. Dec 19 14:33:23 ispc saslauthd[2091680]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:33:23 ispc saslauthd[2091680]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:33:25 ispc sshd[2091681]: Invalid user admin from 209.38.104.103 Dec 19 14:33:49 ispc postfix/smtpd[2091702]: sql auxprop plugin using mysql engine Dec 19 14:33:49 ispc saslauthd[2091704]: pam_mysql - SELECT returned no result. Dec 19 14:33:49 ispc saslauthd[2091704]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:33:49 ispc saslauthd[2091704]: do_auth : auth failure: [user=noreply@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 14:33:57 ispc saslauthd[2091713]: pam_mysql - SELECT returned no result. Dec 19 14:33:57 ispc saslauthd[2091713]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:33:57 ispc saslauthd[2091713]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:34:01 ispc CRON[2091715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:34:02 ispc CRON[2091715]: pam_unix(cron:session): session closed for user root Dec 19 14:34:38 ispc saslauthd[2091749]: pam_mysql - SELECT returned no result. Dec 19 14:34:38 ispc saslauthd[2091749]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:34:38 ispc saslauthd[2091749]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:34:56 ispc sshd[2091759]: Invalid user martof from 148.216.54.17 Dec 19 14:35:01 ispc CRON[2091763]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:35:01 ispc CRON[2091764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:35:01 ispc CRON[2091765]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:35:01 ispc CRON[2091766]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:35:01 ispc CRON[2091764]: pam_unix(cron:session): session closed for user root Dec 19 14:35:01 ispc CRON[2091766]: pam_unix(cron:session): session closed for user getmail Dec 19 14:35:02 ispc CRON[2091765]: pam_unix(cron:session): session closed for user root Dec 19 14:35:03 ispc CRON[2091763]: pam_unix(cron:session): session closed for user root Dec 19 14:36:01 ispc CRON[2091880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:36:01 ispc CRON[2091880]: pam_unix(cron:session): session closed for user root Dec 19 14:36:11 ispc saslauthd[2091896]: pam_mysql - SELECT returned no result. Dec 19 14:36:11 ispc saslauthd[2091896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:36:11 ispc saslauthd[2091896]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:36:17 ispc postfix/smtpd[2091901]: sql auxprop plugin using mysql engine Dec 19 14:36:17 ispc saslauthd[2091903]: pam_mysql - SELECT returned no result. Dec 19 14:36:17 ispc saslauthd[2091903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:36:17 ispc saslauthd[2091903]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:36:27 ispc CRON[2090557]: pam_unix(cron:session): session closed for user root Dec 19 14:36:38 ispc sshd[2091910]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 14:36:45 ispc saslauthd[2091912]: pam_mysql - SELECT returned no result. Dec 19 14:36:45 ispc saslauthd[2091912]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:36:45 ispc saslauthd[2091912]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:36:59 ispc sshd[2091913]: Did not receive identification string from 116.255.250.104 Dec 19 14:37:02 ispc CRON[2091916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:37:03 ispc CRON[2091916]: pam_unix(cron:session): session closed for user root Dec 19 14:37:03 ispc saslauthd[2091928]: pam_mysql - SELECT returned no result. Dec 19 14:37:03 ispc saslauthd[2091928]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:37:03 ispc saslauthd[2091928]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:38:01 ispc CRON[2091942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:38:02 ispc CRON[2091942]: pam_unix(cron:session): session closed for user root Dec 19 14:38:33 ispc saslauthd[2091955]: pam_mysql - SELECT returned no result. Dec 19 14:38:33 ispc saslauthd[2091955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:38:33 ispc saslauthd[2091955]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:38:40 ispc saslauthd[2091956]: pam_mysql - SELECT returned no result. Dec 19 14:38:40 ispc saslauthd[2091956]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:38:40 ispc saslauthd[2091956]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:39:01 ispc CRON[2091958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:39:01 ispc CRON[2091959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:39:01 ispc CRON[2091958]: pam_unix(cron:session): session closed for user root Dec 19 14:39:02 ispc CRON[2091959]: pam_unix(cron:session): session closed for user root Dec 19 14:40:01 ispc CRON[2091984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:40:01 ispc CRON[2091985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:40:01 ispc CRON[2091986]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:40:01 ispc CRON[2091988]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:40:01 ispc CRON[2091987]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:40:01 ispc CRON[2091986]: pam_unix(cron:session): session closed for user www-data Dec 19 14:40:01 ispc CRON[2091988]: pam_unix(cron:session): session closed for user getmail Dec 19 14:40:01 ispc CRON[2091985]: pam_unix(cron:session): session closed for user root Dec 19 14:40:01 ispc CRON[2091984]: pam_unix(cron:session): session closed for user root Dec 19 14:40:17 ispc saslauthd[2092099]: pam_mysql - SELECT returned no result. Dec 19 14:40:17 ispc saslauthd[2092099]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:40:17 ispc saslauthd[2092099]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:40:33 ispc CRON[2091987]: pam_unix(cron:session): session closed for user root Dec 19 14:40:47 ispc postfix/smtpd[2092100]: sql auxprop plugin using mysql engine Dec 19 14:40:53 ispc saslauthd[2092103]: pam_mysql - SELECT returned no result. Dec 19 14:40:53 ispc saslauthd[2092103]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:40:53 ispc saslauthd[2092103]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:41:01 ispc CRON[2092104]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:41:50 ispc saslauthd[2092135]: pam_mysql - SELECT returned no result. Dec 19 14:41:50 ispc saslauthd[2092135]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:41:50 ispc saslauthd[2092135]: do_auth : auth failure: [user=at4400] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:42:01 ispc CRON[2092140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:42:02 ispc CRON[2092140]: pam_unix(cron:session): session closed for user root Dec 19 14:42:25 ispc saslauthd[2092165]: pam_mysql - SELECT returned no result. Dec 19 14:42:25 ispc saslauthd[2092165]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:42:25 ispc saslauthd[2092165]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:43:01 ispc CRON[2092189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:43:01 ispc CRON[2092189]: pam_unix(cron:session): session closed for user root Dec 19 14:43:57 ispc saslauthd[2092226]: pam_mysql - SELECT returned no result. Dec 19 14:43:57 ispc saslauthd[2092226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:43:57 ispc saslauthd[2092226]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:44:01 ispc CRON[2092227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:44:02 ispc CRON[2092227]: pam_unix(cron:session): session closed for user root Dec 19 14:44:13 ispc postfix/smtpd[2092242]: sql auxprop plugin using mysql engine Dec 19 14:44:14 ispc saslauthd[2092244]: pam_mysql - SELECT returned no result. Dec 19 14:44:14 ispc saslauthd[2092244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:44:14 ispc saslauthd[2092244]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:44:40 ispc saslauthd[2092257]: pam_mysql - SELECT returned no result. Dec 19 14:44:40 ispc saslauthd[2092257]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:44:40 ispc saslauthd[2092257]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:45:01 ispc CRON[2092271]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:45:01 ispc CRON[2092272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:45:01 ispc CRON[2092273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:45:01 ispc CRON[2092274]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:45:01 ispc CRON[2092272]: pam_unix(cron:session): session closed for user root Dec 19 14:45:01 ispc CRON[2092274]: pam_unix(cron:session): session closed for user getmail Dec 19 14:45:01 ispc CRON[2092271]: pam_unix(cron:session): session closed for user root Dec 19 14:45:01 ispc CRON[2092273]: pam_unix(cron:session): session closed for user root Dec 19 14:46:02 ispc CRON[2092378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:46:03 ispc CRON[2092378]: pam_unix(cron:session): session closed for user root Dec 19 14:46:06 ispc saslauthd[2092389]: pam_mysql - SELECT returned no result. Dec 19 14:46:06 ispc saslauthd[2092389]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:46:06 ispc saslauthd[2092389]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:47:01 ispc CRON[2092416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:47:02 ispc CRON[2092416]: pam_unix(cron:session): session closed for user root Dec 19 14:47:03 ispc saslauthd[2092431]: pam_mysql - SELECT returned no result. Dec 19 14:47:03 ispc saslauthd[2092431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:47:03 ispc saslauthd[2092431]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:47:10 ispc postfix/smtpd[2092433]: sql auxprop plugin using mysql engine Dec 19 14:47:12 ispc saslauthd[2092439]: pam_mysql - SELECT returned no result. Dec 19 14:47:12 ispc saslauthd[2092439]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:47:12 ispc saslauthd[2092439]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:48:01 ispc CRON[2092467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:48:02 ispc CRON[2092467]: pam_unix(cron:session): session closed for user root Dec 19 14:49:01 ispc CRON[2092511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:49:01 ispc CRON[2092511]: pam_unix(cron:session): session closed for user root Dec 19 14:49:19 ispc postfix/smtpd[2092534]: sql auxprop plugin using mysql engine Dec 19 14:49:23 ispc saslauthd[2092536]: pam_mysql - SELECT returned no result. Dec 19 14:49:23 ispc saslauthd[2092536]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:49:23 ispc saslauthd[2092536]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:50:01 ispc CRON[2092561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:50:01 ispc CRON[2092562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:50:01 ispc CRON[2092563]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 14:50:01 ispc CRON[2092564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:50:01 ispc CRON[2092565]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:50:01 ispc CRON[2092562]: pam_unix(cron:session): session closed for user root Dec 19 14:50:01 ispc CRON[2092563]: pam_unix(cron:session): session closed for user www-data Dec 19 14:50:01 ispc CRON[2092565]: pam_unix(cron:session): session closed for user getmail Dec 19 14:50:01 ispc CRON[2092564]: pam_unix(cron:session): session closed for user root Dec 19 14:50:02 ispc CRON[2092561]: pam_unix(cron:session): session closed for user root Dec 19 14:50:13 ispc saslauthd[2092643]: pam_mysql - SELECT returned no result. Dec 19 14:50:13 ispc saslauthd[2092643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:50:13 ispc saslauthd[2092643]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:50:51 ispc saslauthd[2092664]: pam_mysql - SELECT returned no result. Dec 19 14:50:51 ispc saslauthd[2092664]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:50:51 ispc saslauthd[2092664]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:51:01 ispc CRON[2092671]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:51:01 ispc CRON[2092671]: pam_unix(cron:session): session closed for user root Dec 19 14:51:23 ispc postfix/smtpd[2092694]: sql auxprop plugin using mysql engine Dec 19 14:51:23 ispc saslauthd[2092697]: pam_mysql - SELECT returned no result. Dec 19 14:51:23 ispc saslauthd[2092697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:51:23 ispc saslauthd[2092697]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:51:42 ispc saslauthd[2092708]: pam_mysql - SELECT returned no result. Dec 19 14:51:42 ispc saslauthd[2092708]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:51:42 ispc saslauthd[2092708]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:51:46 ispc saslauthd[2092709]: pam_mysql - SELECT returned no result. Dec 19 14:51:46 ispc saslauthd[2092709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:51:46 ispc saslauthd[2092709]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:52:01 ispc CRON[2092718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:52:02 ispc CRON[2092718]: pam_unix(cron:session): session closed for user root Dec 19 14:52:36 ispc saslauthd[2092748]: pam_mysql - SELECT returned no result. Dec 19 14:52:36 ispc saslauthd[2092748]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:52:36 ispc saslauthd[2092748]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:53:01 ispc CRON[2092766]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:53:01 ispc CRON[2092766]: pam_unix(cron:session): session closed for user root Dec 19 14:54:01 ispc CRON[2092809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:54:02 ispc CRON[2092809]: pam_unix(cron:session): session closed for user root Dec 19 14:54:05 ispc saslauthd[2092824]: pam_mysql - SELECT returned no result. Dec 19 14:54:05 ispc saslauthd[2092824]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:54:05 ispc saslauthd[2092824]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:54:53 ispc saslauthd[2092850]: pam_mysql - SELECT returned no result. Dec 19 14:54:53 ispc saslauthd[2092850]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:54:53 ispc saslauthd[2092850]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:55:01 ispc CRON[2092851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:55:01 ispc CRON[2092852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:55:01 ispc CRON[2092853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:55:01 ispc CRON[2092854]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 14:55:01 ispc CRON[2092852]: pam_unix(cron:session): session closed for user root Dec 19 14:55:01 ispc CRON[2092854]: pam_unix(cron:session): session closed for user getmail Dec 19 14:55:02 ispc CRON[2092853]: pam_unix(cron:session): session closed for user root Dec 19 14:55:02 ispc CRON[2092851]: pam_unix(cron:session): session closed for user root Dec 19 14:55:51 ispc saslauthd[2092955]: pam_mysql - SELECT returned no result. Dec 19 14:55:51 ispc saslauthd[2092955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:55:51 ispc saslauthd[2092955]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:56:01 ispc CRON[2092963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:56:02 ispc CRON[2092963]: pam_unix(cron:session): session closed for user root Dec 19 14:56:28 ispc postfix/smtpd[2092986]: sql auxprop plugin using mysql engine Dec 19 14:56:43 ispc saslauthd[2092999]: pam_mysql - SELECT returned no result. Dec 19 14:56:43 ispc saslauthd[2092999]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:56:43 ispc saslauthd[2092999]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:56:53 ispc saslauthd[2093004]: pam_mysql - SELECT returned no result. Dec 19 14:56:53 ispc saslauthd[2093004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:56:53 ispc saslauthd[2093004]: do_auth : auth failure: [user=author] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:57:01 ispc CRON[2093009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:57:02 ispc CRON[2093009]: pam_unix(cron:session): session closed for user root Dec 19 14:57:48 ispc sshd[2093043]: Did not receive identification string from 220.250.59.155 Dec 19 14:58:01 ispc CRON[2093052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:58:02 ispc CRON[2093052]: pam_unix(cron:session): session closed for user root Dec 19 14:58:04 ispc postfix/smtpd[2093065]: sql auxprop plugin using mysql engine Dec 19 14:58:05 ispc saslauthd[2093071]: pam_mysql - SELECT returned no result. Dec 19 14:58:05 ispc saslauthd[2093071]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:58:05 ispc saslauthd[2093071]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 14:59:01 ispc CRON[2093095]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 14:59:02 ispc postfix/smtpd[2093099]: sql auxprop plugin using mysql engine Dec 19 14:59:02 ispc saslauthd[2093108]: pam_mysql - SELECT returned no result. Dec 19 14:59:02 ispc saslauthd[2093108]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:59:02 ispc saslauthd[2093108]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 14:59:02 ispc CRON[2093095]: pam_unix(cron:session): session closed for user root Dec 19 14:59:41 ispc saslauthd[2093125]: pam_mysql - SELECT returned no result. Dec 19 14:59:41 ispc saslauthd[2093125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 14:59:41 ispc saslauthd[2093125]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:00:01 ispc CRON[2093134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:00:01 ispc CRON[2093135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:00:01 ispc CRON[2093136]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:00:01 ispc CRON[2093137]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:00:01 ispc CRON[2093138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:00:01 ispc CRON[2093139]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:00:01 ispc CRON[2093135]: pam_unix(cron:session): session closed for user root Dec 19 15:00:01 ispc CRON[2093136]: pam_unix(cron:session): session closed for user www-data Dec 19 15:00:01 ispc CRON[2093139]: pam_unix(cron:session): session closed for user getmail Dec 19 15:00:02 ispc CRON[2093138]: pam_unix(cron:session): session closed for user root Dec 19 15:00:02 ispc CRON[2093137]: pam_unix(cron:session): session closed for user root Dec 19 15:00:03 ispc CRON[2093134]: pam_unix(cron:session): session closed for user root Dec 19 15:00:21 ispc saslauthd[2093300]: pam_mysql - SELECT returned no result. Dec 19 15:00:21 ispc saslauthd[2093300]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:00:21 ispc saslauthd[2093300]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:01:01 ispc CRON[2093319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:01:02 ispc CRON[2093319]: pam_unix(cron:session): session closed for user root Dec 19 15:01:24 ispc saslauthd[2093343]: pam_mysql - SELECT returned no result. Dec 19 15:01:24 ispc saslauthd[2093343]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:01:24 ispc saslauthd[2093343]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:01:30 ispc postfix/smtpd[2093348]: sql auxprop plugin using mysql engine Dec 19 15:01:30 ispc CRON[2092104]: pam_unix(cron:session): session closed for user root Dec 19 15:02:01 ispc CRON[2093350]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 15:02:01 ispc CRON[2093351]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:02:02 ispc CRON[2093351]: pam_unix(cron:session): session closed for user root Dec 19 15:02:06 ispc saslauthd[2093467]: pam_mysql - SELECT returned no result. Dec 19 15:02:06 ispc saslauthd[2093467]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:02:06 ispc saslauthd[2093467]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:03:01 ispc CRON[2094224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:03:02 ispc CRON[2094224]: pam_unix(cron:session): session closed for user root Dec 19 15:03:10 ispc CRON[2093350]: pam_unix(cron:session): session closed for user logcheck Dec 19 15:03:11 ispc saslauthd[2094397]: pam_mysql - SELECT returned no result. Dec 19 15:03:11 ispc saslauthd[2094397]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:03:11 ispc saslauthd[2094397]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:03:16 ispc postfix/smtpd[2094399]: sql auxprop plugin using mysql engine Dec 19 15:04:01 ispc CRON[2094408]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:04:03 ispc CRON[2094408]: pam_unix(cron:session): session closed for user root Dec 19 15:04:38 ispc saslauthd[2094425]: pam_mysql - SELECT returned no result. Dec 19 15:04:38 ispc saslauthd[2094425]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:04:38 ispc saslauthd[2094425]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:05:01 ispc CRON[2094430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:05:01 ispc CRON[2094431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:05:01 ispc CRON[2094432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:05:01 ispc CRON[2094433]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:05:01 ispc CRON[2094431]: pam_unix(cron:session): session closed for user root Dec 19 15:05:01 ispc CRON[2094433]: pam_unix(cron:session): session closed for user getmail Dec 19 15:05:02 ispc CRON[2094430]: pam_unix(cron:session): session closed for user root Dec 19 15:05:29 ispc CRON[2094432]: pam_unix(cron:session): session closed for user root Dec 19 15:06:01 ispc CRON[2094544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:06:05 ispc saslauthd[2094556]: pam_mysql - SELECT returned no result. Dec 19 15:06:05 ispc saslauthd[2094556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:06:05 ispc saslauthd[2094556]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:06:11 ispc saslauthd[2094557]: pam_mysql - SELECT returned no result. Dec 19 15:06:11 ispc saslauthd[2094557]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:06:11 ispc saslauthd[2094557]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:06:18 ispc sshd[2094562]: Invalid user ziplines from 51.91.76.213 Dec 19 15:06:27 ispc saslauthd[2094568]: pam_mysql - SELECT returned no result. Dec 19 15:06:27 ispc saslauthd[2094568]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:06:27 ispc saslauthd[2094568]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:07:01 ispc CRON[2094582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:07:02 ispc CRON[2094582]: pam_unix(cron:session): session closed for user root Dec 19 15:07:03 ispc saslauthd[2094594]: pam_mysql - SELECT returned no result. Dec 19 15:07:03 ispc saslauthd[2094594]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:07:03 ispc saslauthd[2094594]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:07:29 ispc saslauthd[2094609]: pam_mysql - SELECT returned no result. Dec 19 15:07:29 ispc saslauthd[2094609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:07:29 ispc saslauthd[2094609]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:08:01 ispc CRON[2094630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:08:02 ispc CRON[2094630]: pam_unix(cron:session): session closed for user root Dec 19 15:09:01 ispc CRON[2094665]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:09:01 ispc CRON[2094666]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:09:01 ispc CRON[2094665]: pam_unix(cron:session): session closed for user root Dec 19 15:09:02 ispc CRON[2094666]: pam_unix(cron:session): session closed for user root Dec 19 15:09:28 ispc postfix/smtpd[2094701]: sql auxprop plugin using mysql engine Dec 19 15:09:30 ispc saslauthd[2094703]: pam_mysql - SELECT returned no result. Dec 19 15:09:30 ispc saslauthd[2094703]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:09:30 ispc saslauthd[2094703]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:09:35 ispc sshd[2094710]: Did not receive identification string from 196.251.100.49 Dec 19 15:10:01 ispc CRON[2094720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:10:01 ispc CRON[2094721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:10:01 ispc CRON[2094722]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:10:01 ispc CRON[2094723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:10:01 ispc CRON[2094724]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:10:01 ispc CRON[2094721]: pam_unix(cron:session): session closed for user root Dec 19 15:10:01 ispc CRON[2094724]: pam_unix(cron:session): session closed for user getmail Dec 19 15:10:01 ispc CRON[2094722]: pam_unix(cron:session): session closed for user www-data Dec 19 15:10:01 ispc CRON[2094723]: pam_unix(cron:session): session closed for user root Dec 19 15:10:02 ispc CRON[2094720]: pam_unix(cron:session): session closed for user root Dec 19 15:10:26 ispc saslauthd[2094810]: pam_mysql - SELECT returned no result. Dec 19 15:10:26 ispc saslauthd[2094810]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:10:26 ispc saslauthd[2094810]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:11:01 ispc CRON[2094830]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:11:02 ispc CRON[2094830]: pam_unix(cron:session): session closed for user root Dec 19 15:11:20 ispc saslauthd[2094851]: pam_mysql - SELECT returned no result. Dec 19 15:11:20 ispc saslauthd[2094851]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:11:20 ispc saslauthd[2094851]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:12:01 ispc CRON[2094869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:12:01 ispc CRON[2094869]: pam_unix(cron:session): session closed for user root Dec 19 15:12:06 ispc postfix/smtpd[2094880]: sql auxprop plugin using mysql engine Dec 19 15:12:07 ispc saslauthd[2094886]: pam_mysql - SELECT returned no result. Dec 19 15:12:07 ispc saslauthd[2094886]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:12:07 ispc saslauthd[2094886]: do_auth : auth failure: [user=autocad] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:12:28 ispc sshd[2094892]: Invalid user ziplines from 27.254.144.183 Dec 19 15:12:54 ispc saslauthd[2094918]: pam_mysql - SELECT returned no result. Dec 19 15:12:54 ispc saslauthd[2094918]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:12:54 ispc saslauthd[2094918]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:13:01 ispc CRON[2094923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:13:02 ispc CRON[2094923]: pam_unix(cron:session): session closed for user root Dec 19 15:13:16 ispc saslauthd[2094938]: pam_mysql - SELECT returned no result. Dec 19 15:13:16 ispc saslauthd[2094938]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:13:16 ispc saslauthd[2094938]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:14:01 ispc CRON[2094959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:14:01 ispc CRON[2094959]: pam_unix(cron:session): session closed for user root Dec 19 15:14:48 ispc postfix/smtpd[2094990]: sql auxprop plugin using mysql engine Dec 19 15:14:57 ispc saslauthd[2094997]: pam_mysql - SELECT returned no result. Dec 19 15:14:57 ispc saslauthd[2094997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:14:57 ispc saslauthd[2094997]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:15:01 ispc CRON[2095004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:15:01 ispc CRON[2095006]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:15:01 ispc CRON[2095003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:15:01 ispc CRON[2095005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:15:01 ispc CRON[2095004]: pam_unix(cron:session): session closed for user root Dec 19 15:15:01 ispc CRON[2095006]: pam_unix(cron:session): session closed for user getmail Dec 19 15:15:01 ispc CRON[2095005]: pam_unix(cron:session): session closed for user root Dec 19 15:15:01 ispc CRON[2095003]: pam_unix(cron:session): session closed for user root Dec 19 15:15:32 ispc sshd[2095091]: Did not receive identification string from 192.227.134.84 Dec 19 15:16:01 ispc CRON[2095105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:16:02 ispc CRON[2095105]: pam_unix(cron:session): session closed for user root Dec 19 15:16:12 ispc postfix/smtpd[2095120]: sql auxprop plugin using mysql engine Dec 19 15:16:46 ispc saslauthd[2095138]: pam_mysql - SELECT returned no result. Dec 19 15:16:46 ispc saslauthd[2095138]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:16:46 ispc saslauthd[2095138]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:17:01 ispc CRON[2095148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:17:02 ispc CRON[2095148]: pam_unix(cron:session): session closed for user root Dec 19 15:17:29 ispc saslauthd[2095168]: pam_mysql - SELECT returned no result. Dec 19 15:17:29 ispc saslauthd[2095168]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:17:29 ispc saslauthd[2095168]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:17:40 ispc saslauthd[2095177]: pam_mysql - SELECT returned no result. Dec 19 15:17:40 ispc saslauthd[2095177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:17:40 ispc saslauthd[2095177]: do_auth : auth failure: [user=admin@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 15:18:01 ispc CRON[2095191]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 15:18:01 ispc CRON[2095192]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:18:02 ispc CRON[2095192]: pam_unix(cron:session): session closed for user root Dec 19 15:18:05 ispc CRON[2095191]: pam_unix(cron:session): session closed for user amavis Dec 19 15:18:08 ispc postfix/smtpd[2095218]: sql auxprop plugin using mysql engine Dec 19 15:18:29 ispc postfix/smtpd[2095229]: sql auxprop plugin using mysql engine Dec 19 15:18:35 ispc saslauthd[2095236]: pam_mysql - SELECT returned no result. Dec 19 15:18:35 ispc saslauthd[2095236]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:18:35 ispc saslauthd[2095236]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:19:01 ispc CRON[2095252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:19:02 ispc CRON[2095252]: pam_unix(cron:session): session closed for user root Dec 19 15:19:02 ispc postfix/smtpd[2095263]: sql auxprop plugin using mysql engine Dec 19 15:19:42 ispc saslauthd[2095282]: pam_mysql - SELECT returned no result. Dec 19 15:19:42 ispc saslauthd[2095282]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:19:42 ispc saslauthd[2095282]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:20:01 ispc CRON[2095292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:20:01 ispc CRON[2095293]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:20:01 ispc CRON[2095294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:20:01 ispc CRON[2095295]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:20:01 ispc CRON[2095291]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:20:01 ispc CRON[2095292]: pam_unix(cron:session): session closed for user root Dec 19 15:20:01 ispc CRON[2095293]: pam_unix(cron:session): session closed for user www-data Dec 19 15:20:01 ispc CRON[2095295]: pam_unix(cron:session): session closed for user getmail Dec 19 15:20:02 ispc CRON[2095294]: pam_unix(cron:session): session closed for user root Dec 19 15:20:02 ispc CRON[2095291]: pam_unix(cron:session): session closed for user root Dec 19 15:20:17 ispc saslauthd[2095374]: pam_mysql - SELECT returned no result. Dec 19 15:20:17 ispc saslauthd[2095374]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:20:17 ispc saslauthd[2095374]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:20:21 ispc postfix/smtpd[2095379]: sql auxprop plugin using mysql engine Dec 19 15:20:22 ispc saslauthd[2095381]: pam_mysql - SELECT returned no result. Dec 19 15:20:22 ispc saslauthd[2095381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:20:22 ispc saslauthd[2095381]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:20:41 ispc sshd[2095390]: Invalid user martof from 51.91.247.10 Dec 19 15:20:59 ispc sshd[2095400]: Invalid user matlbula from 221.156.137.103 Dec 19 15:21:01 ispc CRON[2095402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:21:01 ispc CRON[2095403]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:21:01 ispc CRON[2095402]: pam_unix(cron:session): session closed for user root Dec 19 15:21:02 ispc CRON[2095403]: pam_unix(cron:session): session closed for user root Dec 19 15:21:06 ispc postfix/smtpd[2095420]: sql auxprop plugin using mysql engine Dec 19 15:21:26 ispc saslauthd[2095432]: pam_mysql - SELECT returned no result. Dec 19 15:21:26 ispc saslauthd[2095432]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:21:26 ispc saslauthd[2095432]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:21:32 ispc saslauthd[2095433]: pam_mysql - SELECT returned no result. Dec 19 15:21:32 ispc saslauthd[2095433]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:21:32 ispc saslauthd[2095433]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:22:01 ispc CRON[2095448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:22:02 ispc CRON[2095448]: pam_unix(cron:session): session closed for user root Dec 19 15:22:08 ispc saslauthd[2095463]: pam_mysql - SELECT returned no result. Dec 19 15:22:08 ispc saslauthd[2095463]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:22:08 ispc saslauthd[2095463]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:23:01 ispc sshd[2095491]: Invalid user blceu from 211.57.200.145 Dec 19 15:23:01 ispc CRON[2095494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:23:02 ispc CRON[2095494]: pam_unix(cron:session): session closed for user root Dec 19 15:23:05 ispc sshd[2095506]: Invalid user blceu from 222.236.46.74 Dec 19 15:23:21 ispc sshd[2095516]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 15:23:23 ispc sshd[2095518]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 15:23:23 ispc sshd[2095518]: Invalid user klape from 189.89.20.45 Dec 19 15:23:25 ispc sshd[2095520]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 15:23:25 ispc sshd[2095520]: Invalid user ubuntu from 189.89.20.45 Dec 19 15:23:25 ispc saslauthd[2095526]: pam_mysql - SELECT returned no result. Dec 19 15:23:25 ispc saslauthd[2095526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:23:25 ispc saslauthd[2095526]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:24:01 ispc CRON[2095543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:24:01 ispc CRON[2095543]: pam_unix(cron:session): session closed for user root Dec 19 15:24:35 ispc saslauthd[2095567]: pam_mysql - SELECT returned no result. Dec 19 15:24:35 ispc saslauthd[2095567]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:24:35 ispc saslauthd[2095567]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:25:01 ispc CRON[2095584]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:25:01 ispc CRON[2095583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:25:01 ispc CRON[2095585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:25:01 ispc CRON[2095586]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:25:01 ispc CRON[2095584]: pam_unix(cron:session): session closed for user root Dec 19 15:25:01 ispc CRON[2095586]: pam_unix(cron:session): session closed for user getmail Dec 19 15:25:02 ispc CRON[2095585]: pam_unix(cron:session): session closed for user root Dec 19 15:25:04 ispc CRON[2095583]: pam_unix(cron:session): session closed for user root Dec 19 15:25:50 ispc saslauthd[2095683]: pam_mysql - SELECT returned no result. Dec 19 15:25:50 ispc saslauthd[2095683]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:25:50 ispc saslauthd[2095683]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:26:01 ispc CRON[2095689]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:26:01 ispc CRON[2095689]: pam_unix(cron:session): session closed for user root Dec 19 15:26:17 ispc postfix/smtpd[2095706]: sql auxprop plugin using mysql engine Dec 19 15:26:17 ispc CRON[2094544]: pam_unix(cron:session): session closed for user root Dec 19 15:27:01 ispc CRON[2095712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:27:01 ispc CRON[2095712]: pam_unix(cron:session): session closed for user root Dec 19 15:27:19 ispc saslauthd[2095724]: pam_mysql - SELECT returned no result. Dec 19 15:27:19 ispc saslauthd[2095724]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:27:19 ispc saslauthd[2095724]: do_auth : auth failure: [user=backuponly] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:27:28 ispc saslauthd[2095727]: pam_mysql - SELECT returned no result. Dec 19 15:27:28 ispc saslauthd[2095727]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:27:28 ispc saslauthd[2095727]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:27:30 ispc saslauthd[2095728]: pam_mysql - SELECT returned no result. Dec 19 15:27:30 ispc saslauthd[2095728]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:27:30 ispc saslauthd[2095728]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:27:52 ispc saslauthd[2095737]: pam_mysql - SELECT returned no result. Dec 19 15:27:52 ispc saslauthd[2095737]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:27:52 ispc saslauthd[2095737]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:28:01 ispc CRON[2095742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:28:02 ispc CRON[2095742]: pam_unix(cron:session): session closed for user root Dec 19 15:28:06 ispc postfix/smtpd[2095753]: sql auxprop plugin using mysql engine Dec 19 15:29:00 ispc sshd[2095757]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 15:29:01 ispc CRON[2095759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:29:01 ispc CRON[2095759]: pam_unix(cron:session): session closed for user root Dec 19 15:30:01 ispc CRON[2095775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:30:01 ispc CRON[2095776]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:30:01 ispc CRON[2095777]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:30:01 ispc CRON[2095778]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:30:01 ispc CRON[2095779]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:30:01 ispc CRON[2095777]: pam_unix(cron:session): session closed for user www-data Dec 19 15:30:01 ispc CRON[2095776]: pam_unix(cron:session): session closed for user root Dec 19 15:30:01 ispc CRON[2095779]: pam_unix(cron:session): session closed for user getmail Dec 19 15:30:02 ispc CRON[2095775]: pam_unix(cron:session): session closed for user root Dec 19 15:30:46 ispc CRON[2095778]: pam_unix(cron:session): session closed for user root Dec 19 15:31:01 ispc CRON[2095969]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:31:02 ispc postfix/smtpd[2095981]: sql auxprop plugin using mysql engine Dec 19 15:31:13 ispc saslauthd[2095987]: pam_mysql - SELECT returned no result. Dec 19 15:31:13 ispc saslauthd[2095987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:31:13 ispc saslauthd[2095987]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 15:31:22 ispc postfix/smtpd[2095988]: sql auxprop plugin using mysql engine Dec 19 15:31:23 ispc saslauthd[2095994]: pam_mysql - SELECT returned no result. Dec 19 15:31:23 ispc saslauthd[2095994]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:31:23 ispc saslauthd[2095994]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:31:29 ispc saslauthd[2095995]: pam_mysql - SELECT returned no result. Dec 19 15:31:29 ispc saslauthd[2095995]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:31:29 ispc saslauthd[2095995]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:32:01 ispc CRON[2096008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:32:01 ispc CRON[2096008]: pam_unix(cron:session): session closed for user root Dec 19 15:33:01 ispc CRON[2096052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:33:02 ispc CRON[2096052]: pam_unix(cron:session): session closed for user root Dec 19 15:33:07 ispc saslauthd[2096069]: pam_mysql - SELECT returned no result. Dec 19 15:33:07 ispc saslauthd[2096069]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:33:07 ispc saslauthd[2096069]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:33:32 ispc sshd[2096079]: Invalid user blceu from 51.91.76.213 Dec 19 15:33:35 ispc sshd[2096087]: Invalid user klape from 103.164.20.29 Dec 19 15:33:36 ispc sshd[2096089]: Invalid user ubuntu from 103.164.20.29 Dec 19 15:34:01 ispc CRON[2096101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:34:01 ispc CRON[2096101]: pam_unix(cron:session): session closed for user root Dec 19 15:34:07 ispc saslauthd[2096116]: pam_mysql - SELECT returned no result. Dec 19 15:34:07 ispc saslauthd[2096116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:34:07 ispc saslauthd[2096116]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:34:54 ispc postfix/smtpd[2096143]: sql auxprop plugin using mysql engine Dec 19 15:34:54 ispc saslauthd[2096145]: pam_mysql - SELECT returned no result. Dec 19 15:34:54 ispc saslauthd[2096145]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:34:54 ispc saslauthd[2096145]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:35:01 ispc CRON[2096148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:35:01 ispc CRON[2096147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:35:01 ispc CRON[2096146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:35:01 ispc CRON[2096149]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:35:01 ispc CRON[2096147]: pam_unix(cron:session): session closed for user root Dec 19 15:35:01 ispc CRON[2096149]: pam_unix(cron:session): session closed for user getmail Dec 19 15:35:02 ispc CRON[2096148]: pam_unix(cron:session): session closed for user root Dec 19 15:35:02 ispc CRON[2096146]: pam_unix(cron:session): session closed for user root Dec 19 15:35:36 ispc saslauthd[2096239]: pam_mysql - SELECT returned no result. Dec 19 15:35:36 ispc saslauthd[2096239]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:35:36 ispc saslauthd[2096239]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:36:01 ispc CRON[2096253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:36:01 ispc CRON[2096253]: pam_unix(cron:session): session closed for user root Dec 19 15:36:35 ispc postfix/smtpd[2096282]: sql auxprop plugin using mysql engine Dec 19 15:36:35 ispc saslauthd[2096284]: pam_mysql - SELECT returned no result. Dec 19 15:36:35 ispc saslauthd[2096284]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:36:35 ispc saslauthd[2096284]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:37:01 ispc CRON[2096294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:37:01 ispc CRON[2096294]: pam_unix(cron:session): session closed for user root Dec 19 15:37:27 ispc postfix/smtpd[2096317]: sql auxprop plugin using mysql engine Dec 19 15:37:27 ispc saslauthd[2096319]: pam_mysql - SELECT returned no result. Dec 19 15:37:27 ispc saslauthd[2096319]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:37:27 ispc saslauthd[2096319]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:37:48 ispc saslauthd[2096328]: pam_mysql - SELECT returned no result. Dec 19 15:37:48 ispc saslauthd[2096328]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:37:48 ispc saslauthd[2096328]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:38:01 ispc CRON[2096345]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:38:02 ispc CRON[2096345]: pam_unix(cron:session): session closed for user root Dec 19 15:39:01 ispc CRON[2096391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:39:01 ispc CRON[2096390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:39:02 ispc CRON[2096391]: pam_unix(cron:session): session closed for user root Dec 19 15:39:02 ispc CRON[2096390]: pam_unix(cron:session): session closed for user root Dec 19 15:39:33 ispc postfix/smtpd[2096427]: sql auxprop plugin using mysql engine Dec 19 15:39:36 ispc saslauthd[2096429]: pam_mysql - SELECT returned no result. Dec 19 15:39:36 ispc saslauthd[2096429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:39:36 ispc saslauthd[2096429]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:40:01 ispc CRON[2096445]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:40:01 ispc CRON[2096444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:40:01 ispc CRON[2096446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:40:01 ispc CRON[2096443]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:40:01 ispc CRON[2096447]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:40:01 ispc CRON[2096444]: pam_unix(cron:session): session closed for user root Dec 19 15:40:01 ispc CRON[2096445]: pam_unix(cron:session): session closed for user www-data Dec 19 15:40:01 ispc CRON[2096447]: pam_unix(cron:session): session closed for user getmail Dec 19 15:40:01 ispc CRON[2096446]: pam_unix(cron:session): session closed for user root Dec 19 15:40:01 ispc CRON[2096443]: pam_unix(cron:session): session closed for user root Dec 19 15:40:47 ispc saslauthd[2096543]: pam_mysql - SELECT returned no result. Dec 19 15:40:47 ispc saslauthd[2096543]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:40:47 ispc saslauthd[2096543]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:41:01 ispc CRON[2096553]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:41:02 ispc CRON[2096553]: pam_unix(cron:session): session closed for user root Dec 19 15:41:57 ispc sshd[2096591]: Invalid user martof from 185.208.181.153 Dec 19 15:42:01 ispc saslauthd[2096593]: pam_mysql - SELECT returned no result. Dec 19 15:42:01 ispc saslauthd[2096593]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:42:01 ispc saslauthd[2096593]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:42:01 ispc CRON[2096598]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:42:02 ispc CRON[2096598]: pam_unix(cron:session): session closed for user root Dec 19 15:42:26 ispc postfix/smtpd[2096621]: sql auxprop plugin using mysql engine Dec 19 15:42:27 ispc saslauthd[2096623]: pam_mysql - SELECT returned no result. Dec 19 15:42:27 ispc saslauthd[2096623]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:42:27 ispc saslauthd[2096623]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:42:31 ispc saslauthd[2096624]: pam_mysql - SELECT returned no result. Dec 19 15:42:31 ispc saslauthd[2096624]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:42:31 ispc saslauthd[2096624]: do_auth : auth failure: [user=backuprestore] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:43:01 ispc CRON[2096647]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:43:01 ispc CRON[2096647]: pam_unix(cron:session): session closed for user root Dec 19 15:43:13 ispc saslauthd[2096662]: pam_mysql - SELECT returned no result. Dec 19 15:43:13 ispc saslauthd[2096662]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:43:13 ispc saslauthd[2096662]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:43:55 ispc sshd[2096667]: Invalid user ziplines from 161.35.218.223 Dec 19 15:44:01 ispc CRON[2096687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:44:02 ispc CRON[2096687]: pam_unix(cron:session): session closed for user root Dec 19 15:44:05 ispc sshd[2096685]: Invalid user admin from 103.100.209.172 Dec 19 15:44:35 ispc saslauthd[2096714]: pam_mysql - SELECT returned no result. Dec 19 15:44:35 ispc saslauthd[2096714]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:44:35 ispc saslauthd[2096714]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:44:39 ispc sshd[2096721]: Bad protocol version identification '' from 3.134.148.59 Dec 19 15:44:50 ispc sshd[2096727]: Bad protocol version identification 'GET / HTTP/1.1' from 3.134.148.59 Dec 19 15:44:52 ispc sshd[2096728]: Did not receive identification string from 3.134.148.59 Dec 19 15:45:01 ispc CRON[2096733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:45:01 ispc CRON[2096734]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:45:01 ispc CRON[2096735]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:45:01 ispc CRON[2096736]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:45:01 ispc CRON[2096734]: pam_unix(cron:session): session closed for user root Dec 19 15:45:01 ispc CRON[2096736]: pam_unix(cron:session): session closed for user getmail Dec 19 15:45:01 ispc CRON[2096735]: pam_unix(cron:session): session closed for user root Dec 19 15:45:01 ispc CRON[2096733]: pam_unix(cron:session): session closed for user root Dec 19 15:45:54 ispc saslauthd[2096834]: pam_mysql - SELECT returned no result. Dec 19 15:45:54 ispc saslauthd[2096834]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:45:54 ispc saslauthd[2096834]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:46:01 ispc CRON[2096839]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:46:02 ispc CRON[2096839]: pam_unix(cron:session): session closed for user root Dec 19 15:46:42 ispc sshd[2096867]: Did not receive identification string from 58.56.204.118 Dec 19 15:46:58 ispc saslauthd[2096875]: pam_mysql - SELECT returned no result. Dec 19 15:46:58 ispc saslauthd[2096875]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:46:58 ispc saslauthd[2096875]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:47:01 ispc CRON[2096880]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:47:01 ispc CRON[2096880]: pam_unix(cron:session): session closed for user root Dec 19 15:47:09 ispc sshd[2096891]: Bad protocol version identification '\026\003\001' from 3.134.148.59 Dec 19 15:47:23 ispc sshd[2096900]: Bad protocol version identification '\026\003\001' from 3.134.148.59 Dec 19 15:47:34 ispc postfix/smtpd[2096905]: sql auxprop plugin using mysql engine Dec 19 15:47:34 ispc saslauthd[2096907]: pam_mysql - SELECT returned no result. Dec 19 15:47:34 ispc saslauthd[2096907]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:47:34 ispc saslauthd[2096907]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:48:01 ispc CRON[2096922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:48:02 ispc CRON[2096922]: pam_unix(cron:session): session closed for user root Dec 19 15:48:45 ispc postfix/smtpd[2096963]: sql auxprop plugin using mysql engine Dec 19 15:48:46 ispc saslauthd[2096965]: pam_mysql - SELECT returned no result. Dec 19 15:48:46 ispc saslauthd[2096965]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:48:46 ispc saslauthd[2096965]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:49:01 ispc CRON[2096970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:49:01 ispc CRON[2096970]: pam_unix(cron:session): session closed for user root Dec 19 15:49:47 ispc postfix/smtpd[2097004]: sql auxprop plugin using mysql engine Dec 19 15:49:47 ispc saslauthd[2097006]: pam_mysql - SELECT returned no result. Dec 19 15:49:47 ispc saslauthd[2097006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:49:47 ispc saslauthd[2097006]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:50:01 ispc CRON[2097011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:50:01 ispc CRON[2097013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:50:01 ispc CRON[2097014]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 15:50:01 ispc CRON[2097015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:50:01 ispc CRON[2097016]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:50:01 ispc CRON[2097014]: pam_unix(cron:session): session closed for user www-data Dec 19 15:50:01 ispc CRON[2097013]: pam_unix(cron:session): session closed for user root Dec 19 15:50:01 ispc CRON[2097016]: pam_unix(cron:session): session closed for user getmail Dec 19 15:50:02 ispc CRON[2097015]: pam_unix(cron:session): session closed for user root Dec 19 15:50:02 ispc CRON[2097011]: pam_unix(cron:session): session closed for user root Dec 19 15:50:52 ispc sshd[2097112]: Did not receive identification string from 45.140.17.97 Dec 19 15:51:01 ispc CRON[2097117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:51:01 ispc CRON[2097117]: pam_unix(cron:session): session closed for user root Dec 19 15:51:28 ispc sshd[2097137]: Invalid user ziplines from 141.94.71.131 Dec 19 15:51:30 ispc CRON[2095969]: pam_unix(cron:session): session closed for user root Dec 19 15:51:39 ispc saslauthd[2097144]: pam_mysql - SELECT returned no result. Dec 19 15:51:39 ispc saslauthd[2097144]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:51:39 ispc saslauthd[2097144]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:52:01 ispc CRON[2097146]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:52:01 ispc CRON[2097147]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:52:02 ispc CRON[2097147]: pam_unix(cron:session): session closed for user root Dec 19 15:53:01 ispc CRON[2097175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:53:03 ispc CRON[2097175]: pam_unix(cron:session): session closed for user root Dec 19 15:54:01 ispc CRON[2097190]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:54:01 ispc CRON[2097190]: pam_unix(cron:session): session closed for user root Dec 19 15:55:01 ispc CRON[2097210]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 15:55:01 ispc CRON[2097209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:55:01 ispc CRON[2097207]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:55:01 ispc CRON[2097208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:55:01 ispc CRON[2097208]: pam_unix(cron:session): session closed for user root Dec 19 15:55:01 ispc CRON[2097210]: pam_unix(cron:session): session closed for user getmail Dec 19 15:55:02 ispc CRON[2097207]: pam_unix(cron:session): session closed for user root Dec 19 15:55:18 ispc CRON[2097146]: pam_unix(cron:session): session closed for user root Dec 19 15:55:21 ispc sshd[2097318]: Invalid user ziplines from 45.119.213.109 Dec 19 15:55:39 ispc saslauthd[2097321]: pam_mysql - SELECT returned no result. Dec 19 15:55:39 ispc saslauthd[2097321]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:55:39 ispc saslauthd[2097321]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 15:55:48 ispc CRON[2097209]: pam_unix(cron:session): session closed for user root Dec 19 15:55:56 ispc saslauthd[2097323]: pam_mysql - SELECT returned no result. Dec 19 15:55:56 ispc saslauthd[2097323]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:55:56 ispc saslauthd[2097323]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:56:01 ispc CRON[2097324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:57:01 ispc CRON[2097359]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:57:02 ispc CRON[2097359]: pam_unix(cron:session): session closed for user root Dec 19 15:57:06 ispc saslauthd[2097374]: pam_mysql - SELECT returned no result. Dec 19 15:57:06 ispc saslauthd[2097374]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:57:06 ispc saslauthd[2097374]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:57:48 ispc saslauthd[2097395]: pam_mysql - SELECT returned no result. Dec 19 15:57:48 ispc saslauthd[2097395]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 15:57:48 ispc saslauthd[2097395]: do_auth : auth failure: [user=basisk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 15:58:01 ispc CRON[2097404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:58:02 ispc CRON[2097404]: pam_unix(cron:session): session closed for user root Dec 19 15:58:43 ispc sshd[2097438]: Invalid user blceu from 27.254.144.183 Dec 19 15:58:44 ispc sshd[2097444]: Invalid user martof from 45.119.213.109 Dec 19 15:59:01 ispc CRON[2097451]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 15:59:02 ispc CRON[2097451]: pam_unix(cron:session): session closed for user root Dec 19 15:59:46 ispc sshd[2097483]: Invalid user diamantdi from 221.156.137.103 Dec 19 16:00:01 ispc CRON[2097491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:00:01 ispc CRON[2097494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:00:01 ispc CRON[2097492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:00:01 ispc CRON[2097495]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:00:01 ispc CRON[2097493]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:00:01 ispc CRON[2097496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:00:01 ispc CRON[2097497]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:00:01 ispc CRON[2097492]: pam_unix(cron:session): session closed for user root Dec 19 16:00:01 ispc CRON[2097493]: pam_unix(cron:session): session closed for user www-data Dec 19 16:00:01 ispc CRON[2097495]: pam_unix(cron:session): session closed for user root Dec 19 16:00:01 ispc CRON[2097497]: pam_unix(cron:session): session closed for user getmail Dec 19 16:00:01 ispc CRON[2097496]: pam_unix(cron:session): session closed for user root Dec 19 16:00:01 ispc CRON[2097491]: pam_unix(cron:session): session closed for user root Dec 19 16:00:01 ispc CRON[2097494]: pam_unix(cron:session): session closed for user root Dec 19 16:00:04 ispc sshd[2097651]: Invalid user blceu from 51.91.247.10 Dec 19 16:00:14 ispc sshd[2097658]: Invalid user ziplines from 222.236.46.74 Dec 19 16:01:01 ispc CRON[2097685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:01:02 ispc CRON[2097685]: pam_unix(cron:session): session closed for user root Dec 19 16:01:34 ispc postfix/smtpd[2097708]: sql auxprop plugin using mysql engine Dec 19 16:01:35 ispc saslauthd[2097715]: pam_mysql - SELECT returned no result. Dec 19 16:01:35 ispc saslauthd[2097715]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:01:35 ispc saslauthd[2097715]: do_auth : auth failure: [user=test@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 16:02:01 ispc CRON[2097729]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 16:02:01 ispc CRON[2097730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:02:01 ispc CRON[2097730]: pam_unix(cron:session): session closed for user root Dec 19 16:03:00 ispc sshd[2098682]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 16:03:00 ispc sshd[2098682]: Invalid user admin from 41.203.222.206 Dec 19 16:03:01 ispc sshd[2098677]: Invalid user admin from 103.100.209.172 Dec 19 16:03:01 ispc CRON[2098687]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:03:02 ispc CRON[2098687]: pam_unix(cron:session): session closed for user root Dec 19 16:03:12 ispc CRON[2097729]: pam_unix(cron:session): session closed for user logcheck Dec 19 16:03:17 ispc postfix/smtpd[2098814]: sql auxprop plugin using mysql engine Dec 19 16:03:44 ispc sshd[2098831]: Did not receive identification string from 192.227.134.84 Dec 19 16:04:01 ispc CRON[2098840]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:04:02 ispc CRON[2098840]: pam_unix(cron:session): session closed for user root Dec 19 16:04:23 ispc postfix/smtpd[2098859]: sql auxprop plugin using mysql engine Dec 19 16:04:23 ispc saslauthd[2098861]: pam_mysql - SELECT returned no result. Dec 19 16:04:23 ispc saslauthd[2098861]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:04:23 ispc saslauthd[2098861]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:04:26 ispc saslauthd[2098862]: pam_mysql - SELECT returned no result. Dec 19 16:04:26 ispc saslauthd[2098862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:04:26 ispc saslauthd[2098862]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:05:01 ispc CRON[2098885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:05:01 ispc CRON[2098884]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:05:01 ispc CRON[2098886]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:05:01 ispc CRON[2098887]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:05:01 ispc CRON[2098885]: pam_unix(cron:session): session closed for user root Dec 19 16:05:01 ispc CRON[2098887]: pam_unix(cron:session): session closed for user getmail Dec 19 16:05:01 ispc CRON[2098884]: pam_unix(cron:session): session closed for user root Dec 19 16:05:02 ispc CRON[2098886]: pam_unix(cron:session): session closed for user root Dec 19 16:06:01 ispc CRON[2098986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:06:02 ispc CRON[2098986]: pam_unix(cron:session): session closed for user root Dec 19 16:06:41 ispc postfix/smtpd[2099025]: sql auxprop plugin using mysql engine Dec 19 16:06:41 ispc saslauthd[2099027]: pam_mysql - SELECT returned no result. Dec 19 16:06:41 ispc saslauthd[2099027]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:06:41 ispc saslauthd[2099027]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:07:01 ispc CRON[2099039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:07:01 ispc CRON[2099039]: pam_unix(cron:session): session closed for user root Dec 19 16:07:16 ispc sshd[2099054]: Invalid user blceu from 139.59.66.222 Dec 19 16:08:01 ispc CRON[2099083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:08:03 ispc CRON[2099083]: pam_unix(cron:session): session closed for user root Dec 19 16:09:01 ispc CRON[2099127]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:09:01 ispc CRON[2099128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:09:01 ispc CRON[2099127]: pam_unix(cron:session): session closed for user root Dec 19 16:09:01 ispc CRON[2099128]: pam_unix(cron:session): session closed for user root Dec 19 16:10:01 ispc CRON[2099177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:10:01 ispc CRON[2099178]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:10:01 ispc CRON[2099176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:10:01 ispc CRON[2099179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:10:01 ispc CRON[2099180]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:10:01 ispc CRON[2099177]: pam_unix(cron:session): session closed for user root Dec 19 16:10:01 ispc CRON[2099180]: pam_unix(cron:session): session closed for user getmail Dec 19 16:10:02 ispc CRON[2099178]: pam_unix(cron:session): session closed for user www-data Dec 19 16:10:02 ispc CRON[2099179]: pam_unix(cron:session): session closed for user root Dec 19 16:10:02 ispc CRON[2099176]: pam_unix(cron:session): session closed for user root Dec 19 16:10:26 ispc sshd[2099263]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 16:10:26 ispc sshd[2099263]: Invalid user blceu from 193.110.157.47 Dec 19 16:11:01 ispc CRON[2099282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:11:02 ispc CRON[2099282]: pam_unix(cron:session): session closed for user root Dec 19 16:11:35 ispc postfix/smtpd[2099306]: sql auxprop plugin using mysql engine Dec 19 16:11:35 ispc saslauthd[2099309]: pam_mysql - SELECT returned no result. Dec 19 16:11:35 ispc saslauthd[2099309]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:11:35 ispc saslauthd[2099309]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:11:52 ispc sshd[2099315]: Invalid user martof from 211.57.200.145 Dec 19 16:12:01 ispc CRON[2099328]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:12:01 ispc CRON[2099328]: pam_unix(cron:session): session closed for user root Dec 19 16:12:58 ispc saslauthd[2099381]: pam_mysql - SELECT returned no result. Dec 19 16:12:58 ispc saslauthd[2099381]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:12:58 ispc saslauthd[2099381]: do_auth : auth failure: [user=bbs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:13:01 ispc CRON[2099386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:13:02 ispc CRON[2099386]: pam_unix(cron:session): session closed for user root Dec 19 16:14:01 ispc CRON[2099437]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:14:01 ispc CRON[2099437]: pam_unix(cron:session): session closed for user root Dec 19 16:15:01 ispc CRON[2099496]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:15:01 ispc CRON[2099497]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:15:01 ispc CRON[2099498]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:15:01 ispc CRON[2099499]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:15:01 ispc CRON[2099497]: pam_unix(cron:session): session closed for user root Dec 19 16:15:01 ispc CRON[2099499]: pam_unix(cron:session): session closed for user getmail Dec 19 16:15:02 ispc CRON[2099498]: pam_unix(cron:session): session closed for user root Dec 19 16:15:03 ispc CRON[2099496]: pam_unix(cron:session): session closed for user root Dec 19 16:16:01 ispc CRON[2099607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:16:01 ispc CRON[2099607]: pam_unix(cron:session): session closed for user root Dec 19 16:16:14 ispc postfix/smtpd[2099632]: sql auxprop plugin using mysql engine Dec 19 16:16:14 ispc CRON[2097324]: pam_unix(cron:session): session closed for user root Dec 19 16:17:01 ispc CRON[2099654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:17:01 ispc CRON[2099654]: pam_unix(cron:session): session closed for user root Dec 19 16:17:14 ispc saslauthd[2099666]: pam_mysql - SELECT returned no result. Dec 19 16:17:14 ispc saslauthd[2099666]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:17:14 ispc saslauthd[2099666]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:17:30 ispc postfix/smtpd[2099669]: sql auxprop plugin using mysql engine Dec 19 16:17:36 ispc sshd[2099674]: Invalid user ziplines from 139.59.66.222 Dec 19 16:17:51 ispc sshd[2099680]: Invalid user martof from 119.205.233.162 Dec 19 16:18:01 ispc CRON[2099694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:18:03 ispc CRON[2099694]: pam_unix(cron:session): session closed for user root Dec 19 16:18:46 ispc saslauthd[2099725]: pam_mysql - SELECT returned no result. Dec 19 16:18:46 ispc saslauthd[2099725]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:18:46 ispc saslauthd[2099725]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:19:01 ispc CRON[2099728]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:19:02 ispc CRON[2099728]: pam_unix(cron:session): session closed for user root Dec 19 16:20:01 ispc CRON[2099757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:20:01 ispc CRON[2099760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:20:01 ispc CRON[2099758]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:20:01 ispc CRON[2099761]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:20:01 ispc CRON[2099759]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:20:01 ispc CRON[2099759]: pam_unix(cron:session): session closed for user www-data Dec 19 16:20:01 ispc CRON[2099758]: pam_unix(cron:session): session closed for user root Dec 19 16:20:01 ispc CRON[2099761]: pam_unix(cron:session): session closed for user getmail Dec 19 16:20:01 ispc CRON[2099757]: pam_unix(cron:session): session closed for user root Dec 19 16:20:11 ispc sshd[2099871]: Invalid user klape from 36.50.177.171 Dec 19 16:20:12 ispc sshd[2099877]: Invalid user ubuntu from 36.50.177.171 Dec 19 16:20:37 ispc CRON[2099760]: pam_unix(cron:session): session closed for user root Dec 19 16:20:43 ispc postfix/smtpd[2099888]: sql auxprop plugin using mysql engine Dec 19 16:21:01 ispc CRON[2099892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:21:01 ispc CRON[2099893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:21:01 ispc CRON[2099892]: pam_unix(cron:session): session closed for user root Dec 19 16:21:41 ispc saslauthd[2099939]: pam_mysql - SELECT returned no result. Dec 19 16:21:41 ispc saslauthd[2099939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:21:41 ispc saslauthd[2099939]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:22:01 ispc CRON[2099956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:22:02 ispc CRON[2099956]: pam_unix(cron:session): session closed for user root Dec 19 16:22:05 ispc postfix/smtpd[2099972]: sql auxprop plugin using mysql engine Dec 19 16:23:01 ispc CRON[2100011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:23:01 ispc CRON[2100011]: pam_unix(cron:session): session closed for user root Dec 19 16:23:32 ispc sshd[2100051]: Invalid user blceu from 148.216.54.17 Dec 19 16:24:01 ispc CRON[2100079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:24:02 ispc CRON[2100079]: pam_unix(cron:session): session closed for user root Dec 19 16:24:19 ispc postfix/smtpd[2100098]: sql auxprop plugin using mysql engine Dec 19 16:25:01 ispc CRON[2100117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:25:01 ispc CRON[2100118]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:25:01 ispc CRON[2100119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:25:01 ispc CRON[2100120]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:25:01 ispc CRON[2100120]: pam_unix(cron:session): session closed for user getmail Dec 19 16:25:01 ispc CRON[2100118]: pam_unix(cron:session): session closed for user root Dec 19 16:25:01 ispc CRON[2100119]: pam_unix(cron:session): session closed for user root Dec 19 16:25:01 ispc CRON[2100117]: pam_unix(cron:session): session closed for user root Dec 19 16:25:46 ispc saslauthd[2100217]: pam_mysql - SELECT returned no result. Dec 19 16:25:46 ispc saslauthd[2100217]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:25:46 ispc saslauthd[2100217]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:26:01 ispc CRON[2100225]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:26:02 ispc saslauthd[2100224]: pam_mysql - SELECT returned no result. Dec 19 16:26:02 ispc saslauthd[2100224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:26:02 ispc saslauthd[2100224]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:26:02 ispc CRON[2100225]: pam_unix(cron:session): session closed for user root Dec 19 16:27:01 ispc CRON[2100263]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:27:01 ispc CRON[2100263]: pam_unix(cron:session): session closed for user root Dec 19 16:28:02 ispc CRON[2100312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:28:03 ispc CRON[2100312]: pam_unix(cron:session): session closed for user root Dec 19 16:28:09 ispc postfix/smtpd[2100327]: sql auxprop plugin using mysql engine Dec 19 16:28:10 ispc saslauthd[2100329]: pam_mysql - SELECT returned no result. Dec 19 16:28:10 ispc saslauthd[2100329]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:28:10 ispc saslauthd[2100329]: do_auth : auth failure: [user=bciim] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:28:16 ispc postfix/smtpd[2100331]: sql auxprop plugin using mysql engine Dec 19 16:28:57 ispc saslauthd[2100353]: pam_mysql - SELECT returned no result. Dec 19 16:28:57 ispc saslauthd[2100353]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:28:57 ispc saslauthd[2100353]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:29:01 ispc CRON[2100358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:29:01 ispc CRON[2100358]: pam_unix(cron:session): session closed for user root Dec 19 16:30:01 ispc CRON[2100396]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:30:01 ispc CRON[2100397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:30:01 ispc CRON[2100398]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:30:01 ispc CRON[2100399]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:30:01 ispc CRON[2100400]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:30:01 ispc CRON[2100397]: pam_unix(cron:session): session closed for user root Dec 19 16:30:01 ispc CRON[2100398]: pam_unix(cron:session): session closed for user www-data Dec 19 16:30:01 ispc CRON[2100400]: pam_unix(cron:session): session closed for user getmail Dec 19 16:30:02 ispc CRON[2100396]: pam_unix(cron:session): session closed for user root Dec 19 16:30:02 ispc CRON[2100399]: pam_unix(cron:session): session closed for user root Dec 19 16:31:01 ispc CRON[2100499]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:31:02 ispc CRON[2100499]: pam_unix(cron:session): session closed for user root Dec 19 16:31:32 ispc sshd[2100522]: Did not receive identification string from 64.225.68.54 Dec 19 16:32:01 ispc CRON[2100539]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:32:02 ispc CRON[2100539]: pam_unix(cron:session): session closed for user root Dec 19 16:32:12 ispc postfix/smtpd[2100554]: sql auxprop plugin using mysql engine Dec 19 16:32:14 ispc saslauthd[2100556]: pam_mysql - SELECT returned no result. Dec 19 16:32:14 ispc saslauthd[2100556]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:32:14 ispc saslauthd[2100556]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:33:01 ispc CRON[2100594]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:33:02 ispc CRON[2100594]: pam_unix(cron:session): session closed for user root Dec 19 16:33:09 ispc saslauthd[2100609]: pam_mysql - SELECT returned no result. Dec 19 16:33:09 ispc saslauthd[2100609]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:33:09 ispc saslauthd[2100609]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:33:33 ispc saslauthd[2100621]: pam_mysql - SELECT returned no result. Dec 19 16:33:33 ispc saslauthd[2100621]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:33:33 ispc saslauthd[2100621]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:34:01 ispc CRON[2100635]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:34:02 ispc CRON[2100635]: pam_unix(cron:session): session closed for user root Dec 19 16:34:34 ispc sshd[2100667]: Did not receive identification string from 167.172.38.175 Dec 19 16:34:47 ispc saslauthd[2100673]: pam_mysql - SELECT returned no result. Dec 19 16:34:47 ispc saslauthd[2100673]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:34:47 ispc saslauthd[2100673]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:35:01 ispc CRON[2100691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:35:01 ispc CRON[2100692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:35:01 ispc CRON[2100690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:35:01 ispc CRON[2100693]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:35:01 ispc CRON[2100691]: pam_unix(cron:session): session closed for user root Dec 19 16:35:01 ispc CRON[2100693]: pam_unix(cron:session): session closed for user getmail Dec 19 16:35:02 ispc CRON[2100692]: pam_unix(cron:session): session closed for user root Dec 19 16:35:03 ispc CRON[2100690]: pam_unix(cron:session): session closed for user root Dec 19 16:35:59 ispc saslauthd[2100799]: pam_mysql - SELECT returned no result. Dec 19 16:35:59 ispc saslauthd[2100799]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:35:59 ispc saslauthd[2100799]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:36:01 ispc CRON[2100800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:36:02 ispc CRON[2100800]: pam_unix(cron:session): session closed for user root Dec 19 16:36:39 ispc saslauthd[2100846]: pam_mysql - SELECT returned no result. Dec 19 16:36:39 ispc saslauthd[2100846]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:36:39 ispc saslauthd[2100846]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:36:41 ispc saslauthd[2100848]: pam_mysql - SELECT returned no result. Dec 19 16:36:41 ispc saslauthd[2100848]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:36:41 ispc saslauthd[2100848]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:37:01 ispc CRON[2100862]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:37:02 ispc CRON[2100862]: pam_unix(cron:session): session closed for user root Dec 19 16:37:42 ispc saslauthd[2100896]: pam_mysql - SELECT returned no result. Dec 19 16:37:42 ispc saslauthd[2100896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:37:42 ispc saslauthd[2100896]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:38:01 ispc CRON[2100914]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:38:02 ispc CRON[2100914]: pam_unix(cron:session): session closed for user root Dec 19 16:38:57 ispc saslauthd[2100974]: pam_mysql - SELECT returned no result. Dec 19 16:38:57 ispc saslauthd[2100974]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:38:57 ispc saslauthd[2100974]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:39:01 ispc CRON[2100981]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:39:01 ispc CRON[2100982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:39:01 ispc CRON[2100981]: pam_unix(cron:session): session closed for user root Dec 19 16:39:01 ispc CRON[2100982]: pam_unix(cron:session): session closed for user root Dec 19 16:40:01 ispc CRON[2101053]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:40:01 ispc CRON[2101054]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:40:01 ispc CRON[2101055]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:40:01 ispc CRON[2101056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:40:01 ispc CRON[2101057]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:40:02 ispc CRON[2101055]: pam_unix(cron:session): session closed for user www-data Dec 19 16:40:02 ispc CRON[2101054]: pam_unix(cron:session): session closed for user root Dec 19 16:40:02 ispc CRON[2101057]: pam_unix(cron:session): session closed for user getmail Dec 19 16:40:03 ispc CRON[2101056]: pam_unix(cron:session): session closed for user root Dec 19 16:40:04 ispc CRON[2101053]: pam_unix(cron:session): session closed for user root Dec 19 16:40:07 ispc saslauthd[2101139]: pam_mysql - SELECT returned no result. Dec 19 16:40:07 ispc saslauthd[2101139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:40:07 ispc saslauthd[2101139]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:40:17 ispc saslauthd[2101152]: pam_mysql - SELECT returned no result. Dec 19 16:40:17 ispc saslauthd[2101152]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:40:17 ispc saslauthd[2101152]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:40:59 ispc sshd[2101192]: Invalid user ziplines from 221.156.137.103 Dec 19 16:41:01 ispc CRON[2101201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:41:01 ispc CRON[2101201]: pam_unix(cron:session): session closed for user root Dec 19 16:41:17 ispc saslauthd[2101225]: pam_mysql - SELECT returned no result. Dec 19 16:41:17 ispc saslauthd[2101225]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:41:17 ispc saslauthd[2101225]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:41:21 ispc CRON[2099893]: pam_unix(cron:session): session closed for user root Dec 19 16:41:34 ispc sshd[2101241]: Invalid user ziplines from 185.181.182.252 Dec 19 16:42:01 ispc CRON[2101259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:42:02 ispc CRON[2101259]: pam_unix(cron:session): session closed for user root Dec 19 16:42:27 ispc saslauthd[2101299]: pam_mysql - SELECT returned no result. Dec 19 16:42:27 ispc saslauthd[2101299]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:42:27 ispc saslauthd[2101299]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:43:01 ispc CRON[2101326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:43:02 ispc CRON[2101326]: pam_unix(cron:session): session closed for user root Dec 19 16:43:19 ispc saslauthd[2101344]: pam_mysql - SELECT returned no result. Dec 19 16:43:19 ispc saslauthd[2101344]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:43:19 ispc saslauthd[2101344]: do_auth : auth failure: [user=bcim] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:43:21 ispc sshd[2101346]: Invalid user martof from 139.59.66.222 Dec 19 16:43:29 ispc saslauthd[2101364]: pam_mysql - SELECT returned no result. Dec 19 16:43:29 ispc saslauthd[2101364]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:43:29 ispc saslauthd[2101364]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:44:01 ispc CRON[2101372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:44:03 ispc CRON[2101372]: pam_unix(cron:session): session closed for user root Dec 19 16:44:07 ispc sshd[2101388]: Invalid user blceu from 221.156.137.103 Dec 19 16:44:30 ispc saslauthd[2101401]: pam_mysql - SELECT returned no result. Dec 19 16:44:30 ispc saslauthd[2101401]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:44:30 ispc saslauthd[2101401]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:45:01 ispc CRON[2101409]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:45:01 ispc CRON[2101410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:45:01 ispc CRON[2101411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:45:01 ispc CRON[2101412]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:45:01 ispc CRON[2101410]: pam_unix(cron:session): session closed for user root Dec 19 16:45:01 ispc CRON[2101412]: pam_unix(cron:session): session closed for user getmail Dec 19 16:45:03 ispc CRON[2101409]: pam_unix(cron:session): session closed for user root Dec 19 16:45:31 ispc saslauthd[2101602]: pam_mysql - SELECT returned no result. Dec 19 16:45:31 ispc saslauthd[2101602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:45:31 ispc saslauthd[2101602]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:45:43 ispc CRON[2101411]: pam_unix(cron:session): session closed for user root Dec 19 16:45:47 ispc saslauthd[2101607]: pam_mysql - SELECT returned no result. Dec 19 16:45:47 ispc saslauthd[2101607]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:45:47 ispc saslauthd[2101607]: do_auth : auth failure: [user=user@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 16:46:01 ispc CRON[2101611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:46:29 ispc saslauthd[2101637]: pam_mysql - SELECT returned no result. Dec 19 16:46:29 ispc saslauthd[2101637]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:46:29 ispc saslauthd[2101637]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:47:01 ispc CRON[2101657]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:47:02 ispc CRON[2101657]: pam_unix(cron:session): session closed for user root Dec 19 16:47:28 ispc saslauthd[2101685]: pam_mysql - SELECT returned no result. Dec 19 16:47:28 ispc saslauthd[2101685]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:47:28 ispc saslauthd[2101685]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:47:32 ispc saslauthd[2101687]: pam_mysql - SELECT returned no result. Dec 19 16:47:32 ispc saslauthd[2101687]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:47:32 ispc saslauthd[2101687]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:48:01 ispc CRON[2101711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:48:01 ispc CRON[2101711]: pam_unix(cron:session): session closed for user root Dec 19 16:48:21 ispc postfix/smtpd[2101740]: sql auxprop plugin using mysql engine Dec 19 16:48:41 ispc saslauthd[2101753]: pam_mysql - SELECT returned no result. Dec 19 16:48:41 ispc saslauthd[2101753]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:48:41 ispc saslauthd[2101753]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:48:42 ispc saslauthd[2101754]: pam_mysql - SELECT returned no result. Dec 19 16:48:42 ispc saslauthd[2101754]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:48:42 ispc saslauthd[2101754]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:49:01 ispc CRON[2101768]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:49:02 ispc saslauthd[2101776]: pam_mysql - SELECT returned no result. Dec 19 16:49:02 ispc saslauthd[2101776]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:49:02 ispc saslauthd[2101776]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:49:02 ispc CRON[2101768]: pam_unix(cron:session): session closed for user root Dec 19 16:49:50 ispc sshd[2101808]: Invalid user admin from 64.225.68.54 Dec 19 16:49:59 ispc saslauthd[2101814]: pam_mysql - SELECT returned no result. Dec 19 16:49:59 ispc saslauthd[2101814]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:49:59 ispc saslauthd[2101814]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:50:01 ispc CRON[2101815]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:50:01 ispc CRON[2101816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:50:01 ispc CRON[2101818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:50:01 ispc CRON[2101819]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:50:01 ispc CRON[2101817]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 16:50:01 ispc CRON[2101817]: pam_unix(cron:session): session closed for user www-data Dec 19 16:50:01 ispc CRON[2101816]: pam_unix(cron:session): session closed for user root Dec 19 16:50:01 ispc CRON[2101819]: pam_unix(cron:session): session closed for user getmail Dec 19 16:50:02 ispc CRON[2101815]: pam_unix(cron:session): session closed for user root Dec 19 16:50:03 ispc CRON[2101818]: pam_unix(cron:session): session closed for user root Dec 19 16:50:24 ispc sshd[2101904]: Invalid user admin from 64.225.68.54 Dec 19 16:50:56 ispc sshd[2101919]: Invalid user admin from 64.225.68.54 Dec 19 16:51:01 ispc CRON[2101927]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:51:01 ispc CRON[2101927]: pam_unix(cron:session): session closed for user root Dec 19 16:51:05 ispc saslauthd[2101940]: pam_mysql - SELECT returned no result. Dec 19 16:51:05 ispc saslauthd[2101940]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:51:05 ispc saslauthd[2101940]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:51:29 ispc sshd[2101953]: Invalid user admin from 64.225.68.54 Dec 19 16:51:45 ispc saslauthd[2101961]: pam_mysql - SELECT returned no result. Dec 19 16:51:45 ispc saslauthd[2101961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:51:45 ispc saslauthd[2101961]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:52:01 ispc CRON[2101974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:52:01 ispc CRON[2101974]: pam_unix(cron:session): session closed for user root Dec 19 16:52:02 ispc sshd[2101985]: Invalid user admin from 64.225.68.54 Dec 19 16:52:08 ispc saslauthd[2101992]: pam_mysql - SELECT returned no result. Dec 19 16:52:08 ispc saslauthd[2101992]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:52:08 ispc saslauthd[2101992]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:52:34 ispc sshd[2102004]: Invalid user admin from 64.225.68.54 Dec 19 16:52:45 ispc saslauthd[2102017]: pam_mysql - SELECT returned no result. Dec 19 16:52:45 ispc saslauthd[2102017]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:52:45 ispc saslauthd[2102017]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:53:01 ispc CRON[2102035]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:53:02 ispc CRON[2102035]: pam_unix(cron:session): session closed for user root Dec 19 16:54:00 ispc saslauthd[2102085]: pam_mysql - SELECT returned no result. Dec 19 16:54:00 ispc saslauthd[2102085]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:54:00 ispc saslauthd[2102085]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:54:01 ispc CRON[2102086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:54:01 ispc CRON[2102086]: pam_unix(cron:session): session closed for user root Dec 19 16:55:01 ispc CRON[2102123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:55:01 ispc CRON[2102124]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:55:01 ispc CRON[2102125]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:55:01 ispc CRON[2102126]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 16:55:01 ispc CRON[2102124]: pam_unix(cron:session): session closed for user root Dec 19 16:55:01 ispc CRON[2102126]: pam_unix(cron:session): session closed for user getmail Dec 19 16:55:01 ispc CRON[2102125]: pam_unix(cron:session): session closed for user root Dec 19 16:55:02 ispc saslauthd[2102172]: pam_mysql - SELECT returned no result. Dec 19 16:55:02 ispc saslauthd[2102172]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:55:02 ispc saslauthd[2102172]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:55:02 ispc CRON[2102123]: pam_unix(cron:session): session closed for user root Dec 19 16:55:21 ispc saslauthd[2102211]: pam_mysql - SELECT returned no result. Dec 19 16:55:21 ispc saslauthd[2102211]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:55:21 ispc saslauthd[2102211]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:56:01 ispc CRON[2102234]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:56:01 ispc CRON[2102234]: pam_unix(cron:session): session closed for user root Dec 19 16:56:06 ispc saslauthd[2102249]: pam_mysql - SELECT returned no result. Dec 19 16:56:06 ispc saslauthd[2102249]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:56:06 ispc saslauthd[2102249]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:56:54 ispc sshd[2102271]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 16:57:01 ispc CRON[2102278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:57:02 ispc CRON[2102278]: pam_unix(cron:session): session closed for user root Dec 19 16:57:09 ispc sshd[2102294]: Did not receive identification string from 192.227.134.84 Dec 19 16:57:30 ispc saslauthd[2102305]: pam_mysql - SELECT returned no result. Dec 19 16:57:30 ispc saslauthd[2102305]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:57:30 ispc saslauthd[2102305]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:58:01 ispc CRON[2102325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:58:02 ispc CRON[2102325]: pam_unix(cron:session): session closed for user root Dec 19 16:58:24 ispc saslauthd[2102349]: pam_mysql - SELECT returned no result. Dec 19 16:58:24 ispc saslauthd[2102349]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:58:24 ispc saslauthd[2102349]: do_auth : auth failure: [user=bcms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 16:58:52 ispc saslauthd[2102366]: pam_mysql - SELECT returned no result. Dec 19 16:58:52 ispc saslauthd[2102366]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:58:52 ispc saslauthd[2102366]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 16:59:01 ispc CRON[2102367]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 16:59:01 ispc CRON[2102367]: pam_unix(cron:session): session closed for user root Dec 19 16:59:26 ispc sshd[2102393]: Invalid user ziplines from 51.91.247.10 Dec 19 16:59:46 ispc saslauthd[2102404]: pam_mysql - SELECT returned no result. Dec 19 16:59:46 ispc saslauthd[2102404]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 16:59:46 ispc saslauthd[2102404]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:00:01 ispc CRON[2102412]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:00:01 ispc CRON[2102414]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:00:01 ispc CRON[2102413]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:00:01 ispc CRON[2102415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:00:01 ispc CRON[2102411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:00:01 ispc CRON[2102416]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:00:01 ispc CRON[2102412]: pam_unix(cron:session): session closed for user root Dec 19 17:00:01 ispc CRON[2102413]: pam_unix(cron:session): session closed for user www-data Dec 19 17:00:01 ispc CRON[2102416]: pam_unix(cron:session): session closed for user getmail Dec 19 17:00:02 ispc CRON[2102414]: pam_unix(cron:session): session closed for user root Dec 19 17:00:02 ispc CRON[2102411]: pam_unix(cron:session): session closed for user root Dec 19 17:00:02 ispc CRON[2102415]: pam_unix(cron:session): session closed for user root Dec 19 17:00:34 ispc saslauthd[2102583]: pam_mysql - SELECT returned no result. Dec 19 17:00:34 ispc saslauthd[2102583]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:00:34 ispc saslauthd[2102583]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:01:01 ispc CRON[2102605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:01:01 ispc CRON[2102605]: pam_unix(cron:session): session closed for user root Dec 19 17:01:39 ispc saslauthd[2102634]: pam_mysql - SELECT returned no result. Dec 19 17:01:39 ispc saslauthd[2102634]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:01:39 ispc saslauthd[2102634]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:02:01 ispc CRON[2102643]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 17:02:01 ispc CRON[2102644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:02:02 ispc CRON[2102644]: pam_unix(cron:session): session closed for user root Dec 19 17:02:42 ispc saslauthd[2103492]: pam_mysql - SELECT returned no result. Dec 19 17:02:42 ispc saslauthd[2103492]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:02:42 ispc saslauthd[2103492]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:02:53 ispc saslauthd[2103530]: pam_mysql - SELECT returned no result. Dec 19 17:02:53 ispc saslauthd[2103530]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:02:53 ispc saslauthd[2103530]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:03:01 ispc CRON[2103621]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:03:01 ispc CRON[2103621]: pam_unix(cron:session): session closed for user root Dec 19 17:03:07 ispc CRON[2102643]: pam_unix(cron:session): session closed for user logcheck Dec 19 17:03:12 ispc postfix/smtpd[2103724]: sql auxprop plugin using mysql engine Dec 19 17:03:25 ispc sshd[2103732]: Did not receive identification string from 45.140.17.97 Dec 19 17:03:45 ispc saslauthd[2103744]: pam_mysql - SELECT returned no result. Dec 19 17:03:45 ispc saslauthd[2103744]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:03:45 ispc saslauthd[2103744]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:04:01 ispc CRON[2103755]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:04:01 ispc CRON[2103755]: pam_unix(cron:session): session closed for user root Dec 19 17:04:13 ispc saslauthd[2103773]: pam_mysql - SELECT returned no result. Dec 19 17:04:13 ispc saslauthd[2103773]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:04:13 ispc saslauthd[2103773]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:05:01 ispc CRON[2103799]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:05:01 ispc CRON[2103800]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:05:02 ispc CRON[2103801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:05:02 ispc CRON[2103802]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:05:02 ispc CRON[2103800]: pam_unix(cron:session): session closed for user root Dec 19 17:05:02 ispc CRON[2103802]: pam_unix(cron:session): session closed for user getmail Dec 19 17:05:02 ispc CRON[2103801]: pam_unix(cron:session): session closed for user root Dec 19 17:05:03 ispc CRON[2103799]: pam_unix(cron:session): session closed for user root Dec 19 17:05:18 ispc saslauthd[2103882]: pam_mysql - SELECT returned no result. Dec 19 17:05:18 ispc saslauthd[2103882]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:05:18 ispc saslauthd[2103882]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:06:01 ispc CRON[2103900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:06:01 ispc CRON[2103900]: pam_unix(cron:session): session closed for user root Dec 19 17:06:22 ispc saslauthd[2103924]: pam_mysql - SELECT returned no result. Dec 19 17:06:22 ispc saslauthd[2103924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:06:22 ispc saslauthd[2103924]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:06:32 ispc CRON[2101611]: pam_unix(cron:session): session closed for user root Dec 19 17:06:51 ispc saslauthd[2103929]: pam_mysql - SELECT returned no result. Dec 19 17:06:51 ispc saslauthd[2103929]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:06:51 ispc saslauthd[2103929]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:07:01 ispc CRON[2103930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:07:01 ispc CRON[2103930]: pam_unix(cron:session): session closed for user root Dec 19 17:07:52 ispc sshd[2103946]: Invalid user martof from 43.135.148.156 Dec 19 17:07:54 ispc saslauthd[2103953]: pam_mysql - SELECT returned no result. Dec 19 17:07:54 ispc saslauthd[2103953]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:07:54 ispc saslauthd[2103953]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:08:02 ispc CRON[2103956]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:08:02 ispc CRON[2103956]: pam_unix(cron:session): session closed for user root Dec 19 17:08:07 ispc sshd[2103970]: Invalid user ziplines from 211.57.200.145 Dec 19 17:08:54 ispc saslauthd[2103974]: pam_mysql - SELECT returned no result. Dec 19 17:08:54 ispc saslauthd[2103974]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:08:54 ispc saslauthd[2103974]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:09:01 ispc CRON[2103976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:09:01 ispc CRON[2103975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:09:01 ispc CRON[2103975]: pam_unix(cron:session): session closed for user root Dec 19 17:09:02 ispc CRON[2103976]: pam_unix(cron:session): session closed for user root Dec 19 17:09:43 ispc saslauthd[2104001]: pam_mysql - SELECT returned no result. Dec 19 17:09:43 ispc saslauthd[2104001]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:09:43 ispc saslauthd[2104001]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:10:01 ispc CRON[2104003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:10:01 ispc CRON[2104004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:10:01 ispc CRON[2104005]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:10:01 ispc CRON[2104006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:10:01 ispc CRON[2104007]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:10:01 ispc CRON[2104005]: pam_unix(cron:session): session closed for user www-data Dec 19 17:10:01 ispc CRON[2104004]: pam_unix(cron:session): session closed for user root Dec 19 17:10:01 ispc CRON[2104007]: pam_unix(cron:session): session closed for user getmail Dec 19 17:10:02 ispc CRON[2104003]: pam_unix(cron:session): session closed for user root Dec 19 17:10:12 ispc saslauthd[2104120]: pam_mysql - SELECT returned no result. Dec 19 17:10:12 ispc saslauthd[2104120]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:10:12 ispc saslauthd[2104120]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:10:33 ispc saslauthd[2104122]: pam_mysql - SELECT returned no result. Dec 19 17:10:33 ispc saslauthd[2104122]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:10:33 ispc saslauthd[2104122]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:10:43 ispc CRON[2104006]: pam_unix(cron:session): session closed for user root Dec 19 17:11:01 ispc CRON[2104123]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:11:19 ispc saslauthd[2104139]: pam_mysql - SELECT returned no result. Dec 19 17:11:19 ispc saslauthd[2104139]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:11:19 ispc saslauthd[2104139]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:11:22 ispc saslauthd[2104144]: pam_mysql - SELECT returned no result. Dec 19 17:11:22 ispc saslauthd[2104144]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:11:22 ispc saslauthd[2104144]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:12:01 ispc CRON[2104159]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:12:01 ispc CRON[2104159]: pam_unix(cron:session): session closed for user root Dec 19 17:12:14 ispc saslauthd[2104179]: pam_mysql - SELECT returned no result. Dec 19 17:12:14 ispc saslauthd[2104179]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:12:14 ispc saslauthd[2104179]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:13:01 ispc CRON[2104209]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:13:02 ispc CRON[2104209]: pam_unix(cron:session): session closed for user root Dec 19 17:13:06 ispc saslauthd[2104224]: pam_mysql - SELECT returned no result. Dec 19 17:13:06 ispc saslauthd[2104224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:13:06 ispc saslauthd[2104224]: do_auth : auth failure: [user=bcnas] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:13:15 ispc saslauthd[2104229]: pam_mysql - SELECT returned no result. Dec 19 17:13:15 ispc saslauthd[2104229]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:13:15 ispc saslauthd[2104229]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:14:01 ispc sshd[2104247]: Invalid user admin from 103.100.209.172 Dec 19 17:14:01 ispc CRON[2104249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:14:02 ispc CRON[2104249]: pam_unix(cron:session): session closed for user root Dec 19 17:14:19 ispc saslauthd[2104272]: pam_mysql - SELECT returned no result. Dec 19 17:14:19 ispc saslauthd[2104272]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:14:19 ispc saslauthd[2104272]: do_auth : auth failure: [user=info@matlbula-manipulacnitechnika.cz] [service=smtp] [realm=matlbula-manipulacnitechnika.cz] [mech=pam] [reason=PAM auth error] Dec 19 17:15:01 ispc CRON[2104292]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:15:01 ispc CRON[2104293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:15:01 ispc CRON[2104295]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:15:01 ispc CRON[2104294]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:15:01 ispc CRON[2104293]: pam_unix(cron:session): session closed for user root Dec 19 17:15:01 ispc CRON[2104295]: pam_unix(cron:session): session closed for user getmail Dec 19 17:15:01 ispc CRON[2104294]: pam_unix(cron:session): session closed for user root Dec 19 17:15:01 ispc CRON[2104292]: pam_unix(cron:session): session closed for user root Dec 19 17:16:01 ispc CRON[2104395]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:16:02 ispc CRON[2104395]: pam_unix(cron:session): session closed for user root Dec 19 17:17:01 ispc CRON[2104439]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:17:02 ispc CRON[2104439]: pam_unix(cron:session): session closed for user root Dec 19 17:17:31 ispc postfix/smtpd[2104463]: sql auxprop plugin using mysql engine Dec 19 17:17:32 ispc saslauthd[2104465]: pam_mysql - SELECT returned no result. Dec 19 17:17:32 ispc saslauthd[2104465]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:17:32 ispc saslauthd[2104465]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:18:01 ispc CRON[2104488]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:18:01 ispc CRON[2104488]: pam_unix(cron:session): session closed for user root Dec 19 17:18:49 ispc sshd[2104526]: Invalid user blceu from 49.247.24.89 Dec 19 17:19:01 ispc CRON[2104534]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:19:01 ispc CRON[2104534]: pam_unix(cron:session): session closed for user root Dec 19 17:19:22 ispc sshd[2104556]: Invalid user martof from 49.247.24.89 Dec 19 17:20:01 ispc CRON[2104575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:20:01 ispc CRON[2104576]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:20:01 ispc CRON[2104577]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:20:01 ispc CRON[2104578]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:20:01 ispc CRON[2104579]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:20:01 ispc CRON[2104577]: pam_unix(cron:session): session closed for user www-data Dec 19 17:20:01 ispc CRON[2104576]: pam_unix(cron:session): session closed for user root Dec 19 17:20:01 ispc CRON[2104579]: pam_unix(cron:session): session closed for user getmail Dec 19 17:20:02 ispc CRON[2104578]: pam_unix(cron:session): session closed for user root Dec 19 17:20:03 ispc CRON[2104575]: pam_unix(cron:session): session closed for user root Dec 19 17:21:01 ispc CRON[2104679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:21:01 ispc CRON[2104680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:21:01 ispc CRON[2104679]: pam_unix(cron:session): session closed for user root Dec 19 17:21:01 ispc CRON[2104680]: pam_unix(cron:session): session closed for user root Dec 19 17:21:54 ispc postfix/smtpd[2104715]: sql auxprop plugin using mysql engine Dec 19 17:21:54 ispc saslauthd[2104718]: pam_mysql - SELECT returned no result. Dec 19 17:21:54 ispc saslauthd[2104718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:21:54 ispc saslauthd[2104718]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:22:01 ispc CRON[2104723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:22:02 ispc CRON[2104723]: pam_unix(cron:session): session closed for user root Dec 19 17:23:01 ispc CRON[2104771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:23:02 ispc CRON[2104771]: pam_unix(cron:session): session closed for user root Dec 19 17:24:01 ispc CRON[2104814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:24:01 ispc CRON[2104814]: pam_unix(cron:session): session closed for user root Dec 19 17:24:48 ispc postfix/smtpd[2104843]: sql auxprop plugin using mysql engine Dec 19 17:24:49 ispc saslauthd[2104845]: pam_mysql - SELECT returned no result. Dec 19 17:24:49 ispc saslauthd[2104845]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:24:49 ispc saslauthd[2104845]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:25:01 ispc CRON[2104853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:25:01 ispc CRON[2104851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:25:01 ispc CRON[2104852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:25:01 ispc CRON[2104854]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:25:01 ispc CRON[2104852]: pam_unix(cron:session): session closed for user root Dec 19 17:25:01 ispc CRON[2104854]: pam_unix(cron:session): session closed for user getmail Dec 19 17:25:01 ispc CRON[2104853]: pam_unix(cron:session): session closed for user root Dec 19 17:25:02 ispc CRON[2104851]: pam_unix(cron:session): session closed for user root Dec 19 17:26:01 ispc CRON[2104951]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:26:01 ispc CRON[2104951]: pam_unix(cron:session): session closed for user root Dec 19 17:27:01 ispc CRON[2104989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:27:02 ispc CRON[2104989]: pam_unix(cron:session): session closed for user root Dec 19 17:28:01 ispc CRON[2105034]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:28:01 ispc CRON[2105034]: pam_unix(cron:session): session closed for user root Dec 19 17:28:11 ispc postfix/smtpd[2105050]: sql auxprop plugin using mysql engine Dec 19 17:28:13 ispc saslauthd[2105053]: pam_mysql - SELECT returned no result. Dec 19 17:28:13 ispc saslauthd[2105053]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:28:13 ispc saslauthd[2105053]: do_auth : auth failure: [user=bewan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:29:01 ispc CRON[2105075]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:29:02 ispc CRON[2105075]: pam_unix(cron:session): session closed for user root Dec 19 17:29:38 ispc postfix/smtpd[2105105]: sql auxprop plugin using mysql engine Dec 19 17:30:01 ispc CRON[2105116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:30:01 ispc CRON[2105117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:30:01 ispc CRON[2105118]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:30:01 ispc CRON[2105119]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:30:01 ispc CRON[2105120]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:30:01 ispc CRON[2105117]: pam_unix(cron:session): session closed for user root Dec 19 17:30:01 ispc CRON[2105118]: pam_unix(cron:session): session closed for user www-data Dec 19 17:30:01 ispc CRON[2105120]: pam_unix(cron:session): session closed for user getmail Dec 19 17:30:02 ispc CRON[2105119]: pam_unix(cron:session): session closed for user root Dec 19 17:30:02 ispc CRON[2105116]: pam_unix(cron:session): session closed for user root Dec 19 17:30:47 ispc postfix/smtpd[2105217]: sql auxprop plugin using mysql engine Dec 19 17:31:01 ispc CRON[2105223]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:31:02 ispc CRON[2105223]: pam_unix(cron:session): session closed for user root Dec 19 17:31:15 ispc CRON[2104123]: pam_unix(cron:session): session closed for user root Dec 19 17:31:15 ispc postfix/smtpd[2105240]: sql auxprop plugin using mysql engine Dec 19 17:31:36 ispc saslauthd[2105244]: pam_mysql - SELECT returned no result. Dec 19 17:31:36 ispc saslauthd[2105244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:31:36 ispc saslauthd[2105244]: do_auth : auth failure: [user=sales@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 17:32:01 ispc CRON[2105249]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:32:03 ispc CRON[2105249]: pam_unix(cron:session): session closed for user root Dec 19 17:32:12 ispc saslauthd[2105262]: pam_mysql - SELECT returned no result. Dec 19 17:32:12 ispc saslauthd[2105262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:32:12 ispc saslauthd[2105262]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:33:01 ispc CRON[2105284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:33:02 ispc CRON[2105284]: pam_unix(cron:session): session closed for user root Dec 19 17:33:14 ispc sshd[2105296]: Invalid user blceu from 119.205.233.162 Dec 19 17:34:01 ispc CRON[2105299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:34:03 ispc CRON[2105299]: pam_unix(cron:session): session closed for user root Dec 19 17:35:01 ispc CRON[2105317]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:35:01 ispc CRON[2105318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:35:01 ispc CRON[2105319]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:35:01 ispc CRON[2105320]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:35:01 ispc CRON[2105318]: pam_unix(cron:session): session closed for user root Dec 19 17:35:01 ispc CRON[2105320]: pam_unix(cron:session): session closed for user getmail Dec 19 17:35:01 ispc CRON[2105317]: pam_unix(cron:session): session closed for user root Dec 19 17:35:34 ispc CRON[2105319]: pam_unix(cron:session): session closed for user root Dec 19 17:36:01 ispc CRON[2105428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:36:57 ispc postfix/smtpd[2105462]: sql auxprop plugin using mysql engine Dec 19 17:36:57 ispc saslauthd[2105464]: pam_mysql - SELECT returned no result. Dec 19 17:36:57 ispc saslauthd[2105464]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:36:57 ispc saslauthd[2105464]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:37:01 ispc CRON[2105466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:37:02 ispc CRON[2105466]: pam_unix(cron:session): session closed for user root Dec 19 17:37:45 ispc postfix/smtpd[2105498]: sql auxprop plugin using mysql engine Dec 19 17:38:01 ispc CRON[2105510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:38:01 ispc CRON[2105510]: pam_unix(cron:session): session closed for user root Dec 19 17:38:48 ispc sshd[2105548]: Invalid user ziplines from 43.135.148.156 Dec 19 17:39:01 ispc CRON[2105554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:39:01 ispc CRON[2105555]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:39:02 ispc CRON[2105554]: pam_unix(cron:session): session closed for user root Dec 19 17:39:02 ispc CRON[2105555]: pam_unix(cron:session): session closed for user root Dec 19 17:39:18 ispc postfix/smtpd[2105584]: sql auxprop plugin using mysql engine Dec 19 17:39:18 ispc saslauthd[2105586]: pam_mysql - SELECT returned no result. Dec 19 17:39:18 ispc saslauthd[2105586]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:39:18 ispc saslauthd[2105586]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:40:01 ispc CRON[2105604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:40:01 ispc CRON[2105605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:40:01 ispc CRON[2105606]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:40:01 ispc CRON[2105607]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:40:01 ispc CRON[2105608]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:40:01 ispc CRON[2105605]: pam_unix(cron:session): session closed for user root Dec 19 17:40:01 ispc CRON[2105606]: pam_unix(cron:session): session closed for user www-data Dec 19 17:40:01 ispc CRON[2105608]: pam_unix(cron:session): session closed for user getmail Dec 19 17:40:01 ispc CRON[2105607]: pam_unix(cron:session): session closed for user root Dec 19 17:40:01 ispc CRON[2105604]: pam_unix(cron:session): session closed for user root Dec 19 17:41:01 ispc CRON[2105720]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:41:02 ispc CRON[2105720]: pam_unix(cron:session): session closed for user root Dec 19 17:42:01 ispc CRON[2105759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:42:02 ispc CRON[2105759]: pam_unix(cron:session): session closed for user root Dec 19 17:43:01 ispc CRON[2105806]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:43:02 ispc CRON[2105806]: pam_unix(cron:session): session closed for user root Dec 19 17:43:10 ispc postfix/smtpd[2105821]: sql auxprop plugin using mysql engine Dec 19 17:43:12 ispc saslauthd[2105824]: pam_mysql - SELECT returned no result. Dec 19 17:43:12 ispc saslauthd[2105824]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:43:12 ispc saslauthd[2105824]: do_auth : auth failure: [user=billy-bob] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:44:01 ispc CRON[2105844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:44:02 ispc CRON[2105844]: pam_unix(cron:session): session closed for user root Dec 19 17:44:32 ispc sshd[2105868]: Invalid user ziplines from 49.247.24.89 Dec 19 17:44:41 ispc sshd[2105876]: Did not receive identification string from 192.227.134.84 Dec 19 17:45:01 ispc CRON[2105889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:45:01 ispc CRON[2105890]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:45:01 ispc CRON[2105891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:45:01 ispc CRON[2105892]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:45:02 ispc CRON[2105890]: pam_unix(cron:session): session closed for user root Dec 19 17:45:02 ispc CRON[2105892]: pam_unix(cron:session): session closed for user getmail Dec 19 17:45:03 ispc CRON[2105891]: pam_unix(cron:session): session closed for user root Dec 19 17:45:04 ispc CRON[2105889]: pam_unix(cron:session): session closed for user root Dec 19 17:46:01 ispc CRON[2105995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:46:02 ispc CRON[2105995]: pam_unix(cron:session): session closed for user root Dec 19 17:46:42 ispc postfix/smtpd[2106023]: sql auxprop plugin using mysql engine Dec 19 17:46:42 ispc saslauthd[2106026]: pam_mysql - SELECT returned no result. Dec 19 17:46:42 ispc saslauthd[2106026]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:46:42 ispc saslauthd[2106026]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:47:01 ispc CRON[2106038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:47:02 ispc CRON[2106038]: pam_unix(cron:session): session closed for user root Dec 19 17:47:02 ispc sshd[2106036]: Invalid user blceu from 211.57.200.145 Dec 19 17:48:01 ispc CRON[2106084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:48:02 ispc CRON[2106084]: pam_unix(cron:session): session closed for user root Dec 19 17:49:01 ispc CRON[2106126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:49:03 ispc CRON[2106126]: pam_unix(cron:session): session closed for user root Dec 19 17:50:01 ispc CRON[2106167]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:50:01 ispc CRON[2106170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:50:01 ispc CRON[2106168]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:50:01 ispc CRON[2106169]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 17:50:01 ispc CRON[2106171]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:50:01 ispc CRON[2106168]: pam_unix(cron:session): session closed for user root Dec 19 17:50:01 ispc CRON[2106169]: pam_unix(cron:session): session closed for user www-data Dec 19 17:50:01 ispc CRON[2106171]: pam_unix(cron:session): session closed for user getmail Dec 19 17:50:01 ispc CRON[2106170]: pam_unix(cron:session): session closed for user root Dec 19 17:50:02 ispc CRON[2106167]: pam_unix(cron:session): session closed for user root Dec 19 17:51:01 ispc CRON[2106272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:51:02 ispc CRON[2106272]: pam_unix(cron:session): session closed for user root Dec 19 17:51:48 ispc postfix/smtpd[2106305]: sql auxprop plugin using mysql engine Dec 19 17:51:49 ispc saslauthd[2106308]: pam_mysql - SELECT returned no result. Dec 19 17:51:49 ispc saslauthd[2106308]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:51:49 ispc saslauthd[2106308]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:52:01 ispc CRON[2106314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:52:03 ispc CRON[2106314]: pam_unix(cron:session): session closed for user root Dec 19 17:53:01 ispc CRON[2106360]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:53:01 ispc CRON[2106360]: pam_unix(cron:session): session closed for user root Dec 19 17:53:46 ispc sshd[2106392]: Invalid user ziplines from 185.208.181.153 Dec 19 17:54:01 ispc CRON[2106402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:54:02 ispc CRON[2106402]: pam_unix(cron:session): session closed for user root Dec 19 17:54:28 ispc sshd[2106423]: Invalid user ziplines from 119.205.233.162 Dec 19 17:54:34 ispc postfix/smtpd[2106429]: sql auxprop plugin using mysql engine Dec 19 17:54:34 ispc saslauthd[2106431]: pam_mysql - SELECT returned no result. Dec 19 17:54:34 ispc saslauthd[2106431]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:54:34 ispc saslauthd[2106431]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:55:01 ispc CRON[2106446]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:55:01 ispc CRON[2106447]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:55:01 ispc CRON[2106448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:55:01 ispc CRON[2106449]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 17:55:01 ispc CRON[2106447]: pam_unix(cron:session): session closed for user root Dec 19 17:55:01 ispc CRON[2106449]: pam_unix(cron:session): session closed for user getmail Dec 19 17:55:02 ispc CRON[2106448]: pam_unix(cron:session): session closed for user root Dec 19 17:55:02 ispc CRON[2106446]: pam_unix(cron:session): session closed for user root Dec 19 17:56:01 ispc CRON[2106543]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:56:02 ispc CRON[2106543]: pam_unix(cron:session): session closed for user root Dec 19 17:56:33 ispc postfix/smtpd[2106572]: sql auxprop plugin using mysql engine Dec 19 17:56:33 ispc CRON[2105428]: pam_unix(cron:session): session closed for user root Dec 19 17:57:01 ispc CRON[2106577]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:57:03 ispc CRON[2106577]: pam_unix(cron:session): session closed for user root Dec 19 17:58:01 ispc CRON[2106602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:58:02 ispc CRON[2106602]: pam_unix(cron:session): session closed for user root Dec 19 17:58:11 ispc saslauthd[2106618]: pam_mysql - SELECT returned no result. Dec 19 17:58:11 ispc saslauthd[2106618]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 17:58:11 ispc saslauthd[2106618]: do_auth : auth failure: [user=bin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 17:59:01 ispc CRON[2106625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 17:59:01 ispc CRON[2106625]: pam_unix(cron:session): session closed for user root Dec 19 18:00:01 ispc CRON[2106641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:00:01 ispc CRON[2106642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:00:01 ispc CRON[2106643]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:00:01 ispc CRON[2106644]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:00:01 ispc CRON[2106645]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:00:01 ispc CRON[2106646]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:00:01 ispc CRON[2106642]: pam_unix(cron:session): session closed for user root Dec 19 18:00:01 ispc CRON[2106643]: pam_unix(cron:session): session closed for user www-data Dec 19 18:00:01 ispc CRON[2106646]: pam_unix(cron:session): session closed for user getmail Dec 19 18:00:02 ispc CRON[2106641]: pam_unix(cron:session): session closed for user root Dec 19 18:00:02 ispc CRON[2106644]: pam_unix(cron:session): session closed for user root Dec 19 18:00:35 ispc CRON[2106645]: pam_unix(cron:session): session closed for user root Dec 19 18:01:01 ispc CRON[2106919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:02:01 ispc CRON[2106966]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:02:01 ispc CRON[2106965]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 18:02:01 ispc CRON[2106966]: pam_unix(cron:session): session closed for user root Dec 19 18:02:08 ispc postfix/smtpd[2107082]: sql auxprop plugin using mysql engine Dec 19 18:02:09 ispc saslauthd[2107084]: pam_mysql - SELECT returned no result. Dec 19 18:02:09 ispc saslauthd[2107084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:02:09 ispc saslauthd[2107084]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:03:01 ispc CRON[2107781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:03:02 ispc CRON[2107781]: pam_unix(cron:session): session closed for user root Dec 19 18:03:36 ispc CRON[2106965]: pam_unix(cron:session): session closed for user logcheck Dec 19 18:03:40 ispc postfix/smtpd[2108062]: sql auxprop plugin using mysql engine Dec 19 18:04:01 ispc CRON[2108082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:04:02 ispc CRON[2108082]: pam_unix(cron:session): session closed for user root Dec 19 18:05:01 ispc CRON[2108120]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:05:01 ispc CRON[2108121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:05:01 ispc CRON[2108122]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:05:01 ispc CRON[2108123]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:05:01 ispc CRON[2108121]: pam_unix(cron:session): session closed for user root Dec 19 18:05:01 ispc CRON[2108123]: pam_unix(cron:session): session closed for user getmail Dec 19 18:05:02 ispc CRON[2108122]: pam_unix(cron:session): session closed for user root Dec 19 18:05:03 ispc CRON[2108120]: pam_unix(cron:session): session closed for user root Dec 19 18:06:01 ispc CRON[2108229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:06:02 ispc CRON[2108229]: pam_unix(cron:session): session closed for user root Dec 19 18:07:01 ispc postfix/smtpd[2108268]: sql auxprop plugin using mysql engine Dec 19 18:07:01 ispc CRON[2108270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:07:02 ispc saslauthd[2108278]: pam_mysql - SELECT returned no result. Dec 19 18:07:02 ispc saslauthd[2108278]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:07:02 ispc saslauthd[2108278]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:07:02 ispc CRON[2108270]: pam_unix(cron:session): session closed for user root Dec 19 18:07:22 ispc sshd[2108297]: Invalid user klape from 103.164.20.29 Dec 19 18:07:23 ispc sshd[2108299]: Invalid user ubuntu from 103.164.20.29 Dec 19 18:08:01 ispc CRON[2108324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:08:01 ispc CRON[2108324]: pam_unix(cron:session): session closed for user root Dec 19 18:08:20 ispc sshd[2108350]: Invalid user admin from 52.232.19.79 Dec 19 18:09:01 ispc CRON[2108371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:09:01 ispc CRON[2108372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:09:01 ispc CRON[2108371]: pam_unix(cron:session): session closed for user root Dec 19 18:09:02 ispc CRON[2108372]: pam_unix(cron:session): session closed for user root Dec 19 18:09:36 ispc postfix/smtpd[2108413]: sql auxprop plugin using mysql engine Dec 19 18:09:37 ispc saslauthd[2108415]: pam_mysql - SELECT returned no result. Dec 19 18:09:37 ispc saslauthd[2108415]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:09:37 ispc saslauthd[2108415]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:10:01 ispc CRON[2108435]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:10:01 ispc CRON[2108436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:10:01 ispc CRON[2108437]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:10:01 ispc CRON[2108438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:10:01 ispc CRON[2108439]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:10:01 ispc CRON[2108437]: pam_unix(cron:session): session closed for user www-data Dec 19 18:10:01 ispc CRON[2108436]: pam_unix(cron:session): session closed for user root Dec 19 18:10:01 ispc CRON[2108439]: pam_unix(cron:session): session closed for user getmail Dec 19 18:10:01 ispc CRON[2108435]: pam_unix(cron:session): session closed for user root Dec 19 18:10:02 ispc CRON[2108438]: pam_unix(cron:session): session closed for user root Dec 19 18:11:01 ispc CRON[2108544]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:11:01 ispc CRON[2108544]: pam_unix(cron:session): session closed for user root Dec 19 18:12:01 ispc CRON[2108585]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:12:02 ispc CRON[2108585]: pam_unix(cron:session): session closed for user root Dec 19 18:13:01 ispc CRON[2108636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:13:02 ispc CRON[2108636]: pam_unix(cron:session): session closed for user root Dec 19 18:13:09 ispc postfix/smtpd[2108647]: sql auxprop plugin using mysql engine Dec 19 18:13:10 ispc saslauthd[2108650]: pam_mysql - SELECT returned no result. Dec 19 18:13:10 ispc saslauthd[2108650]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:13:10 ispc saslauthd[2108650]: do_auth : auth failure: [user=blue] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:14:01 ispc CRON[2108686]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:14:02 ispc CRON[2108686]: pam_unix(cron:session): session closed for user root Dec 19 18:14:20 ispc sshd[2108707]: Invalid user martof from 221.156.137.103 Dec 19 18:15:01 ispc CRON[2108739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:15:01 ispc CRON[2108740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:15:01 ispc CRON[2108741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:15:01 ispc CRON[2108742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:15:02 ispc CRON[2108740]: pam_unix(cron:session): session closed for user root Dec 19 18:15:02 ispc CRON[2108742]: pam_unix(cron:session): session closed for user getmail Dec 19 18:15:02 ispc sshd[2108737]: Invalid user admin from 52.232.19.79 Dec 19 18:15:02 ispc CRON[2108741]: pam_unix(cron:session): session closed for user root Dec 19 18:15:03 ispc CRON[2108739]: pam_unix(cron:session): session closed for user root Dec 19 18:16:01 ispc CRON[2108849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:16:02 ispc CRON[2108849]: pam_unix(cron:session): session closed for user root Dec 19 18:17:01 ispc CRON[2108899]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:17:01 ispc postfix/smtpd[2108906]: sql auxprop plugin using mysql engine Dec 19 18:17:02 ispc saslauthd[2108909]: pam_mysql - SELECT returned no result. Dec 19 18:17:02 ispc saslauthd[2108909]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:17:02 ispc saslauthd[2108909]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:17:02 ispc CRON[2108899]: pam_unix(cron:session): session closed for user root Dec 19 18:17:06 ispc sshd[2108915]: Invalid user martof from 175.125.92.77 Dec 19 18:18:01 ispc CRON[2108970]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 18:18:01 ispc CRON[2108971]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:18:02 ispc CRON[2108971]: pam_unix(cron:session): session closed for user root Dec 19 18:18:08 ispc CRON[2108970]: pam_unix(cron:session): session closed for user amavis Dec 19 18:18:11 ispc postfix/smtpd[2109001]: sql auxprop plugin using mysql engine Dec 19 18:18:48 ispc postfix/smtpd[2109023]: sql auxprop plugin using mysql engine Dec 19 18:18:49 ispc saslauthd[2109025]: pam_mysql - SELECT returned no result. Dec 19 18:18:49 ispc saslauthd[2109025]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:18:49 ispc saslauthd[2109025]: do_auth : auth failure: [user=scan@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 18:19:01 ispc CRON[2109037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:19:02 ispc CRON[2109037]: pam_unix(cron:session): session closed for user root Dec 19 18:20:01 ispc CRON[2109088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:20:01 ispc CRON[2109089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:20:01 ispc CRON[2109090]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:20:01 ispc CRON[2109091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:20:01 ispc CRON[2109092]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:20:01 ispc CRON[2109089]: pam_unix(cron:session): session closed for user root Dec 19 18:20:01 ispc CRON[2109090]: pam_unix(cron:session): session closed for user www-data Dec 19 18:20:01 ispc CRON[2109092]: pam_unix(cron:session): session closed for user getmail Dec 19 18:20:01 ispc CRON[2109091]: pam_unix(cron:session): session closed for user root Dec 19 18:20:03 ispc CRON[2109088]: pam_unix(cron:session): session closed for user root Dec 19 18:21:01 ispc CRON[2109203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:21:01 ispc CRON[2109204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:21:01 ispc CRON[2109203]: pam_unix(cron:session): session closed for user root Dec 19 18:21:02 ispc CRON[2109204]: pam_unix(cron:session): session closed for user root Dec 19 18:21:30 ispc postfix/smtpd[2109240]: sql auxprop plugin using mysql engine Dec 19 18:21:30 ispc CRON[2106919]: pam_unix(cron:session): session closed for user root Dec 19 18:22:01 ispc CRON[2109245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:22:02 ispc CRON[2109245]: pam_unix(cron:session): session closed for user root Dec 19 18:22:08 ispc saslauthd[2109262]: pam_mysql - SELECT returned no result. Dec 19 18:22:08 ispc saslauthd[2109262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:22:08 ispc saslauthd[2109262]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:23:01 ispc CRON[2109290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:23:02 ispc CRON[2109290]: pam_unix(cron:session): session closed for user root Dec 19 18:24:01 ispc CRON[2109322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:24:02 ispc CRON[2109322]: pam_unix(cron:session): session closed for user root Dec 19 18:24:24 ispc saslauthd[2109349]: pam_mysql - SELECT returned no result. Dec 19 18:24:24 ispc saslauthd[2109349]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:24:24 ispc saslauthd[2109349]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:24:34 ispc sshd[2109357]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 18:25:00 ispc sshd[2109381]: Did not receive identification string from 80.94.92.186 Dec 19 18:25:01 ispc CRON[2109383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:25:01 ispc CRON[2109384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:25:01 ispc CRON[2109385]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:25:01 ispc CRON[2109386]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:25:01 ispc CRON[2109384]: pam_unix(cron:session): session closed for user root Dec 19 18:25:01 ispc CRON[2109386]: pam_unix(cron:session): session closed for user getmail Dec 19 18:25:01 ispc CRON[2109383]: pam_unix(cron:session): session closed for user root Dec 19 18:25:44 ispc CRON[2109385]: pam_unix(cron:session): session closed for user root Dec 19 18:26:01 ispc CRON[2109546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:26:28 ispc saslauthd[2109592]: pam_mysql - SELECT returned no result. Dec 19 18:26:28 ispc saslauthd[2109592]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:26:28 ispc saslauthd[2109592]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:27:01 ispc CRON[2109638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:27:03 ispc CRON[2109638]: pam_unix(cron:session): session closed for user root Dec 19 18:28:01 ispc CRON[2109721]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:28:03 ispc CRON[2109721]: pam_unix(cron:session): session closed for user root Dec 19 18:28:07 ispc saslauthd[2109746]: pam_mysql - SELECT returned no result. Dec 19 18:28:07 ispc saslauthd[2109746]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:28:07 ispc saslauthd[2109746]: do_auth : auth failure: [user=boss] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:29:01 ispc CRON[2109817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:29:02 ispc CRON[2109817]: pam_unix(cron:session): session closed for user root Dec 19 18:29:31 ispc sshd[2109870]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 18:29:33 ispc sshd[2109873]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 18:29:33 ispc sshd[2109873]: Invalid user klape from 189.89.20.45 Dec 19 18:29:35 ispc sshd[2109877]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 18:29:35 ispc sshd[2109877]: Invalid user ubuntu from 189.89.20.45 Dec 19 18:30:01 ispc CRON[2109916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:30:01 ispc CRON[2109917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:30:01 ispc CRON[2109918]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:30:01 ispc CRON[2109919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:30:01 ispc CRON[2109920]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:30:01 ispc CRON[2109918]: pam_unix(cron:session): session closed for user www-data Dec 19 18:30:01 ispc CRON[2109917]: pam_unix(cron:session): session closed for user root Dec 19 18:30:01 ispc CRON[2109920]: pam_unix(cron:session): session closed for user getmail Dec 19 18:30:02 ispc CRON[2109919]: pam_unix(cron:session): session closed for user root Dec 19 18:30:02 ispc CRON[2109916]: pam_unix(cron:session): session closed for user root Dec 19 18:30:02 ispc sshd[2109988]: Did not receive identification string from 58.56.204.118 Dec 19 18:31:01 ispc CRON[2110077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:31:02 ispc CRON[2110077]: pam_unix(cron:session): session closed for user root Dec 19 18:31:49 ispc postfix/smtpd[2110154]: sql auxprop plugin using mysql engine Dec 19 18:31:49 ispc saslauthd[2110157]: pam_mysql - SELECT returned no result. Dec 19 18:31:49 ispc saslauthd[2110157]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:31:49 ispc saslauthd[2110157]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:32:01 ispc CRON[2110172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:32:02 ispc CRON[2110172]: pam_unix(cron:session): session closed for user root Dec 19 18:33:01 ispc CRON[2110279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:33:02 ispc CRON[2110279]: pam_unix(cron:session): session closed for user root Dec 19 18:34:01 ispc CRON[2110377]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:34:02 ispc CRON[2110377]: pam_unix(cron:session): session closed for user root Dec 19 18:35:01 ispc CRON[2110460]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:35:01 ispc CRON[2110461]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:35:01 ispc CRON[2110462]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:35:01 ispc CRON[2110463]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:35:01 ispc CRON[2110461]: pam_unix(cron:session): session closed for user root Dec 19 18:35:01 ispc CRON[2110463]: pam_unix(cron:session): session closed for user getmail Dec 19 18:35:02 ispc CRON[2110462]: pam_unix(cron:session): session closed for user root Dec 19 18:35:02 ispc CRON[2110460]: pam_unix(cron:session): session closed for user root Dec 19 18:35:35 ispc sshd[2110551]: Invalid user sol from 80.94.92.186 Dec 19 18:35:59 ispc sshd[2110561]: Invalid user martof from 211.57.200.145 Dec 19 18:36:01 ispc CRON[2110566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:36:01 ispc sshd[2110563]: Invalid user martof from 27.254.144.183 Dec 19 18:36:02 ispc CRON[2110566]: pam_unix(cron:session): session closed for user root Dec 19 18:36:10 ispc sshd[2110581]: Did not receive identification string from 192.227.134.84 Dec 19 18:37:01 ispc CRON[2110606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:37:01 ispc CRON[2110606]: pam_unix(cron:session): session closed for user root Dec 19 18:37:19 ispc postfix/smtpd[2110625]: sql auxprop plugin using mysql engine Dec 19 18:37:20 ispc saslauthd[2110628]: pam_mysql - SELECT returned no result. Dec 19 18:37:20 ispc saslauthd[2110628]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:37:20 ispc saslauthd[2110628]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:38:01 ispc CRON[2110650]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:38:02 ispc CRON[2110650]: pam_unix(cron:session): session closed for user root Dec 19 18:38:55 ispc saslauthd[2110697]: pam_mysql - SELECT returned no result. Dec 19 18:38:55 ispc saslauthd[2110697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:38:55 ispc saslauthd[2110697]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:39:01 ispc CRON[2110698]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:39:01 ispc CRON[2110699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:39:01 ispc CRON[2110698]: pam_unix(cron:session): session closed for user root Dec 19 18:39:02 ispc CRON[2110699]: pam_unix(cron:session): session closed for user root Dec 19 18:40:01 ispc CRON[2110744]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:40:01 ispc CRON[2110748]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:40:01 ispc CRON[2110745]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:40:01 ispc CRON[2110746]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:40:01 ispc CRON[2110747]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:40:01 ispc CRON[2110745]: pam_unix(cron:session): session closed for user root Dec 19 18:40:01 ispc CRON[2110746]: pam_unix(cron:session): session closed for user www-data Dec 19 18:40:01 ispc CRON[2110748]: pam_unix(cron:session): session closed for user getmail Dec 19 18:40:01 ispc CRON[2110747]: pam_unix(cron:session): session closed for user root Dec 19 18:40:01 ispc CRON[2110744]: pam_unix(cron:session): session closed for user root Dec 19 18:40:41 ispc sshd[2110841]: Invalid user blceu from 175.125.92.77 Dec 19 18:41:01 ispc CRON[2110853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:41:02 ispc CRON[2110853]: pam_unix(cron:session): session closed for user root Dec 19 18:41:38 ispc sshd[2110881]: Invalid user ziplines from 175.125.92.77 Dec 19 18:41:50 ispc sshd[2110888]: Invalid user matlbula from 117.50.70.169 Dec 19 18:42:01 ispc CRON[2110894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:42:01 ispc CRON[2110894]: pam_unix(cron:session): session closed for user root Dec 19 18:42:29 ispc postfix/smtpd[2110917]: sql auxprop plugin using mysql engine Dec 19 18:42:29 ispc postfix/smtpd[2110919]: sql auxprop plugin using mysql engine Dec 19 18:42:47 ispc sshd[2110926]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 18:42:47 ispc sshd[2110926]: Invalid user martof from 193.110.157.47 Dec 19 18:43:01 ispc CRON[2110945]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:43:01 ispc CRON[2110945]: pam_unix(cron:session): session closed for user root Dec 19 18:43:07 ispc sshd[2110956]: Invalid user solana from 80.94.92.186 Dec 19 18:43:09 ispc postfix/smtpd[2110962]: sql auxprop plugin using mysql engine Dec 19 18:43:11 ispc saslauthd[2110964]: pam_mysql - SELECT returned no result. Dec 19 18:43:11 ispc saslauthd[2110964]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:43:11 ispc saslauthd[2110964]: do_auth : auth failure: [user=both] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:44:01 ispc CRON[2110989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:44:02 ispc CRON[2110989]: pam_unix(cron:session): session closed for user root Dec 19 18:45:01 ispc CRON[2111027]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:45:01 ispc CRON[2111026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:45:01 ispc CRON[2111028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:45:01 ispc CRON[2111029]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:45:01 ispc CRON[2111027]: pam_unix(cron:session): session closed for user root Dec 19 18:45:01 ispc CRON[2111029]: pam_unix(cron:session): session closed for user getmail Dec 19 18:45:02 ispc CRON[2111026]: pam_unix(cron:session): session closed for user root Dec 19 18:45:02 ispc CRON[2111028]: pam_unix(cron:session): session closed for user root Dec 19 18:46:01 ispc CRON[2111136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:46:02 ispc CRON[2111136]: pam_unix(cron:session): session closed for user root Dec 19 18:46:14 ispc postfix/smtpd[2111152]: sql auxprop plugin using mysql engine Dec 19 18:46:15 ispc saslauthd[2111154]: pam_mysql - SELECT returned no result. Dec 19 18:46:15 ispc saslauthd[2111154]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:46:15 ispc saslauthd[2111154]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:46:21 ispc CRON[2109546]: pam_unix(cron:session): session closed for user root Dec 19 18:47:01 ispc CRON[2111162]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:47:02 ispc CRON[2111162]: pam_unix(cron:session): session closed for user root Dec 19 18:48:02 ispc CRON[2111185]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:48:02 ispc CRON[2111185]: pam_unix(cron:session): session closed for user root Dec 19 18:49:01 ispc CRON[2111200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:49:02 ispc CRON[2111200]: pam_unix(cron:session): session closed for user root Dec 19 18:49:09 ispc sshd[2111213]: Invalid user ziplines from 165.227.38.205 Dec 19 18:49:23 ispc sshd[2111217]: Did not receive identification string from 45.140.17.97 Dec 19 18:50:01 ispc CRON[2111221]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:50:01 ispc CRON[2111225]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:50:01 ispc CRON[2111222]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:50:01 ispc CRON[2111223]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 18:50:01 ispc CRON[2111224]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:50:01 ispc CRON[2111223]: pam_unix(cron:session): session closed for user www-data Dec 19 18:50:01 ispc CRON[2111222]: pam_unix(cron:session): session closed for user root Dec 19 18:50:01 ispc CRON[2111225]: pam_unix(cron:session): session closed for user getmail Dec 19 18:50:02 ispc CRON[2111221]: pam_unix(cron:session): session closed for user root Dec 19 18:50:37 ispc CRON[2111224]: pam_unix(cron:session): session closed for user root Dec 19 18:50:39 ispc sshd[2111332]: Did not receive identification string from 163.179.63.235 Dec 19 18:50:43 ispc sshd[2111334]: Invalid user node from 80.94.92.186 Dec 19 18:51:01 ispc CRON[2111337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:51:43 ispc sshd[2111367]: Invalid user admin from 52.232.19.79 Dec 19 18:52:01 ispc CRON[2111378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:52:01 ispc CRON[2111379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:52:01 ispc CRON[2111379]: pam_unix(cron:session): session closed for user root Dec 19 18:52:45 ispc postfix/smtpd[2111418]: sql auxprop plugin using mysql engine Dec 19 18:52:46 ispc saslauthd[2111420]: pam_mysql - SELECT returned no result. Dec 19 18:52:46 ispc saslauthd[2111420]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:52:46 ispc saslauthd[2111420]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:53:01 ispc CRON[2111432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:53:02 ispc CRON[2111432]: pam_unix(cron:session): session closed for user root Dec 19 18:53:24 ispc saslauthd[2111452]: pam_mysql - SELECT returned no result. Dec 19 18:53:24 ispc saslauthd[2111452]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:53:24 ispc saslauthd[2111452]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:54:01 ispc CRON[2111473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:54:01 ispc CRON[2111473]: pam_unix(cron:session): session closed for user root Dec 19 18:55:01 ispc CRON[2111514]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:55:01 ispc CRON[2111515]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:55:01 ispc CRON[2111516]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:55:01 ispc CRON[2111517]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 18:55:01 ispc CRON[2111515]: pam_unix(cron:session): session closed for user root Dec 19 18:55:01 ispc CRON[2111517]: pam_unix(cron:session): session closed for user getmail Dec 19 18:55:01 ispc CRON[2111516]: pam_unix(cron:session): session closed for user root Dec 19 18:55:01 ispc CRON[2111514]: pam_unix(cron:session): session closed for user root Dec 19 18:55:18 ispc CRON[2111378]: pam_unix(cron:session): session closed for user root Dec 19 18:56:01 ispc CRON[2111616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:56:01 ispc CRON[2111616]: pam_unix(cron:session): session closed for user root Dec 19 18:57:01 ispc CRON[2111655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:57:02 ispc CRON[2111655]: pam_unix(cron:session): session closed for user root Dec 19 18:57:17 ispc sshd[2111676]: Invalid user martof from 51.91.247.10 Dec 19 18:58:01 ispc CRON[2111702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:58:02 ispc CRON[2111702]: pam_unix(cron:session): session closed for user root Dec 19 18:58:05 ispc sshd[2111700]: Invalid user ubuntu from 80.94.92.186 Dec 19 18:58:14 ispc postfix/smtpd[2111724]: sql auxprop plugin using mysql engine Dec 19 18:58:15 ispc saslauthd[2111731]: pam_mysql - SELECT returned no result. Dec 19 18:58:15 ispc saslauthd[2111731]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 18:58:15 ispc saslauthd[2111731]: do_auth : auth failure: [user=bpel] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 18:59:01 ispc CRON[2111750]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 18:59:01 ispc CRON[2111750]: pam_unix(cron:session): session closed for user root Dec 19 19:00:01 ispc CRON[2111788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:00:01 ispc CRON[2111790]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:00:01 ispc CRON[2111789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:00:01 ispc CRON[2111791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:00:01 ispc CRON[2111792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:00:01 ispc CRON[2111793]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:00:01 ispc CRON[2111789]: pam_unix(cron:session): session closed for user root Dec 19 19:00:01 ispc CRON[2111790]: pam_unix(cron:session): session closed for user www-data Dec 19 19:00:01 ispc CRON[2111793]: pam_unix(cron:session): session closed for user getmail Dec 19 19:00:02 ispc CRON[2111792]: pam_unix(cron:session): session closed for user root Dec 19 19:00:02 ispc CRON[2111791]: pam_unix(cron:session): session closed for user root Dec 19 19:00:02 ispc CRON[2111788]: pam_unix(cron:session): session closed for user root Dec 19 19:00:23 ispc postfix/smtpd[2111954]: sql auxprop plugin using mysql engine Dec 19 19:00:23 ispc saslauthd[2111957]: pam_mysql - SELECT returned no result. Dec 19 19:00:23 ispc saslauthd[2111957]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:00:23 ispc saslauthd[2111957]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:01:01 ispc CRON[2111974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:01:02 ispc CRON[2111974]: pam_unix(cron:session): session closed for user root Dec 19 19:01:15 ispc sshd[2111990]: Invalid user martof from 103.100.209.172 Dec 19 19:02:01 ispc CRON[2112019]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 19:02:01 ispc CRON[2112020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:02:02 ispc CRON[2112020]: pam_unix(cron:session): session closed for user root Dec 19 19:02:32 ispc sshd[2112716]: Did not receive identification string from 159.223.228.56 Dec 19 19:03:01 ispc CRON[2112972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:03:02 ispc CRON[2112972]: pam_unix(cron:session): session closed for user root Dec 19 19:03:15 ispc CRON[2112019]: pam_unix(cron:session): session closed for user logcheck Dec 19 19:03:22 ispc postfix/smtpd[2113099]: sql auxprop plugin using mysql engine Dec 19 19:04:01 ispc CRON[2113129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:04:02 ispc CRON[2113129]: pam_unix(cron:session): session closed for user root Dec 19 19:05:01 ispc CRON[2113173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:05:01 ispc CRON[2113174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:05:01 ispc CRON[2113175]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:05:01 ispc CRON[2113176]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:05:01 ispc CRON[2113174]: pam_unix(cron:session): session closed for user root Dec 19 19:05:01 ispc CRON[2113176]: pam_unix(cron:session): session closed for user getmail Dec 19 19:05:01 ispc CRON[2113175]: pam_unix(cron:session): session closed for user root Dec 19 19:05:01 ispc CRON[2113173]: pam_unix(cron:session): session closed for user root Dec 19 19:05:21 ispc postfix/smtpd[2113259]: sql auxprop plugin using mysql engine Dec 19 19:05:21 ispc saslauthd[2113262]: pam_mysql - SELECT returned no result. Dec 19 19:05:21 ispc saslauthd[2113262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:05:21 ispc saslauthd[2113262]: do_auth : auth failure: [user=scanner@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 19:05:21 ispc sshd[2113257]: Invalid user minima from 80.94.92.186 Dec 19 19:06:01 ispc CRON[2113281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:06:02 ispc CRON[2113281]: pam_unix(cron:session): session closed for user root Dec 19 19:07:01 ispc CRON[2113325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:07:01 ispc CRON[2113325]: pam_unix(cron:session): session closed for user root Dec 19 19:07:28 ispc postfix/smtpd[2113346]: sql auxprop plugin using mysql engine Dec 19 19:07:28 ispc saslauthd[2113348]: pam_mysql - SELECT returned no result. Dec 19 19:07:28 ispc saslauthd[2113348]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:07:28 ispc saslauthd[2113348]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:08:00 ispc saslauthd[2113368]: pam_mysql - SELECT returned no result. Dec 19 19:08:00 ispc saslauthd[2113368]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:08:00 ispc saslauthd[2113368]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:08:01 ispc CRON[2113373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:08:03 ispc CRON[2113373]: pam_unix(cron:session): session closed for user root Dec 19 19:09:01 ispc CRON[2113419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:09:01 ispc CRON[2113420]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:09:01 ispc CRON[2113419]: pam_unix(cron:session): session closed for user root Dec 19 19:09:02 ispc CRON[2113420]: pam_unix(cron:session): session closed for user root Dec 19 19:09:08 ispc sshd[2113444]: Invalid user blceu from 45.119.213.109 Dec 19 19:10:01 ispc CRON[2113468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:10:01 ispc CRON[2113469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:10:01 ispc CRON[2113470]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:10:01 ispc CRON[2113471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:10:01 ispc CRON[2113472]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:10:01 ispc CRON[2113470]: pam_unix(cron:session): session closed for user www-data Dec 19 19:10:01 ispc CRON[2113469]: pam_unix(cron:session): session closed for user root Dec 19 19:10:01 ispc CRON[2113472]: pam_unix(cron:session): session closed for user getmail Dec 19 19:10:01 ispc CRON[2113471]: pam_unix(cron:session): session closed for user root Dec 19 19:10:01 ispc CRON[2113468]: pam_unix(cron:session): session closed for user root Dec 19 19:11:01 ispc CRON[2113582]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:11:02 ispc CRON[2113582]: pam_unix(cron:session): session closed for user root Dec 19 19:11:22 ispc CRON[2111337]: pam_unix(cron:session): session closed for user root Dec 19 19:11:22 ispc postfix/smtpd[2113599]: sql auxprop plugin using mysql engine Dec 19 19:12:01 ispc CRON[2113608]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:12:01 ispc CRON[2113608]: pam_unix(cron:session): session closed for user root Dec 19 19:12:55 ispc sshd[2113644]: Invalid user validator from 80.94.92.186 Dec 19 19:13:01 ispc CRON[2113660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:13:02 ispc CRON[2113660]: pam_unix(cron:session): session closed for user root Dec 19 19:13:14 ispc saslauthd[2113681]: pam_mysql - SELECT returned no result. Dec 19 19:13:14 ispc saslauthd[2113681]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:13:14 ispc saslauthd[2113681]: do_auth : auth failure: [user=browse] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:13:34 ispc sshd[2113697]: Invalid user Antminer from 5.187.35.21 Dec 19 19:13:37 ispc sshd[2113700]: Invalid user Antminer from 5.187.35.21 Dec 19 19:13:57 ispc sshd[2113712]: Invalid user admin from 5.187.35.21 Dec 19 19:13:59 ispc sshd[2113714]: Invalid user baikal from 5.187.35.21 Dec 19 19:14:01 ispc CRON[2113717]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:14:01 ispc CRON[2113717]: pam_unix(cron:session): session closed for user root Dec 19 19:14:42 ispc saslauthd[2113734]: pam_mysql - SELECT returned no result. Dec 19 19:14:42 ispc saslauthd[2113734]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:14:42 ispc saslauthd[2113734]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:15:01 ispc CRON[2113740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:15:01 ispc CRON[2113741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:15:01 ispc CRON[2113739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:15:01 ispc CRON[2113742]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:15:01 ispc CRON[2113740]: pam_unix(cron:session): session closed for user root Dec 19 19:15:02 ispc CRON[2113742]: pam_unix(cron:session): session closed for user getmail Dec 19 19:15:02 ispc CRON[2113739]: pam_unix(cron:session): session closed for user root Dec 19 19:15:11 ispc sshd[2113886]: Invalid user blceu from 49.247.24.89 Dec 19 19:15:45 ispc sshd[2113930]: Invalid user martof from 49.247.24.89 Dec 19 19:15:50 ispc CRON[2113741]: pam_unix(cron:session): session closed for user root Dec 19 19:16:01 ispc CRON[2113934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:16:08 ispc sshd[2113949]: Invalid user klape from 36.50.177.171 Dec 19 19:16:10 ispc sshd[2113951]: Invalid user ubuntu from 36.50.177.171 Dec 19 19:17:01 ispc CRON[2113980]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:17:02 ispc CRON[2113980]: pam_unix(cron:session): session closed for user root Dec 19 19:18:01 ispc CRON[2114041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:18:01 ispc CRON[2114041]: pam_unix(cron:session): session closed for user root Dec 19 19:19:01 ispc CRON[2114094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:19:02 ispc CRON[2114094]: pam_unix(cron:session): session closed for user root Dec 19 19:19:42 ispc sshd[2114130]: Invalid user ziplines from 103.100.209.172 Dec 19 19:20:01 ispc CRON[2114148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:20:01 ispc CRON[2114149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:20:01 ispc CRON[2114150]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:20:01 ispc CRON[2114151]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:20:01 ispc CRON[2114152]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:20:01 ispc CRON[2114149]: pam_unix(cron:session): session closed for user root Dec 19 19:20:01 ispc CRON[2114150]: pam_unix(cron:session): session closed for user www-data Dec 19 19:20:01 ispc CRON[2114152]: pam_unix(cron:session): session closed for user getmail Dec 19 19:20:01 ispc CRON[2114151]: pam_unix(cron:session): session closed for user root Dec 19 19:20:02 ispc CRON[2114148]: pam_unix(cron:session): session closed for user root Dec 19 19:20:12 ispc sshd[2114233]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:20:12 ispc sshd[2114233]: Invalid user ziplines from 193.110.157.47 Dec 19 19:21:01 ispc CRON[2114269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:21:01 ispc CRON[2114270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:21:01 ispc CRON[2114269]: pam_unix(cron:session): session closed for user root Dec 19 19:21:01 ispc CRON[2114270]: pam_unix(cron:session): session closed for user root Dec 19 19:21:51 ispc postfix/smtpd[2114309]: sql auxprop plugin using mysql engine Dec 19 19:21:52 ispc saslauthd[2114316]: pam_mysql - SELECT returned no result. Dec 19 19:21:52 ispc saslauthd[2114316]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:21:52 ispc saslauthd[2114316]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:22:01 ispc CRON[2114321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:22:02 ispc CRON[2114321]: pam_unix(cron:session): session closed for user root Dec 19 19:22:05 ispc sshd[2114320]: Did not receive identification string from 161.35.218.223 Dec 19 19:22:17 ispc sshd[2114349]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:22:17 ispc sshd[2114349]: Invalid user admin from 41.203.222.206 Dec 19 19:22:18 ispc sshd[2114352]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:22:18 ispc sshd[2114352]: Invalid user admin from 41.203.222.206 Dec 19 19:22:20 ispc postfix/smtpd[2114354]: sql auxprop plugin using mysql engine Dec 19 19:22:35 ispc postfix/smtpd[2114376]: sql auxprop plugin using mysql engine Dec 19 19:23:01 ispc CRON[2114402]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:23:02 ispc CRON[2114402]: pam_unix(cron:session): session closed for user root Dec 19 19:23:16 ispc saslauthd[2114426]: pam_mysql - SELECT returned no result. Dec 19 19:23:16 ispc saslauthd[2114426]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:23:16 ispc saslauthd[2114426]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:23:42 ispc sshd[2114438]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:23:42 ispc sshd[2114438]: Invalid user admin from 41.203.222.206 Dec 19 19:23:55 ispc sshd[2114447]: Did not receive identification string from 192.227.134.84 Dec 19 19:24:01 ispc CRON[2114453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:24:01 ispc CRON[2114453]: pam_unix(cron:session): session closed for user root Dec 19 19:24:17 ispc sshd[2114475]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:24:17 ispc sshd[2114475]: Invalid user admin from 41.203.222.206 Dec 19 19:25:01 ispc CRON[2114503]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:25:01 ispc CRON[2114500]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:25:01 ispc CRON[2114501]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:25:01 ispc CRON[2114502]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:25:01 ispc CRON[2114501]: pam_unix(cron:session): session closed for user root Dec 19 19:25:01 ispc CRON[2114503]: pam_unix(cron:session): session closed for user getmail Dec 19 19:25:02 ispc CRON[2114502]: pam_unix(cron:session): session closed for user root Dec 19 19:25:02 ispc CRON[2114500]: pam_unix(cron:session): session closed for user root Dec 19 19:25:02 ispc sshd[2114511]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:25:02 ispc sshd[2114511]: Invalid user admin from 41.203.222.206 Dec 19 19:26:01 ispc CRON[2114614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:26:02 ispc CRON[2114614]: pam_unix(cron:session): session closed for user root Dec 19 19:27:01 ispc CRON[2114660]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:27:01 ispc CRON[2114660]: pam_unix(cron:session): session closed for user root Dec 19 19:27:35 ispc sshd[2114687]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:28:01 ispc CRON[2114710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:28:02 ispc CRON[2114710]: pam_unix(cron:session): session closed for user root Dec 19 19:28:11 ispc postfix/smtpd[2114730]: sql auxprop plugin using mysql engine Dec 19 19:28:12 ispc sshd[2114732]: reverse mapping checking getaddrinfo for mail.finrc.fi [41.203.222.206] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:28:12 ispc sshd[2114732]: Invalid user admin from 41.203.222.206 Dec 19 19:28:12 ispc saslauthd[2114735]: pam_mysql - SELECT returned no result. Dec 19 19:28:12 ispc saslauthd[2114735]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:28:12 ispc saslauthd[2114735]: do_auth : auth failure: [user=bsxuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:29:01 ispc CRON[2114771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:29:01 ispc CRON[2114771]: pam_unix(cron:session): session closed for user root Dec 19 19:29:16 ispc saslauthd[2114787]: pam_mysql - SELECT returned no result. Dec 19 19:29:16 ispc saslauthd[2114787]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:29:16 ispc saslauthd[2114787]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:30:01 ispc CRON[2114818]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:30:01 ispc CRON[2114821]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:30:01 ispc CRON[2114822]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:30:01 ispc CRON[2114820]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:30:01 ispc CRON[2114819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:30:01 ispc CRON[2114822]: pam_unix(cron:session): session closed for user getmail Dec 19 19:30:01 ispc CRON[2114819]: pam_unix(cron:session): session closed for user root Dec 19 19:30:01 ispc CRON[2114820]: pam_unix(cron:session): session closed for user www-data Dec 19 19:30:02 ispc CRON[2114821]: pam_unix(cron:session): session closed for user root Dec 19 19:30:02 ispc CRON[2114818]: pam_unix(cron:session): session closed for user root Dec 19 19:31:01 ispc CRON[2114931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:31:03 ispc CRON[2114931]: pam_unix(cron:session): session closed for user root Dec 19 19:31:31 ispc sshd[2114958]: Invalid user blceu from 51.91.247.10 Dec 19 19:32:01 ispc CRON[2114974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:32:02 ispc CRON[2114974]: pam_unix(cron:session): session closed for user root Dec 19 19:32:50 ispc sshd[2115018]: Invalid user ziplines from 211.57.200.145 Dec 19 19:33:01 ispc CRON[2115039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:33:01 ispc CRON[2115039]: pam_unix(cron:session): session closed for user root Dec 19 19:34:01 ispc CRON[2115088]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:34:01 ispc CRON[2115088]: pam_unix(cron:session): session closed for user root Dec 19 19:35:01 ispc CRON[2115129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:35:01 ispc CRON[2115130]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:35:01 ispc CRON[2115131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:35:01 ispc CRON[2115132]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:35:01 ispc CRON[2115130]: pam_unix(cron:session): session closed for user root Dec 19 19:35:01 ispc CRON[2115132]: pam_unix(cron:session): session closed for user getmail Dec 19 19:35:02 ispc CRON[2115131]: pam_unix(cron:session): session closed for user root Dec 19 19:35:02 ispc CRON[2115129]: pam_unix(cron:session): session closed for user root Dec 19 19:35:27 ispc postfix/smtpd[2115220]: sql auxprop plugin using mysql engine Dec 19 19:35:29 ispc saslauthd[2115223]: pam_mysql - SELECT returned no result. Dec 19 19:35:29 ispc saslauthd[2115223]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:35:29 ispc saslauthd[2115223]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:35:32 ispc saslauthd[2115224]: pam_mysql - SELECT returned no result. Dec 19 19:35:32 ispc saslauthd[2115224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:35:32 ispc saslauthd[2115224]: do_auth : auth failure: [user=postmaster@matl-bula.info] [service=smtp] [realm=matl-bula.info] [mech=pam] [reason=PAM auth error] Dec 19 19:36:01 ispc CRON[2115238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:36:02 ispc CRON[2115238]: pam_unix(cron:session): session closed for user root Dec 19 19:36:27 ispc CRON[2113934]: pam_unix(cron:session): session closed for user root Dec 19 19:36:37 ispc saslauthd[2115262]: pam_mysql - SELECT returned no result. Dec 19 19:36:37 ispc saslauthd[2115262]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:36:37 ispc saslauthd[2115262]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:37:01 ispc CRON[2115266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:37:02 ispc CRON[2115266]: pam_unix(cron:session): session closed for user root Dec 19 19:38:01 ispc CRON[2115285]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:38:02 ispc CRON[2115285]: pam_unix(cron:session): session closed for user root Dec 19 19:38:32 ispc saslauthd[2115301]: pam_mysql - SELECT returned no result. Dec 19 19:38:32 ispc saslauthd[2115301]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:38:32 ispc saslauthd[2115301]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:39:01 ispc CRON[2115303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:39:01 ispc CRON[2115304]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:39:01 ispc CRON[2115303]: pam_unix(cron:session): session closed for user root Dec 19 19:39:01 ispc CRON[2115304]: pam_unix(cron:session): session closed for user root Dec 19 19:40:01 ispc CRON[2115335]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:40:01 ispc CRON[2115336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:40:01 ispc CRON[2115333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:40:01 ispc CRON[2115337]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:40:01 ispc CRON[2115334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:40:01 ispc CRON[2115334]: pam_unix(cron:session): session closed for user root Dec 19 19:40:01 ispc CRON[2115335]: pam_unix(cron:session): session closed for user www-data Dec 19 19:40:01 ispc CRON[2115337]: pam_unix(cron:session): session closed for user getmail Dec 19 19:40:02 ispc CRON[2115333]: pam_unix(cron:session): session closed for user root Dec 19 19:40:38 ispc CRON[2115336]: pam_unix(cron:session): session closed for user root Dec 19 19:41:01 ispc CRON[2115448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:41:18 ispc saslauthd[2115466]: pam_mysql - SELECT returned no result. Dec 19 19:41:18 ispc saslauthd[2115466]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:41:18 ispc saslauthd[2115466]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:42:01 ispc CRON[2115485]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:42:02 ispc CRON[2115485]: pam_unix(cron:session): session closed for user root Dec 19 19:43:01 ispc CRON[2115532]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:43:01 ispc CRON[2115532]: pam_unix(cron:session): session closed for user root Dec 19 19:43:08 ispc postfix/smtpd[2115548]: sql auxprop plugin using mysql engine Dec 19 19:43:09 ispc saslauthd[2115550]: pam_mysql - SELECT returned no result. Dec 19 19:43:09 ispc saslauthd[2115550]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:43:09 ispc saslauthd[2115550]: do_auth : auth failure: [user=bubba] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:44:01 ispc CRON[2115575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:44:02 ispc CRON[2115575]: pam_unix(cron:session): session closed for user root Dec 19 19:44:09 ispc saslauthd[2115590]: pam_mysql - SELECT returned no result. Dec 19 19:44:09 ispc saslauthd[2115590]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:44:09 ispc saslauthd[2115590]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:45:01 ispc CRON[2115620]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:45:01 ispc CRON[2115617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:45:01 ispc CRON[2115618]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:45:01 ispc CRON[2115619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:45:01 ispc CRON[2115618]: pam_unix(cron:session): session closed for user root Dec 19 19:45:01 ispc CRON[2115620]: pam_unix(cron:session): session closed for user getmail Dec 19 19:45:01 ispc CRON[2115619]: pam_unix(cron:session): session closed for user root Dec 19 19:45:02 ispc CRON[2115617]: pam_unix(cron:session): session closed for user root Dec 19 19:46:01 ispc CRON[2115726]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:46:01 ispc CRON[2115726]: pam_unix(cron:session): session closed for user root Dec 19 19:47:01 ispc CRON[2115764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:47:02 ispc CRON[2115764]: pam_unix(cron:session): session closed for user root Dec 19 19:48:01 ispc CRON[2115808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:48:02 ispc CRON[2115808]: pam_unix(cron:session): session closed for user root Dec 19 19:48:46 ispc sshd[2115845]: Invalid user ziplines from 5.129.195.224 Dec 19 19:48:47 ispc sshd[2115847]: Invalid user blceu from 185.208.181.153 Dec 19 19:49:01 ispc CRON[2115858]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:49:01 ispc CRON[2115858]: pam_unix(cron:session): session closed for user root Dec 19 19:50:01 ispc CRON[2115892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:50:01 ispc CRON[2115893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:50:01 ispc CRON[2115894]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 19:50:01 ispc CRON[2115895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:50:01 ispc CRON[2115893]: pam_unix(cron:session): session closed for user root Dec 19 19:50:01 ispc CRON[2115896]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:50:01 ispc CRON[2115894]: pam_unix(cron:session): session closed for user www-data Dec 19 19:50:01 ispc CRON[2115896]: pam_unix(cron:session): session closed for user getmail Dec 19 19:50:02 ispc CRON[2115895]: pam_unix(cron:session): session closed for user root Dec 19 19:50:03 ispc CRON[2115892]: pam_unix(cron:session): session closed for user root Dec 19 19:51:01 ispc CRON[2116000]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:51:02 ispc CRON[2116000]: pam_unix(cron:session): session closed for user root Dec 19 19:51:21 ispc postfix/smtpd[2116021]: sql auxprop plugin using mysql engine Dec 19 19:51:22 ispc saslauthd[2116024]: pam_mysql - SELECT returned no result. Dec 19 19:51:22 ispc saslauthd[2116024]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:51:22 ispc saslauthd[2116024]: do_auth : auth failure: [user=backup@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 19:51:24 ispc sshd[2116025]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 19:51:35 ispc saslauthd[2116031]: pam_mysql - SELECT returned no result. Dec 19 19:51:35 ispc saslauthd[2116031]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:51:35 ispc saslauthd[2116031]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:52:01 ispc CRON[2116044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:52:01 ispc CRON[2116044]: pam_unix(cron:session): session closed for user root Dec 19 19:52:17 ispc sshd[2116060]: Invalid user blceu from 43.135.148.156 Dec 19 19:53:01 ispc CRON[2116094]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:53:02 ispc CRON[2116094]: pam_unix(cron:session): session closed for user root Dec 19 19:53:36 ispc postfix/smtpd[2116120]: sql auxprop plugin using mysql engine Dec 19 19:53:36 ispc saslauthd[2116122]: pam_mysql - SELECT returned no result. Dec 19 19:53:36 ispc saslauthd[2116122]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:53:36 ispc saslauthd[2116122]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:53:42 ispc sshd[2116127]: Invalid user martof from 45.84.199.14 Dec 19 19:53:45 ispc sshd[2116129]: Did not receive identification string from 198.235.24.179 Dec 19 19:54:01 ispc CRON[2116135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:54:01 ispc CRON[2116135]: pam_unix(cron:session): session closed for user root Dec 19 19:55:01 ispc CRON[2116176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:55:01 ispc CRON[2116179]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 19:55:01 ispc CRON[2116178]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:55:01 ispc CRON[2116177]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:55:01 ispc CRON[2116177]: pam_unix(cron:session): session closed for user root Dec 19 19:55:01 ispc CRON[2116179]: pam_unix(cron:session): session closed for user getmail Dec 19 19:55:01 ispc CRON[2116178]: pam_unix(cron:session): session closed for user root Dec 19 19:55:02 ispc CRON[2116176]: pam_unix(cron:session): session closed for user root Dec 19 19:56:01 ispc CRON[2116290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:56:01 ispc CRON[2116290]: pam_unix(cron:session): session closed for user root Dec 19 19:56:20 ispc sshd[2116311]: Invalid user zamestnanievzdravotnictve from 175.125.95.234 Dec 19 19:57:01 ispc CRON[2116336]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:57:02 ispc CRON[2116336]: pam_unix(cron:session): session closed for user root Dec 19 19:57:58 ispc postfix/smtpd[2116375]: sql auxprop plugin using mysql engine Dec 19 19:57:59 ispc saslauthd[2116378]: pam_mysql - SELECT returned no result. Dec 19 19:57:59 ispc saslauthd[2116378]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:57:59 ispc saslauthd[2116378]: do_auth : auth failure: [user=builtin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 19:58:01 ispc CRON[2116379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:58:01 ispc CRON[2116379]: pam_unix(cron:session): session closed for user root Dec 19 19:59:01 ispc CRON[2116421]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 19:59:02 ispc CRON[2116421]: pam_unix(cron:session): session closed for user root Dec 19 19:59:18 ispc saslauthd[2116443]: pam_mysql - SELECT returned no result. Dec 19 19:59:18 ispc saslauthd[2116443]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 19:59:18 ispc saslauthd[2116443]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:00:01 ispc CRON[2116469]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:00:01 ispc CRON[2116463]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:00:01 ispc CRON[2116464]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:00:01 ispc CRON[2116466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:00:01 ispc CRON[2116467]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:00:01 ispc CRON[2116468]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:00:01 ispc CRON[2116465]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:00:02 ispc CRON[2116464]: pam_unix(cron:session): session closed for user root Dec 19 20:00:02 ispc CRON[2116465]: pam_unix(cron:session): session closed for user www-data Dec 19 20:00:02 ispc CRON[2116467]: pam_unix(cron:session): session closed for user root Dec 19 20:00:02 ispc CRON[2116469]: pam_unix(cron:session): session closed for user getmail Dec 19 20:00:02 ispc CRON[2116468]: pam_unix(cron:session): session closed for user root Dec 19 20:00:02 ispc CRON[2116466]: pam_unix(cron:session): session closed for user root Dec 19 20:00:02 ispc CRON[2116463]: pam_unix(cron:session): session closed for user root Dec 19 20:01:01 ispc CRON[2116651]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:01:02 ispc CRON[2116651]: pam_unix(cron:session): session closed for user root Dec 19 20:01:29 ispc postfix/smtpd[2116677]: sql auxprop plugin using mysql engine Dec 19 20:01:29 ispc CRON[2115448]: pam_unix(cron:session): session closed for user root Dec 19 20:02:01 ispc CRON[2116690]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:02:01 ispc CRON[2116689]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 20:02:02 ispc CRON[2116690]: pam_unix(cron:session): session closed for user root Dec 19 20:03:01 ispc CRON[2117601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:03:02 ispc CRON[2117601]: pam_unix(cron:session): session closed for user root Dec 19 20:03:10 ispc CRON[2116689]: pam_unix(cron:session): session closed for user logcheck Dec 19 20:03:15 ispc postfix/smtpd[2117764]: sql auxprop plugin using mysql engine Dec 19 20:03:34 ispc sshd[2117781]: Invalid user from 65.49.1.158 Dec 19 20:04:01 ispc CRON[2117797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:04:02 ispc CRON[2117797]: pam_unix(cron:session): session closed for user root Dec 19 20:05:01 ispc CRON[2117850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:05:01 ispc CRON[2117852]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:05:01 ispc CRON[2117853]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:05:01 ispc CRON[2117851]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:05:02 ispc CRON[2117851]: pam_unix(cron:session): session closed for user root Dec 19 20:05:02 ispc CRON[2117853]: pam_unix(cron:session): session closed for user getmail Dec 19 20:05:02 ispc CRON[2117850]: pam_unix(cron:session): session closed for user root Dec 19 20:05:40 ispc CRON[2117852]: pam_unix(cron:session): session closed for user root Dec 19 20:05:57 ispc sshd[2118036]: Invalid user Antminer from 5.187.35.21 Dec 19 20:06:00 ispc sshd[2118040]: Invalid user Antminer from 5.187.35.21 Dec 19 20:06:01 ispc CRON[2118055]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:06:33 ispc sshd[2118089]: Did not receive identification string from 192.227.134.84 Dec 19 20:06:42 ispc saslauthd[2118104]: pam_mysql - SELECT returned no result. Dec 19 20:06:42 ispc saslauthd[2118104]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:06:42 ispc saslauthd[2118104]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:07:01 ispc CRON[2118134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:07:03 ispc CRON[2118134]: pam_unix(cron:session): session closed for user root Dec 19 20:08:01 ispc CRON[2118211]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:08:01 ispc CRON[2118211]: pam_unix(cron:session): session closed for user root Dec 19 20:08:45 ispc postfix/smtpd[2118256]: sql auxprop plugin using mysql engine Dec 19 20:08:45 ispc saslauthd[2118258]: pam_mysql - SELECT returned no result. Dec 19 20:08:45 ispc saslauthd[2118258]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:08:45 ispc saslauthd[2118258]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:09:01 ispc CRON[2118282]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:09:01 ispc CRON[2118281]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:09:01 ispc CRON[2118281]: pam_unix(cron:session): session closed for user root Dec 19 20:09:02 ispc CRON[2118282]: pam_unix(cron:session): session closed for user root Dec 19 20:10:01 ispc CRON[2118378]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:10:01 ispc CRON[2118375]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:10:01 ispc CRON[2118376]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:10:01 ispc CRON[2118377]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:10:01 ispc CRON[2118379]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:10:01 ispc CRON[2118376]: pam_unix(cron:session): session closed for user root Dec 19 20:10:01 ispc CRON[2118377]: pam_unix(cron:session): session closed for user www-data Dec 19 20:10:01 ispc CRON[2118379]: pam_unix(cron:session): session closed for user getmail Dec 19 20:10:01 ispc CRON[2118375]: pam_unix(cron:session): session closed for user root Dec 19 20:10:01 ispc CRON[2118378]: pam_unix(cron:session): session closed for user root Dec 19 20:11:01 ispc CRON[2118518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:11:02 ispc CRON[2118518]: pam_unix(cron:session): session closed for user root Dec 19 20:12:01 ispc CRON[2118588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:12:02 ispc CRON[2118588]: pam_unix(cron:session): session closed for user root Dec 19 20:12:46 ispc postfix/smtpd[2118656]: sql auxprop plugin using mysql engine Dec 19 20:12:47 ispc saslauthd[2118659]: pam_mysql - SELECT returned no result. Dec 19 20:12:47 ispc saslauthd[2118659]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:12:47 ispc saslauthd[2118659]: do_auth : auth failure: [user=cablecom] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:13:01 ispc CRON[2118674]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:13:02 ispc CRON[2118674]: pam_unix(cron:session): session closed for user root Dec 19 20:14:01 ispc CRON[2118749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:14:01 ispc CRON[2118749]: pam_unix(cron:session): session closed for user root Dec 19 20:14:35 ispc postfix/smtpd[2118790]: sql auxprop plugin using mysql engine Dec 19 20:14:35 ispc saslauthd[2118792]: pam_mysql - SELECT returned no result. Dec 19 20:14:35 ispc saslauthd[2118792]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:14:35 ispc saslauthd[2118792]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:15:01 ispc CRON[2118804]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:15:01 ispc CRON[2118803]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:15:01 ispc CRON[2118801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:15:01 ispc CRON[2118802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:15:01 ispc CRON[2118802]: pam_unix(cron:session): session closed for user root Dec 19 20:15:01 ispc CRON[2118804]: pam_unix(cron:session): session closed for user getmail Dec 19 20:15:02 ispc CRON[2118803]: pam_unix(cron:session): session closed for user root Dec 19 20:15:02 ispc CRON[2118801]: pam_unix(cron:session): session closed for user root Dec 19 20:15:32 ispc postfix/smtpd[2118890]: sql auxprop plugin using mysql engine Dec 19 20:15:41 ispc saslauthd[2118896]: pam_mysql - SELECT returned no result. Dec 19 20:15:41 ispc saslauthd[2118896]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:15:41 ispc saslauthd[2118896]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 20:15:53 ispc saslauthd[2118903]: pam_mysql - SELECT returned no result. Dec 19 20:15:53 ispc saslauthd[2118903]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:15:53 ispc saslauthd[2118903]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:16:01 ispc CRON[2118908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:16:02 ispc CRON[2118908]: pam_unix(cron:session): session closed for user root Dec 19 20:17:01 ispc CRON[2118947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:17:01 ispc CRON[2118947]: pam_unix(cron:session): session closed for user root Dec 19 20:18:01 ispc CRON[2118988]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:18:01 ispc CRON[2118988]: pam_unix(cron:session): session closed for user root Dec 19 20:19:01 ispc CRON[2119032]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:19:03 ispc CRON[2119032]: pam_unix(cron:session): session closed for user root Dec 19 20:20:01 ispc CRON[2119069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:20:01 ispc CRON[2119070]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:20:01 ispc CRON[2119071]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:20:01 ispc CRON[2119073]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:20:01 ispc CRON[2119072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:20:01 ispc CRON[2119071]: pam_unix(cron:session): session closed for user www-data Dec 19 20:20:01 ispc CRON[2119070]: pam_unix(cron:session): session closed for user root Dec 19 20:20:01 ispc CRON[2119073]: pam_unix(cron:session): session closed for user getmail Dec 19 20:20:01 ispc CRON[2119072]: pam_unix(cron:session): session closed for user root Dec 19 20:20:02 ispc CRON[2119069]: pam_unix(cron:session): session closed for user root Dec 19 20:21:01 ispc CRON[2119173]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:21:01 ispc CRON[2119174]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:21:01 ispc CRON[2119173]: pam_unix(cron:session): session closed for user root Dec 19 20:21:01 ispc CRON[2119174]: pam_unix(cron:session): session closed for user root Dec 19 20:22:01 ispc CRON[2119215]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:22:02 ispc CRON[2119215]: pam_unix(cron:session): session closed for user root Dec 19 20:22:21 ispc postfix/smtpd[2119235]: sql auxprop plugin using mysql engine Dec 19 20:22:21 ispc saslauthd[2119238]: pam_mysql - SELECT returned no result. Dec 19 20:22:21 ispc saslauthd[2119238]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:22:21 ispc saslauthd[2119238]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:23:01 ispc CRON[2119265]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:23:02 ispc CRON[2119265]: pam_unix(cron:session): session closed for user root Dec 19 20:23:37 ispc sshd[2119292]: Invalid user ziplines from 51.91.247.10 Dec 19 20:23:53 ispc saslauthd[2119312]: pam_mysql - SELECT returned no result. Dec 19 20:23:53 ispc saslauthd[2119312]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:23:53 ispc saslauthd[2119312]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:24:01 ispc CRON[2119323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:24:02 ispc CRON[2119323]: pam_unix(cron:session): session closed for user root Dec 19 20:25:01 ispc CRON[2119364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:25:01 ispc CRON[2119367]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:25:01 ispc CRON[2119365]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:25:01 ispc CRON[2119366]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:25:01 ispc CRON[2119365]: pam_unix(cron:session): session closed for user root Dec 19 20:25:01 ispc CRON[2119367]: pam_unix(cron:session): session closed for user getmail Dec 19 20:25:02 ispc CRON[2119366]: pam_unix(cron:session): session closed for user root Dec 19 20:25:02 ispc CRON[2119364]: pam_unix(cron:session): session closed for user root Dec 19 20:26:01 ispc CRON[2119469]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:26:01 ispc CRON[2119469]: pam_unix(cron:session): session closed for user root Dec 19 20:26:21 ispc sshd[2119489]: Invalid user blceu from 103.100.209.172 Dec 19 20:26:24 ispc CRON[2118055]: pam_unix(cron:session): session closed for user root Dec 19 20:26:24 ispc postfix/smtpd[2119499]: sql auxprop plugin using mysql engine Dec 19 20:27:01 ispc CRON[2119504]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:27:02 ispc CRON[2119504]: pam_unix(cron:session): session closed for user root Dec 19 20:27:33 ispc saslauthd[2119520]: pam_mysql - SELECT returned no result. Dec 19 20:27:33 ispc saslauthd[2119520]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:27:33 ispc saslauthd[2119520]: do_auth : auth failure: [user=ccrusr] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:28:01 ispc CRON[2119528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:28:01 ispc CRON[2119528]: pam_unix(cron:session): session closed for user root Dec 19 20:29:01 ispc CRON[2119547]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:29:02 ispc CRON[2119547]: pam_unix(cron:session): session closed for user root Dec 19 20:30:01 ispc CRON[2119563]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:30:01 ispc CRON[2119561]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:30:01 ispc CRON[2119562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:30:01 ispc CRON[2119564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:30:01 ispc CRON[2119565]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:30:01 ispc CRON[2119562]: pam_unix(cron:session): session closed for user root Dec 19 20:30:01 ispc CRON[2119563]: pam_unix(cron:session): session closed for user www-data Dec 19 20:30:01 ispc CRON[2119565]: pam_unix(cron:session): session closed for user getmail Dec 19 20:30:02 ispc CRON[2119561]: pam_unix(cron:session): session closed for user root Dec 19 20:30:03 ispc saslauthd[2119679]: pam_mysql - SELECT returned no result. Dec 19 20:30:03 ispc saslauthd[2119679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:30:03 ispc saslauthd[2119679]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:30:39 ispc CRON[2119564]: pam_unix(cron:session): session closed for user root Dec 19 20:31:01 ispc CRON[2119754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:32:01 ispc CRON[2119788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:32:02 ispc CRON[2119788]: pam_unix(cron:session): session closed for user root Dec 19 20:33:01 ispc CRON[2119838]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:33:01 ispc CRON[2119838]: pam_unix(cron:session): session closed for user root Dec 19 20:34:01 ispc CRON[2119875]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:34:02 ispc CRON[2119875]: pam_unix(cron:session): session closed for user root Dec 19 20:34:44 ispc sshd[2119908]: Did not receive identification string from 45.140.17.97 Dec 19 20:34:44 ispc postfix/smtpd[2119909]: sql auxprop plugin using mysql engine Dec 19 20:35:01 ispc CRON[2119925]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:35:01 ispc CRON[2119924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:35:01 ispc CRON[2119922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:35:01 ispc CRON[2119923]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:35:01 ispc CRON[2119923]: pam_unix(cron:session): session closed for user root Dec 19 20:35:01 ispc CRON[2119925]: pam_unix(cron:session): session closed for user getmail Dec 19 20:35:01 ispc CRON[2119924]: pam_unix(cron:session): session closed for user root Dec 19 20:35:01 ispc CRON[2119922]: pam_unix(cron:session): session closed for user root Dec 19 20:36:01 ispc CRON[2120022]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:36:01 ispc CRON[2120022]: pam_unix(cron:session): session closed for user root Dec 19 20:37:01 ispc CRON[2120060]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:37:02 ispc CRON[2120060]: pam_unix(cron:session): session closed for user root Dec 19 20:37:21 ispc saslauthd[2120080]: pam_mysql - SELECT returned no result. Dec 19 20:37:21 ispc saslauthd[2120080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:37:21 ispc saslauthd[2120080]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:38:01 ispc CRON[2120101]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:38:02 ispc CRON[2120101]: pam_unix(cron:session): session closed for user root Dec 19 20:38:26 ispc sshd[2120127]: Did not receive identification string from 92.118.39.95 Dec 19 20:39:01 ispc CRON[2120142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:39:01 ispc CRON[2120143]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:39:01 ispc CRON[2120142]: pam_unix(cron:session): session closed for user root Dec 19 20:39:01 ispc CRON[2120143]: pam_unix(cron:session): session closed for user root Dec 19 20:39:08 ispc postfix/smtpd[2120173]: sql auxprop plugin using mysql engine Dec 19 20:39:08 ispc saslauthd[2120175]: pam_mysql - SELECT returned no result. Dec 19 20:39:08 ispc saslauthd[2120175]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:39:08 ispc saslauthd[2120175]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:40:01 ispc CRON[2120196]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:40:01 ispc CRON[2120197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:40:01 ispc CRON[2120199]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:40:01 ispc CRON[2120198]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:40:01 ispc CRON[2120200]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:40:01 ispc CRON[2120198]: pam_unix(cron:session): session closed for user www-data Dec 19 20:40:01 ispc CRON[2120197]: pam_unix(cron:session): session closed for user root Dec 19 20:40:01 ispc CRON[2120200]: pam_unix(cron:session): session closed for user getmail Dec 19 20:40:02 ispc CRON[2120199]: pam_unix(cron:session): session closed for user root Dec 19 20:40:02 ispc CRON[2120196]: pam_unix(cron:session): session closed for user root Dec 19 20:40:25 ispc sshd[2120284]: Invalid user klape from 103.164.20.29 Dec 19 20:40:28 ispc saslauthd[2120292]: pam_mysql - SELECT returned no result. Dec 19 20:40:28 ispc saslauthd[2120292]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:40:28 ispc saslauthd[2120292]: do_auth : auth failure: [user=testuser@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 20:40:28 ispc sshd[2120290]: Invalid user ubuntu from 103.164.20.29 Dec 19 20:41:01 ispc CRON[2120308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:41:01 ispc CRON[2120308]: pam_unix(cron:session): session closed for user root Dec 19 20:42:01 ispc CRON[2120346]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:42:02 ispc CRON[2120346]: pam_unix(cron:session): session closed for user root Dec 19 20:42:20 ispc postfix/smtpd[2120366]: sql auxprop plugin using mysql engine Dec 19 20:42:21 ispc sshd[2120368]: Did not receive identification string from 113.249.103.134 Dec 19 20:42:22 ispc saslauthd[2120370]: pam_mysql - SELECT returned no result. Dec 19 20:42:22 ispc saslauthd[2120370]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:42:22 ispc saslauthd[2120370]: do_auth : auth failure: [user=ceconsl] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:42:39 ispc saslauthd[2120379]: pam_mysql - SELECT returned no result. Dec 19 20:42:39 ispc saslauthd[2120379]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:42:39 ispc saslauthd[2120379]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:42:42 ispc saslauthd[2120380]: pam_mysql - SELECT returned no result. Dec 19 20:42:42 ispc saslauthd[2120380]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:42:42 ispc saslauthd[2120380]: do_auth : auth failure: [user=postmaster@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 19 20:43:01 ispc CRON[2120397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:43:02 ispc CRON[2120397]: pam_unix(cron:session): session closed for user root Dec 19 20:43:52 ispc sshd[2120432]: Invalid user solana from 92.118.39.95 Dec 19 20:44:01 ispc CRON[2120438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:44:02 ispc CRON[2120438]: pam_unix(cron:session): session closed for user root Dec 19 20:44:42 ispc sshd[2120469]: Invalid user ftp from 203.146.21.153 Dec 19 20:44:58 ispc postfix/smtpd[2120475]: sql auxprop plugin using mysql engine Dec 19 20:44:58 ispc saslauthd[2120477]: pam_mysql - SELECT returned no result. Dec 19 20:44:58 ispc saslauthd[2120477]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:44:58 ispc saslauthd[2120477]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:45:01 ispc CRON[2120482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:45:01 ispc CRON[2120483]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:45:01 ispc CRON[2120484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:45:01 ispc CRON[2120485]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:45:01 ispc CRON[2120483]: pam_unix(cron:session): session closed for user root Dec 19 20:45:01 ispc CRON[2120485]: pam_unix(cron:session): session closed for user getmail Dec 19 20:45:01 ispc CRON[2120484]: pam_unix(cron:session): session closed for user root Dec 19 20:45:02 ispc CRON[2120482]: pam_unix(cron:session): session closed for user root Dec 19 20:46:01 ispc CRON[2120588]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:46:02 ispc CRON[2120588]: pam_unix(cron:session): session closed for user root Dec 19 20:47:01 ispc CRON[2120626]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:47:02 ispc CRON[2120626]: pam_unix(cron:session): session closed for user root Dec 19 20:47:09 ispc sshd[2120641]: Invalid user ubuntu from 92.118.39.95 Dec 19 20:48:01 ispc CRON[2120675]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:48:02 ispc CRON[2120675]: pam_unix(cron:session): session closed for user root Dec 19 20:49:01 ispc CRON[2120718]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:49:02 ispc CRON[2120718]: pam_unix(cron:session): session closed for user root Dec 19 20:50:01 ispc CRON[2120756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:50:01 ispc CRON[2120757]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:50:01 ispc CRON[2120758]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 20:50:01 ispc CRON[2120759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:50:01 ispc CRON[2120760]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:50:01 ispc CRON[2120757]: pam_unix(cron:session): session closed for user root Dec 19 20:50:01 ispc CRON[2120758]: pam_unix(cron:session): session closed for user www-data Dec 19 20:50:01 ispc CRON[2120760]: pam_unix(cron:session): session closed for user getmail Dec 19 20:50:01 ispc CRON[2120759]: pam_unix(cron:session): session closed for user root Dec 19 20:50:02 ispc CRON[2120756]: pam_unix(cron:session): session closed for user root Dec 19 20:50:24 ispc sshd[2120844]: Invalid user solv from 92.118.39.95 Dec 19 20:50:37 ispc sshd[2120850]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 20:50:37 ispc sshd[2120850]: Invalid user blceu from 193.110.157.47 Dec 19 20:51:01 ispc CRON[2120867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:51:02 ispc CRON[2120867]: pam_unix(cron:session): session closed for user root Dec 19 20:51:31 ispc CRON[2119754]: pam_unix(cron:session): session closed for user root Dec 19 20:51:32 ispc postfix/smtpd[2120888]: sql auxprop plugin using mysql engine Dec 19 20:52:01 ispc CRON[2120895]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:52:03 ispc CRON[2120895]: pam_unix(cron:session): session closed for user root Dec 19 20:52:05 ispc sshd[2120903]: Invalid user martof from 175.125.92.77 Dec 19 20:52:52 ispc saslauthd[2120924]: pam_mysql - SELECT returned no result. Dec 19 20:52:52 ispc saslauthd[2120924]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:52:52 ispc saslauthd[2120924]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:53:01 ispc CRON[2120926]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:53:02 ispc CRON[2120926]: pam_unix(cron:session): session closed for user root Dec 19 20:53:06 ispc sshd[2120937]: Did not receive identification string from 192.227.134.84 Dec 19 20:53:38 ispc sshd[2120938]: Invalid user sol from 92.118.39.95 Dec 19 20:54:01 ispc CRON[2120940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:54:01 ispc CRON[2120940]: pam_unix(cron:session): session closed for user root Dec 19 20:54:23 ispc saslauthd[2120955]: pam_mysql - SELECT returned no result. Dec 19 20:54:23 ispc saslauthd[2120955]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:54:23 ispc saslauthd[2120955]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:55:01 ispc CRON[2120958]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:55:01 ispc CRON[2120959]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:55:01 ispc CRON[2120960]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:55:01 ispc CRON[2120961]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 20:55:01 ispc CRON[2120959]: pam_unix(cron:session): session closed for user root Dec 19 20:55:02 ispc CRON[2120961]: pam_unix(cron:session): session closed for user getmail Dec 19 20:55:02 ispc CRON[2120958]: pam_unix(cron:session): session closed for user root Dec 19 20:55:41 ispc CRON[2120960]: pam_unix(cron:session): session closed for user root Dec 19 20:55:46 ispc sshd[2121069]: Invalid user ftp from 203.146.21.153 Dec 19 20:56:01 ispc CRON[2121072]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:56:22 ispc saslauthd[2121088]: pam_mysql - SELECT returned no result. Dec 19 20:56:22 ispc saslauthd[2121088]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:56:22 ispc saslauthd[2121088]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:56:41 ispc sshd[2121099]: Invalid user sol from 92.118.39.95 Dec 19 20:57:01 ispc CRON[2121109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:57:02 ispc CRON[2121109]: pam_unix(cron:session): session closed for user root Dec 19 20:57:10 ispc saslauthd[2121125]: pam_mysql - SELECT returned no result. Dec 19 20:57:10 ispc saslauthd[2121125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 20:57:10 ispc saslauthd[2121125]: do_auth : auth failure: [user=cgadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 20:58:01 ispc CRON[2121156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:58:02 ispc CRON[2121156]: pam_unix(cron:session): session closed for user root Dec 19 20:59:01 ispc CRON[2121194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 20:59:02 ispc CRON[2121194]: pam_unix(cron:session): session closed for user root Dec 19 20:59:49 ispc sshd[2121228]: Invalid user sol from 92.118.39.95 Dec 19 21:00:01 ispc CRON[2121241]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:00:01 ispc CRON[2121242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:00:01 ispc CRON[2121243]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:00:01 ispc CRON[2121244]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:00:01 ispc CRON[2121245]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:00:01 ispc CRON[2121246]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:00:01 ispc CRON[2121242]: pam_unix(cron:session): session closed for user root Dec 19 21:00:01 ispc CRON[2121243]: pam_unix(cron:session): session closed for user www-data Dec 19 21:00:01 ispc CRON[2121246]: pam_unix(cron:session): session closed for user getmail Dec 19 21:00:02 ispc CRON[2121245]: pam_unix(cron:session): session closed for user root Dec 19 21:00:02 ispc CRON[2121244]: pam_unix(cron:session): session closed for user root Dec 19 21:00:02 ispc CRON[2121241]: pam_unix(cron:session): session closed for user root Dec 19 21:00:07 ispc postfix/smtpd[2121403]: sql auxprop plugin using mysql engine Dec 19 21:00:08 ispc saslauthd[2121405]: pam_mysql - SELECT returned no result. Dec 19 21:00:08 ispc saslauthd[2121405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:00:08 ispc saslauthd[2121405]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:01:01 ispc CRON[2121427]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:01:03 ispc CRON[2121427]: pam_unix(cron:session): session closed for user root Dec 19 21:02:01 ispc CRON[2121465]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 21:02:01 ispc CRON[2121466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:02:01 ispc CRON[2121466]: pam_unix(cron:session): session closed for user root Dec 19 21:03:01 ispc CRON[2122415]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:03:02 ispc CRON[2122415]: pam_unix(cron:session): session closed for user root Dec 19 21:03:12 ispc CRON[2121465]: pam_unix(cron:session): session closed for user logcheck Dec 19 21:03:23 ispc postfix/smtpd[2122549]: sql auxprop plugin using mysql engine Dec 19 21:04:01 ispc CRON[2122573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:04:02 ispc CRON[2122573]: pam_unix(cron:session): session closed for user root Dec 19 21:04:37 ispc sshd[2122596]: Invalid user ziplines from 45.119.213.109 Dec 19 21:05:01 ispc CRON[2122612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:05:01 ispc CRON[2122613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:05:01 ispc CRON[2122614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:05:01 ispc CRON[2122615]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:05:01 ispc CRON[2122613]: pam_unix(cron:session): session closed for user root Dec 19 21:05:01 ispc CRON[2122615]: pam_unix(cron:session): session closed for user getmail Dec 19 21:05:02 ispc CRON[2122612]: pam_unix(cron:session): session closed for user root Dec 19 21:05:02 ispc CRON[2122614]: pam_unix(cron:session): session closed for user root Dec 19 21:06:01 ispc CRON[2122714]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:06:02 ispc CRON[2122714]: pam_unix(cron:session): session closed for user root Dec 19 21:06:07 ispc postfix/smtpd[2122726]: sql auxprop plugin using mysql engine Dec 19 21:07:01 ispc CRON[2122754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:07:01 ispc CRON[2122754]: pam_unix(cron:session): session closed for user root Dec 19 21:07:14 ispc sshd[2122774]: Invalid user ftp from 203.146.21.153 Dec 19 21:07:41 ispc saslauthd[2122785]: pam_mysql - SELECT returned no result. Dec 19 21:07:41 ispc saslauthd[2122785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:07:41 ispc saslauthd[2122785]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:07:43 ispc sshd[2122790]: Invalid user martof from 45.119.213.109 Dec 19 21:07:46 ispc sshd[2122792]: Invalid user martof from 185.181.182.252 Dec 19 21:08:01 ispc CRON[2122807]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:08:02 ispc CRON[2122807]: pam_unix(cron:session): session closed for user root Dec 19 21:09:01 ispc CRON[2122846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:09:01 ispc CRON[2122847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:09:01 ispc CRON[2122846]: pam_unix(cron:session): session closed for user root Dec 19 21:09:01 ispc CRON[2122847]: pam_unix(cron:session): session closed for user root Dec 19 21:09:34 ispc postfix/smtpd[2122887]: sql auxprop plugin using mysql engine Dec 19 21:09:34 ispc saslauthd[2122889]: pam_mysql - SELECT returned no result. Dec 19 21:09:34 ispc saslauthd[2122889]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:09:34 ispc saslauthd[2122889]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:10:01 ispc CRON[2122900]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:10:01 ispc CRON[2122901]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:10:01 ispc CRON[2122902]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:10:01 ispc CRON[2122903]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:10:01 ispc CRON[2122904]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:10:01 ispc CRON[2122901]: pam_unix(cron:session): session closed for user root Dec 19 21:10:01 ispc CRON[2122902]: pam_unix(cron:session): session closed for user www-data Dec 19 21:10:01 ispc CRON[2122904]: pam_unix(cron:session): session closed for user getmail Dec 19 21:10:02 ispc CRON[2122903]: pam_unix(cron:session): session closed for user root Dec 19 21:10:03 ispc CRON[2122900]: pam_unix(cron:session): session closed for user root Dec 19 21:11:01 ispc CRON[2123005]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:11:01 ispc CRON[2123005]: pam_unix(cron:session): session closed for user root Dec 19 21:11:42 ispc postfix/smtpd[2123037]: sql auxprop plugin using mysql engine Dec 19 21:11:43 ispc saslauthd[2123039]: pam_mysql - SELECT returned no result. Dec 19 21:11:43 ispc saslauthd[2123039]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:11:43 ispc saslauthd[2123039]: do_auth : auth failure: [user=checkfs] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:12:01 ispc CRON[2123050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:12:02 ispc CRON[2123050]: pam_unix(cron:session): session closed for user root Dec 19 21:13:01 ispc CRON[2123100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:13:01 ispc CRON[2123100]: pam_unix(cron:session): session closed for user root Dec 19 21:14:01 ispc CRON[2123138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:14:01 ispc CRON[2123138]: pam_unix(cron:session): session closed for user root Dec 19 21:15:00 ispc postfix/smtpd[2123176]: sql auxprop plugin using mysql engine Dec 19 21:15:00 ispc saslauthd[2123178]: pam_mysql - SELECT returned no result. Dec 19 21:15:00 ispc saslauthd[2123178]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:15:00 ispc saslauthd[2123178]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:15:01 ispc CRON[2123179]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:15:01 ispc CRON[2123180]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:15:01 ispc CRON[2123181]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:15:01 ispc CRON[2123182]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:15:01 ispc CRON[2123180]: pam_unix(cron:session): session closed for user root Dec 19 21:15:01 ispc CRON[2123182]: pam_unix(cron:session): session closed for user getmail Dec 19 21:15:02 ispc CRON[2123181]: pam_unix(cron:session): session closed for user root Dec 19 21:15:02 ispc CRON[2123179]: pam_unix(cron:session): session closed for user root Dec 19 21:15:19 ispc sshd[2123263]: Invalid user blceu from 175.125.92.77 Dec 19 21:16:01 ispc CRON[2123286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:16:01 ispc CRON[2123286]: pam_unix(cron:session): session closed for user root Dec 19 21:16:10 ispc sshd[2123303]: Did not receive identification string from 74.242.218.17 Dec 19 21:16:10 ispc sshd[2123304]: Invalid user a from 74.242.218.17 Dec 19 21:16:16 ispc sshd[2123306]: Invalid user ziplines from 175.125.92.77 Dec 19 21:16:17 ispc CRON[2121072]: pam_unix(cron:session): session closed for user root Dec 19 21:17:01 ispc CRON[2123314]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:17:02 ispc CRON[2123314]: pam_unix(cron:session): session closed for user root Dec 19 21:17:54 ispc sshd[2123334]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:18:01 ispc CRON[2123337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:18:01 ispc CRON[2123336]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 19 21:18:01 ispc CRON[2123337]: pam_unix(cron:session): session closed for user root Dec 19 21:18:06 ispc CRON[2123336]: pam_unix(cron:session): session closed for user amavis Dec 19 21:18:07 ispc postfix/smtpd[2123362]: sql auxprop plugin using mysql engine Dec 19 21:18:57 ispc sshd[2123365]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:19:01 ispc CRON[2123368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:19:01 ispc CRON[2123368]: pam_unix(cron:session): session closed for user root Dec 19 21:19:43 ispc postfix/smtpd[2123382]: sql auxprop plugin using mysql engine Dec 19 21:19:46 ispc sshd[2123385]: Invalid user martof from 141.94.71.131 Dec 19 21:20:01 ispc CRON[2123390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:20:01 ispc CRON[2123392]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:20:01 ispc CRON[2123391]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:20:01 ispc CRON[2123393]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:20:01 ispc CRON[2123394]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:20:01 ispc CRON[2123391]: pam_unix(cron:session): session closed for user root Dec 19 21:20:01 ispc CRON[2123392]: pam_unix(cron:session): session closed for user www-data Dec 19 21:20:01 ispc CRON[2123394]: pam_unix(cron:session): session closed for user getmail Dec 19 21:20:02 ispc CRON[2123390]: pam_unix(cron:session): session closed for user root Dec 19 21:20:35 ispc CRON[2123393]: pam_unix(cron:session): session closed for user root Dec 19 21:21:01 ispc CRON[2123510]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:21:01 ispc CRON[2123511]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:21:01 ispc CRON[2123510]: pam_unix(cron:session): session closed for user root Dec 19 21:22:01 ispc CRON[2123554]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:22:02 ispc CRON[2123554]: pam_unix(cron:session): session closed for user root Dec 19 21:22:17 ispc sshd[2123576]: Did not receive identification string from 122.225.202.150 Dec 19 21:22:32 ispc postfix/smtpd[2123583]: sql auxprop plugin using mysql engine Dec 19 21:22:32 ispc saslauthd[2123585]: pam_mysql - SELECT returned no result. Dec 19 21:22:32 ispc saslauthd[2123585]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:22:32 ispc saslauthd[2123585]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:22:54 ispc sshd[2123609]: Invalid user martof from 5.129.195.224 Dec 19 21:23:01 ispc CRON[2123611]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:23:01 ispc CRON[2123611]: pam_unix(cron:session): session closed for user root Dec 19 21:24:01 ispc CRON[2123655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:24:02 ispc CRON[2123655]: pam_unix(cron:session): session closed for user root Dec 19 21:24:53 ispc postfix/smtpd[2123691]: sql auxprop plugin using mysql engine Dec 19 21:24:54 ispc saslauthd[2123697]: pam_mysql - SELECT returned no result. Dec 19 21:24:54 ispc saslauthd[2123697]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:24:54 ispc saslauthd[2123697]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:25:01 ispc CRON[2123702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:25:01 ispc CRON[2123700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:25:01 ispc CRON[2123701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:25:01 ispc CRON[2123703]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:25:01 ispc CRON[2123701]: pam_unix(cron:session): session closed for user root Dec 19 21:25:01 ispc CRON[2123703]: pam_unix(cron:session): session closed for user getmail Dec 19 21:25:01 ispc CRON[2123702]: pam_unix(cron:session): session closed for user root Dec 19 21:25:01 ispc CRON[2123700]: pam_unix(cron:session): session closed for user root Dec 19 21:25:05 ispc sshd[2123782]: Invalid user martof from 43.135.148.156 Dec 19 21:25:39 ispc saslauthd[2123799]: pam_mysql - SELECT returned no result. Dec 19 21:25:39 ispc saslauthd[2123799]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:25:39 ispc saslauthd[2123799]: do_auth : auth failure: [user=checkfsys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:26:01 ispc CRON[2123809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:26:02 ispc CRON[2123809]: pam_unix(cron:session): session closed for user root Dec 19 21:26:13 ispc sshd[2123824]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:26:31 ispc saslauthd[2123836]: pam_mysql - SELECT returned no result. Dec 19 21:26:31 ispc saslauthd[2123836]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:26:31 ispc saslauthd[2123836]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 21:27:01 ispc CRON[2123850]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:27:01 ispc CRON[2123850]: pam_unix(cron:session): session closed for user root Dec 19 21:28:01 ispc CRON[2123893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:28:01 ispc CRON[2123893]: pam_unix(cron:session): session closed for user root Dec 19 21:29:02 ispc CRON[2123934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:29:02 ispc CRON[2123934]: pam_unix(cron:session): session closed for user root Dec 19 21:30:01 ispc CRON[2123972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:30:01 ispc CRON[2123973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:30:01 ispc CRON[2123974]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:30:01 ispc CRON[2123975]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:30:01 ispc CRON[2123976]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:30:01 ispc CRON[2123973]: pam_unix(cron:session): session closed for user root Dec 19 21:30:01 ispc CRON[2123974]: pam_unix(cron:session): session closed for user www-data Dec 19 21:30:01 ispc CRON[2123976]: pam_unix(cron:session): session closed for user getmail Dec 19 21:30:01 ispc CRON[2123975]: pam_unix(cron:session): session closed for user root Dec 19 21:30:02 ispc CRON[2123972]: pam_unix(cron:session): session closed for user root Dec 19 21:30:07 ispc postfix/smtpd[2124054]: sql auxprop plugin using mysql engine Dec 19 21:30:08 ispc saslauthd[2124057]: pam_mysql - SELECT returned no result. Dec 19 21:30:08 ispc saslauthd[2124057]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:30:08 ispc saslauthd[2124057]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:30:59 ispc sshd[2124079]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:31:01 ispc CRON[2124089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:31:01 ispc CRON[2124089]: pam_unix(cron:session): session closed for user root Dec 19 21:31:43 ispc sshd[2124115]: Invalid user blceu from 103.110.84.105 Dec 19 21:32:01 ispc CRON[2124129]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:32:02 ispc CRON[2124129]: pam_unix(cron:session): session closed for user root Dec 19 21:33:01 ispc CRON[2124171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:33:01 ispc CRON[2124171]: pam_unix(cron:session): session closed for user root Dec 19 21:34:01 ispc CRON[2124208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:34:02 ispc CRON[2124208]: pam_unix(cron:session): session closed for user root Dec 19 21:34:48 ispc sshd[2124247]: Did not receive identification string from 192.227.134.84 Dec 19 21:34:50 ispc sshd[2124248]: Invalid user ziplines from 49.247.24.89 Dec 19 21:35:01 ispc CRON[2124256]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:35:01 ispc CRON[2124257]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:35:01 ispc CRON[2124255]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:35:01 ispc CRON[2124254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:35:01 ispc CRON[2124255]: pam_unix(cron:session): session closed for user root Dec 19 21:35:01 ispc CRON[2124257]: pam_unix(cron:session): session closed for user getmail Dec 19 21:35:01 ispc CRON[2124256]: pam_unix(cron:session): session closed for user root Dec 19 21:35:02 ispc CRON[2124254]: pam_unix(cron:session): session closed for user root Dec 19 21:35:23 ispc sshd[2124347]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:35:25 ispc sshd[2124353]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:35:25 ispc sshd[2124353]: Invalid user klape from 189.89.20.45 Dec 19 21:35:26 ispc sshd[2124355]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:35:26 ispc sshd[2124355]: Invalid user ubuntu from 189.89.20.45 Dec 19 21:36:01 ispc CRON[2124379]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:36:02 ispc CRON[2124379]: pam_unix(cron:session): session closed for user root Dec 19 21:36:54 ispc postfix/smtpd[2124432]: sql auxprop plugin using mysql engine Dec 19 21:36:55 ispc saslauthd[2124435]: pam_mysql - SELECT returned no result. Dec 19 21:36:55 ispc saslauthd[2124435]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:36:55 ispc saslauthd[2124435]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:37:01 ispc CRON[2124436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:37:01 ispc CRON[2124436]: pam_unix(cron:session): session closed for user root Dec 19 21:37:18 ispc sshd[2124455]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:38:01 ispc CRON[2124477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:38:01 ispc CRON[2124477]: pam_unix(cron:session): session closed for user root Dec 19 21:39:01 ispc CRON[2124527]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:39:01 ispc CRON[2124528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:39:01 ispc CRON[2124527]: pam_unix(cron:session): session closed for user root Dec 19 21:39:02 ispc CRON[2124528]: pam_unix(cron:session): session closed for user root Dec 19 21:40:01 ispc CRON[2124583]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:40:01 ispc CRON[2124580]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:40:01 ispc CRON[2124581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:40:01 ispc CRON[2124584]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:40:01 ispc CRON[2124582]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:40:01 ispc CRON[2124582]: pam_unix(cron:session): session closed for user www-data Dec 19 21:40:01 ispc CRON[2124581]: pam_unix(cron:session): session closed for user root Dec 19 21:40:01 ispc CRON[2124584]: pam_unix(cron:session): session closed for user getmail Dec 19 21:40:02 ispc CRON[2124583]: pam_unix(cron:session): session closed for user root Dec 19 21:40:02 ispc CRON[2124580]: pam_unix(cron:session): session closed for user root Dec 19 21:40:07 ispc postfix/smtpd[2124664]: sql auxprop plugin using mysql engine Dec 19 21:40:07 ispc saslauthd[2124667]: pam_mysql - SELECT returned no result. Dec 19 21:40:07 ispc saslauthd[2124667]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:40:07 ispc saslauthd[2124667]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:40:22 ispc saslauthd[2124679]: pam_mysql - SELECT returned no result. Dec 19 21:40:22 ispc saslauthd[2124679]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:40:22 ispc saslauthd[2124679]: do_auth : auth failure: [user=checksys] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:41:01 ispc CRON[2124707]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:41:01 ispc CRON[2124707]: pam_unix(cron:session): session closed for user root Dec 19 21:41:23 ispc CRON[2123511]: pam_unix(cron:session): session closed for user root Dec 19 21:42:01 ispc CRON[2124729]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:42:06 ispc CRON[2124729]: pam_unix(cron:session): session closed for user root Dec 19 21:42:58 ispc sshd[2124755]: Invalid user matlbula from 14.103.206.196 Dec 19 21:43:01 ispc CRON[2124760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:43:52 ispc postfix/smtpd[2124796]: sql auxprop plugin using mysql engine Dec 19 21:43:53 ispc saslauthd[2124798]: pam_mysql - SELECT returned no result. Dec 19 21:43:53 ispc saslauthd[2124798]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:43:53 ispc saslauthd[2124798]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:44:01 ispc CRON[2124810]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:44:02 ispc CRON[2124810]: pam_unix(cron:session): session closed for user root Dec 19 21:45:01 ispc CRON[2124868]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:45:01 ispc CRON[2124865]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:45:01 ispc CRON[2124866]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:45:01 ispc CRON[2124867]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:45:01 ispc CRON[2124866]: pam_unix(cron:session): session closed for user root Dec 19 21:45:01 ispc CRON[2124868]: pam_unix(cron:session): session closed for user getmail Dec 19 21:45:01 ispc CRON[2124867]: pam_unix(cron:session): session closed for user root Dec 19 21:45:02 ispc CRON[2124865]: pam_unix(cron:session): session closed for user root Dec 19 21:45:07 ispc sshd[2124947]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:45:07 ispc sshd[2124947]: Invalid user blceu from 103.28.37.227 Dec 19 21:46:01 ispc CRON[2124976]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:46:01 ispc CRON[2124976]: pam_unix(cron:session): session closed for user root Dec 19 21:47:01 ispc CRON[2125016]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:47:02 ispc CRON[2125016]: pam_unix(cron:session): session closed for user root Dec 19 21:48:01 ispc CRON[2125058]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:48:01 ispc CRON[2125058]: pam_unix(cron:session): session closed for user root Dec 19 21:49:01 ispc CRON[2125100]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:49:02 ispc CRON[2125100]: pam_unix(cron:session): session closed for user root Dec 19 21:50:01 ispc CRON[2125139]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:50:01 ispc CRON[2125140]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:50:01 ispc CRON[2125141]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 21:50:01 ispc CRON[2125142]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:50:01 ispc CRON[2125143]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:50:01 ispc CRON[2125141]: pam_unix(cron:session): session closed for user www-data Dec 19 21:50:01 ispc CRON[2125140]: pam_unix(cron:session): session closed for user root Dec 19 21:50:01 ispc CRON[2125143]: pam_unix(cron:session): session closed for user getmail Dec 19 21:50:01 ispc CRON[2125142]: pam_unix(cron:session): session closed for user root Dec 19 21:50:02 ispc CRON[2125139]: pam_unix(cron:session): session closed for user root Dec 19 21:50:49 ispc sshd[2125239]: Invalid user from 94.26.106.81 Dec 19 21:50:50 ispc postfix/smtpd[2125241]: sql auxprop plugin using mysql engine Dec 19 21:50:51 ispc saslauthd[2125244]: pam_mysql - SELECT returned no result. Dec 19 21:50:51 ispc saslauthd[2125244]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:50:51 ispc saslauthd[2125244]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:51:01 ispc CRON[2125250]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:51:02 ispc CRON[2125250]: pam_unix(cron:session): session closed for user root Dec 19 21:51:43 ispc sshd[2125279]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 21:52:01 ispc CRON[2125290]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:52:01 ispc CRON[2125289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:52:01 ispc CRON[2125290]: pam_unix(cron:session): session closed for user root Dec 19 21:52:05 ispc sshd[2125305]: Invalid user blceu from 117.50.70.169 Dec 19 21:53:01 ispc CRON[2125340]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:53:01 ispc CRON[2125340]: pam_unix(cron:session): session closed for user root Dec 19 21:54:01 ispc CRON[2125383]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:54:02 ispc CRON[2125383]: pam_unix(cron:session): session closed for user root Dec 19 21:54:02 ispc sshd[2125381]: Invalid user ziplines from 43.135.148.156 Dec 19 21:55:01 ispc CRON[2125423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:55:01 ispc CRON[2125424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:55:01 ispc CRON[2125425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:55:01 ispc CRON[2125426]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 21:55:01 ispc CRON[2125424]: pam_unix(cron:session): session closed for user root Dec 19 21:55:01 ispc CRON[2125426]: pam_unix(cron:session): session closed for user getmail Dec 19 21:55:02 ispc CRON[2125423]: pam_unix(cron:session): session closed for user root Dec 19 21:55:02 ispc CRON[2125425]: pam_unix(cron:session): session closed for user root Dec 19 21:55:16 ispc postfix/smtpd[2125508]: sql auxprop plugin using mysql engine Dec 19 21:55:17 ispc saslauthd[2125511]: pam_mysql - SELECT returned no result. Dec 19 21:55:17 ispc saslauthd[2125511]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:55:17 ispc saslauthd[2125511]: do_auth : auth failure: [user=circ] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:55:18 ispc CRON[2125289]: pam_unix(cron:session): session closed for user root Dec 19 21:55:18 ispc saslauthd[2125512]: pam_mysql - SELECT returned no result. Dec 19 21:55:18 ispc saslauthd[2125512]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:55:18 ispc saslauthd[2125512]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:56:01 ispc CRON[2125531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:56:02 ispc CRON[2125531]: pam_unix(cron:session): session closed for user root Dec 19 21:56:27 ispc sshd[2125555]: Invalid user blceu from 185.181.182.252 Dec 19 21:57:01 ispc CRON[2125572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:57:01 ispc CRON[2125572]: pam_unix(cron:session): session closed for user root Dec 19 21:57:37 ispc postfix/smtpd[2125602]: sql auxprop plugin using mysql engine Dec 19 21:57:39 ispc saslauthd[2125604]: pam_mysql - SELECT returned no result. Dec 19 21:57:39 ispc saslauthd[2125604]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 21:57:39 ispc saslauthd[2125604]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 21:58:01 ispc CRON[2125619]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:58:02 ispc CRON[2125619]: pam_unix(cron:session): session closed for user root Dec 19 21:58:55 ispc sshd[2125657]: Invalid user martof from 211.23.78.98 Dec 19 21:59:01 ispc CRON[2125663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 21:59:01 ispc CRON[2125663]: pam_unix(cron:session): session closed for user root Dec 19 22:00:01 ispc CRON[2125702]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:00:01 ispc CRON[2125703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:00:01 ispc CRON[2125704]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:00:01 ispc CRON[2125706]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:00:01 ispc CRON[2125705]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:00:01 ispc CRON[2125707]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:00:01 ispc CRON[2125703]: pam_unix(cron:session): session closed for user root Dec 19 22:00:01 ispc CRON[2125704]: pam_unix(cron:session): session closed for user www-data Dec 19 22:00:01 ispc CRON[2125707]: pam_unix(cron:session): session closed for user getmail Dec 19 22:00:02 ispc CRON[2125706]: pam_unix(cron:session): session closed for user root Dec 19 22:00:02 ispc CRON[2125705]: pam_unix(cron:session): session closed for user root Dec 19 22:00:02 ispc CRON[2125702]: pam_unix(cron:session): session closed for user root Dec 19 22:01:01 ispc CRON[2125889]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:01:02 ispc CRON[2125889]: pam_unix(cron:session): session closed for user root Dec 19 22:02:01 ispc CRON[2125929]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 22:02:01 ispc CRON[2125930]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:02:02 ispc CRON[2125930]: pam_unix(cron:session): session closed for user root Dec 19 22:02:25 ispc sshd[2126342]: Invalid user blceu from 211.23.78.98 Dec 19 22:03:01 ispc CRON[2126802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:03:02 ispc CRON[2126802]: pam_unix(cron:session): session closed for user root Dec 19 22:03:19 ispc postfix/smtpd[2126968]: sql auxprop plugin using mysql engine Dec 19 22:03:19 ispc CRON[2124760]: pam_unix(cron:session): session closed for user root Dec 19 22:03:23 ispc CRON[2125929]: pam_unix(cron:session): session closed for user logcheck Dec 19 22:03:31 ispc postfix/smtpd[2127011]: sql auxprop plugin using mysql engine Dec 19 22:04:01 ispc CRON[2127020]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:04:02 ispc CRON[2127020]: pam_unix(cron:session): session closed for user root Dec 19 22:04:46 ispc saslauthd[2127035]: pam_mysql - SELECT returned no result. Dec 19 22:04:46 ispc saslauthd[2127035]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:04:46 ispc saslauthd[2127035]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:05:01 ispc CRON[2127036]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:05:01 ispc CRON[2127037]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:05:01 ispc CRON[2127038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:05:01 ispc CRON[2127039]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:05:01 ispc CRON[2127039]: pam_unix(cron:session): session closed for user getmail Dec 19 22:05:01 ispc CRON[2127037]: pam_unix(cron:session): session closed for user root Dec 19 22:05:02 ispc CRON[2127036]: pam_unix(cron:session): session closed for user root Dec 19 22:05:46 ispc CRON[2127038]: pam_unix(cron:session): session closed for user root Dec 19 22:06:01 ispc CRON[2127148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:07:00 ispc sshd[2127189]: Invalid user ziplines from 45.84.199.14 Dec 19 22:07:01 ispc CRON[2127191]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:07:02 ispc CRON[2127191]: pam_unix(cron:session): session closed for user root Dec 19 22:08:01 ispc CRON[2127231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:08:02 ispc CRON[2127231]: pam_unix(cron:session): session closed for user root Dec 19 22:09:01 ispc CRON[2127272]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:09:01 ispc CRON[2127273]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:09:01 ispc CRON[2127272]: pam_unix(cron:session): session closed for user root Dec 19 22:09:02 ispc CRON[2127273]: pam_unix(cron:session): session closed for user root Dec 19 22:10:01 ispc CRON[2127321]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:10:01 ispc CRON[2127322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:10:01 ispc CRON[2127323]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:10:01 ispc CRON[2127324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:10:01 ispc CRON[2127325]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:10:01 ispc CRON[2127323]: pam_unix(cron:session): session closed for user www-data Dec 19 22:10:01 ispc CRON[2127322]: pam_unix(cron:session): session closed for user root Dec 19 22:10:01 ispc CRON[2127325]: pam_unix(cron:session): session closed for user getmail Dec 19 22:10:02 ispc CRON[2127324]: pam_unix(cron:session): session closed for user root Dec 19 22:10:03 ispc CRON[2127321]: pam_unix(cron:session): session closed for user root Dec 19 22:10:05 ispc postfix/smtpd[2127399]: sql auxprop plugin using mysql engine Dec 19 22:10:06 ispc saslauthd[2127402]: pam_mysql - SELECT returned no result. Dec 19 22:10:06 ispc saslauthd[2127402]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:10:06 ispc saslauthd[2127402]: do_auth : auth failure: [user=cisco] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:10:28 ispc saslauthd[2127417]: pam_mysql - SELECT returned no result. Dec 19 22:10:28 ispc saslauthd[2127417]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:10:28 ispc saslauthd[2127417]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:10:57 ispc saslauthd[2127429]: pam_mysql - SELECT returned no result. Dec 19 22:10:57 ispc saslauthd[2127429]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:10:57 ispc saslauthd[2127429]: do_auth : auth failure: [user=oracle@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 22:11:01 ispc CRON[2127434]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:11:02 ispc CRON[2127434]: pam_unix(cron:session): session closed for user root Dec 19 22:11:26 ispc saslauthd[2127453]: pam_mysql - SELECT returned no result. Dec 19 22:11:26 ispc saslauthd[2127453]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:11:26 ispc saslauthd[2127453]: do_auth : auth failure: [user=office] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:11:35 ispc saslauthd[2127459]: pam_mysql - SELECT returned no result. Dec 19 22:11:35 ispc saslauthd[2127459]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:11:35 ispc saslauthd[2127459]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:12:01 ispc CRON[2127473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:12:02 ispc CRON[2127473]: pam_unix(cron:session): session closed for user root Dec 19 22:13:01 ispc CRON[2127521]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:13:01 ispc CRON[2127521]: pam_unix(cron:session): session closed for user root Dec 19 22:13:21 ispc sshd[2127536]: Invalid user matlbula from 175.125.95.234 Dec 19 22:14:01 ispc CRON[2127562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:14:02 ispc CRON[2127562]: pam_unix(cron:session): session closed for user root Dec 19 22:15:01 ispc CRON[2127604]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:15:01 ispc CRON[2127602]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:15:01 ispc CRON[2127603]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:15:01 ispc CRON[2127605]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:15:01 ispc CRON[2127603]: pam_unix(cron:session): session closed for user root Dec 19 22:15:01 ispc CRON[2127605]: pam_unix(cron:session): session closed for user getmail Dec 19 22:15:01 ispc CRON[2127604]: pam_unix(cron:session): session closed for user root Dec 19 22:15:02 ispc CRON[2127602]: pam_unix(cron:session): session closed for user root Dec 19 22:16:01 ispc CRON[2127699]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:16:01 ispc CRON[2127699]: pam_unix(cron:session): session closed for user root Dec 19 22:17:01 ispc CRON[2127739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:17:02 ispc CRON[2127739]: pam_unix(cron:session): session closed for user root Dec 19 22:17:05 ispc sshd[2127754]: Did not receive identification string from 192.227.134.84 Dec 19 22:17:09 ispc sshd[2127757]: Invalid user klape from 36.50.177.171 Dec 19 22:17:11 ispc sshd[2127759]: Invalid user ubuntu from 36.50.177.171 Dec 19 22:18:01 ispc CRON[2127787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:18:02 ispc CRON[2127787]: pam_unix(cron:session): session closed for user root Dec 19 22:18:35 ispc postfix/smtpd[2127819]: sql auxprop plugin using mysql engine Dec 19 22:18:35 ispc saslauthd[2127822]: pam_mysql - SELECT returned no result. Dec 19 22:18:35 ispc saslauthd[2127822]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:18:35 ispc saslauthd[2127822]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:19:01 ispc CRON[2127834]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:19:02 ispc CRON[2127834]: pam_unix(cron:session): session closed for user root Dec 19 22:19:27 ispc sshd[2127861]: Did not receive identification string from 45.140.17.97 Dec 19 22:20:01 ispc CRON[2127876]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:20:01 ispc CRON[2127877]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:20:01 ispc CRON[2127878]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:20:01 ispc CRON[2127879]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:20:01 ispc CRON[2127880]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:20:01 ispc CRON[2127877]: pam_unix(cron:session): session closed for user root Dec 19 22:20:01 ispc CRON[2127878]: pam_unix(cron:session): session closed for user www-data Dec 19 22:20:01 ispc CRON[2127880]: pam_unix(cron:session): session closed for user getmail Dec 19 22:20:02 ispc CRON[2127879]: pam_unix(cron:session): session closed for user root Dec 19 22:20:02 ispc CRON[2127876]: pam_unix(cron:session): session closed for user root Dec 19 22:20:20 ispc sshd[2127964]: Invalid user martof from 119.205.233.162 Dec 19 22:21:01 ispc CRON[2127984]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:21:01 ispc CRON[2127983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:21:01 ispc CRON[2127983]: pam_unix(cron:session): session closed for user root Dec 19 22:21:01 ispc CRON[2127984]: pam_unix(cron:session): session closed for user root Dec 19 22:22:01 ispc CRON[2128029]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:22:02 ispc CRON[2128029]: pam_unix(cron:session): session closed for user root Dec 19 22:23:01 ispc CRON[2128073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:23:01 ispc CRON[2128073]: pam_unix(cron:session): session closed for user root Dec 19 22:24:01 ispc CRON[2128112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:24:01 ispc CRON[2128112]: pam_unix(cron:session): session closed for user root Dec 19 22:24:53 ispc postfix/smtpd[2128146]: sql auxprop plugin using mysql engine Dec 19 22:24:54 ispc saslauthd[2128149]: pam_mysql - SELECT returned no result. Dec 19 22:24:54 ispc saslauthd[2128149]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:24:54 ispc saslauthd[2128149]: do_auth : auth failure: [user=clearone] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:25:01 ispc CRON[2128154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:25:01 ispc CRON[2128155]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:25:01 ispc CRON[2128156]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:25:01 ispc CRON[2128157]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:25:01 ispc CRON[2128155]: pam_unix(cron:session): session closed for user root Dec 19 22:25:01 ispc CRON[2128157]: pam_unix(cron:session): session closed for user getmail Dec 19 22:25:02 ispc CRON[2128156]: pam_unix(cron:session): session closed for user root Dec 19 22:25:02 ispc CRON[2128154]: pam_unix(cron:session): session closed for user root Dec 19 22:25:32 ispc saslauthd[2128253]: pam_mysql - SELECT returned no result. Dec 19 22:25:32 ispc saslauthd[2128253]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:25:32 ispc saslauthd[2128253]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:25:37 ispc saslauthd[2128261]: pam_mysql - SELECT returned no result. Dec 19 22:25:37 ispc saslauthd[2128261]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:25:37 ispc saslauthd[2128261]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:25:41 ispc sshd[2128262]: Invalid user blceu from 141.94.71.131 Dec 19 22:26:01 ispc CRON[2128274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:26:02 ispc CRON[2128274]: pam_unix(cron:session): session closed for user root Dec 19 22:26:17 ispc CRON[2127148]: pam_unix(cron:session): session closed for user root Dec 19 22:27:01 ispc CRON[2128296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:27:02 ispc CRON[2128296]: pam_unix(cron:session): session closed for user root Dec 19 22:27:29 ispc postfix/smtpd[2128310]: sql auxprop plugin using mysql engine Dec 19 22:28:01 ispc CRON[2128320]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:28:02 ispc CRON[2128320]: pam_unix(cron:session): session closed for user root Dec 19 22:28:08 ispc sshd[2128332]: Did not receive identification string from 142.93.226.5 Dec 19 22:29:01 ispc CRON[2128338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:29:01 ispc CRON[2128338]: pam_unix(cron:session): session closed for user root Dec 19 22:30:02 ispc CRON[2128355]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:30:02 ispc CRON[2128356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:30:02 ispc CRON[2128359]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:30:02 ispc CRON[2128358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:30:02 ispc CRON[2128357]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:30:02 ispc CRON[2128356]: pam_unix(cron:session): session closed for user root Dec 19 22:30:02 ispc CRON[2128357]: pam_unix(cron:session): session closed for user www-data Dec 19 22:30:02 ispc CRON[2128359]: pam_unix(cron:session): session closed for user getmail Dec 19 22:30:02 ispc CRON[2128355]: pam_unix(cron:session): session closed for user root Dec 19 22:30:48 ispc CRON[2128358]: pam_unix(cron:session): session closed for user root Dec 19 22:31:01 ispc CRON[2128548]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:31:13 ispc sshd[2128560]: Did not receive identification string from 159.223.5.236 Dec 19 22:32:01 ispc CRON[2128590]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:32:02 ispc CRON[2128590]: pam_unix(cron:session): session closed for user root Dec 19 22:32:27 ispc postfix/smtpd[2128614]: sql auxprop plugin using mysql engine Dec 19 22:32:27 ispc saslauthd[2128616]: pam_mysql - SELECT returned no result. Dec 19 22:32:27 ispc saslauthd[2128616]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:32:27 ispc saslauthd[2128616]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:33:01 ispc CRON[2128642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:33:02 ispc CRON[2128642]: pam_unix(cron:session): session closed for user root Dec 19 22:34:01 ispc CRON[2128685]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:34:02 ispc CRON[2128685]: pam_unix(cron:session): session closed for user root Dec 19 22:35:01 ispc CRON[2128731]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:35:01 ispc CRON[2128730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:35:01 ispc CRON[2128732]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:35:01 ispc CRON[2128733]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:35:01 ispc CRON[2128731]: pam_unix(cron:session): session closed for user root Dec 19 22:35:01 ispc CRON[2128733]: pam_unix(cron:session): session closed for user getmail Dec 19 22:35:02 ispc CRON[2128732]: pam_unix(cron:session): session closed for user root Dec 19 22:35:02 ispc CRON[2128730]: pam_unix(cron:session): session closed for user root Dec 19 22:35:53 ispc sshd[2128833]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 22:36:01 ispc CRON[2128841]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:36:01 ispc CRON[2128841]: pam_unix(cron:session): session closed for user root Dec 19 22:36:12 ispc sshd[2128859]: Invalid user blceu from 203.146.21.153 Dec 19 22:36:15 ispc sshd[2128864]: Invalid user ziplines from 103.110.84.105 Dec 19 22:37:01 ispc CRON[2128892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:37:02 ispc CRON[2128892]: pam_unix(cron:session): session closed for user root Dec 19 22:38:01 ispc CRON[2128935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:38:01 ispc CRON[2128935]: pam_unix(cron:session): session closed for user root Dec 19 22:38:07 ispc sshd[2128954]: Invalid user admin from 159.223.5.236 Dec 19 22:38:45 ispc sshd[2128972]: Invalid user admin from 159.223.5.236 Dec 19 22:39:01 ispc CRON[2128985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:39:01 ispc CRON[2128986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:39:01 ispc CRON[2128985]: pam_unix(cron:session): session closed for user root Dec 19 22:39:01 ispc CRON[2128986]: pam_unix(cron:session): session closed for user root Dec 19 22:39:24 ispc sshd[2129016]: Invalid user admin from 159.223.5.236 Dec 19 22:39:44 ispc postfix/smtpd[2129028]: sql auxprop plugin using mysql engine Dec 19 22:39:45 ispc saslauthd[2129031]: pam_mysql - SELECT returned no result. Dec 19 22:39:45 ispc saslauthd[2129031]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:39:45 ispc saslauthd[2129031]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:39:49 ispc saslauthd[2129036]: pam_mysql - SELECT returned no result. Dec 19 22:39:49 ispc saslauthd[2129036]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:39:49 ispc saslauthd[2129036]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:40:01 ispc CRON[2129044]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:40:01 ispc CRON[2129041]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:40:01 ispc CRON[2129042]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:40:01 ispc CRON[2129043]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:40:01 ispc CRON[2129045]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:40:01 ispc CRON[2129043]: pam_unix(cron:session): session closed for user www-data Dec 19 22:40:01 ispc CRON[2129042]: pam_unix(cron:session): session closed for user root Dec 19 22:40:01 ispc CRON[2129045]: pam_unix(cron:session): session closed for user getmail Dec 19 22:40:02 ispc CRON[2129044]: pam_unix(cron:session): session closed for user root Dec 19 22:40:02 ispc sshd[2129053]: Invalid user admin from 159.223.5.236 Dec 19 22:40:03 ispc CRON[2129041]: pam_unix(cron:session): session closed for user root Dec 19 22:40:43 ispc sshd[2129141]: Invalid user admin from 159.223.5.236 Dec 19 22:40:45 ispc saslauthd[2129143]: pam_mysql - SELECT returned no result. Dec 19 22:40:45 ispc saslauthd[2129143]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:40:45 ispc saslauthd[2129143]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:41:01 ispc CRON[2129154]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:41:01 ispc CRON[2129154]: pam_unix(cron:session): session closed for user root Dec 19 22:41:21 ispc sshd[2129173]: Invalid user admin from 159.223.5.236 Dec 19 22:42:01 ispc CRON[2129200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:42:02 ispc CRON[2129200]: pam_unix(cron:session): session closed for user root Dec 19 22:43:01 ispc CRON[2129252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:43:01 ispc CRON[2129252]: pam_unix(cron:session): session closed for user root Dec 19 22:44:01 ispc CRON[2129286]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:44:01 ispc CRON[2129286]: pam_unix(cron:session): session closed for user root Dec 19 22:44:20 ispc sshd[2129307]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 22:45:01 ispc CRON[2129333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:45:01 ispc CRON[2129334]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:45:01 ispc CRON[2129335]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:45:01 ispc CRON[2129336]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:45:01 ispc CRON[2129334]: pam_unix(cron:session): session closed for user root Dec 19 22:45:01 ispc CRON[2129336]: pam_unix(cron:session): session closed for user getmail Dec 19 22:45:02 ispc CRON[2129335]: pam_unix(cron:session): session closed for user root Dec 19 22:45:02 ispc CRON[2129333]: pam_unix(cron:session): session closed for user root Dec 19 22:46:01 ispc CRON[2129438]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:46:01 ispc CRON[2129438]: pam_unix(cron:session): session closed for user root Dec 19 22:46:14 ispc postfix/smtpd[2129459]: sql auxprop plugin using mysql engine Dec 19 22:46:23 ispc saslauthd[2129462]: pam_mysql - SELECT returned no result. Dec 19 22:46:23 ispc saslauthd[2129462]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:46:23 ispc saslauthd[2129462]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 22:46:36 ispc saslauthd[2129472]: pam_mysql - SELECT returned no result. Dec 19 22:46:36 ispc saslauthd[2129472]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:46:36 ispc saslauthd[2129472]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:46:46 ispc sshd[2129479]: Invalid user martof from 203.146.21.153 Dec 19 22:47:01 ispc CRON[2129489]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:47:02 ispc postfix/smtpd[2129496]: sql auxprop plugin using mysql engine Dec 19 22:47:02 ispc CRON[2129489]: pam_unix(cron:session): session closed for user root Dec 19 22:47:02 ispc saslauthd[2129502]: pam_mysql - SELECT returned no result. Dec 19 22:47:02 ispc saslauthd[2129502]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:47:02 ispc saslauthd[2129502]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:47:49 ispc sshd[2129527]: Invalid user admin from 142.93.226.5 Dec 19 22:48:01 ispc CRON[2129537]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:48:01 ispc CRON[2129537]: pam_unix(cron:session): session closed for user root Dec 19 22:48:23 ispc sshd[2129560]: Invalid user admin from 142.93.226.5 Dec 19 22:48:58 ispc sshd[2129575]: Invalid user admin from 142.93.226.5 Dec 19 22:49:01 ispc CRON[2129581]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:49:02 ispc CRON[2129581]: pam_unix(cron:session): session closed for user root Dec 19 22:49:32 ispc sshd[2129609]: Invalid user admin from 142.93.226.5 Dec 19 22:50:01 ispc CRON[2129624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:50:01 ispc CRON[2129625]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:50:01 ispc CRON[2129626]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 22:50:01 ispc CRON[2129627]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:50:01 ispc CRON[2129628]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:50:01 ispc CRON[2129626]: pam_unix(cron:session): session closed for user www-data Dec 19 22:50:01 ispc CRON[2129625]: pam_unix(cron:session): session closed for user root Dec 19 22:50:01 ispc CRON[2129628]: pam_unix(cron:session): session closed for user getmail Dec 19 22:50:01 ispc CRON[2129627]: pam_unix(cron:session): session closed for user root Dec 19 22:50:01 ispc CRON[2129624]: pam_unix(cron:session): session closed for user root Dec 19 22:50:05 ispc sshd[2129703]: Invalid user admin from 142.93.226.5 Dec 19 22:50:30 ispc postfix/smtpd[2129713]: sql auxprop plugin using mysql engine Dec 19 22:50:38 ispc sshd[2129721]: Invalid user admin from 142.93.226.5 Dec 19 22:51:01 ispc CRON[2129739]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:51:02 ispc CRON[2129739]: pam_unix(cron:session): session closed for user root Dec 19 22:51:32 ispc CRON[2128548]: pam_unix(cron:session): session closed for user root Dec 19 22:52:01 ispc CRON[2129771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:52:02 ispc CRON[2129771]: pam_unix(cron:session): session closed for user root Dec 19 22:53:01 ispc CRON[2129792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:53:01 ispc CRON[2129792]: pam_unix(cron:session): session closed for user root Dec 19 22:53:26 ispc sshd[2129803]: Invalid user martof from 52.232.19.79 Dec 19 22:53:57 ispc sshd[2129809]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 22:53:57 ispc sshd[2129809]: Invalid user ziplines from 103.28.37.227 Dec 19 22:54:01 ispc CRON[2129811]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:54:02 ispc CRON[2129811]: pam_unix(cron:session): session closed for user root Dec 19 22:54:24 ispc saslauthd[2129825]: pam_mysql - SELECT returned no result. Dec 19 22:54:24 ispc saslauthd[2129825]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:54:24 ispc saslauthd[2129825]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:54:26 ispc saslauthd[2129826]: pam_mysql - SELECT returned no result. Dec 19 22:54:26 ispc saslauthd[2129826]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:54:26 ispc saslauthd[2129826]: do_auth : auth failure: [user=cmaker] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:55:01 ispc CRON[2129827]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:55:01 ispc CRON[2129828]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:55:01 ispc CRON[2129829]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:55:01 ispc CRON[2129830]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 22:55:01 ispc CRON[2129828]: pam_unix(cron:session): session closed for user root Dec 19 22:55:01 ispc CRON[2129830]: pam_unix(cron:session): session closed for user getmail Dec 19 22:55:02 ispc CRON[2129827]: pam_unix(cron:session): session closed for user root Dec 19 22:55:37 ispc CRON[2129829]: pam_unix(cron:session): session closed for user root Dec 19 22:55:44 ispc saslauthd[2129939]: pam_mysql - SELECT returned no result. Dec 19 22:55:44 ispc saslauthd[2129939]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:55:44 ispc saslauthd[2129939]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 22:56:01 ispc CRON[2129941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:56:11 ispc saslauthd[2129954]: pam_mysql - SELECT returned no result. Dec 19 22:56:11 ispc saslauthd[2129954]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 22:56:11 ispc saslauthd[2129954]: do_auth : auth failure: [user=support@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 22:57:01 ispc CRON[2129977]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:57:01 ispc CRON[2129977]: pam_unix(cron:session): session closed for user root Dec 19 22:58:01 ispc CRON[2130019]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:58:02 ispc CRON[2130019]: pam_unix(cron:session): session closed for user root Dec 19 22:58:08 ispc sshd[2130038]: Invalid user ziplines from 203.146.21.153 Dec 19 22:58:25 ispc sshd[2130054]: Did not receive identification string from 192.227.134.84 Dec 19 22:59:01 ispc CRON[2130076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 22:59:01 ispc CRON[2130076]: pam_unix(cron:session): session closed for user root Dec 19 23:00:01 ispc CRON[2130113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:00:01 ispc CRON[2130114]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:00:01 ispc CRON[2130115]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:00:01 ispc CRON[2130116]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:00:01 ispc CRON[2130117]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:00:01 ispc CRON[2130118]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:00:01 ispc CRON[2130115]: pam_unix(cron:session): session closed for user www-data Dec 19 23:00:01 ispc CRON[2130114]: pam_unix(cron:session): session closed for user root Dec 19 23:00:01 ispc CRON[2130118]: pam_unix(cron:session): session closed for user getmail Dec 19 23:00:02 ispc CRON[2130117]: pam_unix(cron:session): session closed for user root Dec 19 23:00:02 ispc CRON[2130116]: pam_unix(cron:session): session closed for user root Dec 19 23:00:02 ispc CRON[2130113]: pam_unix(cron:session): session closed for user root Dec 19 23:00:44 ispc sshd[2130290]: Invalid user ziplines from 52.232.19.79 Dec 19 23:01:01 ispc CRON[2130296]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:01:01 ispc CRON[2130296]: pam_unix(cron:session): session closed for user root Dec 19 23:01:39 ispc postfix/smtpd[2130324]: sql auxprop plugin using mysql engine Dec 19 23:01:40 ispc saslauthd[2130327]: pam_mysql - SELECT returned no result. Dec 19 23:01:40 ispc saslauthd[2130327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:01:40 ispc saslauthd[2130327]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:02:01 ispc CRON[2130337]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 19 23:02:01 ispc CRON[2130338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:02:02 ispc CRON[2130338]: pam_unix(cron:session): session closed for user root Dec 19 23:02:25 ispc sshd[2130826]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:02:25 ispc sshd[2130826]: Invalid user martof from 103.28.37.227 Dec 19 23:03:00 ispc CRON[2130337]: pam_unix(cron:session): session closed for user logcheck Dec 19 23:03:00 ispc CRON[2131397]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:03:01 ispc CRON[2131397]: pam_unix(cron:session): session closed for user root Dec 19 23:03:08 ispc postfix/smtpd[2131417]: sql auxprop plugin using mysql engine Dec 19 23:03:22 ispc sshd[2131429]: Invalid user admin from 103.172.236.164 Dec 19 23:04:01 ispc CRON[2131450]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:04:02 ispc CRON[2131450]: pam_unix(cron:session): session closed for user root Dec 19 23:05:01 ispc CRON[2131490]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:05:01 ispc CRON[2131491]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:05:01 ispc CRON[2131492]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:05:01 ispc CRON[2131493]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:05:01 ispc CRON[2131491]: pam_unix(cron:session): session closed for user root Dec 19 23:05:01 ispc CRON[2131493]: pam_unix(cron:session): session closed for user getmail Dec 19 23:05:02 ispc CRON[2131490]: pam_unix(cron:session): session closed for user root Dec 19 23:05:02 ispc CRON[2131492]: pam_unix(cron:session): session closed for user root Dec 19 23:05:19 ispc sshd[2131576]: Invalid user blceu from 49.247.24.89 Dec 19 23:05:52 ispc sshd[2131592]: Invalid user martof from 49.247.24.89 Dec 19 23:06:01 ispc CRON[2131601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:06:02 ispc CRON[2131601]: pam_unix(cron:session): session closed for user root Dec 19 23:07:01 ispc CRON[2131638]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:07:01 ispc CRON[2131638]: pam_unix(cron:session): session closed for user root Dec 19 23:08:01 ispc CRON[2131677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:08:02 ispc CRON[2131677]: pam_unix(cron:session): session closed for user root Dec 19 23:08:23 ispc sshd[2131699]: Invalid user martof from 103.110.84.105 Dec 19 23:08:45 ispc postfix/smtpd[2131711]: sql auxprop plugin using mysql engine Dec 19 23:08:45 ispc saslauthd[2131714]: pam_mysql - SELECT returned no result. Dec 19 23:08:45 ispc saslauthd[2131714]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:08:45 ispc saslauthd[2131714]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:09:01 ispc CRON[2131723]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:09:01 ispc CRON[2131724]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:09:02 ispc CRON[2131724]: pam_unix(cron:session): session closed for user root Dec 19 23:09:02 ispc CRON[2131723]: pam_unix(cron:session): session closed for user root Dec 19 23:09:03 ispc sshd[2131736]: Invalid user ziplines from 211.23.78.98 Dec 19 23:09:16 ispc saslauthd[2131751]: pam_mysql - SELECT returned no result. Dec 19 23:09:16 ispc saslauthd[2131751]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:09:16 ispc saslauthd[2131751]: do_auth : auth failure: [user=conferencing] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:10:01 ispc CRON[2131775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:10:01 ispc CRON[2131776]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:10:01 ispc CRON[2131777]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:10:01 ispc CRON[2131778]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:10:01 ispc CRON[2131774]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:10:01 ispc CRON[2131776]: pam_unix(cron:session): session closed for user www-data Dec 19 23:10:01 ispc CRON[2131775]: pam_unix(cron:session): session closed for user root Dec 19 23:10:01 ispc CRON[2131778]: pam_unix(cron:session): session closed for user getmail Dec 19 23:10:01 ispc CRON[2131777]: pam_unix(cron:session): session closed for user root Dec 19 23:10:01 ispc CRON[2131774]: pam_unix(cron:session): session closed for user root Dec 19 23:10:55 ispc saslauthd[2131876]: pam_mysql - SELECT returned no result. Dec 19 23:10:55 ispc saslauthd[2131876]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:10:55 ispc saslauthd[2131876]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:11:01 ispc CRON[2131881]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:11:02 ispc CRON[2131881]: pam_unix(cron:session): session closed for user root Dec 19 23:12:01 ispc CRON[2131918]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:12:02 ispc CRON[2131918]: pam_unix(cron:session): session closed for user root Dec 19 23:13:01 ispc CRON[2131964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:13:01 ispc CRON[2131964]: pam_unix(cron:session): session closed for user root Dec 19 23:14:01 ispc CRON[2132004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:14:02 ispc CRON[2132004]: pam_unix(cron:session): session closed for user root Dec 19 23:14:30 ispc sshd[2132028]: Invalid user anoraksro from 117.50.70.169 Dec 19 23:15:01 ispc CRON[2132050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:15:01 ispc CRON[2132051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:15:01 ispc CRON[2132052]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:15:01 ispc CRON[2132053]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:15:01 ispc CRON[2132053]: pam_unix(cron:session): session closed for user getmail Dec 19 23:15:01 ispc CRON[2132051]: pam_unix(cron:session): session closed for user root Dec 19 23:15:01 ispc CRON[2132052]: pam_unix(cron:session): session closed for user root Dec 19 23:15:02 ispc CRON[2132050]: pam_unix(cron:session): session closed for user root Dec 19 23:15:56 ispc postfix/smtpd[2132160]: sql auxprop plugin using mysql engine Dec 19 23:15:57 ispc postfix/smtpd[2132162]: sql auxprop plugin using mysql engine Dec 19 23:15:57 ispc saslauthd[2132164]: pam_mysql - SELECT returned no result. Dec 19 23:15:57 ispc saslauthd[2132164]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:15:57 ispc saslauthd[2132164]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:16:01 ispc CRON[2132165]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:16:02 ispc CRON[2132165]: pam_unix(cron:session): session closed for user root Dec 19 23:16:05 ispc saslauthd[2132180]: pam_mysql - SELECT returned no result. Dec 19 23:16:05 ispc saslauthd[2132180]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:16:05 ispc saslauthd[2132180]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 19 23:16:12 ispc sshd[2132184]: Invalid user klape from 103.164.20.29 Dec 19 23:16:13 ispc sshd[2132192]: Invalid user ubuntu from 103.164.20.29 Dec 19 23:16:19 ispc saslauthd[2132194]: pam_mysql - SELECT returned no result. Dec 19 23:16:19 ispc saslauthd[2132194]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:16:19 ispc saslauthd[2132194]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:16:22 ispc CRON[2129941]: pam_unix(cron:session): session closed for user root Dec 19 23:17:01 ispc CRON[2132204]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:17:02 ispc CRON[2132204]: pam_unix(cron:session): session closed for user root Dec 19 23:18:01 ispc CRON[2132227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:18:02 ispc CRON[2132227]: pam_unix(cron:session): session closed for user root Dec 19 23:19:01 ispc CRON[2132247]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:19:03 ispc CRON[2132247]: pam_unix(cron:session): session closed for user root Dec 19 23:20:01 ispc CRON[2132266]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:20:01 ispc CRON[2132267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:20:01 ispc CRON[2132268]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:20:01 ispc CRON[2132269]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:20:01 ispc CRON[2132270]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:20:01 ispc CRON[2132267]: pam_unix(cron:session): session closed for user root Dec 19 23:20:01 ispc CRON[2132268]: pam_unix(cron:session): session closed for user www-data Dec 19 23:20:01 ispc CRON[2132270]: pam_unix(cron:session): session closed for user getmail Dec 19 23:20:03 ispc CRON[2132266]: pam_unix(cron:session): session closed for user root Dec 19 23:20:37 ispc sshd[2132378]: Invalid user blceu from 165.227.38.205 Dec 19 23:20:40 ispc CRON[2132269]: pam_unix(cron:session): session closed for user root Dec 19 23:20:55 ispc sshd[2132384]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:20:55 ispc sshd[2132384]: Invalid user blceu from 103.28.37.227 Dec 19 23:21:01 ispc CRON[2132386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:21:01 ispc CRON[2132387]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:21:01 ispc CRON[2132386]: pam_unix(cron:session): session closed for user root Dec 19 23:22:01 ispc CRON[2132430]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:22:02 ispc CRON[2132430]: pam_unix(cron:session): session closed for user root Dec 19 23:23:01 ispc CRON[2132477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:23:02 ispc CRON[2132477]: pam_unix(cron:session): session closed for user root Dec 19 23:23:11 ispc postfix/smtpd[2132492]: sql auxprop plugin using mysql engine Dec 19 23:23:12 ispc saslauthd[2132494]: pam_mysql - SELECT returned no result. Dec 19 23:23:12 ispc saslauthd[2132494]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:23:12 ispc saslauthd[2132494]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:23:58 ispc sshd[2132519]: Did not receive identification string from 121.229.103.130 Dec 19 23:24:01 ispc CRON[2132520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:24:02 ispc CRON[2132520]: pam_unix(cron:session): session closed for user root Dec 19 23:24:07 ispc saslauthd[2132538]: pam_mysql - SELECT returned no result. Dec 19 23:24:07 ispc saslauthd[2132538]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:24:07 ispc saslauthd[2132538]: do_auth : auth failure: [user=core] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:25:01 ispc CRON[2132564]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:25:01 ispc CRON[2132565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:25:01 ispc CRON[2132566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:25:01 ispc CRON[2132567]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:25:01 ispc CRON[2132565]: pam_unix(cron:session): session closed for user root Dec 19 23:25:01 ispc CRON[2132567]: pam_unix(cron:session): session closed for user getmail Dec 19 23:25:01 ispc CRON[2132566]: pam_unix(cron:session): session closed for user root Dec 19 23:25:03 ispc CRON[2132564]: pam_unix(cron:session): session closed for user root Dec 19 23:26:01 ispc postfix/smtpd[2132688]: sql auxprop plugin using mysql engine Dec 19 23:26:01 ispc CRON[2132691]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:26:01 ispc saslauthd[2132690]: pam_mysql - SELECT returned no result. Dec 19 23:26:01 ispc saslauthd[2132690]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:26:01 ispc saslauthd[2132690]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:26:01 ispc CRON[2132691]: pam_unix(cron:session): session closed for user root Dec 19 23:26:17 ispc saslauthd[2132706]: pam_mysql - SELECT returned no result. Dec 19 23:26:17 ispc saslauthd[2132706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:26:17 ispc saslauthd[2132706]: do_auth : auth failure: [user=administrator] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:27:01 ispc CRON[2132733]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:27:02 ispc CRON[2132733]: pam_unix(cron:session): session closed for user root Dec 19 23:28:01 ispc CRON[2132775]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:28:01 ispc CRON[2132775]: pam_unix(cron:session): session closed for user root Dec 19 23:28:13 ispc sshd[2132798]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:29:01 ispc CRON[2132823]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:29:02 ispc CRON[2132823]: pam_unix(cron:session): session closed for user root Dec 19 23:30:01 ispc CRON[2132868]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:30:01 ispc CRON[2132871]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:30:01 ispc CRON[2132872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:30:01 ispc CRON[2132873]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:30:01 ispc CRON[2132870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:30:01 ispc CRON[2132871]: pam_unix(cron:session): session closed for user www-data Dec 19 23:30:01 ispc CRON[2132870]: pam_unix(cron:session): session closed for user root Dec 19 23:30:01 ispc CRON[2132873]: pam_unix(cron:session): session closed for user getmail Dec 19 23:30:01 ispc CRON[2132872]: pam_unix(cron:session): session closed for user root Dec 19 23:30:02 ispc CRON[2132868]: pam_unix(cron:session): session closed for user root Dec 19 23:30:38 ispc postfix/smtpd[2132964]: sql auxprop plugin using mysql engine Dec 19 23:30:38 ispc saslauthd[2132967]: pam_mysql - SELECT returned no result. Dec 19 23:30:38 ispc saslauthd[2132967]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:30:38 ispc saslauthd[2132967]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:30:40 ispc sshd[2132968]: Invalid user ziplines from 49.247.24.89 Dec 19 23:31:01 ispc CRON[2132982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:31:01 ispc CRON[2132982]: pam_unix(cron:session): session closed for user root Dec 19 23:31:57 ispc sshd[2133023]: Invalid user blceu from 45.84.199.14 Dec 19 23:32:01 ispc CRON[2133025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:32:01 ispc CRON[2133025]: pam_unix(cron:session): session closed for user root Dec 19 23:33:01 ispc CRON[2133083]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:33:02 ispc CRON[2133083]: pam_unix(cron:session): session closed for user root Dec 19 23:33:48 ispc sshd[2133120]: Invalid user martof from 185.208.181.153 Dec 19 23:34:01 ispc CRON[2133126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:34:01 ispc CRON[2133126]: pam_unix(cron:session): session closed for user root Dec 19 23:35:01 ispc CRON[2133170]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:35:01 ispc CRON[2133172]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:35:01 ispc CRON[2133169]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:35:01 ispc CRON[2133171]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:35:01 ispc CRON[2133170]: pam_unix(cron:session): session closed for user root Dec 19 23:35:01 ispc CRON[2133172]: pam_unix(cron:session): session closed for user getmail Dec 19 23:35:02 ispc CRON[2133171]: pam_unix(cron:session): session closed for user root Dec 19 23:35:02 ispc CRON[2133169]: pam_unix(cron:session): session closed for user root Dec 19 23:36:01 ispc CRON[2133274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:36:01 ispc CRON[2133274]: pam_unix(cron:session): session closed for user root Dec 19 23:36:29 ispc sshd[2133295]: Invalid user blceu from 119.205.233.162 Dec 19 23:37:01 ispc CRON[2133318]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:37:02 ispc CRON[2133318]: pam_unix(cron:session): session closed for user root Dec 19 23:37:51 ispc postfix/smtpd[2133346]: sql auxprop plugin using mysql engine Dec 19 23:37:51 ispc saslauthd[2133352]: pam_mysql - SELECT returned no result. Dec 19 23:37:51 ispc saslauthd[2133352]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:37:51 ispc saslauthd[2133352]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:38:01 ispc CRON[2133361]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:38:01 ispc sshd[2133359]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:38:01 ispc sshd[2133359]: Invalid user admin from 2.57.121.112 Dec 19 23:38:02 ispc CRON[2133361]: pam_unix(cron:session): session closed for user root Dec 19 23:38:05 ispc sshd[2133378]: Invalid user matlbula from 221.156.137.103 Dec 19 23:38:53 ispc saslauthd[2133396]: pam_mysql - SELECT returned no result. Dec 19 23:38:53 ispc saslauthd[2133396]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:38:53 ispc saslauthd[2133396]: do_auth : auth failure: [user=craft] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:39:01 ispc CRON[2133405]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:39:01 ispc CRON[2133404]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:39:01 ispc CRON[2133404]: pam_unix(cron:session): session closed for user root Dec 19 23:39:01 ispc CRON[2133405]: pam_unix(cron:session): session closed for user root Dec 19 23:39:43 ispc sshd[2133443]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:40:01 ispc CRON[2133455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:40:01 ispc CRON[2133456]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:40:01 ispc CRON[2133457]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:40:01 ispc CRON[2133459]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:40:01 ispc CRON[2133458]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:40:01 ispc CRON[2133456]: pam_unix(cron:session): session closed for user root Dec 19 23:40:01 ispc CRON[2133457]: pam_unix(cron:session): session closed for user www-data Dec 19 23:40:01 ispc CRON[2133459]: pam_unix(cron:session): session closed for user getmail Dec 19 23:40:02 ispc CRON[2133455]: pam_unix(cron:session): session closed for user root Dec 19 23:40:02 ispc CRON[2133458]: pam_unix(cron:session): session closed for user root Dec 19 23:40:25 ispc sshd[2133541]: Did not receive identification string from 192.227.134.84 Dec 19 23:41:01 ispc CRON[2133559]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:41:01 ispc CRON[2133559]: pam_unix(cron:session): session closed for user root Dec 19 23:41:07 ispc postfix/smtpd[2133575]: sql auxprop plugin using mysql engine Dec 19 23:41:08 ispc saslauthd[2133577]: pam_mysql - SELECT returned no result. Dec 19 23:41:08 ispc saslauthd[2133577]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:41:08 ispc saslauthd[2133577]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:41:27 ispc CRON[2132387]: pam_unix(cron:session): session closed for user root Dec 19 23:41:28 ispc sshd[2133590]: Invalid user blceu from 52.232.19.79 Dec 19 23:42:01 ispc CRON[2133593]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:42:01 ispc CRON[2133593]: pam_unix(cron:session): session closed for user root Dec 19 23:42:12 ispc saslauthd[2133605]: pam_mysql - SELECT returned no result. Dec 19 23:42:12 ispc saslauthd[2133605]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:42:12 ispc saslauthd[2133605]: do_auth : auth failure: [user=server@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 19 23:43:01 ispc CRON[2133616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:43:02 ispc CRON[2133616]: pam_unix(cron:session): session closed for user root Dec 19 23:44:01 ispc CRON[2133630]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:44:02 ispc CRON[2133630]: pam_unix(cron:session): session closed for user root Dec 19 23:44:43 ispc saslauthd[2133643]: pam_mysql - SELECT returned no result. Dec 19 23:44:43 ispc saslauthd[2133643]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:44:43 ispc saslauthd[2133643]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:44:57 ispc sshd[2133646]: Did not receive identification string from 91.98.236.122 Dec 19 23:44:57 ispc sshd[2133645]: Did not receive identification string from 91.98.236.122 Dec 19 23:45:01 ispc CRON[2133653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:45:01 ispc CRON[2133656]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:45:01 ispc CRON[2133654]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:45:01 ispc CRON[2133655]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:45:01 ispc CRON[2133654]: pam_unix(cron:session): session closed for user root Dec 19 23:45:01 ispc CRON[2133656]: pam_unix(cron:session): session closed for user getmail Dec 19 23:45:02 ispc CRON[2133653]: pam_unix(cron:session): session closed for user root Dec 19 23:45:38 ispc CRON[2133655]: pam_unix(cron:session): session closed for user root Dec 19 23:46:01 ispc CRON[2133842]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:47:01 ispc CRON[2133874]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:47:02 ispc CRON[2133874]: pam_unix(cron:session): session closed for user root Dec 19 23:48:01 ispc CRON[2133922]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:48:01 ispc CRON[2133922]: pam_unix(cron:session): session closed for user root Dec 19 23:49:01 ispc CRON[2133964]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:49:01 ispc CRON[2133964]: pam_unix(cron:session): session closed for user root Dec 19 23:50:01 ispc CRON[2134003]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:50:01 ispc CRON[2134004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:50:01 ispc CRON[2134007]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:50:01 ispc CRON[2134006]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:50:01 ispc CRON[2134005]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 19 23:50:01 ispc CRON[2134004]: pam_unix(cron:session): session closed for user root Dec 19 23:50:01 ispc CRON[2134005]: pam_unix(cron:session): session closed for user www-data Dec 19 23:50:02 ispc CRON[2134007]: pam_unix(cron:session): session closed for user getmail Dec 19 23:50:02 ispc CRON[2134006]: pam_unix(cron:session): session closed for user root Dec 19 23:50:02 ispc CRON[2134003]: pam_unix(cron:session): session closed for user root Dec 19 23:51:01 ispc CRON[2134106]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:51:02 ispc CRON[2134106]: pam_unix(cron:session): session closed for user root Dec 19 23:52:01 ispc CRON[2134149]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:52:01 ispc sshd[2134147]: Invalid user martof from 51.91.76.213 Dec 19 23:52:01 ispc CRON[2134149]: pam_unix(cron:session): session closed for user root Dec 19 23:52:13 ispc postfix/smtpd[2134164]: sql auxprop plugin using mysql engine Dec 19 23:52:13 ispc saslauthd[2134167]: pam_mysql - SELECT returned no result. Dec 19 23:52:13 ispc saslauthd[2134167]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:52:13 ispc saslauthd[2134167]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:53:01 ispc CRON[2134195]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:53:02 ispc CRON[2134195]: pam_unix(cron:session): session closed for user root Dec 19 23:53:44 ispc saslauthd[2134224]: pam_mysql - SELECT returned no result. Dec 19 23:53:44 ispc saslauthd[2134224]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:53:44 ispc saslauthd[2134224]: do_auth : auth failure: [user=cusadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:54:01 ispc CRON[2134233]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:54:01 ispc CRON[2134233]: pam_unix(cron:session): session closed for user root Dec 19 23:54:06 ispc sshd[2134244]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 19 23:55:01 ispc CRON[2134277]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 19 23:55:01 ispc CRON[2134274]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:55:01 ispc CRON[2134275]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:55:01 ispc CRON[2134276]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:55:01 ispc CRON[2134275]: pam_unix(cron:session): session closed for user root Dec 19 23:55:01 ispc CRON[2134277]: pam_unix(cron:session): session closed for user getmail Dec 19 23:55:01 ispc CRON[2134276]: pam_unix(cron:session): session closed for user root Dec 19 23:55:02 ispc CRON[2134274]: pam_unix(cron:session): session closed for user root Dec 19 23:56:01 ispc CRON[2134372]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:56:01 ispc CRON[2134372]: pam_unix(cron:session): session closed for user root Dec 19 23:56:18 ispc postfix/smtpd[2134391]: sql auxprop plugin using mysql engine Dec 19 23:56:19 ispc saslauthd[2134393]: pam_mysql - SELECT returned no result. Dec 19 23:56:19 ispc saslauthd[2134393]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:56:19 ispc saslauthd[2134393]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 19 23:57:02 ispc CRON[2134416]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:57:02 ispc CRON[2134416]: pam_unix(cron:session): session closed for user root Dec 19 23:57:42 ispc sshd[2134450]: Invalid user user from 143.20.185.79 Dec 19 23:57:42 ispc sshd[2134448]: Invalid user ziplines from 119.205.233.162 Dec 19 23:57:43 ispc sshd[2134458]: Invalid user user from 143.20.185.79 Dec 19 23:57:48 ispc sshd[2134461]: Invalid user admin from 143.20.185.79 Dec 19 23:58:01 ispc CRON[2134473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:58:01 ispc CRON[2134473]: pam_unix(cron:session): session closed for user root Dec 19 23:59:01 ispc CRON[2134513]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 19 23:59:02 ispc CRON[2134513]: pam_unix(cron:session): session closed for user root Dec 19 23:59:06 ispc postfix/smtpd[2134528]: sql auxprop plugin using mysql engine Dec 19 23:59:07 ispc postfix/smtpd[2134530]: sql auxprop plugin using mysql engine Dec 19 23:59:34 ispc postfix/smtpd[2134543]: sql auxprop plugin using mysql engine Dec 19 23:59:35 ispc saslauthd[2134548]: pam_mysql - SELECT returned no result. Dec 19 23:59:35 ispc saslauthd[2134548]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 19 23:59:35 ispc saslauthd[2134548]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:00:01 ispc CRON[2134564]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:00:01 ispc CRON[2134562]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:00:01 ispc CRON[2134563]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:00:01 ispc CRON[2134565]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:00:01 ispc CRON[2134566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:00:01 ispc CRON[2134567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:00:01 ispc CRON[2134568]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:00:01 ispc CRON[2134563]: pam_unix(cron:session): session closed for user root Dec 20 00:00:01 ispc CRON[2134564]: pam_unix(cron:session): session closed for user www-data Dec 20 00:00:01 ispc CRON[2134568]: pam_unix(cron:session): session closed for user getmail Dec 20 00:00:01 ispc CRON[2134566]: pam_unix(cron:session): session closed for user root Dec 20 00:00:01 ispc CRON[2134567]: pam_unix(cron:session): session closed for user root Dec 20 00:00:01 ispc CRON[2134565]: pam_unix(cron:session): session closed for user root Dec 20 00:00:01 ispc CRON[2134562]: pam_unix(cron:session): session closed for user root Dec 20 00:01:01 ispc CRON[2134749]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:01:02 ispc CRON[2134749]: pam_unix(cron:session): session closed for user root Dec 20 00:02:01 ispc CRON[2134790]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 20 00:02:01 ispc CRON[2134791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:02:02 ispc CRON[2134791]: pam_unix(cron:session): session closed for user root Dec 20 00:02:52 ispc CRON[2134790]: pam_unix(cron:session): session closed for user logcheck Dec 20 00:03:01 ispc CRON[2135847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:03:01 ispc CRON[2135847]: pam_unix(cron:session): session closed for user root Dec 20 00:03:02 ispc postfix/smtpd[2135859]: sql auxprop plugin using mysql engine Dec 20 00:04:01 ispc CRON[2135893]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:04:02 ispc CRON[2135893]: pam_unix(cron:session): session closed for user root Dec 20 00:04:02 ispc sshd[2135901]: Did not receive identification string from 45.140.17.97 Dec 20 00:04:02 ispc postfix/smtpd[2135906]: sql auxprop plugin using mysql engine Dec 20 00:05:01 ispc CRON[2135934]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:05:01 ispc CRON[2135936]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:05:01 ispc CRON[2135937]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:05:01 ispc CRON[2135935]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:05:01 ispc CRON[2135935]: pam_unix(cron:session): session closed for user root Dec 20 00:05:01 ispc CRON[2135937]: pam_unix(cron:session): session closed for user getmail Dec 20 00:05:01 ispc CRON[2135936]: pam_unix(cron:session): session closed for user root Dec 20 00:05:02 ispc CRON[2135934]: pam_unix(cron:session): session closed for user root Dec 20 00:06:01 ispc CRON[2136033]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:06:01 ispc CRON[2136033]: pam_unix(cron:session): session closed for user root Dec 20 00:06:32 ispc CRON[2133842]: pam_unix(cron:session): session closed for user root Dec 20 00:06:32 ispc postfix/smtpd[2136059]: sql auxprop plugin using mysql engine Dec 20 00:06:58 ispc sshd[2136065]: Invalid user blceu from 221.156.137.103 Dec 20 00:07:01 ispc CRON[2136068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:07:01 ispc CRON[2136068]: pam_unix(cron:session): session closed for user root Dec 20 00:07:12 ispc saslauthd[2136080]: pam_mysql - SELECT returned no result. Dec 20 00:07:12 ispc saslauthd[2136080]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:07:12 ispc saslauthd[2136080]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:08:01 ispc CRON[2136090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:08:03 ispc CRON[2136090]: pam_unix(cron:session): session closed for user root Dec 20 00:08:31 ispc saslauthd[2136105]: pam_mysql - SELECT returned no result. Dec 20 00:08:31 ispc saslauthd[2136105]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:08:31 ispc saslauthd[2136105]: do_auth : auth failure: [user=cust] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:09:01 ispc CRON[2136108]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:09:01 ispc CRON[2136109]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:09:01 ispc CRON[2136108]: pam_unix(cron:session): session closed for user root Dec 20 00:09:01 ispc CRON[2136109]: pam_unix(cron:session): session closed for user root Dec 20 00:09:38 ispc sshd[2136133]: Invalid user martof from 211.23.78.98 Dec 20 00:10:01 ispc CRON[2136135]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:10:01 ispc CRON[2136136]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:10:01 ispc CRON[2136137]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:10:01 ispc CRON[2136138]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:10:01 ispc CRON[2136139]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:10:01 ispc CRON[2136137]: pam_unix(cron:session): session closed for user www-data Dec 20 00:10:01 ispc CRON[2136136]: pam_unix(cron:session): session closed for user root Dec 20 00:10:01 ispc CRON[2136139]: pam_unix(cron:session): session closed for user getmail Dec 20 00:10:02 ispc CRON[2136135]: pam_unix(cron:session): session closed for user root Dec 20 00:10:41 ispc CRON[2136138]: pam_unix(cron:session): session closed for user root Dec 20 00:11:01 ispc CRON[2136253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:11:04 ispc sshd[2136265]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:11:25 ispc saslauthd[2136275]: pam_mysql - SELECT returned no result. Dec 20 00:11:25 ispc saslauthd[2136275]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:11:25 ispc saslauthd[2136275]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:12:01 ispc CRON[2136289]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:12:01 ispc CRON[2136289]: pam_unix(cron:session): session closed for user root Dec 20 00:13:01 ispc CRON[2136337]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:13:02 ispc CRON[2136337]: pam_unix(cron:session): session closed for user root Dec 20 00:13:09 ispc sshd[2136353]: Invalid user blceu from 211.23.78.98 Dec 20 00:13:44 ispc sshd[2136371]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:14:01 ispc CRON[2136381]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:14:03 ispc CRON[2136381]: pam_unix(cron:session): session closed for user root Dec 20 00:14:30 ispc sshd[2136404]: Invalid user ziplines from 185.181.182.252 Dec 20 00:14:31 ispc postfix/smtpd[2136406]: sql auxprop plugin using mysql engine Dec 20 00:14:31 ispc saslauthd[2136408]: pam_mysql - SELECT returned no result. Dec 20 00:14:31 ispc saslauthd[2136408]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:14:31 ispc saslauthd[2136408]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:15:01 ispc CRON[2136422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:15:01 ispc CRON[2136423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:15:01 ispc CRON[2136424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:15:01 ispc CRON[2136425]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:15:01 ispc CRON[2136423]: pam_unix(cron:session): session closed for user root Dec 20 00:15:01 ispc CRON[2136425]: pam_unix(cron:session): session closed for user getmail Dec 20 00:15:01 ispc CRON[2136424]: pam_unix(cron:session): session closed for user root Dec 20 00:15:01 ispc CRON[2136422]: pam_unix(cron:session): session closed for user root Dec 20 00:16:01 ispc CRON[2136528]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:16:02 ispc CRON[2136528]: pam_unix(cron:session): session closed for user root Dec 20 00:17:01 ispc CRON[2136567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:17:02 ispc CRON[2136567]: pam_unix(cron:session): session closed for user root Dec 20 00:18:01 ispc CRON[2136604]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 20 00:18:01 ispc CRON[2136605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:18:01 ispc CRON[2136605]: pam_unix(cron:session): session closed for user root Dec 20 00:18:05 ispc CRON[2136604]: pam_unix(cron:session): session closed for user amavis Dec 20 00:18:07 ispc postfix/smtpd[2136636]: sql auxprop plugin using mysql engine Dec 20 00:19:02 ispc CRON[2136663]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:19:03 ispc CRON[2136663]: pam_unix(cron:session): session closed for user root Dec 20 00:20:01 ispc CRON[2136700]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:20:01 ispc CRON[2136701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:20:01 ispc CRON[2136702]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:20:01 ispc CRON[2136703]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:20:01 ispc CRON[2136704]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:20:01 ispc CRON[2136702]: pam_unix(cron:session): session closed for user www-data Dec 20 00:20:01 ispc CRON[2136701]: pam_unix(cron:session): session closed for user root Dec 20 00:20:01 ispc CRON[2136704]: pam_unix(cron:session): session closed for user getmail Dec 20 00:20:01 ispc CRON[2136703]: pam_unix(cron:session): session closed for user root Dec 20 00:20:03 ispc CRON[2136700]: pam_unix(cron:session): session closed for user root Dec 20 00:20:21 ispc sshd[2136786]: Invalid user blceu from 45.119.213.109 Dec 20 00:21:01 ispc CRON[2136808]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:21:01 ispc CRON[2136809]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:21:01 ispc CRON[2136808]: pam_unix(cron:session): session closed for user root Dec 20 00:21:02 ispc CRON[2136809]: pam_unix(cron:session): session closed for user root Dec 20 00:21:59 ispc postfix/smtpd[2136849]: sql auxprop plugin using mysql engine Dec 20 00:22:01 ispc saslauthd[2136852]: pam_mysql - SELECT returned no result. Dec 20 00:22:01 ispc saslauthd[2136852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:22:01 ispc saslauthd[2136852]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:22:01 ispc CRON[2136853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:22:02 ispc CRON[2136853]: pam_unix(cron:session): session closed for user root Dec 20 00:23:01 ispc CRON[2136898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:23:01 ispc CRON[2136898]: pam_unix(cron:session): session closed for user root Dec 20 00:23:04 ispc sshd[2136909]: Did not receive identification string from 192.227.134.84 Dec 20 00:23:18 ispc saslauthd[2136920]: pam_mysql - SELECT returned no result. Dec 20 00:23:18 ispc saslauthd[2136920]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:23:18 ispc saslauthd[2136920]: do_auth : auth failure: [user=dadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:24:01 ispc CRON[2136940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:24:02 ispc CRON[2136940]: pam_unix(cron:session): session closed for user root Dec 20 00:24:49 ispc sshd[2136967]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:50 ispc sshd[2136969]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:50 ispc sshd[2136971]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:51 ispc sshd[2136973]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:52 ispc sshd[2136979]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:52 ispc sshd[2136981]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:53 ispc sshd[2136983]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:54 ispc sshd[2136985]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:55 ispc sshd[2136987]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:56 ispc sshd[2136990]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:56 ispc sshd[2136992]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:57 ispc sshd[2136994]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:57 ispc sshd[2136996]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:58 ispc sshd[2136998]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:59 ispc sshd[2137001]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:24:59 ispc sshd[2137005]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:00 ispc sshd[2137007]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:01 ispc sshd[2137009]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:01 ispc CRON[2137011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:25:01 ispc CRON[2137012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:25:01 ispc CRON[2137013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:25:01 ispc CRON[2137014]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:25:01 ispc CRON[2137012]: pam_unix(cron:session): session closed for user root Dec 20 00:25:01 ispc CRON[2137014]: pam_unix(cron:session): session closed for user getmail Dec 20 00:25:01 ispc sshd[2137019]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:01 ispc sshd[2137019]: Invalid user Antminer from 179.43.184.242 Dec 20 00:25:01 ispc CRON[2137013]: pam_unix(cron:session): session closed for user root Dec 20 00:25:02 ispc sshd[2137050]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:02 ispc sshd[2137050]: Invalid user Antminer from 179.43.184.242 Dec 20 00:25:03 ispc sshd[2137068]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:03 ispc CRON[2137011]: pam_unix(cron:session): session closed for user root Dec 20 00:25:03 ispc sshd[2137090]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:04 ispc sshd[2137099]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:05 ispc sshd[2137101]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:06 ispc sshd[2137103]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:07 ispc sshd[2137105]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:07 ispc sshd[2137105]: Invalid user admin from 179.43.184.242 Dec 20 00:25:07 ispc sshd[2137107]: Address 179.43.184.242 maps to hostedby.privatelayer.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:25:07 ispc sshd[2137107]: Invalid user baikal from 179.43.184.242 Dec 20 00:26:01 ispc CRON[2137131]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:26:02 ispc CRON[2137131]: pam_unix(cron:session): session closed for user root Dec 20 00:26:33 ispc postfix/smtpd[2137156]: sql auxprop plugin using mysql engine Dec 20 00:26:33 ispc sshd[2137154]: reverse mapping checking getaddrinfo for 23-94-28-167-host.colocrossing.com [23.94.28.167] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:26:33 ispc saslauthd[2137162]: pam_mysql - SELECT returned no result. Dec 20 00:26:33 ispc saslauthd[2137162]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:26:33 ispc saslauthd[2137162]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:27:01 ispc CRON[2137172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:27:02 ispc CRON[2137172]: pam_unix(cron:session): session closed for user root Dec 20 00:27:49 ispc sshd[2137209]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:27:49 ispc sshd[2137209]: Invalid user ziplines from 103.28.37.227 Dec 20 00:28:01 ispc CRON[2137219]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:28:01 ispc CRON[2137219]: pam_unix(cron:session): session closed for user root Dec 20 00:28:41 ispc postfix/smtpd[2137250]: sql auxprop plugin using mysql engine Dec 20 00:28:44 ispc saslauthd[2137252]: pam_mysql - SELECT returned no result. Dec 20 00:28:44 ispc saslauthd[2137252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:28:44 ispc saslauthd[2137252]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:28:49 ispc saslauthd[2137259]: pam_mysql - SELECT returned no result. Dec 20 00:28:49 ispc saslauthd[2137259]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:28:49 ispc saslauthd[2137259]: do_auth : auth failure: [user=postmaster@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 20 00:29:01 ispc CRON[2137267]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:29:02 ispc CRON[2137267]: pam_unix(cron:session): session closed for user root Dec 20 00:29:43 ispc saslauthd[2137298]: pam_mysql - SELECT returned no result. Dec 20 00:29:43 ispc saslauthd[2137298]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:29:43 ispc saslauthd[2137298]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:30:01 ispc CRON[2137308]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:30:01 ispc CRON[2137309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:30:01 ispc CRON[2137310]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:30:01 ispc CRON[2137311]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:30:01 ispc CRON[2137312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:30:01 ispc CRON[2137313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:30:01 ispc CRON[2137313]: pam_unix(cron:session): session closed for user getmail Dec 20 00:30:01 ispc CRON[2137310]: pam_unix(cron:session): session closed for user www-data Dec 20 00:30:01 ispc CRON[2137309]: pam_unix(cron:session): session closed for user root Dec 20 00:30:02 ispc CRON[2137308]: pam_unix(cron:session): session closed for user root Dec 20 00:30:02 ispc CRON[2137312]: pam_unix(cron:session): session closed for user root Dec 20 00:30:17 ispc saslauthd[2137526]: pam_mysql - SELECT returned no result. Dec 20 00:30:17 ispc saslauthd[2137526]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:30:17 ispc saslauthd[2137526]: do_auth : auth failure: [user=data@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 00:31:01 ispc CRON[2137545]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:31:02 ispc CRON[2137545]: pam_unix(cron:session): session closed for user root Dec 20 00:31:20 ispc sshd[2137565]: Invalid user ziplines from 51.77.203.224 Dec 20 00:31:26 ispc CRON[2136253]: pam_unix(cron:session): session closed for user root Dec 20 00:32:01 ispc CRON[2137574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:32:02 ispc CRON[2137574]: pam_unix(cron:session): session closed for user root Dec 20 00:33:01 ispc CRON[2137601]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:33:02 ispc CRON[2137601]: pam_unix(cron:session): session closed for user root Dec 20 00:34:01 ispc CRON[2137616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:34:02 ispc CRON[2137616]: pam_unix(cron:session): session closed for user root Dec 20 00:35:01 ispc CRON[2137641]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:35:01 ispc CRON[2137642]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:35:01 ispc CRON[2137643]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:35:01 ispc CRON[2137644]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:35:01 ispc CRON[2137644]: pam_unix(cron:session): session closed for user getmail Dec 20 00:35:01 ispc CRON[2137642]: pam_unix(cron:session): session closed for user root Dec 20 00:35:02 ispc CRON[2137641]: pam_unix(cron:session): session closed for user root Dec 20 00:35:36 ispc sshd[2137750]: Address 103.28.37.227 maps to emk.elpis.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:35:36 ispc sshd[2137750]: Invalid user martof from 103.28.37.227 Dec 20 00:35:39 ispc CRON[2137643]: pam_unix(cron:session): session closed for user root Dec 20 00:36:01 ispc CRON[2137762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:37:01 ispc CRON[2137796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:37:02 ispc CRON[2137796]: pam_unix(cron:session): session closed for user root Dec 20 00:37:31 ispc postfix/smtpd[2137819]: sql auxprop plugin using mysql engine Dec 20 00:37:31 ispc saslauthd[2137821]: pam_mysql - SELECT returned no result. Dec 20 00:37:31 ispc saslauthd[2137821]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:37:31 ispc saslauthd[2137821]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:37:55 ispc sshd[2137837]: Invalid user pronajemplosin from 36.50.176.13 Dec 20 00:38:01 ispc CRON[2137845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:38:02 ispc CRON[2137845]: pam_unix(cron:session): session closed for user root Dec 20 00:38:03 ispc sshd[2137868]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:38:03 ispc sshd[2137868]: Invalid user martof from 157.245.115.125 Dec 20 00:38:12 ispc saslauthd[2137874]: pam_mysql - SELECT returned no result. Dec 20 00:38:12 ispc saslauthd[2137874]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:38:12 ispc saslauthd[2137874]: do_auth : auth failure: [user=daemon] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:39:01 ispc CRON[2137897]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:39:01 ispc CRON[2137898]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:39:02 ispc CRON[2137897]: pam_unix(cron:session): session closed for user root Dec 20 00:39:02 ispc CRON[2137898]: pam_unix(cron:session): session closed for user root Dec 20 00:40:01 ispc CRON[2137949]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:40:01 ispc CRON[2137950]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:40:01 ispc CRON[2137951]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:40:01 ispc CRON[2137952]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:40:01 ispc CRON[2137953]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:40:01 ispc CRON[2137951]: pam_unix(cron:session): session closed for user www-data Dec 20 00:40:01 ispc CRON[2137950]: pam_unix(cron:session): session closed for user root Dec 20 00:40:01 ispc CRON[2137953]: pam_unix(cron:session): session closed for user getmail Dec 20 00:40:03 ispc CRON[2137952]: pam_unix(cron:session): session closed for user root Dec 20 00:40:04 ispc CRON[2137949]: pam_unix(cron:session): session closed for user root Dec 20 00:41:01 ispc CRON[2138056]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:41:01 ispc CRON[2138056]: pam_unix(cron:session): session closed for user root Dec 20 00:41:06 ispc postfix/smtpd[2138071]: sql auxprop plugin using mysql engine Dec 20 00:41:07 ispc saslauthd[2138073]: pam_mysql - SELECT returned no result. Dec 20 00:41:07 ispc saslauthd[2138073]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:41:07 ispc saslauthd[2138073]: do_auth : auth failure: [user=www] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:41:44 ispc saslauthd[2138089]: pam_mysql - SELECT returned no result. Dec 20 00:41:44 ispc saslauthd[2138089]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:41:44 ispc saslauthd[2138089]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:41:49 ispc sshd[2138094]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:41:50 ispc sshd[2138096]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:41:50 ispc sshd[2138096]: Invalid user klape from 189.89.20.45 Dec 20 00:41:52 ispc sshd[2138098]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 00:41:52 ispc sshd[2138098]: Invalid user ubuntu from 189.89.20.45 Dec 20 00:42:01 ispc CRON[2138105]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:42:02 ispc CRON[2138105]: pam_unix(cron:session): session closed for user root Dec 20 00:43:01 ispc CRON[2138152]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:43:02 ispc CRON[2138152]: pam_unix(cron:session): session closed for user root Dec 20 00:43:13 ispc postfix/smtpd[2138170]: sql auxprop plugin using mysql engine Dec 20 00:43:24 ispc saslauthd[2138177]: pam_mysql - SELECT returned no result. Dec 20 00:43:24 ispc saslauthd[2138177]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:43:24 ispc saslauthd[2138177]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 20 00:43:47 ispc saslauthd[2138191]: pam_mysql - SELECT returned no result. Dec 20 00:43:47 ispc saslauthd[2138191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:43:47 ispc saslauthd[2138191]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:44:01 ispc CRON[2138197]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:44:03 ispc CRON[2138197]: pam_unix(cron:session): session closed for user root Dec 20 00:45:01 ispc CRON[2138235]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:45:01 ispc CRON[2138238]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:45:01 ispc CRON[2138236]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:45:01 ispc CRON[2138237]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:45:01 ispc CRON[2138236]: pam_unix(cron:session): session closed for user root Dec 20 00:45:01 ispc CRON[2138238]: pam_unix(cron:session): session closed for user getmail Dec 20 00:45:02 ispc CRON[2138237]: pam_unix(cron:session): session closed for user root Dec 20 00:45:03 ispc CRON[2138235]: pam_unix(cron:session): session closed for user root Dec 20 00:46:01 ispc CRON[2138338]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:46:02 ispc CRON[2138338]: pam_unix(cron:session): session closed for user root Dec 20 00:46:22 ispc postfix/smtpd[2138359]: sql auxprop plugin using mysql engine Dec 20 00:46:22 ispc saslauthd[2138361]: pam_mysql - SELECT returned no result. Dec 20 00:46:22 ispc saslauthd[2138361]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:46:22 ispc saslauthd[2138361]: do_auth : auth failure: [user=user] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:47:01 ispc CRON[2138668]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:47:02 ispc CRON[2138668]: pam_unix(cron:session): session closed for user root Dec 20 00:48:01 ispc CRON[2138712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:48:02 ispc CRON[2138712]: pam_unix(cron:session): session closed for user root Dec 20 00:49:01 ispc CRON[2138754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:49:02 ispc CRON[2138754]: pam_unix(cron:session): session closed for user root Dec 20 00:50:01 ispc CRON[2138791]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:50:01 ispc CRON[2138792]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:50:01 ispc CRON[2138794]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:50:01 ispc CRON[2138795]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:50:01 ispc CRON[2138793]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 00:50:01 ispc CRON[2138793]: pam_unix(cron:session): session closed for user www-data Dec 20 00:50:01 ispc CRON[2138792]: pam_unix(cron:session): session closed for user root Dec 20 00:50:01 ispc CRON[2138795]: pam_unix(cron:session): session closed for user getmail Dec 20 00:50:02 ispc CRON[2138794]: pam_unix(cron:session): session closed for user root Dec 20 00:50:03 ispc CRON[2138791]: pam_unix(cron:session): session closed for user root Dec 20 00:51:01 ispc CRON[2138892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:51:02 ispc CRON[2138892]: pam_unix(cron:session): session closed for user root Dec 20 00:52:01 ispc CRON[2138931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:52:01 ispc CRON[2138932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:52:01 ispc CRON[2138932]: pam_unix(cron:session): session closed for user root Dec 20 00:52:02 ispc postfix/smtpd[2138947]: sql auxprop plugin using mysql engine Dec 20 00:53:01 ispc CRON[2138994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:53:02 ispc saslauthd[2139006]: pam_mysql - SELECT returned no result. Dec 20 00:53:02 ispc saslauthd[2139006]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:53:02 ispc saslauthd[2139006]: do_auth : auth failure: [user=db2fenc1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:53:03 ispc CRON[2138994]: pam_unix(cron:session): session closed for user root Dec 20 00:53:59 ispc saslauthd[2139038]: pam_mysql - SELECT returned no result. Dec 20 00:53:59 ispc saslauthd[2139038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:53:59 ispc saslauthd[2139038]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:54:01 ispc CRON[2139039]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:54:01 ispc saslauthd[2139046]: pam_mysql - SELECT returned no result. Dec 20 00:54:01 ispc saslauthd[2139046]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:54:01 ispc saslauthd[2139046]: do_auth : auth failure: [user=postmaster@racing-kennel.com] [service=smtp] [realm=racing-kennel.com] [mech=pam] [reason=PAM auth error] Dec 20 00:54:01 ispc CRON[2139039]: pam_unix(cron:session): session closed for user root Dec 20 00:55:01 ispc CRON[2139084]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:55:01 ispc CRON[2139086]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:55:01 ispc CRON[2139087]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 00:55:02 ispc CRON[2139085]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:55:02 ispc CRON[2139085]: pam_unix(cron:session): session closed for user root Dec 20 00:55:02 ispc CRON[2139087]: pam_unix(cron:session): session closed for user getmail Dec 20 00:55:02 ispc CRON[2139086]: pam_unix(cron:session): session closed for user root Dec 20 00:55:02 ispc CRON[2139084]: pam_unix(cron:session): session closed for user root Dec 20 00:55:16 ispc saslauthd[2139166]: pam_mysql - SELECT returned no result. Dec 20 00:55:16 ispc saslauthd[2139166]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:55:16 ispc saslauthd[2139166]: do_auth : auth failure: [user=sales] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:55:20 ispc CRON[2138931]: pam_unix(cron:session): session closed for user root Dec 20 00:56:01 ispc CRON[2139189]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:56:01 ispc CRON[2139189]: pam_unix(cron:session): session closed for user root Dec 20 00:56:21 ispc sshd[2139213]: Invalid user blceu from 51.77.203.224 Dec 20 00:56:33 ispc CRON[2137762]: pam_unix(cron:session): session closed for user root Dec 20 00:56:54 ispc saslauthd[2139226]: pam_mysql - SELECT returned no result. Dec 20 00:56:54 ispc saslauthd[2139226]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 00:56:54 ispc saslauthd[2139226]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 00:57:01 ispc CRON[2139229]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:57:02 ispc CRON[2139229]: pam_unix(cron:session): session closed for user root Dec 20 00:58:01 ispc CRON[2139260]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:58:02 ispc CRON[2139260]: pam_unix(cron:session): session closed for user root Dec 20 00:59:01 ispc CRON[2139293]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 00:59:02 ispc CRON[2139293]: pam_unix(cron:session): session closed for user root Dec 20 00:59:40 ispc sshd[2139315]: Invalid user blceu from 49.247.24.89 Dec 20 01:00:01 ispc CRON[2139322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:00:01 ispc CRON[2139323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:00:01 ispc CRON[2139324]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:00:01 ispc CRON[2139325]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:00:01 ispc CRON[2139326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:00:01 ispc CRON[2139327]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:00:01 ispc CRON[2139323]: pam_unix(cron:session): session closed for user root Dec 20 01:00:01 ispc CRON[2139324]: pam_unix(cron:session): session closed for user www-data Dec 20 01:00:01 ispc CRON[2139327]: pam_unix(cron:session): session closed for user getmail Dec 20 01:00:02 ispc CRON[2139322]: pam_unix(cron:session): session closed for user root Dec 20 01:00:02 ispc CRON[2139325]: pam_unix(cron:session): session closed for user root Dec 20 01:00:14 ispc sshd[2139605]: Invalid user martof from 49.247.24.89 Dec 20 01:00:14 ispc CRON[2139326]: pam_unix(cron:session): session closed for user root Dec 20 01:01:01 ispc CRON[2139636]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:01:02 ispc CRON[2139636]: pam_unix(cron:session): session closed for user root Dec 20 01:02:01 ispc CRON[2139668]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 20 01:02:01 ispc CRON[2139669]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:02:02 ispc CRON[2139669]: pam_unix(cron:session): session closed for user root Dec 20 01:02:39 ispc saslauthd[2140382]: pam_mysql - SELECT returned no result. Dec 20 01:02:39 ispc saslauthd[2140382]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:02:39 ispc saslauthd[2140382]: do_auth : auth failure: [user=scan] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:03:01 ispc CRON[2140538]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:03:03 ispc CRON[2140538]: pam_unix(cron:session): session closed for user root Dec 20 01:03:20 ispc CRON[2139668]: pam_unix(cron:session): session closed for user logcheck Dec 20 01:03:27 ispc postfix/smtpd[2140745]: sql auxprop plugin using mysql engine Dec 20 01:04:01 ispc CRON[2140759]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:04:02 ispc CRON[2140759]: pam_unix(cron:session): session closed for user root Dec 20 01:05:01 ispc CRON[2140787]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:05:01 ispc CRON[2140788]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:05:01 ispc CRON[2140789]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:05:01 ispc CRON[2140790]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:05:01 ispc CRON[2140788]: pam_unix(cron:session): session closed for user root Dec 20 01:05:01 ispc CRON[2140790]: pam_unix(cron:session): session closed for user getmail Dec 20 01:05:04 ispc CRON[2140787]: pam_unix(cron:session): session closed for user root Dec 20 01:05:10 ispc CRON[2140789]: pam_unix(cron:session): session closed for user root Dec 20 01:05:16 ispc sshd[2140908]: Did not receive identification string from 192.227.134.84 Dec 20 01:05:40 ispc sshd[2140917]: Invalid user matlbula from 51.159.18.215 Dec 20 01:06:01 ispc CRON[2140924]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:06:03 ispc CRON[2140924]: pam_unix(cron:session): session closed for user root Dec 20 01:07:01 ispc CRON[2140954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:07:01 ispc CRON[2140954]: pam_unix(cron:session): session closed for user root Dec 20 01:07:24 ispc sshd[2140970]: Invalid user ziplines from 221.156.137.103 Dec 20 01:07:25 ispc CRON[2137311]: pam_unix(cron:session): session closed for user root Dec 20 01:07:42 ispc saslauthd[2140978]: pam_mysql - SELECT returned no result. Dec 20 01:07:42 ispc saslauthd[2140978]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:07:42 ispc saslauthd[2140978]: do_auth : auth failure: [user=db2inst1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:08:01 ispc CRON[2140990]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:08:02 ispc CRON[2140990]: pam_unix(cron:session): session closed for user root Dec 20 01:08:08 ispc sshd[2141008]: Invalid user lanovacentra from 51.159.18.215 Dec 20 01:09:01 ispc CRON[2141026]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:09:01 ispc CRON[2141025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:09:02 ispc CRON[2141025]: pam_unix(cron:session): session closed for user root Dec 20 01:09:03 ispc CRON[2141026]: pam_unix(cron:session): session closed for user root Dec 20 01:09:37 ispc sshd[2141055]: Invalid user lanovacentra from 14.103.206.196 Dec 20 01:09:48 ispc saslauthd[2141061]: pam_mysql - SELECT returned no result. Dec 20 01:09:48 ispc saslauthd[2141061]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:09:48 ispc saslauthd[2141061]: do_auth : auth failure: [user=scanner] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:10:01 ispc CRON[2141066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:10:01 ispc CRON[2141067]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:10:01 ispc CRON[2141068]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:10:01 ispc CRON[2141069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:10:01 ispc CRON[2141070]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:10:01 ispc CRON[2141068]: pam_unix(cron:session): session closed for user www-data Dec 20 01:10:01 ispc CRON[2141067]: pam_unix(cron:session): session closed for user root Dec 20 01:10:01 ispc CRON[2141070]: pam_unix(cron:session): session closed for user getmail Dec 20 01:10:03 ispc CRON[2141066]: pam_unix(cron:session): session closed for user root Dec 20 01:10:06 ispc CRON[2141069]: pam_unix(cron:session): session closed for user root Dec 20 01:10:34 ispc sshd[2141198]: Invalid user blceu from 221.156.137.103 Dec 20 01:11:01 ispc CRON[2141208]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:11:02 ispc CRON[2141208]: pam_unix(cron:session): session closed for user root Dec 20 01:11:34 ispc sshd[2141225]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:11:36 ispc sshd[2141231]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:11:36 ispc sshd[2141231]: Invalid user klape from 119.53.253.2 Dec 20 01:11:39 ispc sshd[2141233]: reverse mapping checking getaddrinfo for 2.253.53.119.adsl-pool.jlccptt.net.cn [119.53.253.2] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:11:39 ispc sshd[2141233]: Invalid user ubuntu from 119.53.253.2 Dec 20 01:12:01 ispc CRON[2141239]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:12:04 ispc CRON[2141239]: pam_unix(cron:session): session closed for user root Dec 20 01:12:07 ispc saslauthd[2141252]: pam_mysql - SELECT returned no result. Dec 20 01:12:07 ispc saslauthd[2141252]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:12:07 ispc saslauthd[2141252]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:13:01 ispc CRON[2141270]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:13:02 ispc CRON[2141270]: pam_unix(cron:session): session closed for user root Dec 20 01:14:01 ispc CRON[2141295]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:14:03 ispc CRON[2141295]: pam_unix(cron:session): session closed for user root Dec 20 01:14:38 ispc sshd[2141315]: Invalid user blceu from 116.120.58.228 Dec 20 01:15:01 ispc CRON[2141322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:15:01 ispc CRON[2141323]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:15:01 ispc CRON[2141324]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:15:01 ispc CRON[2141325]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:15:01 ispc CRON[2141323]: pam_unix(cron:session): session closed for user root Dec 20 01:15:01 ispc CRON[2141325]: pam_unix(cron:session): session closed for user getmail Dec 20 01:15:03 ispc CRON[2141322]: pam_unix(cron:session): session closed for user root Dec 20 01:15:12 ispc CRON[2141324]: pam_unix(cron:session): session closed for user root Dec 20 01:16:01 ispc CRON[2141546]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:16:03 ispc CRON[2141546]: pam_unix(cron:session): session closed for user root Dec 20 01:17:01 ispc CRON[2141575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:17:02 ispc CRON[2141575]: pam_unix(cron:session): session closed for user root Dec 20 01:17:06 ispc saslauthd[2141587]: pam_mysql - SELECT returned no result. Dec 20 01:17:06 ispc saslauthd[2141587]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:17:06 ispc saslauthd[2141587]: do_auth : auth failure: [user=backup] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:18:01 ispc CRON[2141609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:18:04 ispc CRON[2141609]: pam_unix(cron:session): session closed for user root Dec 20 01:19:01 ispc CRON[2141637]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:19:02 ispc saslauthd[2141645]: pam_mysql - SELECT returned no result. Dec 20 01:19:02 ispc saslauthd[2141645]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:19:02 ispc saslauthd[2141645]: do_auth : auth failure: [user=account@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 01:19:02 ispc CRON[2141637]: pam_unix(cron:session): session closed for user root Dec 20 01:19:19 ispc sshd[2141654]: Invalid user ziplines from 211.23.78.98 Dec 20 01:19:38 ispc sshd[2141668]: Invalid user klape from 36.50.177.171 Dec 20 01:19:39 ispc sshd[2141670]: Invalid user ubuntu from 36.50.177.171 Dec 20 01:20:01 ispc CRON[2141682]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:20:01 ispc CRON[2141678]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:20:01 ispc CRON[2141679]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:20:01 ispc CRON[2141680]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:20:01 ispc CRON[2141681]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:20:01 ispc CRON[2141679]: pam_unix(cron:session): session closed for user root Dec 20 01:20:01 ispc CRON[2141680]: pam_unix(cron:session): session closed for user www-data Dec 20 01:20:01 ispc CRON[2141682]: pam_unix(cron:session): session closed for user getmail Dec 20 01:20:02 ispc CRON[2141678]: pam_unix(cron:session): session closed for user root Dec 20 01:20:27 ispc CRON[2141681]: pam_unix(cron:session): session closed for user root Dec 20 01:20:30 ispc sshd[2141790]: Invalid user admin from 118.218.219.250 Dec 20 01:21:01 ispc CRON[2141797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:21:01 ispc CRON[2141796]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:21:01 ispc CRON[2141796]: pam_unix(cron:session): session closed for user root Dec 20 01:21:59 ispc postfix/smtpd[2141849]: sql auxprop plugin using mysql engine Dec 20 01:22:00 ispc saslauthd[2141852]: pam_mysql - SELECT returned no result. Dec 20 01:22:00 ispc saslauthd[2141852]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:22:00 ispc saslauthd[2141852]: do_auth : auth failure: [user=dbase] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:22:01 ispc CRON[2141853]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:22:02 ispc CRON[2141853]: pam_unix(cron:session): session closed for user root Dec 20 01:23:01 ispc CRON[2141911]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:23:02 ispc CRON[2141911]: pam_unix(cron:session): session closed for user root Dec 20 01:23:33 ispc sshd[2141945]: Invalid user martof from 119.205.233.162 Dec 20 01:24:01 ispc CRON[2141963]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:24:01 ispc CRON[2141963]: pam_unix(cron:session): session closed for user root Dec 20 01:24:35 ispc postfix/smtpd[2141995]: sql auxprop plugin using mysql engine Dec 20 01:24:36 ispc saslauthd[2141997]: pam_mysql - SELECT returned no result. Dec 20 01:24:36 ispc saslauthd[2141997]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:24:36 ispc saslauthd[2141997]: do_auth : auth failure: [user=testuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:25:01 ispc CRON[2142008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:25:01 ispc CRON[2142009]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:25:01 ispc CRON[2142010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:25:01 ispc CRON[2142011]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:25:01 ispc CRON[2142009]: pam_unix(cron:session): session closed for user root Dec 20 01:25:01 ispc CRON[2142011]: pam_unix(cron:session): session closed for user getmail Dec 20 01:25:01 ispc CRON[2142010]: pam_unix(cron:session): session closed for user root Dec 20 01:25:02 ispc CRON[2142008]: pam_unix(cron:session): session closed for user root Dec 20 01:25:56 ispc sshd[2142113]: Invalid user admin from 118.218.219.250 Dec 20 01:26:01 ispc CRON[2142121]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:26:02 ispc CRON[2142121]: pam_unix(cron:session): session closed for user root Dec 20 01:27:01 ispc CRON[2142164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:27:02 ispc CRON[2142164]: pam_unix(cron:session): session closed for user root Dec 20 01:27:14 ispc postfix/smtpd[2142180]: sql auxprop plugin using mysql engine Dec 20 01:27:15 ispc saslauthd[2142182]: pam_mysql - SELECT returned no result. Dec 20 01:27:15 ispc saslauthd[2142182]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:27:15 ispc saslauthd[2142182]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:27:50 ispc sshd[2142203]: Invalid user martof from 211.110.229.128 Dec 20 01:28:01 ispc CRON[2142214]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:28:02 ispc CRON[2142214]: pam_unix(cron:session): session closed for user root Dec 20 01:29:01 ispc CRON[2142262]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:29:01 ispc CRON[2142262]: pam_unix(cron:session): session closed for user root Dec 20 01:29:05 ispc sshd[2142276]: Invalid user hyundaicz from 114.246.241.87 Dec 20 01:30:01 ispc CRON[2142309]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:30:01 ispc CRON[2142310]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:30:01 ispc CRON[2142311]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:30:01 ispc CRON[2142312]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:30:01 ispc CRON[2142313]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:30:01 ispc CRON[2142311]: pam_unix(cron:session): session closed for user www-data Dec 20 01:30:01 ispc CRON[2142310]: pam_unix(cron:session): session closed for user root Dec 20 01:30:01 ispc CRON[2142313]: pam_unix(cron:session): session closed for user getmail Dec 20 01:30:02 ispc CRON[2142312]: pam_unix(cron:session): session closed for user root Dec 20 01:30:02 ispc CRON[2142309]: pam_unix(cron:session): session closed for user root Dec 20 01:31:01 ispc CRON[2142419]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:31:01 ispc CRON[2142419]: pam_unix(cron:session): session closed for user root Dec 20 01:31:45 ispc postfix/smtpd[2142453]: sql auxprop plugin using mysql engine Dec 20 01:31:46 ispc saslauthd[2142456]: pam_mysql - SELECT returned no result. Dec 20 01:31:46 ispc saslauthd[2142456]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:31:46 ispc saslauthd[2142456]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:32:01 ispc CRON[2142466]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:32:02 ispc CRON[2142466]: pam_unix(cron:session): session closed for user root Dec 20 01:32:08 ispc sshd[2142478]: Invalid user default from 185.156.73.233 Dec 20 01:33:01 ispc CRON[2142523]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:33:03 ispc CRON[2142523]: pam_unix(cron:session): session closed for user root Dec 20 01:34:01 ispc CRON[2142569]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:34:01 ispc CRON[2142569]: pam_unix(cron:session): session closed for user root Dec 20 01:35:01 ispc CRON[2142612]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:35:01 ispc CRON[2142613]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:35:01 ispc CRON[2142614]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:35:01 ispc CRON[2142615]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:35:01 ispc CRON[2142613]: pam_unix(cron:session): session closed for user root Dec 20 01:35:01 ispc CRON[2142615]: pam_unix(cron:session): session closed for user getmail Dec 20 01:35:02 ispc CRON[2142614]: pam_unix(cron:session): session closed for user root Dec 20 01:35:02 ispc CRON[2142612]: pam_unix(cron:session): session closed for user root Dec 20 01:36:01 ispc CRON[2142719]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:36:02 ispc CRON[2142719]: pam_unix(cron:session): session closed for user root Dec 20 01:36:46 ispc postfix/smtpd[2142752]: sql auxprop plugin using mysql engine Dec 20 01:36:47 ispc saslauthd[2142755]: pam_mysql - SELECT returned no result. Dec 20 01:36:47 ispc saslauthd[2142755]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:36:47 ispc saslauthd[2142755]: do_auth : auth failure: [user=debug] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:37:01 ispc CRON[2142762]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:37:01 ispc CRON[2142762]: pam_unix(cron:session): session closed for user root Dec 20 01:37:04 ispc sshd[2142779]: Invalid user tshombeknife from 114.246.241.87 Dec 20 01:37:20 ispc sshd[2142788]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:37:27 ispc sshd[2142794]: Invalid user blceu from 35.239.77.168 Dec 20 01:38:01 ispc CRON[2142816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:38:02 ispc CRON[2142816]: pam_unix(cron:session): session closed for user root Dec 20 01:38:53 ispc postfix/smtpd[2142856]: sql auxprop plugin using mysql engine Dec 20 01:38:53 ispc saslauthd[2142862]: pam_mysql - SELECT returned no result. Dec 20 01:38:53 ispc saslauthd[2142862]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:38:53 ispc saslauthd[2142862]: do_auth : auth failure: [user=spam] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:39:01 ispc CRON[2142863]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:39:01 ispc CRON[2142864]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:39:01 ispc CRON[2142863]: pam_unix(cron:session): session closed for user root Dec 20 01:39:02 ispc CRON[2142864]: pam_unix(cron:session): session closed for user root Dec 20 01:40:01 ispc CRON[2142916]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:40:01 ispc CRON[2142917]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:40:01 ispc CRON[2142918]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:40:01 ispc CRON[2142919]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:40:01 ispc CRON[2142920]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:40:01 ispc CRON[2142917]: pam_unix(cron:session): session closed for user root Dec 20 01:40:01 ispc CRON[2142918]: pam_unix(cron:session): session closed for user www-data Dec 20 01:40:02 ispc CRON[2142920]: pam_unix(cron:session): session closed for user getmail Dec 20 01:40:02 ispc CRON[2142919]: pam_unix(cron:session): session closed for user root Dec 20 01:40:02 ispc CRON[2142916]: pam_unix(cron:session): session closed for user root Dec 20 01:40:57 ispc sshd[2143023]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:40:57 ispc sshd[2143023]: Invalid user blceu from 157.245.115.125 Dec 20 01:41:01 ispc CRON[2143025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:41:02 ispc CRON[2143025]: pam_unix(cron:session): session closed for user root Dec 20 01:41:16 ispc postfix/smtpd[2143044]: sql auxprop plugin using mysql engine Dec 20 01:41:16 ispc CRON[2141797]: pam_unix(cron:session): session closed for user root Dec 20 01:42:01 ispc CRON[2143050]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:42:02 ispc CRON[2143050]: pam_unix(cron:session): session closed for user root Dec 20 01:42:23 ispc saslauthd[2143065]: pam_mysql - SELECT returned no result. Dec 20 01:42:23 ispc saslauthd[2143065]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:42:23 ispc saslauthd[2143065]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:42:41 ispc sshd[2143066]: Invalid user admin from 185.156.73.233 Dec 20 01:42:50 ispc sshd[2143068]: Invalid user ziplines from 185.208.181.153 Dec 20 01:43:01 ispc CRON[2143082]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:43:02 ispc CRON[2143082]: pam_unix(cron:session): session closed for user root Dec 20 01:44:01 ispc CRON[2143096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:44:02 ispc CRON[2143096]: pam_unix(cron:session): session closed for user root Dec 20 01:45:01 ispc CRON[2143111]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:45:01 ispc CRON[2143112]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:45:01 ispc CRON[2143113]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:45:01 ispc CRON[2143114]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:45:01 ispc CRON[2143112]: pam_unix(cron:session): session closed for user root Dec 20 01:45:01 ispc CRON[2143114]: pam_unix(cron:session): session closed for user getmail Dec 20 01:45:03 ispc CRON[2143111]: pam_unix(cron:session): session closed for user root Dec 20 01:45:43 ispc CRON[2143113]: pam_unix(cron:session): session closed for user root Dec 20 01:46:01 ispc CRON[2143302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:46:03 ispc saslauthd[2143314]: pam_mysql - SELECT returned no result. Dec 20 01:46:03 ispc saslauthd[2143314]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:46:03 ispc saslauthd[2143314]: do_auth : auth failure: [user=ftpuser] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:47:01 ispc CRON[2143343]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:47:01 ispc CRON[2143343]: pam_unix(cron:session): session closed for user root Dec 20 01:47:34 ispc sshd[2143376]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:47:34 ispc sshd[2143376]: Invalid user admin from 2.57.121.112 Dec 20 01:48:01 ispc CRON[2143390]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:48:02 ispc CRON[2143390]: pam_unix(cron:session): session closed for user root Dec 20 01:48:06 ispc sshd[2143410]: Did not receive identification string from 45.140.17.97 Dec 20 01:48:06 ispc postfix/smtpd[2143411]: sql auxprop plugin using mysql engine Dec 20 01:48:41 ispc sshd[2143430]: Invalid user klape from 103.164.20.29 Dec 20 01:48:42 ispc sshd[2143432]: Invalid user ubuntu from 103.164.20.29 Dec 20 01:49:01 ispc CRON[2143444]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:49:02 ispc CRON[2143444]: pam_unix(cron:session): session closed for user root Dec 20 01:50:01 ispc CRON[2143482]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:50:01 ispc CRON[2143484]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:50:01 ispc CRON[2143481]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:50:01 ispc CRON[2143485]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:50:01 ispc CRON[2143483]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 01:50:01 ispc CRON[2143482]: pam_unix(cron:session): session closed for user root Dec 20 01:50:01 ispc CRON[2143483]: pam_unix(cron:session): session closed for user www-data Dec 20 01:50:01 ispc CRON[2143485]: pam_unix(cron:session): session closed for user getmail Dec 20 01:50:01 ispc CRON[2143481]: pam_unix(cron:session): session closed for user root Dec 20 01:50:01 ispc CRON[2143484]: pam_unix(cron:session): session closed for user root Dec 20 01:51:01 ispc CRON[2143609]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:51:02 ispc CRON[2143609]: pam_unix(cron:session): session closed for user root Dec 20 01:51:31 ispc postfix/smtpd[2143632]: sql auxprop plugin using mysql engine Dec 20 01:51:32 ispc saslauthd[2143635]: pam_mysql - SELECT returned no result. Dec 20 01:51:32 ispc saslauthd[2143635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:51:32 ispc saslauthd[2143635]: do_auth : auth failure: [user=default] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:52:01 ispc CRON[2143648]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:52:01 ispc CRON[2143648]: pam_unix(cron:session): session closed for user root Dec 20 01:53:02 ispc CRON[2143692]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:53:02 ispc CRON[2143692]: pam_unix(cron:session): session closed for user root Dec 20 01:53:05 ispc postfix/smtpd[2143703]: sql auxprop plugin using mysql engine Dec 20 01:53:06 ispc saslauthd[2143710]: pam_mysql - SELECT returned no result. Dec 20 01:53:06 ispc saslauthd[2143710]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:53:06 ispc saslauthd[2143710]: do_auth : auth failure: [user=oracle] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:53:31 ispc sshd[2143725]: Did not receive identification string from 192.227.134.84 Dec 20 01:54:00 ispc sshd[2143741]: Invalid user postgres from 185.156.73.233 Dec 20 01:54:01 ispc CRON[2143743]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:54:02 ispc CRON[2143743]: pam_unix(cron:session): session closed for user root Dec 20 01:55:01 ispc CRON[2143779]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:55:01 ispc CRON[2143782]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 01:55:01 ispc CRON[2143780]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:55:01 ispc CRON[2143781]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:55:01 ispc CRON[2143780]: pam_unix(cron:session): session closed for user root Dec 20 01:55:01 ispc CRON[2143782]: pam_unix(cron:session): session closed for user getmail Dec 20 01:55:01 ispc CRON[2143781]: pam_unix(cron:session): session closed for user root Dec 20 01:55:03 ispc CRON[2143779]: pam_unix(cron:session): session closed for user root Dec 20 01:55:26 ispc postfix/smtpd[2143865]: sql auxprop plugin using mysql engine Dec 20 01:55:26 ispc saslauthd[2143867]: pam_mysql - SELECT returned no result. Dec 20 01:55:26 ispc saslauthd[2143867]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:55:26 ispc saslauthd[2143867]: do_auth : auth failure: [user=webadmin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:55:44 ispc sshd[2143878]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 01:55:44 ispc sshd[2143878]: Invalid user ziplines from 157.245.115.125 Dec 20 01:56:01 ispc CRON[2143888]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:56:01 ispc CRON[2143888]: pam_unix(cron:session): session closed for user root Dec 20 01:56:28 ispc sshd[2143907]: Invalid user lanovacentra from 35.239.77.168 Dec 20 01:56:53 ispc postfix/smtpd[2143927]: sql auxprop plugin using mysql engine Dec 20 01:57:01 ispc CRON[2143940]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:57:01 ispc CRON[2143940]: pam_unix(cron:session): session closed for user root Dec 20 01:57:33 ispc saslauthd[2143965]: pam_mysql - SELECT returned no result. Dec 20 01:57:33 ispc saslauthd[2143965]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 01:57:33 ispc saslauthd[2143965]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 01:58:01 ispc CRON[2143986]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:58:02 ispc CRON[2143986]: pam_unix(cron:session): session closed for user root Dec 20 01:58:54 ispc sshd[2144019]: Invalid user ziplines from 51.91.76.213 Dec 20 01:59:01 ispc CRON[2144025]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 01:59:02 ispc CRON[2144025]: pam_unix(cron:session): session closed for user root Dec 20 02:00:01 ispc CRON[2144067]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:00:01 ispc CRON[2144066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc CRON[2144069]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc CRON[2144065]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc CRON[2144068]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc CRON[2144070]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:00:01 ispc CRON[2144066]: pam_unix(cron:session): session closed for user root Dec 20 02:00:01 ispc CRON[2144067]: pam_unix(cron:session): session closed for user www-data Dec 20 02:00:01 ispc CRON[2144070]: pam_unix(cron:session): session closed for user getmail Dec 20 02:00:01 ispc CRON[2144065]: pam_unix(cron:session): session closed for user root Dec 20 02:00:01 ispc su[2144238]: Successful su for root by root Dec 20 02:00:01 ispc su[2144238]: + ??? root:root Dec 20 02:00:01 ispc su[2144238]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc su[2144238]: pam_unix(su:session): session closed for user root Dec 20 02:00:01 ispc su[2144243]: Successful su for root by root Dec 20 02:00:01 ispc su[2144243]: + ??? root:root Dec 20 02:00:01 ispc su[2144243]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:01 ispc CRON[2144069]: pam_unix(cron:session): session closed for user root Dec 20 02:00:01 ispc su[2144243]: pam_unix(su:session): session closed for user root Dec 20 02:00:01 ispc su[2144246]: Successful su for root by root Dec 20 02:00:01 ispc su[2144246]: + ??? root:root Dec 20 02:00:01 ispc su[2144246]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:02 ispc su[2144246]: pam_unix(su:session): session closed for user root Dec 20 02:00:02 ispc su[2144252]: Successful su for root by root Dec 20 02:00:02 ispc su[2144252]: + ??? root:root Dec 20 02:00:02 ispc su[2144252]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:02 ispc su[2144252]: pam_unix(su:session): session closed for user root Dec 20 02:00:02 ispc su[2144255]: Successful su for root by root Dec 20 02:00:02 ispc su[2144255]: + ??? root:root Dec 20 02:00:02 ispc su[2144255]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:03 ispc su[2144255]: pam_unix(su:session): session closed for user root Dec 20 02:00:03 ispc su[2144261]: Successful su for root by root Dec 20 02:00:03 ispc su[2144261]: + ??? root:root Dec 20 02:00:03 ispc su[2144261]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:03 ispc su[2144261]: pam_unix(su:session): session closed for user root Dec 20 02:00:03 ispc su[2144264]: Successful su for root by root Dec 20 02:00:03 ispc su[2144264]: + ??? root:root Dec 20 02:00:04 ispc su[2144264]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:07 ispc sshd[2144268]: Address 193.110.157.47 maps to ash.phenome.org, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Dec 20 02:00:12 ispc su[2144264]: pam_unix(su:session): session closed for user root Dec 20 02:00:12 ispc su[2144278]: Successful su for root by root Dec 20 02:00:12 ispc su[2144278]: + ??? root:root Dec 20 02:00:12 ispc su[2144278]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:12 ispc su[2144278]: pam_unix(su:session): session closed for user root Dec 20 02:00:12 ispc su[2144281]: Successful su for root by root Dec 20 02:00:12 ispc su[2144281]: + ??? root:root Dec 20 02:00:12 ispc su[2144281]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:13 ispc su[2144281]: pam_unix(su:session): session closed for user root Dec 20 02:00:13 ispc su[2144287]: Successful su for root by root Dec 20 02:00:13 ispc su[2144287]: + ??? root:root Dec 20 02:00:13 ispc su[2144287]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:13 ispc su[2144287]: pam_unix(su:session): session closed for user root Dec 20 02:00:13 ispc su[2144290]: Successful su for root by root Dec 20 02:00:13 ispc su[2144290]: + ??? root:root Dec 20 02:00:13 ispc su[2144290]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:18 ispc su[2144290]: pam_unix(su:session): session closed for user root Dec 20 02:00:18 ispc su[2144296]: Successful su for root by root Dec 20 02:00:18 ispc su[2144296]: + ??? root:root Dec 20 02:00:18 ispc su[2144296]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:19 ispc su[2144296]: pam_unix(su:session): session closed for user root Dec 20 02:00:19 ispc su[2144299]: Successful su for root by root Dec 20 02:00:19 ispc su[2144299]: + ??? root:root Dec 20 02:00:19 ispc su[2144299]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:19 ispc su[2144299]: pam_unix(su:session): session closed for user root Dec 20 02:00:19 ispc su[2144305]: Successful su for root by root Dec 20 02:00:19 ispc su[2144305]: + ??? root:root Dec 20 02:00:19 ispc su[2144305]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:19 ispc su[2144305]: pam_unix(su:session): session closed for user root Dec 20 02:00:19 ispc su[2144308]: Successful su for root by root Dec 20 02:00:19 ispc su[2144308]: + ??? root:root Dec 20 02:00:19 ispc su[2144308]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:20 ispc postfix/smtpd[2144313]: sql auxprop plugin using mysql engine Dec 20 02:00:20 ispc saslauthd[2144318]: pam_mysql - SELECT returned no result. Dec 20 02:00:20 ispc saslauthd[2144318]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:00:20 ispc saslauthd[2144318]: do_auth : auth failure: [user=support] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:00:24 ispc su[2144308]: pam_unix(su:session): session closed for user root Dec 20 02:00:24 ispc su[2144321]: Successful su for root by root Dec 20 02:00:24 ispc su[2144321]: + ??? root:root Dec 20 02:00:24 ispc su[2144321]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:24 ispc su[2144321]: pam_unix(su:session): session closed for user root Dec 20 02:00:24 ispc su[2144324]: Successful su for root by root Dec 20 02:00:24 ispc su[2144324]: + ??? root:root Dec 20 02:00:24 ispc su[2144324]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:26 ispc su[2144324]: pam_unix(su:session): session closed for user root Dec 20 02:00:26 ispc su[2144330]: Successful su for root by root Dec 20 02:00:26 ispc su[2144330]: + ??? root:root Dec 20 02:00:26 ispc su[2144330]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:26 ispc su[2144330]: pam_unix(su:session): session closed for user root Dec 20 02:00:26 ispc su[2144333]: Successful su for root by root Dec 20 02:00:26 ispc su[2144333]: + ??? root:root Dec 20 02:00:26 ispc su[2144333]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:33 ispc sshd[2144343]: Invalid user anoraksro from 106.12.215.233 Dec 20 02:00:35 ispc su[2144333]: pam_unix(su:session): session closed for user root Dec 20 02:00:35 ispc su[2144347]: Successful su for root by root Dec 20 02:00:35 ispc su[2144347]: + ??? root:root Dec 20 02:00:35 ispc su[2144347]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:35 ispc su[2144347]: pam_unix(su:session): session closed for user root Dec 20 02:00:35 ispc su[2144350]: Successful su for root by root Dec 20 02:00:35 ispc su[2144350]: + ??? root:root Dec 20 02:00:35 ispc su[2144350]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:36 ispc su[2144350]: pam_unix(su:session): session closed for user root Dec 20 02:00:36 ispc su[2144356]: Successful su for root by root Dec 20 02:00:36 ispc su[2144356]: + ??? root:root Dec 20 02:00:36 ispc su[2144356]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:36 ispc su[2144356]: pam_unix(su:session): session closed for user root Dec 20 02:00:36 ispc su[2144359]: Successful su for root by root Dec 20 02:00:36 ispc su[2144359]: + ??? root:root Dec 20 02:00:36 ispc su[2144359]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:37 ispc su[2144359]: pam_unix(su:session): session closed for user root Dec 20 02:00:37 ispc su[2144365]: Successful su for root by root Dec 20 02:00:37 ispc su[2144365]: + ??? root:root Dec 20 02:00:37 ispc su[2144365]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:00:37 ispc su[2144365]: pam_unix(su:session): session closed for user root Dec 20 02:00:37 ispc su[2144368]: Successful su for root by root Dec 20 02:00:37 ispc su[2144368]: + ??? root:root Dec 20 02:00:37 ispc su[2144368]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:01:01 ispc CRON[2144384]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:01:02 ispc CRON[2144384]: pam_unix(cron:session): session closed for user root Dec 20 02:02:01 ispc CRON[2144424]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:02:01 ispc CRON[2144423]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 20 02:02:02 ispc CRON[2144424]: pam_unix(cron:session): session closed for user root Dec 20 02:02:57 ispc CRON[2144423]: pam_unix(cron:session): session closed for user logcheck Dec 20 02:03:01 ispc CRON[2145493]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:03:02 ispc CRON[2145493]: pam_unix(cron:session): session closed for user root Dec 20 02:03:04 ispc postfix/smtpd[2145505]: sql auxprop plugin using mysql engine Dec 20 02:04:01 ispc CRON[2145531]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:04:01 ispc CRON[2145531]: pam_unix(cron:session): session closed for user root Dec 20 02:05:02 ispc CRON[2145571]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:05:02 ispc CRON[2145572]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:05:02 ispc CRON[2145573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:05:02 ispc CRON[2145574]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:05:02 ispc CRON[2145572]: pam_unix(cron:session): session closed for user root Dec 20 02:05:02 ispc CRON[2145574]: pam_unix(cron:session): session closed for user getmail Dec 20 02:05:03 ispc CRON[2145573]: pam_unix(cron:session): session closed for user root Dec 20 02:05:05 ispc CRON[2145571]: pam_unix(cron:session): session closed for user root Dec 20 02:05:08 ispc postfix/smtpd[2145653]: sql auxprop plugin using mysql engine Dec 20 02:05:08 ispc sshd[2145651]: Invalid user martof from 51.77.203.224 Dec 20 02:05:09 ispc saslauthd[2145656]: pam_mysql - SELECT returned no result. Dec 20 02:05:09 ispc saslauthd[2145656]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:05:09 ispc saslauthd[2145656]: do_auth : auth failure: [user=access@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 02:05:22 ispc sshd[2145661]: Invalid user 12345 from 185.156.73.233 Dec 20 02:06:01 ispc CRON[2145680]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:06:02 ispc CRON[2145680]: pam_unix(cron:session): session closed for user root Dec 20 02:06:13 ispc CRON[2143302]: pam_unix(cron:session): session closed for user root Dec 20 02:06:22 ispc saslauthd[2145701]: pam_mysql - SELECT returned no result. Dec 20 02:06:22 ispc saslauthd[2145701]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:06:22 ispc saslauthd[2145701]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:06:43 ispc su[2144368]: pam_unix(su:session): session closed for user root Dec 20 02:06:43 ispc su[2145706]: Successful su for root by root Dec 20 02:06:43 ispc su[2145706]: + ??? root:root Dec 20 02:06:43 ispc su[2145706]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:43 ispc su[2145706]: pam_unix(su:session): session closed for user root Dec 20 02:06:43 ispc su[2145710]: Successful su for root by root Dec 20 02:06:43 ispc su[2145710]: + ??? root:root Dec 20 02:06:43 ispc su[2145710]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:47 ispc su[2145710]: pam_unix(su:session): session closed for user root Dec 20 02:06:47 ispc su[2145716]: Successful su for root by root Dec 20 02:06:47 ispc su[2145716]: + ??? root:root Dec 20 02:06:47 ispc su[2145716]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:47 ispc su[2145716]: pam_unix(su:session): session closed for user root Dec 20 02:06:47 ispc su[2145720]: Successful su for root by root Dec 20 02:06:47 ispc su[2145720]: + ??? root:root Dec 20 02:06:47 ispc su[2145720]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:51 ispc su[2145720]: pam_unix(su:session): session closed for user root Dec 20 02:06:51 ispc su[2145726]: Successful su for root by root Dec 20 02:06:51 ispc su[2145726]: + ??? root:root Dec 20 02:06:51 ispc su[2145726]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:51 ispc su[2145726]: pam_unix(su:session): session closed for user root Dec 20 02:06:51 ispc su[2145729]: Successful su for root by root Dec 20 02:06:51 ispc su[2145729]: + ??? root:root Dec 20 02:06:51 ispc su[2145729]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:52 ispc su[2145729]: pam_unix(su:session): session closed for user root Dec 20 02:06:52 ispc su[2145735]: Successful su for root by root Dec 20 02:06:52 ispc su[2145735]: + ??? root:root Dec 20 02:06:52 ispc su[2145735]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:52 ispc su[2145735]: pam_unix(su:session): session closed for user root Dec 20 02:06:52 ispc su[2145738]: Successful su for root by root Dec 20 02:06:52 ispc su[2145738]: + ??? root:root Dec 20 02:06:52 ispc su[2145738]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:54 ispc su[2145738]: pam_unix(su:session): session closed for user root Dec 20 02:06:54 ispc su[2145745]: Successful su for root by root Dec 20 02:06:54 ispc su[2145745]: + ??? root:root Dec 20 02:06:54 ispc su[2145745]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:06:54 ispc su[2145745]: pam_unix(su:session): session closed for user root Dec 20 02:06:54 ispc su[2145748]: Successful su for root by root Dec 20 02:06:54 ispc su[2145748]: + ??? root:root Dec 20 02:06:54 ispc su[2145748]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:01 ispc CRON[2145752]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:07:02 ispc CRON[2145752]: pam_unix(cron:session): session closed for user root Dec 20 02:07:07 ispc su[2145748]: pam_unix(su:session): session closed for user root Dec 20 02:07:07 ispc su[2145765]: Successful su for root by root Dec 20 02:07:07 ispc su[2145765]: + ??? root:root Dec 20 02:07:07 ispc su[2145765]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:07 ispc su[2145765]: pam_unix(su:session): session closed for user root Dec 20 02:07:07 ispc su[2145768]: Successful su for root by root Dec 20 02:07:07 ispc su[2145768]: + ??? root:root Dec 20 02:07:07 ispc su[2145768]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:32 ispc saslauthd[2145772]: pam_mysql - SELECT returned no result. Dec 20 02:07:32 ispc saslauthd[2145772]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:07:32 ispc saslauthd[2145772]: do_auth : auth failure: [user=server] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:07:36 ispc su[2145768]: pam_unix(su:session): session closed for user root Dec 20 02:07:36 ispc su[2145775]: Successful su for root by root Dec 20 02:07:36 ispc su[2145775]: + ??? root:root Dec 20 02:07:36 ispc su[2145775]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:36 ispc su[2145775]: pam_unix(su:session): session closed for user root Dec 20 02:07:36 ispc su[2145779]: Successful su for root by root Dec 20 02:07:36 ispc su[2145779]: + ??? root:root Dec 20 02:07:36 ispc su[2145779]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:38 ispc su[2145779]: pam_unix(su:session): session closed for user root Dec 20 02:07:38 ispc su[2145785]: Successful su for root by root Dec 20 02:07:38 ispc su[2145785]: + ??? root:root Dec 20 02:07:38 ispc su[2145785]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:07:38 ispc su[2145785]: pam_unix(su:session): session closed for user root Dec 20 02:07:38 ispc su[2145788]: Successful su for root by root Dec 20 02:07:38 ispc su[2145788]: + ??? root:root Dec 20 02:07:38 ispc su[2145788]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:08:01 ispc CRON[2145797]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:08:02 ispc CRON[2145797]: pam_unix(cron:session): session closed for user root Dec 20 02:09:01 ispc CRON[2145816]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:09:01 ispc CRON[2145817]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:09:01 ispc CRON[2145816]: pam_unix(cron:session): session closed for user root Dec 20 02:09:02 ispc CRON[2145817]: pam_unix(cron:session): session closed for user root Dec 20 02:10:01 ispc CRON[2145844]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:10:01 ispc CRON[2145845]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:10:01 ispc CRON[2145846]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:10:01 ispc CRON[2145847]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:10:01 ispc CRON[2145848]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:10:01 ispc CRON[2145845]: pam_unix(cron:session): session closed for user root Dec 20 02:10:01 ispc CRON[2145846]: pam_unix(cron:session): session closed for user www-data Dec 20 02:10:01 ispc CRON[2145848]: pam_unix(cron:session): session closed for user getmail Dec 20 02:10:02 ispc CRON[2145844]: pam_unix(cron:session): session closed for user root Dec 20 02:10:40 ispc CRON[2145847]: pam_unix(cron:session): session closed for user root Dec 20 02:11:01 ispc CRON[2145961]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:11:12 ispc su[2145788]: pam_unix(su:session): session closed for user root Dec 20 02:11:12 ispc su[2145976]: Successful su for root by root Dec 20 02:11:12 ispc su[2145976]: + ??? root:root Dec 20 02:11:12 ispc su[2145976]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:11:12 ispc su[2145976]: pam_unix(su:session): session closed for user root Dec 20 02:11:12 ispc su[2145979]: Successful su for root by root Dec 20 02:11:12 ispc su[2145979]: + ??? root:root Dec 20 02:11:12 ispc su[2145979]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:12:01 ispc CRON[2146004]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:12:02 ispc CRON[2146004]: pam_unix(cron:session): session closed for user root Dec 20 02:12:43 ispc postfix/smtpd[2146035]: sql auxprop plugin using mysql engine Dec 20 02:12:43 ispc saslauthd[2146037]: pam_mysql - SELECT returned no result. Dec 20 02:12:43 ispc saslauthd[2146037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:12:43 ispc saslauthd[2146037]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:13:01 ispc su[2145979]: pam_unix(su:session): session closed for user root Dec 20 02:13:01 ispc su[2146059]: Successful su for root by root Dec 20 02:13:01 ispc su[2146059]: + ??? root:root Dec 20 02:13:01 ispc su[2146059]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:01 ispc su[2146059]: pam_unix(su:session): session closed for user root Dec 20 02:13:01 ispc su[2146062]: Successful su for root by root Dec 20 02:13:01 ispc su[2146062]: + ??? root:root Dec 20 02:13:01 ispc su[2146062]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:01 ispc CRON[2146066]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:13:02 ispc CRON[2146066]: pam_unix(cron:session): session closed for user root Dec 20 02:13:03 ispc su[2146062]: pam_unix(su:session): session closed for user root Dec 20 02:13:03 ispc su[2146079]: Successful su for root by root Dec 20 02:13:03 ispc su[2146079]: + ??? root:root Dec 20 02:13:03 ispc su[2146079]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:03 ispc su[2146079]: pam_unix(su:session): session closed for user root Dec 20 02:13:03 ispc su[2146082]: Successful su for root by root Dec 20 02:13:03 ispc su[2146082]: + ??? root:root Dec 20 02:13:03 ispc su[2146082]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:18 ispc su[2146082]: pam_unix(su:session): session closed for user root Dec 20 02:13:18 ispc su[2146096]: Successful su for root by root Dec 20 02:13:18 ispc su[2146096]: + ??? root:root Dec 20 02:13:18 ispc su[2146096]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:18 ispc su[2146096]: pam_unix(su:session): session closed for user root Dec 20 02:13:18 ispc su[2146099]: Successful su for root by root Dec 20 02:13:18 ispc su[2146099]: + ??? root:root Dec 20 02:13:18 ispc su[2146099]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:20 ispc su[2146099]: pam_unix(su:session): session closed for user root Dec 20 02:13:20 ispc su[2146105]: Successful su for root by root Dec 20 02:13:20 ispc su[2146105]: + ??? root:root Dec 20 02:13:20 ispc su[2146105]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:20 ispc su[2146105]: pam_unix(su:session): session closed for user root Dec 20 02:13:20 ispc su[2146108]: Successful su for root by root Dec 20 02:13:20 ispc su[2146108]: + ??? root:root Dec 20 02:13:20 ispc su[2146108]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:22 ispc su[2146108]: pam_unix(su:session): session closed for user root Dec 20 02:13:22 ispc su[2146114]: Successful su for root by root Dec 20 02:13:22 ispc su[2146114]: + ??? root:root Dec 20 02:13:22 ispc su[2146114]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:22 ispc su[2146114]: pam_unix(su:session): session closed for user root Dec 20 02:13:22 ispc su[2146117]: Successful su for root by root Dec 20 02:13:22 ispc su[2146117]: + ??? root:root Dec 20 02:13:22 ispc su[2146117]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:28 ispc su[2146117]: pam_unix(su:session): session closed for user root Dec 20 02:13:28 ispc su[2146127]: Successful su for root by root Dec 20 02:13:28 ispc su[2146127]: + ??? root:root Dec 20 02:13:28 ispc su[2146127]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:28 ispc su[2146127]: pam_unix(su:session): session closed for user root Dec 20 02:13:28 ispc su[2146130]: Successful su for root by root Dec 20 02:13:28 ispc su[2146130]: + ??? root:root Dec 20 02:13:28 ispc su[2146130]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:29 ispc su[2146130]: pam_unix(su:session): session closed for user root Dec 20 02:13:29 ispc su[2146136]: Successful su for root by root Dec 20 02:13:29 ispc su[2146136]: + ??? root:root Dec 20 02:13:29 ispc su[2146136]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:29 ispc su[2146136]: pam_unix(su:session): session closed for user root Dec 20 02:13:29 ispc su[2146139]: Successful su for root by root Dec 20 02:13:29 ispc su[2146139]: + ??? root:root Dec 20 02:13:29 ispc su[2146139]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:30 ispc su[2146139]: pam_unix(su:session): session closed for user root Dec 20 02:13:30 ispc su[2146145]: Successful su for root by root Dec 20 02:13:30 ispc su[2146145]: + ??? root:root Dec 20 02:13:30 ispc su[2146145]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:30 ispc su[2146145]: pam_unix(su:session): session closed for user root Dec 20 02:13:31 ispc su[2146148]: Successful su for root by root Dec 20 02:13:31 ispc su[2146148]: + ??? root:root Dec 20 02:13:31 ispc su[2146148]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:31 ispc su[2146148]: pam_unix(su:session): session closed for user root Dec 20 02:13:31 ispc su[2146154]: Successful su for root by root Dec 20 02:13:31 ispc su[2146154]: + ??? root:root Dec 20 02:13:31 ispc su[2146154]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:31 ispc su[2146154]: pam_unix(su:session): session closed for user root Dec 20 02:13:31 ispc su[2146157]: Successful su for root by root Dec 20 02:13:31 ispc su[2146157]: + ??? root:root Dec 20 02:13:31 ispc su[2146157]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:36 ispc su[2146157]: pam_unix(su:session): session closed for user root Dec 20 02:13:36 ispc su[2146167]: Successful su for root by root Dec 20 02:13:36 ispc su[2146167]: + ??? root:root Dec 20 02:13:36 ispc su[2146167]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:36 ispc su[2146167]: pam_unix(su:session): session closed for user root Dec 20 02:13:36 ispc su[2146170]: Successful su for root by root Dec 20 02:13:36 ispc su[2146170]: + ??? root:root Dec 20 02:13:36 ispc su[2146170]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:36 ispc su[2146170]: pam_unix(su:session): session closed for user root Dec 20 02:13:36 ispc su[2146176]: Successful su for root by root Dec 20 02:13:37 ispc su[2146176]: + ??? root:root Dec 20 02:13:37 ispc su[2146176]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:37 ispc su[2146176]: pam_unix(su:session): session closed for user root Dec 20 02:13:37 ispc su[2146179]: Successful su for root by root Dec 20 02:13:37 ispc su[2146179]: + ??? root:root Dec 20 02:13:37 ispc su[2146179]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:41 ispc su[2146179]: pam_unix(su:session): session closed for user root Dec 20 02:13:41 ispc su[2146185]: Successful su for root by root Dec 20 02:13:41 ispc su[2146185]: + ??? root:root Dec 20 02:13:41 ispc su[2146185]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:42 ispc su[2146185]: pam_unix(su:session): session closed for user root Dec 20 02:13:42 ispc su[2146188]: Successful su for root by root Dec 20 02:13:42 ispc su[2146188]: + ??? root:root Dec 20 02:13:42 ispc su[2146188]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:42 ispc su[2146188]: pam_unix(su:session): session closed for user root Dec 20 02:13:42 ispc su[2146194]: Successful su for root by root Dec 20 02:13:42 ispc su[2146194]: + ??? root:root Dec 20 02:13:42 ispc su[2146194]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:42 ispc su[2146194]: pam_unix(su:session): session closed for user root Dec 20 02:13:42 ispc su[2146197]: Successful su for root by root Dec 20 02:13:42 ispc su[2146197]: + ??? root:root Dec 20 02:13:42 ispc su[2146197]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:45 ispc su[2146197]: pam_unix(su:session): session closed for user root Dec 20 02:13:45 ispc su[2146203]: Successful su for root by root Dec 20 02:13:45 ispc su[2146203]: + ??? root:root Dec 20 02:13:45 ispc su[2146203]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:45 ispc su[2146203]: pam_unix(su:session): session closed for user root Dec 20 02:13:45 ispc su[2146206]: Successful su for root by root Dec 20 02:13:45 ispc su[2146206]: + ??? root:root Dec 20 02:13:45 ispc su[2146206]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:46 ispc su[2146206]: pam_unix(su:session): session closed for user root Dec 20 02:13:46 ispc su[2146216]: Successful su for root by root Dec 20 02:13:46 ispc su[2146216]: + ??? root:root Dec 20 02:13:46 ispc su[2146216]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:13:46 ispc su[2146216]: pam_unix(su:session): session closed for user root Dec 20 02:13:46 ispc su[2146219]: Successful su for root by root Dec 20 02:13:46 ispc su[2146219]: + ??? root:root Dec 20 02:13:46 ispc su[2146219]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:14:01 ispc CRON[2146227]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:14:02 ispc CRON[2146227]: pam_unix(cron:session): session closed for user root Dec 20 02:14:04 ispc su[2146219]: pam_unix(su:session): session closed for user root Dec 20 02:14:04 ispc su[2146240]: Successful su for root by root Dec 20 02:14:04 ispc su[2146240]: + ??? root:root Dec 20 02:14:04 ispc su[2146240]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:14:04 ispc su[2146240]: pam_unix(su:session): session closed for user root Dec 20 02:14:04 ispc su[2146243]: Successful su for root by root Dec 20 02:14:04 ispc su[2146243]: + ??? root:root Dec 20 02:14:04 ispc su[2146243]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:14:32 ispc postfix/smtpd[2146261]: sql auxprop plugin using mysql engine Dec 20 02:14:33 ispc saslauthd[2146263]: pam_mysql - SELECT returned no result. Dec 20 02:14:33 ispc saslauthd[2146263]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:14:33 ispc saslauthd[2146263]: do_auth : auth failure: [user=data] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:15:01 ispc CRON[2146277]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:15:01 ispc CRON[2146278]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:15:01 ispc CRON[2146279]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:15:01 ispc CRON[2146280]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:15:01 ispc CRON[2146280]: pam_unix(cron:session): session closed for user getmail Dec 20 02:15:01 ispc CRON[2146278]: pam_unix(cron:session): session closed for user root Dec 20 02:15:02 ispc CRON[2146279]: pam_unix(cron:session): session closed for user root Dec 20 02:15:02 ispc CRON[2146277]: pam_unix(cron:session): session closed for user root Dec 20 02:16:01 ispc CRON[2146382]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:16:02 ispc CRON[2146382]: pam_unix(cron:session): session closed for user root Dec 20 02:16:34 ispc sshd[2146405]: Invalid user a from 185.156.73.233 Dec 20 02:17:01 ispc CRON[2146423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:17:02 ispc CRON[2146423]: pam_unix(cron:session): session closed for user root Dec 20 02:17:52 ispc su[2146243]: pam_unix(su:session): session closed for user root Dec 20 02:17:52 ispc su[2146463]: Successful su for root by root Dec 20 02:17:52 ispc su[2146463]: + ??? root:root Dec 20 02:17:52 ispc su[2146463]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:17:52 ispc su[2146463]: pam_unix(su:session): session closed for user root Dec 20 02:17:52 ispc su[2146466]: Successful su for root by root Dec 20 02:17:52 ispc su[2146466]: + ??? root:root Dec 20 02:17:52 ispc su[2146466]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:17:53 ispc su[2146466]: pam_unix(su:session): session closed for user root Dec 20 02:17:53 ispc su[2146472]: Successful su for root by root Dec 20 02:17:53 ispc su[2146472]: + ??? root:root Dec 20 02:17:53 ispc su[2146472]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:17:53 ispc su[2146472]: pam_unix(su:session): session closed for user root Dec 20 02:17:53 ispc su[2146475]: Successful su for root by root Dec 20 02:17:53 ispc su[2146475]: + ??? root:root Dec 20 02:17:53 ispc su[2146475]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:01 ispc CRON[2146487]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:18:02 ispc CRON[2146487]: pam_unix(cron:session): session closed for user root Dec 20 02:18:13 ispc su[2146475]: pam_unix(su:session): session closed for user root Dec 20 02:18:13 ispc su[2146505]: Successful su for root by root Dec 20 02:18:13 ispc su[2146505]: + ??? root:root Dec 20 02:18:13 ispc su[2146505]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:13 ispc su[2146505]: pam_unix(su:session): session closed for user root Dec 20 02:18:13 ispc su[2146508]: Successful su for root by root Dec 20 02:18:13 ispc su[2146508]: + ??? root:root Dec 20 02:18:13 ispc su[2146508]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:14 ispc su[2146508]: pam_unix(su:session): session closed for user root Dec 20 02:18:14 ispc su[2146514]: Successful su for root by root Dec 20 02:18:14 ispc su[2146514]: + ??? root:root Dec 20 02:18:14 ispc su[2146514]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:14 ispc su[2146514]: pam_unix(su:session): session closed for user root Dec 20 02:18:14 ispc su[2146517]: Successful su for root by root Dec 20 02:18:14 ispc su[2146517]: + ??? root:root Dec 20 02:18:14 ispc su[2146517]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:15 ispc su[2146517]: pam_unix(su:session): session closed for user root Dec 20 02:18:15 ispc su[2146523]: Successful su for root by root Dec 20 02:18:15 ispc su[2146523]: + ??? root:root Dec 20 02:18:15 ispc su[2146523]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:15 ispc su[2146523]: pam_unix(su:session): session closed for user root Dec 20 02:18:15 ispc su[2146526]: Successful su for root by root Dec 20 02:18:15 ispc su[2146526]: + ??? root:root Dec 20 02:18:15 ispc su[2146526]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:16 ispc su[2146526]: pam_unix(su:session): session closed for user root Dec 20 02:18:16 ispc su[2146532]: Successful su for root by root Dec 20 02:18:16 ispc su[2146532]: + ??? root:root Dec 20 02:18:16 ispc su[2146532]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:16 ispc su[2146532]: pam_unix(su:session): session closed for user root Dec 20 02:18:16 ispc su[2146535]: Successful su for root by root Dec 20 02:18:16 ispc su[2146535]: + ??? root:root Dec 20 02:18:17 ispc su[2146535]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:21 ispc su[2146535]: pam_unix(su:session): session closed for user root Dec 20 02:18:21 ispc su[2146545]: Successful su for root by root Dec 20 02:18:21 ispc su[2146545]: + ??? root:root Dec 20 02:18:21 ispc su[2146545]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:21 ispc su[2146545]: pam_unix(su:session): session closed for user root Dec 20 02:18:21 ispc su[2146548]: Successful su for root by root Dec 20 02:18:21 ispc su[2146548]: + ??? root:root Dec 20 02:18:21 ispc su[2146548]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:22 ispc su[2146548]: pam_unix(su:session): session closed for user root Dec 20 02:18:22 ispc su[2146554]: Successful su for root by root Dec 20 02:18:22 ispc su[2146554]: + ??? root:root Dec 20 02:18:22 ispc su[2146554]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:22 ispc su[2146554]: pam_unix(su:session): session closed for user root Dec 20 02:18:22 ispc su[2146557]: Successful su for root by root Dec 20 02:18:22 ispc su[2146557]: + ??? root:root Dec 20 02:18:22 ispc su[2146557]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:50 ispc su[2146557]: pam_unix(su:session): session closed for user root Dec 20 02:18:50 ispc su[2146575]: Successful su for root by root Dec 20 02:18:50 ispc su[2146575]: + ??? root:root Dec 20 02:18:50 ispc su[2146575]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:50 ispc su[2146575]: pam_unix(su:session): session closed for user root Dec 20 02:18:50 ispc su[2146578]: Successful su for root by root Dec 20 02:18:50 ispc su[2146578]: + ??? root:root Dec 20 02:18:50 ispc su[2146578]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:50 ispc su[2146578]: pam_unix(su:session): session closed for user root Dec 20 02:18:50 ispc su[2146584]: Successful su for root by root Dec 20 02:18:50 ispc su[2146584]: + ??? root:root Dec 20 02:18:50 ispc su[2146584]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:51 ispc su[2146584]: pam_unix(su:session): session closed for user root Dec 20 02:18:51 ispc su[2146588]: Successful su for root by root Dec 20 02:18:51 ispc su[2146588]: + ??? root:root Dec 20 02:18:51 ispc su[2146588]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:56 ispc su[2146588]: pam_unix(su:session): session closed for user root Dec 20 02:18:56 ispc su[2146594]: Successful su for root by root Dec 20 02:18:56 ispc su[2146594]: + ??? root:root Dec 20 02:18:56 ispc su[2146594]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:56 ispc su[2146594]: pam_unix(su:session): session closed for user root Dec 20 02:18:56 ispc su[2146597]: Successful su for root by root Dec 20 02:18:56 ispc su[2146597]: + ??? root:root Dec 20 02:18:56 ispc su[2146597]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:59 ispc su[2146597]: pam_unix(su:session): session closed for user root Dec 20 02:18:59 ispc su[2146607]: Successful su for root by root Dec 20 02:18:59 ispc su[2146607]: + ??? root:root Dec 20 02:18:59 ispc su[2146607]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:18:59 ispc su[2146607]: pam_unix(su:session): session closed for user root Dec 20 02:18:59 ispc su[2146610]: Successful su for root by root Dec 20 02:18:59 ispc su[2146610]: + ??? root:root Dec 20 02:18:59 ispc su[2146610]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:01 ispc CRON[2146616]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:19:03 ispc CRON[2146616]: pam_unix(cron:session): session closed for user root Dec 20 02:19:11 ispc su[2146610]: pam_unix(su:session): session closed for user root Dec 20 02:19:11 ispc su[2146633]: Successful su for root by root Dec 20 02:19:11 ispc su[2146633]: + ??? root:root Dec 20 02:19:11 ispc su[2146633]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:12 ispc su[2146633]: pam_unix(su:session): session closed for user root Dec 20 02:19:12 ispc su[2146636]: Successful su for root by root Dec 20 02:19:12 ispc su[2146636]: + ??? root:root Dec 20 02:19:12 ispc su[2146636]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:15 ispc su[2146636]: pam_unix(su:session): session closed for user root Dec 20 02:19:15 ispc su[2146642]: Successful su for root by root Dec 20 02:19:15 ispc su[2146642]: + ??? root:root Dec 20 02:19:15 ispc su[2146642]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:15 ispc su[2146642]: pam_unix(su:session): session closed for user root Dec 20 02:19:15 ispc su[2146645]: Successful su for root by root Dec 20 02:19:15 ispc su[2146645]: + ??? root:root Dec 20 02:19:15 ispc su[2146645]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:36 ispc su[2146645]: pam_unix(su:session): session closed for user root Dec 20 02:19:36 ispc su[2146662]: Successful su for root by root Dec 20 02:19:36 ispc su[2146662]: + ??? root:root Dec 20 02:19:36 ispc su[2146662]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:36 ispc su[2146662]: pam_unix(su:session): session closed for user root Dec 20 02:19:36 ispc su[2146665]: Successful su for root by root Dec 20 02:19:36 ispc su[2146665]: + ??? root:root Dec 20 02:19:36 ispc su[2146665]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:36 ispc su[2146665]: pam_unix(su:session): session closed for user root Dec 20 02:19:36 ispc su[2146671]: Successful su for root by root Dec 20 02:19:36 ispc su[2146671]: + ??? root:root Dec 20 02:19:36 ispc su[2146671]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:36 ispc su[2146671]: pam_unix(su:session): session closed for user root Dec 20 02:19:36 ispc su[2146674]: Successful su for root by root Dec 20 02:19:36 ispc su[2146674]: + ??? root:root Dec 20 02:19:36 ispc su[2146674]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:38 ispc su[2146674]: pam_unix(su:session): session closed for user root Dec 20 02:19:38 ispc su[2146680]: Successful su for root by root Dec 20 02:19:38 ispc su[2146680]: + ??? root:root Dec 20 02:19:38 ispc su[2146680]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:38 ispc su[2146680]: pam_unix(su:session): session closed for user root Dec 20 02:19:38 ispc su[2146683]: Successful su for root by root Dec 20 02:19:38 ispc su[2146683]: + ??? root:root Dec 20 02:19:38 ispc su[2146683]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:41 ispc su[2146683]: pam_unix(su:session): session closed for user root Dec 20 02:19:41 ispc su[2146694]: Successful su for root by root Dec 20 02:19:41 ispc su[2146694]: + ??? root:root Dec 20 02:19:41 ispc su[2146694]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:19:41 ispc su[2146694]: pam_unix(su:session): session closed for user root Dec 20 02:19:41 ispc su[2146697]: Successful su for root by root Dec 20 02:19:41 ispc su[2146697]: + ??? root:root Dec 20 02:19:41 ispc su[2146697]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:01 ispc CRON[2146710]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:20:01 ispc CRON[2146711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:20:01 ispc CRON[2146712]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:20:01 ispc CRON[2146713]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:20:01 ispc CRON[2146714]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:20:01 ispc CRON[2146712]: pam_unix(cron:session): session closed for user www-data Dec 20 02:20:01 ispc CRON[2146711]: pam_unix(cron:session): session closed for user root Dec 20 02:20:01 ispc CRON[2146714]: pam_unix(cron:session): session closed for user getmail Dec 20 02:20:01 ispc CRON[2146713]: pam_unix(cron:session): session closed for user root Dec 20 02:20:02 ispc CRON[2146710]: pam_unix(cron:session): session closed for user root Dec 20 02:20:10 ispc su[2146697]: pam_unix(su:session): session closed for user root Dec 20 02:20:10 ispc su[2146790]: Successful su for root by root Dec 20 02:20:10 ispc su[2146790]: + ??? root:root Dec 20 02:20:10 ispc su[2146790]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:10 ispc su[2146790]: pam_unix(su:session): session closed for user root Dec 20 02:20:10 ispc su[2146794]: Successful su for root by root Dec 20 02:20:10 ispc su[2146794]: + ??? root:root Dec 20 02:20:10 ispc su[2146794]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:11 ispc su[2146794]: pam_unix(su:session): session closed for user root Dec 20 02:20:11 ispc su[2146803]: Successful su for root by root Dec 20 02:20:11 ispc su[2146803]: + ??? root:root Dec 20 02:20:11 ispc su[2146803]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:11 ispc su[2146803]: pam_unix(su:session): session closed for user root Dec 20 02:20:11 ispc su[2146806]: Successful su for root by root Dec 20 02:20:11 ispc su[2146806]: + ??? root:root Dec 20 02:20:11 ispc su[2146806]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:14 ispc su[2146806]: pam_unix(su:session): session closed for user root Dec 20 02:20:14 ispc su[2146812]: Successful su for root by root Dec 20 02:20:14 ispc su[2146812]: + ??? root:root Dec 20 02:20:14 ispc su[2146812]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:14 ispc su[2146812]: pam_unix(su:session): session closed for user root Dec 20 02:20:14 ispc su[2146815]: Successful su for root by root Dec 20 02:20:14 ispc su[2146815]: + ??? root:root Dec 20 02:20:14 ispc su[2146815]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:14 ispc su[2146815]: pam_unix(su:session): session closed for user root Dec 20 02:20:14 ispc su[2146821]: Successful su for root by root Dec 20 02:20:15 ispc su[2146821]: + ??? root:root Dec 20 02:20:15 ispc su[2146821]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:15 ispc su[2146821]: pam_unix(su:session): session closed for user root Dec 20 02:20:15 ispc su[2146824]: Successful su for root by root Dec 20 02:20:15 ispc su[2146824]: + ??? root:root Dec 20 02:20:15 ispc su[2146824]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:15 ispc su[2146824]: pam_unix(su:session): session closed for user root Dec 20 02:20:15 ispc su[2146830]: Successful su for root by root Dec 20 02:20:15 ispc su[2146830]: + ??? root:root Dec 20 02:20:15 ispc su[2146830]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:15 ispc su[2146830]: pam_unix(su:session): session closed for user root Dec 20 02:20:15 ispc su[2146833]: Successful su for root by root Dec 20 02:20:15 ispc su[2146833]: + ??? root:root Dec 20 02:20:15 ispc su[2146833]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:15 ispc su[2146833]: pam_unix(su:session): session closed for user root Dec 20 02:20:15 ispc su[2146839]: Successful su for root by root Dec 20 02:20:15 ispc su[2146839]: + ??? root:root Dec 20 02:20:15 ispc su[2146839]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:15 ispc su[2146839]: pam_unix(su:session): session closed for user root Dec 20 02:20:15 ispc su[2146842]: Successful su for root by root Dec 20 02:20:15 ispc su[2146842]: + ??? root:root Dec 20 02:20:15 ispc su[2146842]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:16 ispc su[2146842]: pam_unix(su:session): session closed for user root Dec 20 02:20:16 ispc su[2146848]: Successful su for root by root Dec 20 02:20:16 ispc su[2146848]: + ??? root:root Dec 20 02:20:16 ispc su[2146848]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:16 ispc su[2146848]: pam_unix(su:session): session closed for user root Dec 20 02:20:16 ispc su[2146851]: Successful su for root by root Dec 20 02:20:16 ispc su[2146851]: + ??? root:root Dec 20 02:20:16 ispc su[2146851]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:17 ispc su[2146851]: pam_unix(su:session): session closed for user root Dec 20 02:20:17 ispc su[2146857]: Successful su for root by root Dec 20 02:20:17 ispc su[2146857]: + ??? root:root Dec 20 02:20:17 ispc su[2146857]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:17 ispc su[2146857]: pam_unix(su:session): session closed for user root Dec 20 02:20:17 ispc su[2146860]: Successful su for root by root Dec 20 02:20:17 ispc su[2146860]: + ??? root:root Dec 20 02:20:17 ispc su[2146860]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:18 ispc su[2146860]: pam_unix(su:session): session closed for user root Dec 20 02:20:18 ispc su[2146866]: Successful su for root by root Dec 20 02:20:18 ispc su[2146866]: + ??? root:root Dec 20 02:20:18 ispc su[2146866]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:18 ispc su[2146866]: pam_unix(su:session): session closed for user root Dec 20 02:20:18 ispc su[2146869]: Successful su for root by root Dec 20 02:20:18 ispc su[2146869]: + ??? root:root Dec 20 02:20:18 ispc su[2146869]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:19 ispc su[2146869]: pam_unix(su:session): session closed for user root Dec 20 02:20:19 ispc su[2146875]: Successful su for root by root Dec 20 02:20:19 ispc su[2146875]: + ??? root:root Dec 20 02:20:19 ispc su[2146875]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:19 ispc su[2146875]: pam_unix(su:session): session closed for user root Dec 20 02:20:19 ispc su[2146878]: Successful su for root by root Dec 20 02:20:19 ispc su[2146878]: + ??? root:root Dec 20 02:20:19 ispc su[2146878]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:21 ispc su[2146878]: pam_unix(su:session): session closed for user root Dec 20 02:20:21 ispc su[2146888]: Successful su for root by root Dec 20 02:20:21 ispc su[2146888]: + ??? root:root Dec 20 02:20:21 ispc su[2146888]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:21 ispc su[2146888]: pam_unix(su:session): session closed for user root Dec 20 02:20:21 ispc su[2146891]: Successful su for root by root Dec 20 02:20:21 ispc su[2146891]: + ??? root:root Dec 20 02:20:21 ispc su[2146891]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:24 ispc su[2146891]: pam_unix(su:session): session closed for user root Dec 20 02:20:24 ispc su[2146897]: Successful su for root by root Dec 20 02:20:24 ispc su[2146897]: + ??? root:root Dec 20 02:20:24 ispc su[2146897]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:24 ispc su[2146897]: pam_unix(su:session): session closed for user root Dec 20 02:20:24 ispc su[2146900]: Successful su for root by root Dec 20 02:20:24 ispc su[2146900]: + ??? root:root Dec 20 02:20:24 ispc su[2146900]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:24 ispc su[2146900]: pam_unix(su:session): session closed for user root Dec 20 02:20:24 ispc su[2146906]: Successful su for root by root Dec 20 02:20:24 ispc su[2146906]: + ??? root:root Dec 20 02:20:24 ispc su[2146906]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:24 ispc su[2146906]: pam_unix(su:session): session closed for user root Dec 20 02:20:24 ispc su[2146909]: Successful su for root by root Dec 20 02:20:24 ispc su[2146909]: + ??? root:root Dec 20 02:20:24 ispc su[2146909]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:29 ispc su[2146909]: pam_unix(su:session): session closed for user root Dec 20 02:20:29 ispc su[2146916]: Successful su for root by root Dec 20 02:20:29 ispc su[2146916]: + ??? root:root Dec 20 02:20:29 ispc su[2146916]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:29 ispc su[2146916]: pam_unix(su:session): session closed for user root Dec 20 02:20:29 ispc su[2146919]: Successful su for root by root Dec 20 02:20:29 ispc su[2146919]: + ??? root:root Dec 20 02:20:29 ispc su[2146919]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:49 ispc su[2146919]: pam_unix(su:session): session closed for user root Dec 20 02:20:49 ispc su[2146935]: Successful su for root by root Dec 20 02:20:49 ispc su[2146935]: + ??? root:root Dec 20 02:20:49 ispc su[2146935]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:49 ispc su[2146935]: pam_unix(su:session): session closed for user root Dec 20 02:20:49 ispc su[2146938]: Successful su for root by root Dec 20 02:20:49 ispc su[2146938]: + ??? root:root Dec 20 02:20:49 ispc su[2146938]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:53 ispc su[2146938]: pam_unix(su:session): session closed for user root Dec 20 02:20:53 ispc su[2146948]: Successful su for root by root Dec 20 02:20:53 ispc su[2146948]: + ??? root:root Dec 20 02:20:53 ispc su[2146948]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:53 ispc su[2146948]: pam_unix(su:session): session closed for user root Dec 20 02:20:53 ispc su[2146951]: Successful su for root by root Dec 20 02:20:53 ispc su[2146951]: + ??? root:root Dec 20 02:20:53 ispc su[2146951]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:56 ispc su[2146951]: pam_unix(su:session): session closed for user root Dec 20 02:20:56 ispc su[2146957]: Successful su for root by root Dec 20 02:20:56 ispc su[2146957]: + ??? root:root Dec 20 02:20:56 ispc su[2146957]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:56 ispc su[2146957]: pam_unix(su:session): session closed for user root Dec 20 02:20:56 ispc su[2146960]: Successful su for root by root Dec 20 02:20:56 ispc su[2146960]: + ??? root:root Dec 20 02:20:56 ispc su[2146960]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:56 ispc su[2146960]: pam_unix(su:session): session closed for user root Dec 20 02:20:57 ispc su[2146966]: Successful su for root by root Dec 20 02:20:57 ispc su[2146966]: + ??? root:root Dec 20 02:20:57 ispc su[2146966]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:20:57 ispc su[2146966]: pam_unix(su:session): session closed for user root Dec 20 02:20:57 ispc su[2146969]: Successful su for root by root Dec 20 02:20:57 ispc su[2146969]: + ??? root:root Dec 20 02:20:57 ispc su[2146969]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:01 ispc CRON[2146974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:21:01 ispc CRON[2146973]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:21:01 ispc CRON[2146973]: pam_unix(cron:session): session closed for user root Dec 20 02:21:02 ispc CRON[2146974]: pam_unix(cron:session): session closed for user root Dec 20 02:21:07 ispc su[2146969]: pam_unix(su:session): session closed for user root Dec 20 02:21:07 ispc su[2146993]: Successful su for root by root Dec 20 02:21:07 ispc su[2146993]: + ??? root:root Dec 20 02:21:07 ispc su[2146993]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:07 ispc su[2146993]: pam_unix(su:session): session closed for user root Dec 20 02:21:07 ispc su[2146996]: Successful su for root by root Dec 20 02:21:07 ispc su[2146996]: + ??? root:root Dec 20 02:21:07 ispc su[2146996]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:10 ispc postfix/smtpd[2147000]: sql auxprop plugin using mysql engine Dec 20 02:21:11 ispc su[2146996]: pam_unix(su:session): session closed for user root Dec 20 02:21:11 ispc su[2147007]: Successful su for root by root Dec 20 02:21:11 ispc su[2147007]: + ??? root:root Dec 20 02:21:11 ispc su[2147007]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:11 ispc su[2147007]: pam_unix(su:session): session closed for user root Dec 20 02:21:11 ispc saslauthd[2147004]: pam_mysql - SELECT returned no result. Dec 20 02:21:11 ispc saslauthd[2147004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:21:11 ispc su[2147010]: Successful su for root by root Dec 20 02:21:11 ispc su[2147010]: + ??? root:root Dec 20 02:21:11 ispc saslauthd[2147004]: do_auth : auth failure: [user=demos] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:21:11 ispc su[2147010]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:13 ispc su[2147010]: pam_unix(su:session): session closed for user root Dec 20 02:21:13 ispc su[2147020]: Successful su for root by root Dec 20 02:21:13 ispc su[2147020]: + ??? root:root Dec 20 02:21:13 ispc su[2147020]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:13 ispc su[2147020]: pam_unix(su:session): session closed for user root Dec 20 02:21:13 ispc su[2147023]: Successful su for root by root Dec 20 02:21:13 ispc su[2147023]: + ??? root:root Dec 20 02:21:13 ispc su[2147023]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:16 ispc su[2147023]: pam_unix(su:session): session closed for user root Dec 20 02:21:16 ispc su[2147029]: Successful su for root by root Dec 20 02:21:16 ispc su[2147029]: + ??? root:root Dec 20 02:21:16 ispc su[2147029]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:16 ispc su[2147029]: pam_unix(su:session): session closed for user root Dec 20 02:21:16 ispc su[2147032]: Successful su for root by root Dec 20 02:21:16 ispc su[2147032]: + ??? root:root Dec 20 02:21:16 ispc su[2147032]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:16 ispc su[2147032]: pam_unix(su:session): session closed for user root Dec 20 02:21:16 ispc su[2147038]: Successful su for root by root Dec 20 02:21:16 ispc su[2147038]: + ??? root:root Dec 20 02:21:16 ispc su[2147038]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:16 ispc su[2147038]: pam_unix(su:session): session closed for user root Dec 20 02:21:16 ispc su[2147041]: Successful su for root by root Dec 20 02:21:16 ispc su[2147041]: + ??? root:root Dec 20 02:21:16 ispc su[2147041]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:30 ispc saslauthd[2147050]: pam_mysql - SELECT returned no result. Dec 20 02:21:30 ispc saslauthd[2147050]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:21:30 ispc saslauthd[2147050]: do_auth : auth failure: [user=account] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:21:56 ispc su[2147041]: pam_unix(su:session): session closed for user root Dec 20 02:21:56 ispc su[2147066]: Successful su for root by root Dec 20 02:21:56 ispc su[2147066]: + ??? root:root Dec 20 02:21:56 ispc su[2147066]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:21:56 ispc su[2147066]: pam_unix(su:session): session closed for user root Dec 20 02:21:56 ispc su[2147069]: Successful su for root by root Dec 20 02:21:56 ispc su[2147069]: + ??? root:root Dec 20 02:21:56 ispc su[2147069]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:01 ispc CRON[2147073]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:22:02 ispc CRON[2147073]: pam_unix(cron:session): session closed for user root Dec 20 02:22:28 ispc su[2147069]: pam_unix(su:session): session closed for user root Dec 20 02:22:28 ispc su[2147101]: Successful su for root by root Dec 20 02:22:28 ispc su[2147101]: + ??? root:root Dec 20 02:22:28 ispc su[2147101]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:28 ispc su[2147101]: pam_unix(su:session): session closed for user root Dec 20 02:22:28 ispc su[2147104]: Successful su for root by root Dec 20 02:22:28 ispc su[2147104]: + ??? root:root Dec 20 02:22:28 ispc su[2147104]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:30 ispc su[2147104]: pam_unix(su:session): session closed for user root Dec 20 02:22:30 ispc su[2147110]: Successful su for root by root Dec 20 02:22:30 ispc su[2147110]: + ??? root:root Dec 20 02:22:30 ispc su[2147110]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:31 ispc su[2147110]: pam_unix(su:session): session closed for user root Dec 20 02:22:31 ispc su[2147113]: Successful su for root by root Dec 20 02:22:31 ispc su[2147113]: + ??? root:root Dec 20 02:22:31 ispc su[2147113]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:32 ispc su[2147113]: pam_unix(su:session): session closed for user root Dec 20 02:22:32 ispc su[2147119]: Successful su for root by root Dec 20 02:22:32 ispc su[2147119]: + ??? root:root Dec 20 02:22:32 ispc su[2147119]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:32 ispc su[2147119]: pam_unix(su:session): session closed for user root Dec 20 02:22:32 ispc su[2147122]: Successful su for root by root Dec 20 02:22:32 ispc su[2147122]: + ??? root:root Dec 20 02:22:32 ispc su[2147122]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:34 ispc su[2147122]: pam_unix(su:session): session closed for user root Dec 20 02:22:34 ispc su[2147128]: Successful su for root by root Dec 20 02:22:34 ispc su[2147128]: + ??? root:root Dec 20 02:22:34 ispc su[2147128]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:34 ispc su[2147128]: pam_unix(su:session): session closed for user root Dec 20 02:22:34 ispc su[2147131]: Successful su for root by root Dec 20 02:22:34 ispc su[2147131]: + ??? root:root Dec 20 02:22:34 ispc su[2147131]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:49 ispc su[2147131]: pam_unix(su:session): session closed for user root Dec 20 02:22:49 ispc su[2147146]: Successful su for root by root Dec 20 02:22:49 ispc su[2147146]: + ??? root:root Dec 20 02:22:49 ispc su[2147146]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:49 ispc su[2147146]: pam_unix(su:session): session closed for user root Dec 20 02:22:49 ispc su[2147150]: Successful su for root by root Dec 20 02:22:49 ispc su[2147150]: + ??? root:root Dec 20 02:22:49 ispc su[2147150]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:51 ispc sshd[2147143]: Invalid user pronajemplosin from 120.48.125.223 Dec 20 02:22:54 ispc su[2147150]: pam_unix(su:session): session closed for user root Dec 20 02:22:54 ispc su[2147164]: Successful su for root by root Dec 20 02:22:54 ispc su[2147164]: + ??? root:root Dec 20 02:22:54 ispc su[2147164]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:54 ispc su[2147164]: pam_unix(su:session): session closed for user root Dec 20 02:22:54 ispc su[2147167]: Successful su for root by root Dec 20 02:22:54 ispc su[2147167]: + ??? root:root Dec 20 02:22:54 ispc su[2147167]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:55 ispc su[2147167]: pam_unix(su:session): session closed for user root Dec 20 02:22:55 ispc su[2147173]: Successful su for root by root Dec 20 02:22:55 ispc su[2147173]: + ??? root:root Dec 20 02:22:55 ispc su[2147173]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:55 ispc su[2147173]: pam_unix(su:session): session closed for user root Dec 20 02:22:55 ispc su[2147176]: Successful su for root by root Dec 20 02:22:55 ispc su[2147176]: + ??? root:root Dec 20 02:22:55 ispc su[2147176]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:56 ispc su[2147176]: pam_unix(su:session): session closed for user root Dec 20 02:22:56 ispc su[2147186]: Successful su for root by root Dec 20 02:22:56 ispc su[2147186]: + ??? root:root Dec 20 02:22:56 ispc su[2147186]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:56 ispc su[2147186]: pam_unix(su:session): session closed for user root Dec 20 02:22:56 ispc su[2147189]: Successful su for root by root Dec 20 02:22:56 ispc su[2147189]: + ??? root:root Dec 20 02:22:56 ispc su[2147189]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:57 ispc su[2147189]: pam_unix(su:session): session closed for user root Dec 20 02:22:57 ispc su[2147195]: Successful su for root by root Dec 20 02:22:57 ispc su[2147195]: + ??? root:root Dec 20 02:22:57 ispc su[2147195]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:22:57 ispc su[2147195]: pam_unix(su:session): session closed for user root Dec 20 02:22:57 ispc su[2147198]: Successful su for root by root Dec 20 02:22:57 ispc su[2147198]: + ??? root:root Dec 20 02:22:57 ispc su[2147198]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:01 ispc CRON[2147202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:23:01 ispc CRON[2147202]: pam_unix(cron:session): session closed for user root Dec 20 02:23:02 ispc su[2147198]: pam_unix(su:session): session closed for user root Dec 20 02:23:02 ispc su[2147215]: Successful su for root by root Dec 20 02:23:02 ispc su[2147215]: + ??? root:root Dec 20 02:23:02 ispc su[2147215]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:02 ispc su[2147215]: pam_unix(su:session): session closed for user root Dec 20 02:23:02 ispc su[2147218]: Successful su for root by root Dec 20 02:23:02 ispc su[2147218]: + ??? root:root Dec 20 02:23:02 ispc su[2147218]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:02 ispc su[2147218]: pam_unix(su:session): session closed for user root Dec 20 02:23:02 ispc su[2147224]: Successful su for root by root Dec 20 02:23:02 ispc su[2147224]: + ??? root:root Dec 20 02:23:02 ispc su[2147224]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:02 ispc su[2147224]: pam_unix(su:session): session closed for user root Dec 20 02:23:03 ispc su[2147227]: Successful su for root by root Dec 20 02:23:03 ispc su[2147227]: + ??? root:root Dec 20 02:23:03 ispc su[2147227]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:11 ispc su[2147227]: pam_unix(su:session): session closed for user root Dec 20 02:23:11 ispc su[2147237]: Successful su for root by root Dec 20 02:23:11 ispc su[2147237]: + ??? root:root Dec 20 02:23:11 ispc su[2147237]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:11 ispc su[2147237]: pam_unix(su:session): session closed for user root Dec 20 02:23:11 ispc su[2147240]: Successful su for root by root Dec 20 02:23:11 ispc su[2147240]: + ??? root:root Dec 20 02:23:11 ispc su[2147240]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:18 ispc su[2147240]: pam_unix(su:session): session closed for user root Dec 20 02:23:18 ispc su[2147251]: Successful su for root by root Dec 20 02:23:18 ispc su[2147251]: + ??? root:root Dec 20 02:23:18 ispc su[2147251]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:18 ispc su[2147251]: pam_unix(su:session): session closed for user root Dec 20 02:23:18 ispc su[2147254]: Successful su for root by root Dec 20 02:23:18 ispc su[2147254]: + ??? root:root Dec 20 02:23:18 ispc su[2147254]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:39 ispc su[2147254]: pam_unix(su:session): session closed for user root Dec 20 02:23:39 ispc su[2147269]: Successful su for root by root Dec 20 02:23:39 ispc su[2147269]: + ??? root:root Dec 20 02:23:39 ispc su[2147269]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:39 ispc su[2147269]: pam_unix(su:session): session closed for user root Dec 20 02:23:39 ispc su[2147272]: Successful su for root by root Dec 20 02:23:39 ispc su[2147272]: + ??? root:root Dec 20 02:23:39 ispc su[2147272]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:42 ispc su[2147272]: pam_unix(su:session): session closed for user root Dec 20 02:23:42 ispc su[2147279]: Successful su for root by root Dec 20 02:23:42 ispc su[2147279]: + ??? root:root Dec 20 02:23:42 ispc su[2147279]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:43 ispc su[2147279]: pam_unix(su:session): session closed for user root Dec 20 02:23:43 ispc su[2147282]: Successful su for root by root Dec 20 02:23:43 ispc su[2147282]: + ??? root:root Dec 20 02:23:43 ispc su[2147282]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:51 ispc su[2147282]: pam_unix(su:session): session closed for user root Dec 20 02:23:51 ispc sshd[2147290]: Invalid user test from 221.151.181.65 Dec 20 02:23:51 ispc su[2147294]: Successful su for root by root Dec 20 02:23:51 ispc su[2147294]: + ??? root:root Dec 20 02:23:51 ispc su[2147294]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:51 ispc su[2147294]: pam_unix(su:session): session closed for user root Dec 20 02:23:51 ispc su[2147297]: Successful su for root by root Dec 20 02:23:51 ispc su[2147297]: + ??? root:root Dec 20 02:23:52 ispc su[2147297]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:52 ispc su[2147297]: pam_unix(su:session): session closed for user root Dec 20 02:23:52 ispc su[2147303]: Successful su for root by root Dec 20 02:23:52 ispc su[2147303]: + ??? root:root Dec 20 02:23:52 ispc su[2147303]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:52 ispc su[2147303]: pam_unix(su:session): session closed for user root Dec 20 02:23:52 ispc su[2147306]: Successful su for root by root Dec 20 02:23:52 ispc su[2147306]: + ??? root:root Dec 20 02:23:52 ispc su[2147306]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:52 ispc su[2147306]: pam_unix(su:session): session closed for user root Dec 20 02:23:52 ispc su[2147312]: Successful su for root by root Dec 20 02:23:52 ispc su[2147312]: + ??? root:root Dec 20 02:23:52 ispc su[2147312]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:52 ispc su[2147312]: pam_unix(su:session): session closed for user root Dec 20 02:23:52 ispc su[2147315]: Successful su for root by root Dec 20 02:23:52 ispc su[2147315]: + ??? root:root Dec 20 02:23:53 ispc su[2147315]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:53 ispc su[2147315]: pam_unix(su:session): session closed for user root Dec 20 02:23:53 ispc su[2147321]: Successful su for root by root Dec 20 02:23:53 ispc su[2147321]: + ??? root:root Dec 20 02:23:53 ispc su[2147321]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:23:53 ispc su[2147321]: pam_unix(su:session): session closed for user root Dec 20 02:23:53 ispc su[2147324]: Successful su for root by root Dec 20 02:23:53 ispc su[2147324]: + ??? root:root Dec 20 02:23:53 ispc su[2147324]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:01 ispc CRON[2147332]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:24:02 ispc CRON[2147332]: pam_unix(cron:session): session closed for user root Dec 20 02:24:10 ispc su[2147324]: pam_unix(su:session): session closed for user root Dec 20 02:24:10 ispc su[2147349]: Successful su for root by root Dec 20 02:24:10 ispc su[2147349]: + ??? root:root Dec 20 02:24:10 ispc su[2147349]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:10 ispc su[2147349]: pam_unix(su:session): session closed for user root Dec 20 02:24:10 ispc su[2147352]: Successful su for root by root Dec 20 02:24:10 ispc su[2147352]: + ??? root:root Dec 20 02:24:10 ispc su[2147352]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:10 ispc su[2147352]: pam_unix(su:session): session closed for user root Dec 20 02:24:10 ispc su[2147358]: Successful su for root by root Dec 20 02:24:10 ispc su[2147358]: + ??? root:root Dec 20 02:24:10 ispc su[2147358]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:10 ispc su[2147358]: pam_unix(su:session): session closed for user root Dec 20 02:24:10 ispc su[2147361]: Successful su for root by root Dec 20 02:24:10 ispc su[2147361]: + ??? root:root Dec 20 02:24:10 ispc su[2147361]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:15 ispc su[2147361]: pam_unix(su:session): session closed for user root Dec 20 02:24:16 ispc su[2147368]: Successful su for root by root Dec 20 02:24:16 ispc su[2147368]: + ??? root:root Dec 20 02:24:16 ispc su[2147368]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:16 ispc su[2147368]: pam_unix(su:session): session closed for user root Dec 20 02:24:16 ispc su[2147371]: Successful su for root by root Dec 20 02:24:16 ispc su[2147371]: + ??? root:root Dec 20 02:24:16 ispc su[2147371]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:16 ispc su[2147371]: pam_unix(su:session): session closed for user root Dec 20 02:24:16 ispc su[2147377]: Successful su for root by root Dec 20 02:24:16 ispc su[2147377]: + ??? root:root Dec 20 02:24:16 ispc su[2147377]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:16 ispc su[2147377]: pam_unix(su:session): session closed for user root Dec 20 02:24:16 ispc su[2147380]: Successful su for root by root Dec 20 02:24:16 ispc su[2147380]: + ??? root:root Dec 20 02:24:16 ispc su[2147380]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:21 ispc sshd[2147388]: Invalid user blceu from 152.136.108.201 Dec 20 02:24:23 ispc su[2147380]: pam_unix(su:session): session closed for user root Dec 20 02:24:23 ispc su[2147392]: Successful su for root by root Dec 20 02:24:23 ispc su[2147392]: + ??? root:root Dec 20 02:24:23 ispc su[2147392]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:23 ispc su[2147392]: pam_unix(su:session): session closed for user root Dec 20 02:24:23 ispc su[2147395]: Successful su for root by root Dec 20 02:24:23 ispc su[2147395]: + ??? root:root Dec 20 02:24:23 ispc su[2147395]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:31 ispc su[2147395]: pam_unix(su:session): session closed for user root Dec 20 02:24:31 ispc su[2147405]: Successful su for root by root Dec 20 02:24:31 ispc su[2147405]: + ??? root:root Dec 20 02:24:31 ispc su[2147405]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:31 ispc su[2147405]: pam_unix(su:session): session closed for user root Dec 20 02:24:31 ispc su[2147408]: Successful su for root by root Dec 20 02:24:31 ispc su[2147408]: + ??? root:root Dec 20 02:24:31 ispc su[2147408]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:38 ispc su[2147408]: pam_unix(su:session): session closed for user root Dec 20 02:24:40 ispc su[2147504]: Successful su for root by root Dec 20 02:24:40 ispc su[2147504]: + ??? root:root Dec 20 02:24:40 ispc su[2147504]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:24:49 ispc su[2147504]: pam_unix(su:session): session closed for user root Dec 20 02:24:49 ispc su[2147511]: Successful su for root by root Dec 20 02:24:49 ispc su[2147511]: + ??? root:root Dec 20 02:24:49 ispc su[2147511]: pam_unix(su:session): session opened for user root by (uid=0) Dec 20 02:25:01 ispc CRON[2147521]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:25:01 ispc CRON[2147520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:25:01 ispc CRON[2147519]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:25:01 ispc CRON[2147518]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:25:01 ispc CRON[2147519]: pam_unix(cron:session): session closed for user root Dec 20 02:25:01 ispc CRON[2147521]: pam_unix(cron:session): session closed for user getmail Dec 20 02:25:02 ispc CRON[2147518]: pam_unix(cron:session): session closed for user root Dec 20 02:25:02 ispc CRON[2147520]: pam_unix(cron:session): session closed for user root Dec 20 02:25:59 ispc sshd[2147618]: Invalid user blceu from 5.129.195.224 Dec 20 02:26:01 ispc CRON[2147624]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:26:01 ispc CRON[2147624]: pam_unix(cron:session): session closed for user root Dec 20 02:27:01 ispc CRON[2147656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:27:02 ispc CRON[2147656]: pam_unix(cron:session): session closed for user root Dec 20 02:27:33 ispc sshd[2147682]: Invalid user adm from 185.156.73.233 Dec 20 02:27:53 ispc postfix/smtpd[2147707]: sql auxprop plugin using mysql engine Dec 20 02:27:53 ispc sshd[2147705]: Invalid user blceu from 51.91.76.213 Dec 20 02:27:54 ispc saslauthd[2147709]: pam_mysql - SELECT returned no result. Dec 20 02:27:54 ispc saslauthd[2147709]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:27:54 ispc saslauthd[2147709]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:28:01 ispc CRON[2147715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:28:01 ispc CRON[2147715]: pam_unix(cron:session): session closed for user root Dec 20 02:28:08 ispc sshd[2147704]: Did not receive identification string from 165.210.33.193 Dec 20 02:28:40 ispc saslauthd[2147751]: pam_mysql - SELECT returned no result. Dec 20 02:28:40 ispc saslauthd[2147751]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:28:40 ispc saslauthd[2147751]: do_auth : auth failure: [user=access] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:29:01 ispc CRON[2147760]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:29:02 ispc CRON[2147760]: pam_unix(cron:session): session closed for user root Dec 20 02:30:01 ispc CRON[2147804]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:30:01 ispc CRON[2147801]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:30:01 ispc CRON[2147803]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:30:01 ispc CRON[2147802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:30:01 ispc CRON[2147803]: pam_unix(cron:session): session closed for user www-data Dec 20 02:30:01 ispc CRON[2147805]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:30:01 ispc CRON[2147802]: pam_unix(cron:session): session closed for user root Dec 20 02:30:01 ispc CRON[2147805]: pam_unix(cron:session): session closed for user getmail Dec 20 02:30:02 ispc CRON[2147801]: pam_unix(cron:session): session closed for user root Dec 20 02:30:02 ispc CRON[2147804]: pam_unix(cron:session): session closed for user root Dec 20 02:31:01 ispc CRON[2147907]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:31:01 ispc CRON[2147907]: pam_unix(cron:session): session closed for user root Dec 20 02:31:14 ispc sshd[2147922]: Invalid user admin from 118.218.219.250 Dec 20 02:31:27 ispc postfix/smtpd[2147932]: sql auxprop plugin using mysql engine Dec 20 02:31:27 ispc CRON[2145961]: pam_unix(cron:session): session closed for user root Dec 20 02:32:01 ispc CRON[2147942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:32:02 ispc CRON[2147942]: pam_unix(cron:session): session closed for user root Dec 20 02:32:17 ispc sshd[2147955]: Invalid user ziplines from 211.110.229.128 Dec 20 02:32:52 ispc sshd[2147959]: Invalid user martof from 165.227.38.205 Dec 20 02:33:01 ispc CRON[2147974]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:33:01 ispc CRON[2147974]: pam_unix(cron:session): session closed for user root Dec 20 02:34:01 ispc CRON[2147989]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:34:02 ispc CRON[2147989]: pam_unix(cron:session): session closed for user root Dec 20 02:34:29 ispc postfix/smtpd[2148003]: sql auxprop plugin using mysql engine Dec 20 02:34:30 ispc postfix/smtpd[2148006]: sql auxprop plugin using mysql engine Dec 20 02:34:44 ispc saslauthd[2148009]: pam_mysql - SELECT returned no result. Dec 20 02:34:44 ispc saslauthd[2148009]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:34:44 ispc saslauthd[2148009]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 20 02:35:01 ispc CRON[2148010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:35:01 ispc CRON[2148011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:35:01 ispc CRON[2148012]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:35:01 ispc CRON[2148013]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:35:01 ispc CRON[2148011]: pam_unix(cron:session): session closed for user root Dec 20 02:35:01 ispc CRON[2148013]: pam_unix(cron:session): session closed for user getmail Dec 20 02:35:01 ispc CRON[2148010]: pam_unix(cron:session): session closed for user root Dec 20 02:35:07 ispc saslauthd[2148116]: pam_mysql - SELECT returned no result. Dec 20 02:35:07 ispc saslauthd[2148116]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:35:07 ispc saslauthd[2148116]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:35:33 ispc CRON[2148012]: pam_unix(cron:session): session closed for user root Dec 20 02:35:49 ispc saslauthd[2148122]: pam_mysql - SELECT returned no result. Dec 20 02:35:49 ispc saslauthd[2148122]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:35:49 ispc saslauthd[2148122]: do_auth : auth failure: [user=deskalt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:35:59 ispc sshd[2148123]: Invalid user test from 221.151.181.65 Dec 20 02:36:00 ispc saslauthd[2148125]: pam_mysql - SELECT returned no result. Dec 20 02:36:00 ispc saslauthd[2148125]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:36:00 ispc saslauthd[2148125]: do_auth : auth failure: [user=demo] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:36:01 ispc CRON[2148126]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:36:52 ispc sshd[2148158]: Did not receive identification string from 192.227.134.84 Dec 20 02:37:01 ispc CRON[2148164]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:37:02 ispc CRON[2148164]: pam_unix(cron:session): session closed for user root Dec 20 02:37:16 ispc sshd[2148183]: Invalid user test from 221.151.181.65 Dec 20 02:38:01 ispc CRON[2148206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:38:02 ispc CRON[2148206]: pam_unix(cron:session): session closed for user root Dec 20 02:39:01 ispc CRON[2148253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:39:01 ispc CRON[2148254]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:39:01 ispc CRON[2148253]: pam_unix(cron:session): session closed for user root Dec 20 02:39:01 ispc sshd[2148249]: Invalid user blceu from 119.205.233.162 Dec 20 02:39:01 ispc CRON[2148254]: pam_unix(cron:session): session closed for user root Dec 20 02:39:02 ispc sshd[2148251]: Invalid user martof from 221.156.137.103 Dec 20 02:39:16 ispc sshd[2148280]: Invalid user test from 221.151.181.65 Dec 20 02:40:01 ispc CRON[2148302]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:40:01 ispc CRON[2148303]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:40:01 ispc CRON[2148304]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:40:01 ispc CRON[2148305]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:40:01 ispc CRON[2148306]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:40:01 ispc CRON[2148304]: pam_unix(cron:session): session closed for user www-data Dec 20 02:40:01 ispc CRON[2148303]: pam_unix(cron:session): session closed for user root Dec 20 02:40:01 ispc CRON[2148306]: pam_unix(cron:session): session closed for user getmail Dec 20 02:40:02 ispc CRON[2148305]: pam_unix(cron:session): session closed for user root Dec 20 02:40:03 ispc CRON[2148302]: pam_unix(cron:session): session closed for user root Dec 20 02:41:01 ispc CRON[2148410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:41:02 ispc CRON[2148410]: pam_unix(cron:session): session closed for user root Dec 20 02:41:27 ispc sshd[2148427]: Invalid user user1 from 80.94.95.116 Dec 20 02:41:36 ispc sshd[2148437]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 02:41:36 ispc sshd[2148437]: Invalid user martof from 157.245.115.125 Dec 20 02:42:01 ispc CRON[2148448]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:42:02 ispc CRON[2148448]: pam_unix(cron:session): session closed for user root Dec 20 02:43:01 ispc CRON[2148494]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:43:01 ispc postfix/smtpd[2148492]: sql auxprop plugin using mysql engine Dec 20 02:43:01 ispc CRON[2148494]: pam_unix(cron:session): session closed for user root Dec 20 02:43:02 ispc saslauthd[2148506]: pam_mysql - SELECT returned no result. Dec 20 02:43:02 ispc saslauthd[2148506]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:43:02 ispc saslauthd[2148506]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:43:16 ispc saslauthd[2148517]: pam_mysql - SELECT returned no result. Dec 20 02:43:16 ispc saslauthd[2148517]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:43:16 ispc saslauthd[2148517]: do_auth : auth failure: [user=luck] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:44:01 ispc CRON[2148536]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:44:02 ispc CRON[2148536]: pam_unix(cron:session): session closed for user root Dec 20 02:45:01 ispc CRON[2148573]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:45:01 ispc CRON[2148576]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:45:01 ispc CRON[2148575]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:45:01 ispc CRON[2148574]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:45:01 ispc CRON[2148574]: pam_unix(cron:session): session closed for user root Dec 20 02:45:01 ispc CRON[2148576]: pam_unix(cron:session): session closed for user getmail Dec 20 02:45:02 ispc CRON[2148573]: pam_unix(cron:session): session closed for user root Dec 20 02:45:03 ispc CRON[2148575]: pam_unix(cron:session): session closed for user root Dec 20 02:46:01 ispc CRON[2148677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:46:01 ispc CRON[2148677]: pam_unix(cron:session): session closed for user root Dec 20 02:46:57 ispc sshd[2148708]: Invalid user diamantdi from 35.239.77.168 Dec 20 02:47:01 ispc CRON[2148715]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:47:02 ispc CRON[2148715]: pam_unix(cron:session): session closed for user root Dec 20 02:48:01 ispc CRON[2148771]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:48:02 ispc CRON[2148771]: pam_unix(cron:session): session closed for user root Dec 20 02:48:15 ispc sshd[2148795]: Invalid user diamantdi from 51.159.18.215 Dec 20 02:49:01 ispc CRON[2148819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:49:02 ispc CRON[2148819]: pam_unix(cron:session): session closed for user root Dec 20 02:50:01 ispc CRON[2148869]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:50:01 ispc CRON[2148870]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:50:01 ispc CRON[2148871]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 02:50:01 ispc CRON[2148872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:50:01 ispc CRON[2148873]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:50:01 ispc CRON[2148873]: pam_unix(cron:session): session closed for user getmail Dec 20 02:50:01 ispc CRON[2148870]: pam_unix(cron:session): session closed for user root Dec 20 02:50:01 ispc CRON[2148871]: pam_unix(cron:session): session closed for user www-data Dec 20 02:50:02 ispc CRON[2148872]: pam_unix(cron:session): session closed for user root Dec 20 02:50:03 ispc CRON[2148869]: pam_unix(cron:session): session closed for user root Dec 20 02:50:20 ispc postfix/smtpd[2148958]: sql auxprop plugin using mysql engine Dec 20 02:50:21 ispc saslauthd[2148961]: pam_mysql - SELECT returned no result. Dec 20 02:50:21 ispc saslauthd[2148961]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:50:21 ispc saslauthd[2148961]: do_auth : auth failure: [user=nologin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:50:24 ispc saslauthd[2148966]: pam_mysql - SELECT returned no result. Dec 20 02:50:24 ispc saslauthd[2148966]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:50:24 ispc saslauthd[2148966]: do_auth : auth failure: [user=postmaster@zip-lines.eu] [service=smtp] [realm=zip-lines.eu] [mech=pam] [reason=PAM auth error] Dec 20 02:50:28 ispc sshd[2148968]: Invalid user blceu from 103.110.84.105 Dec 20 02:50:40 ispc saslauthd[2148976]: pam_mysql - SELECT returned no result. Dec 20 02:50:40 ispc saslauthd[2148976]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:50:40 ispc saslauthd[2148976]: do_auth : auth failure: [user=deskman] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:50:45 ispc saslauthd[2148987]: pam_mysql - SELECT returned no result. Dec 20 02:50:45 ispc saslauthd[2148987]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:50:45 ispc saslauthd[2148987]: do_auth : auth failure: [user=client] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:50:48 ispc saslauthd[2148988]: pam_mysql - SELECT returned no result. Dec 20 02:50:48 ispc saslauthd[2148988]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:50:48 ispc saslauthd[2148988]: do_auth : auth failure: [user=demo@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 02:51:01 ispc CRON[2148994]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:51:02 ispc CRON[2148994]: pam_unix(cron:session): session closed for user root Dec 20 02:52:01 ispc CRON[2149043]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:52:02 ispc CRON[2149043]: pam_unix(cron:session): session closed for user root Dec 20 02:52:35 ispc sshd[2149074]: Invalid user ubuntu from 67.205.163.146 Dec 20 02:52:36 ispc sshd[2149076]: Invalid user ispc from 67.205.163.146 Dec 20 02:53:01 ispc CRON[2149103]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:53:01 ispc CRON[2149103]: pam_unix(cron:session): session closed for user root Dec 20 02:54:01 ispc CRON[2149158]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:54:02 ispc CRON[2149158]: pam_unix(cron:session): session closed for user root Dec 20 02:55:01 ispc CRON[2149201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:55:01 ispc CRON[2149202]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:55:01 ispc CRON[2149203]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:55:01 ispc CRON[2149204]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 02:55:01 ispc CRON[2149202]: pam_unix(cron:session): session closed for user root Dec 20 02:55:01 ispc CRON[2149204]: pam_unix(cron:session): session closed for user getmail Dec 20 02:55:01 ispc CRON[2149203]: pam_unix(cron:session): session closed for user root Dec 20 02:55:01 ispc CRON[2149201]: pam_unix(cron:session): session closed for user root Dec 20 02:56:01 ispc CRON[2149322]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:56:01 ispc CRON[2149322]: pam_unix(cron:session): session closed for user root Dec 20 02:56:29 ispc CRON[2148126]: pam_unix(cron:session): session closed for user root Dec 20 02:56:29 ispc postfix/smtpd[2149351]: sql auxprop plugin using mysql engine Dec 20 02:57:01 ispc CRON[2149357]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:57:01 ispc CRON[2149357]: pam_unix(cron:session): session closed for user root Dec 20 02:58:02 ispc CRON[2149388]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:58:03 ispc CRON[2149388]: pam_unix(cron:session): session closed for user root Dec 20 02:58:03 ispc saslauthd[2149403]: pam_mysql - SELECT returned no result. Dec 20 02:58:03 ispc saslauthd[2149403]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:58:03 ispc saslauthd[2149403]: do_auth : auth failure: [user=pwrchute] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:58:11 ispc saslauthd[2149405]: pam_mysql - SELECT returned no result. Dec 20 02:58:11 ispc saslauthd[2149405]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 02:58:11 ispc saslauthd[2149405]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 02:59:01 ispc CRON[2149411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 02:59:02 ispc CRON[2149411]: pam_unix(cron:session): session closed for user root Dec 20 03:00:01 ispc CRON[2149428]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:00:01 ispc CRON[2149429]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:00:01 ispc CRON[2149430]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:00:01 ispc CRON[2149431]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:00:01 ispc CRON[2149432]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:00:01 ispc CRON[2149433]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:00:01 ispc CRON[2149429]: pam_unix(cron:session): session closed for user root Dec 20 03:00:01 ispc CRON[2149430]: pam_unix(cron:session): session closed for user www-data Dec 20 03:00:01 ispc CRON[2149433]: pam_unix(cron:session): session closed for user getmail Dec 20 03:00:02 ispc CRON[2149431]: pam_unix(cron:session): session closed for user root Dec 20 03:00:02 ispc sshd[2149563]: Did not receive identification string from 103.203.57.11 Dec 20 03:00:03 ispc sshd[2149484]: Invalid user ziplines from 119.205.233.162 Dec 20 03:00:04 ispc CRON[2149428]: pam_unix(cron:session): session closed for user root Dec 20 03:00:41 ispc CRON[2149432]: pam_unix(cron:session): session closed for user root Dec 20 03:01:01 ispc CRON[2149712]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:02:01 ispc CRON[2149752]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 20 03:02:01 ispc CRON[2149753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:02:02 ispc CRON[2149753]: pam_unix(cron:session): session closed for user root Dec 20 03:02:47 ispc CRON[2149752]: pam_unix(cron:session): session closed for user logcheck Dec 20 03:02:57 ispc postfix/smtpd[2150819]: sql auxprop plugin using mysql engine Dec 20 03:03:01 ispc CRON[2150825]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:03:02 ispc CRON[2150825]: pam_unix(cron:session): session closed for user root Dec 20 03:03:42 ispc su[2147511]: pam_unix(su:session): session closed for user root Dec 20 03:03:43 ispc CRON[2144068]: pam_unix(cron:session): session closed for user root Dec 20 03:03:45 ispc sshd[2150895]: Invalid user blceu from 51.159.18.215 Dec 20 03:04:01 ispc CRON[2150902]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:04:02 ispc CRON[2150902]: pam_unix(cron:session): session closed for user root Dec 20 03:04:29 ispc sshd[2150926]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:05:01 ispc CRON[2150941]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:05:01 ispc CRON[2150942]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:05:01 ispc CRON[2150943]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:05:01 ispc CRON[2150944]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:05:01 ispc CRON[2150942]: pam_unix(cron:session): session closed for user root Dec 20 03:05:01 ispc CRON[2150944]: pam_unix(cron:session): session closed for user getmail Dec 20 03:05:02 ispc CRON[2150943]: pam_unix(cron:session): session closed for user root Dec 20 03:05:02 ispc CRON[2150941]: pam_unix(cron:session): session closed for user root Dec 20 03:05:30 ispc postfix/smtpd[2151034]: sql auxprop plugin using mysql engine Dec 20 03:05:31 ispc saslauthd[2151037]: pam_mysql - SELECT returned no result. Dec 20 03:05:31 ispc saslauthd[2151037]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:05:31 ispc saslauthd[2151037]: do_auth : auth failure: [user=desknorm] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:05:34 ispc saslauthd[2151038]: pam_mysql - SELECT returned no result. Dec 20 03:05:34 ispc saslauthd[2151038]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:05:34 ispc saslauthd[2151038]: do_auth : auth failure: [user=root] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:06:01 ispc CRON[2151051]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:06:01 ispc CRON[2151051]: pam_unix(cron:session): session closed for user root Dec 20 03:06:10 ispc postfix/smtpd[2151067]: sql auxprop plugin using mysql engine Dec 20 03:06:44 ispc saslauthd[2151084]: pam_mysql - SELECT returned no result. Dec 20 03:06:44 ispc saslauthd[2151084]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:06:44 ispc saslauthd[2151084]: do_auth : auth failure: [user=info@blue-cap.cz] [service=smtp] [realm=blue-cap.cz] [mech=pam] [reason=PAM auth error] Dec 20 03:07:01 ispc CRON[2151096]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:07:02 ispc CRON[2151096]: pam_unix(cron:session): session closed for user root Dec 20 03:07:04 ispc saslauthd[2151109]: pam_mysql - SELECT returned no result. Dec 20 03:07:04 ispc saslauthd[2151109]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:07:04 ispc saslauthd[2151109]: do_auth : auth failure: [user=info] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:08:01 ispc CRON[2151148]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:08:01 ispc CRON[2151148]: pam_unix(cron:session): session closed for user root Dec 20 03:08:44 ispc sshd[2151182]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:08:44 ispc sshd[2151182]: Invalid user admin from 2.57.121.112 Dec 20 03:09:01 ispc CRON[2151193]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:09:01 ispc CRON[2151194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:09:01 ispc CRON[2151193]: pam_unix(cron:session): session closed for user root Dec 20 03:09:02 ispc CRON[2151194]: pam_unix(cron:session): session closed for user root Dec 20 03:09:53 ispc postfix/smtpd[2151244]: sql auxprop plugin using mysql engine Dec 20 03:09:53 ispc saslauthd[2151246]: pam_mysql - SELECT returned no result. Dec 20 03:09:53 ispc saslauthd[2151246]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:09:53 ispc saslauthd[2151246]: do_auth : auth failure: [user=desk] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:10:01 ispc CRON[2151258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:10:01 ispc CRON[2151259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:10:01 ispc CRON[2151260]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:10:01 ispc CRON[2151261]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:10:01 ispc CRON[2151262]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:10:01 ispc CRON[2151259]: pam_unix(cron:session): session closed for user root Dec 20 03:10:01 ispc CRON[2151260]: pam_unix(cron:session): session closed for user www-data Dec 20 03:10:01 ispc CRON[2151262]: pam_unix(cron:session): session closed for user getmail Dec 20 03:10:01 ispc CRON[2151261]: pam_unix(cron:session): session closed for user root Dec 20 03:10:01 ispc CRON[2151258]: pam_unix(cron:session): session closed for user root Dec 20 03:11:01 ispc CRON[2151368]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:11:02 ispc CRON[2151368]: pam_unix(cron:session): session closed for user root Dec 20 03:11:41 ispc sshd[2151395]: Invalid user blceu from 211.110.229.128 Dec 20 03:12:01 ispc CRON[2151410]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:12:02 ispc CRON[2151410]: pam_unix(cron:session): session closed for user root Dec 20 03:13:01 ispc CRON[2151459]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:13:02 ispc CRON[2151459]: pam_unix(cron:session): session closed for user root Dec 20 03:13:13 ispc postfix/smtpd[2151475]: sql auxprop plugin using mysql engine Dec 20 03:13:14 ispc saslauthd[2151482]: pam_mysql - SELECT returned no result. Dec 20 03:13:14 ispc saslauthd[2151482]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:13:14 ispc saslauthd[2151482]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:13:20 ispc saslauthd[2151484]: pam_mysql - SELECT returned no result. Dec 20 03:13:20 ispc saslauthd[2151484]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:13:20 ispc saslauthd[2151484]: do_auth : auth failure: [user=webmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:13:28 ispc sshd[2151490]: Invalid user lanovacentra from 221.156.137.103 Dec 20 03:14:01 ispc CRON[2151520]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:14:01 ispc CRON[2151520]: pam_unix(cron:session): session closed for user root Dec 20 03:15:01 ispc CRON[2151567]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:15:01 ispc CRON[2151568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:15:01 ispc CRON[2151569]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:15:01 ispc CRON[2151566]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:15:01 ispc CRON[2151567]: pam_unix(cron:session): session closed for user root Dec 20 03:15:02 ispc CRON[2151569]: pam_unix(cron:session): session closed for user getmail Dec 20 03:15:02 ispc CRON[2151568]: pam_unix(cron:session): session closed for user root Dec 20 03:15:03 ispc CRON[2151566]: pam_unix(cron:session): session closed for user root Dec 20 03:15:30 ispc sshd[2151659]: Did not receive identification string from 45.140.17.97 Dec 20 03:15:30 ispc postfix/smtpd[2151660]: sql auxprop plugin using mysql engine Dec 20 03:16:01 ispc CRON[2151677]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:16:02 ispc CRON[2151677]: pam_unix(cron:session): session closed for user root Dec 20 03:16:33 ispc postfix/smtpd[2151711]: sql auxprop plugin using mysql engine Dec 20 03:16:33 ispc postfix/smtpd[2151713]: sql auxprop plugin using mysql engine Dec 20 03:16:43 ispc saslauthd[2151718]: pam_mysql - SELECT returned no result. Dec 20 03:16:43 ispc saslauthd[2151718]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:16:43 ispc saslauthd[2151718]: do_auth : auth failure: [user=noreply@blc-eu.com] [service=smtp] [realm=blc-eu.com] [mech=pam] [reason=PAM auth error] Dec 20 03:17:00 ispc saslauthd[2151728]: pam_mysql - SELECT returned no result. Dec 20 03:17:00 ispc saslauthd[2151728]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:17:00 ispc saslauthd[2151728]: do_auth : auth failure: [user=noreply] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:17:01 ispc CRON[2151730]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:17:02 ispc CRON[2151730]: pam_unix(cron:session): session closed for user root Dec 20 03:17:16 ispc sshd[2151748]: Did not receive identification string from 192.227.134.84 Dec 20 03:18:01 ispc CRON[2151784]: pam_unix(cron:session): session opened for user amavis by (uid=0) Dec 20 03:18:01 ispc CRON[2151785]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:18:03 ispc CRON[2151785]: pam_unix(cron:session): session closed for user root Dec 20 03:18:06 ispc CRON[2151784]: pam_unix(cron:session): session closed for user amavis Dec 20 03:18:07 ispc postfix/smtpd[2151812]: sql auxprop plugin using mysql engine Dec 20 03:19:01 ispc CRON[2151846]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:19:02 ispc CRON[2151846]: pam_unix(cron:session): session closed for user root Dec 20 03:20:01 ispc CRON[2151891]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:20:01 ispc CRON[2151892]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:20:01 ispc CRON[2151893]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:20:01 ispc CRON[2151894]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:20:01 ispc CRON[2151895]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:20:01 ispc CRON[2151892]: pam_unix(cron:session): session closed for user root Dec 20 03:20:01 ispc CRON[2151893]: pam_unix(cron:session): session closed for user www-data Dec 20 03:20:01 ispc CRON[2151895]: pam_unix(cron:session): session closed for user getmail Dec 20 03:20:02 ispc CRON[2151891]: pam_unix(cron:session): session closed for user root Dec 20 03:20:02 ispc CRON[2151894]: pam_unix(cron:session): session closed for user root Dec 20 03:20:13 ispc postfix/smtpd[2151981]: sql auxprop plugin using mysql engine Dec 20 03:20:14 ispc saslauthd[2151983]: pam_mysql - SELECT returned no result. Dec 20 03:20:14 ispc saslauthd[2151983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:20:14 ispc saslauthd[2151983]: do_auth : auth failure: [user=deskres] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:20:54 ispc saslauthd[2152004]: pam_mysql - SELECT returned no result. Dec 20 03:20:54 ispc saslauthd[2152004]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:20:54 ispc saslauthd[2152004]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:21:00 ispc sshd[2152005]: Invalid user martof from 222.236.46.74 Dec 20 03:21:01 ispc CRON[2152007]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:21:01 ispc CRON[2152008]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:21:01 ispc CRON[2152007]: pam_unix(cron:session): session closed for user root Dec 20 03:21:02 ispc CRON[2152008]: pam_unix(cron:session): session closed for user root Dec 20 03:21:22 ispc CRON[2149712]: pam_unix(cron:session): session closed for user root Dec 20 03:22:01 ispc CRON[2152038]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:22:02 ispc CRON[2152038]: pam_unix(cron:session): session closed for user root Dec 20 03:23:01 ispc CRON[2152059]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:23:02 ispc CRON[2152059]: pam_unix(cron:session): session closed for user root Dec 20 03:24:01 ispc CRON[2152076]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:24:03 ispc CRON[2152076]: pam_unix(cron:session): session closed for user root Dec 20 03:25:01 ispc CRON[2152089]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:25:01 ispc CRON[2152090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:25:01 ispc CRON[2152091]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:25:01 ispc CRON[2152092]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:25:01 ispc CRON[2152090]: pam_unix(cron:session): session closed for user root Dec 20 03:25:01 ispc CRON[2152092]: pam_unix(cron:session): session closed for user getmail Dec 20 03:25:01 ispc CRON[2152089]: pam_unix(cron:session): session closed for user root Dec 20 03:25:27 ispc CRON[2152091]: pam_unix(cron:session): session closed for user root Dec 20 03:25:48 ispc sshd[2152203]: Invalid user test from 221.151.181.65 Dec 20 03:26:01 ispc CRON[2152206]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:27:01 ispc CRON[2152238]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:27:03 ispc CRON[2152238]: pam_unix(cron:session): session closed for user root Dec 20 03:28:01 ispc CRON[2152284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:28:01 ispc CRON[2152284]: pam_unix(cron:session): session closed for user root Dec 20 03:28:34 ispc postfix/smtpd[2152315]: sql auxprop plugin using mysql engine Dec 20 03:28:35 ispc saslauthd[2152318]: pam_mysql - SELECT returned no result. Dec 20 03:28:35 ispc saslauthd[2152318]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:28:35 ispc saslauthd[2152318]: do_auth : auth failure: [user=postmaster] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:28:39 ispc saslauthd[2152323]: pam_mysql - SELECT returned no result. Dec 20 03:28:39 ispc saslauthd[2152323]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:28:39 ispc saslauthd[2152323]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:29:01 ispc CRON[2152333]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:29:03 ispc CRON[2152333]: pam_unix(cron:session): session closed for user root Dec 20 03:29:17 ispc sshd[2152400]: Invalid user ziplines from 165.227.38.205 Dec 20 03:30:01 ispc CRON[2152422]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:30:01 ispc CRON[2152423]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:30:01 ispc CRON[2152424]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:30:01 ispc CRON[2152425]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:30:01 ispc CRON[2152426]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:30:01 ispc CRON[2152426]: pam_unix(cron:session): session closed for user getmail Dec 20 03:30:01 ispc CRON[2152424]: pam_unix(cron:session): session closed for user www-data Dec 20 03:30:01 ispc CRON[2152423]: pam_unix(cron:session): session closed for user root Dec 20 03:30:01 ispc CRON[2152422]: pam_unix(cron:session): session closed for user root Dec 20 03:30:02 ispc CRON[2152425]: pam_unix(cron:session): session closed for user root Dec 20 03:31:01 ispc CRON[2152526]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:31:02 ispc CRON[2152526]: pam_unix(cron:session): session closed for user root Dec 20 03:32:01 ispc CRON[2152568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:32:02 ispc CRON[2152568]: pam_unix(cron:session): session closed for user root Dec 20 03:33:01 ispc CRON[2152617]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:33:02 ispc CRON[2152617]: pam_unix(cron:session): session closed for user root Dec 20 03:34:01 ispc CRON[2152656]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:34:01 ispc CRON[2152656]: pam_unix(cron:session): session closed for user root Dec 20 03:35:01 ispc CRON[2152694]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:35:01 ispc CRON[2152695]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:35:01 ispc CRON[2152696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:35:01 ispc CRON[2152697]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:35:01 ispc CRON[2152695]: pam_unix(cron:session): session closed for user root Dec 20 03:35:01 ispc CRON[2152697]: pam_unix(cron:session): session closed for user getmail Dec 20 03:35:03 ispc CRON[2152696]: pam_unix(cron:session): session closed for user root Dec 20 03:35:04 ispc postfix/smtpd[2152766]: sql auxprop plugin using mysql engine Dec 20 03:35:04 ispc CRON[2152694]: pam_unix(cron:session): session closed for user root Dec 20 03:35:05 ispc saslauthd[2152777]: pam_mysql - SELECT returned no result. Dec 20 03:35:05 ispc saslauthd[2152777]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:35:05 ispc saslauthd[2152777]: do_auth : auth failure: [user=dev] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:36:01 ispc CRON[2152802]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:36:02 ispc CRON[2152802]: pam_unix(cron:session): session closed for user root Dec 20 03:36:15 ispc saslauthd[2152818]: pam_mysql - SELECT returned no result. Dec 20 03:36:15 ispc saslauthd[2152818]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:36:15 ispc saslauthd[2152818]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:36:20 ispc sshd[2152823]: Invalid user matlbula from 117.50.70.169 Dec 20 03:36:51 ispc sshd[2152838]: Did not receive identification string from 202.184.68.182 Dec 20 03:37:01 ispc CRON[2152843]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:37:02 ispc CRON[2152843]: pam_unix(cron:session): session closed for user root Dec 20 03:37:28 ispc saslauthd[2152864]: pam_mysql - SELECT returned no result. Dec 20 03:37:28 ispc saslauthd[2152864]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:37:28 ispc saslauthd[2152864]: do_auth : auth failure: [user=luck@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 03:38:01 ispc CRON[2152887]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:38:03 ispc CRON[2152887]: pam_unix(cron:session): session closed for user root Dec 20 03:39:01 ispc CRON[2152931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:39:01 ispc CRON[2152932]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:39:01 ispc CRON[2152931]: pam_unix(cron:session): session closed for user root Dec 20 03:39:01 ispc CRON[2152932]: pam_unix(cron:session): session closed for user root Dec 20 03:40:01 ispc CRON[2152983]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:40:01 ispc CRON[2152984]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:40:01 ispc CRON[2152985]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:40:01 ispc CRON[2152986]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:40:01 ispc CRON[2152982]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:40:01 ispc CRON[2152983]: pam_unix(cron:session): session closed for user root Dec 20 03:40:01 ispc CRON[2152984]: pam_unix(cron:session): session closed for user www-data Dec 20 03:40:02 ispc CRON[2152986]: pam_unix(cron:session): session closed for user getmail Dec 20 03:40:02 ispc CRON[2152985]: pam_unix(cron:session): session closed for user root Dec 20 03:40:02 ispc CRON[2152982]: pam_unix(cron:session): session closed for user root Dec 20 03:41:01 ispc CRON[2153090]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:41:02 ispc CRON[2153090]: pam_unix(cron:session): session closed for user root Dec 20 03:42:01 ispc CRON[2153128]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:42:03 ispc CRON[2153128]: pam_unix(cron:session): session closed for user root Dec 20 03:43:01 ispc CRON[2153172]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:43:02 ispc CRON[2153172]: pam_unix(cron:session): session closed for user root Dec 20 03:43:46 ispc postfix/smtpd[2153201]: sql auxprop plugin using mysql engine Dec 20 03:43:46 ispc saslauthd[2153204]: pam_mysql - SELECT returned no result. Dec 20 03:43:46 ispc saslauthd[2153204]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:43:46 ispc saslauthd[2153204]: do_auth : auth failure: [user=web] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:44:01 ispc CRON[2153213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:44:03 ispc CRON[2153213]: pam_unix(cron:session): session closed for user root Dec 20 03:44:12 ispc saslauthd[2153228]: pam_mysql - SELECT returned no result. Dec 20 03:44:12 ispc saslauthd[2153228]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:44:12 ispc saslauthd[2153228]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:45:01 ispc CRON[2153251]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:45:01 ispc CRON[2153252]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:45:01 ispc CRON[2153253]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:45:01 ispc CRON[2153254]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:45:01 ispc CRON[2153252]: pam_unix(cron:session): session closed for user root Dec 20 03:45:01 ispc CRON[2153254]: pam_unix(cron:session): session closed for user getmail Dec 20 03:45:01 ispc CRON[2153251]: pam_unix(cron:session): session closed for user root Dec 20 03:45:02 ispc CRON[2153253]: pam_unix(cron:session): session closed for user root Dec 20 03:46:01 ispc CRON[2153358]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:46:01 ispc CRON[2153358]: pam_unix(cron:session): session closed for user root Dec 20 03:46:30 ispc postfix/smtpd[2153382]: sql auxprop plugin using mysql engine Dec 20 03:46:30 ispc CRON[2152206]: pam_unix(cron:session): session closed for user root Dec 20 03:46:30 ispc sshd[2153377]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:46:30 ispc sshd[2153377]: Invalid user blceu from 157.245.115.125 Dec 20 03:46:37 ispc sshd[2153337]: Invalid user blceu from 165.210.33.193 Dec 20 03:47:01 ispc CRON[2153386]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:47:03 ispc CRON[2153386]: pam_unix(cron:session): session closed for user root Dec 20 03:48:01 ispc CRON[2153407]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:48:01 ispc sshd[2153405]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:48:01 ispc CRON[2153407]: pam_unix(cron:session): session closed for user root Dec 20 03:48:02 ispc sshd[2153415]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:48:02 ispc sshd[2153415]: Invalid user klape from 189.89.20.45 Dec 20 03:48:04 ispc sshd[2153425]: reverse mapping checking getaddrinfo for 45.20.89.189.micron.com.br [189.89.20.45] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 03:48:04 ispc sshd[2153425]: Invalid user ubuntu from 189.89.20.45 Dec 20 03:48:22 ispc mysqld[1673]: warning: can't get client address: Connection reset by peer Dec 20 03:48:44 ispc sshd[2153430]: Invalid user bluecap from 120.48.125.223 Dec 20 03:48:56 ispc sshd[2153433]: Invalid user blceu from 185.208.181.153 Dec 20 03:49:01 ispc CRON[2153436]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:49:03 ispc CRON[2153436]: pam_unix(cron:session): session closed for user root Dec 20 03:49:51 ispc saslauthd[2153451]: pam_mysql - SELECT returned no result. Dec 20 03:49:51 ispc saslauthd[2153451]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:49:51 ispc saslauthd[2153451]: do_auth : auth failure: [user=device] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:50:01 ispc CRON[2153452]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:50:01 ispc CRON[2153453]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:50:01 ispc CRON[2153454]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 03:50:01 ispc CRON[2153455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:50:01 ispc CRON[2153456]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:50:01 ispc CRON[2153454]: pam_unix(cron:session): session closed for user www-data Dec 20 03:50:01 ispc CRON[2153453]: pam_unix(cron:session): session closed for user root Dec 20 03:50:01 ispc CRON[2153456]: pam_unix(cron:session): session closed for user getmail Dec 20 03:50:04 ispc CRON[2153452]: pam_unix(cron:session): session closed for user root Dec 20 03:50:38 ispc CRON[2153455]: pam_unix(cron:session): session closed for user root Dec 20 03:51:01 ispc CRON[2153568]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:51:32 ispc sshd[2153588]: Invalid user ziplines from 103.110.84.105 Dec 20 03:52:01 ispc CRON[2153605]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:52:01 ispc CRON[2153606]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:52:02 ispc CRON[2153606]: pam_unix(cron:session): session closed for user root Dec 20 03:52:22 ispc postfix/smtpd[2153629]: sql auxprop plugin using mysql engine Dec 20 03:52:22 ispc saslauthd[2153635]: pam_mysql - SELECT returned no result. Dec 20 03:52:22 ispc saslauthd[2153635]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:52:22 ispc saslauthd[2153635]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:53:01 ispc CRON[2153662]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:53:01 ispc CRON[2153662]: pam_unix(cron:session): session closed for user root Dec 20 03:54:01 ispc CRON[2153701]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:54:03 ispc CRON[2153701]: pam_unix(cron:session): session closed for user root Dec 20 03:55:01 ispc CRON[2153740]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:55:01 ispc CRON[2153741]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:55:01 ispc CRON[2153742]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:55:01 ispc CRON[2153743]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 03:55:01 ispc CRON[2153741]: pam_unix(cron:session): session closed for user root Dec 20 03:55:01 ispc CRON[2153743]: pam_unix(cron:session): session closed for user getmail Dec 20 03:55:02 ispc CRON[2153742]: pam_unix(cron:session): session closed for user root Dec 20 03:55:04 ispc CRON[2153740]: pam_unix(cron:session): session closed for user root Dec 20 03:55:19 ispc CRON[2153605]: pam_unix(cron:session): session closed for user root Dec 20 03:56:01 ispc CRON[2153849]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:56:01 ispc CRON[2153849]: pam_unix(cron:session): session closed for user root Dec 20 03:57:01 ispc CRON[2153885]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:57:01 ispc CRON[2153885]: pam_unix(cron:session): session closed for user root Dec 20 03:58:02 ispc CRON[2153928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:58:03 ispc CRON[2153928]: pam_unix(cron:session): session closed for user root Dec 20 03:58:43 ispc sshd[2153959]: Did not receive identification string from 192.227.134.84 Dec 20 03:58:51 ispc postfix/smtpd[2153964]: sql auxprop plugin using mysql engine Dec 20 03:58:52 ispc saslauthd[2153967]: pam_mysql - SELECT returned no result. Dec 20 03:58:52 ispc saslauthd[2153967]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 03:58:52 ispc saslauthd[2153967]: do_auth : auth failure: [user=admin1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 03:59:01 ispc CRON[2153972]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 03:59:02 ispc CRON[2153972]: pam_unix(cron:session): session closed for user root Dec 20 04:00:01 ispc CRON[2154010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:00:01 ispc CRON[2154011]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:00:01 ispc CRON[2154013]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:00:01 ispc CRON[2154014]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:00:01 ispc CRON[2154016]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:00:01 ispc CRON[2154015]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:00:01 ispc CRON[2154012]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 04:00:01 ispc CRON[2154011]: pam_unix(cron:session): session closed for user root Dec 20 04:00:01 ispc CRON[2154012]: pam_unix(cron:session): session closed for user www-data Dec 20 04:00:01 ispc CRON[2154014]: pam_unix(cron:session): session closed for user root Dec 20 04:00:01 ispc CRON[2154016]: pam_unix(cron:session): session closed for user getmail Dec 20 04:00:02 ispc CRON[2154015]: pam_unix(cron:session): session closed for user root Dec 20 04:00:03 ispc CRON[2154013]: pam_unix(cron:session): session closed for user root Dec 20 04:00:03 ispc CRON[2154010]: pam_unix(cron:session): session closed for user root Dec 20 04:00:43 ispc postfix/smtpd[2154189]: sql auxprop plugin using mysql engine Dec 20 04:00:43 ispc saslauthd[2154191]: pam_mysql - SELECT returned no result. Dec 20 04:00:43 ispc saslauthd[2154191]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:00:43 ispc saslauthd[2154191]: do_auth : auth failure: [user=scan1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:01:01 ispc CRON[2154200]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:01:01 ispc CRON[2154201]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:01:02 ispc CRON[2154201]: pam_unix(cron:session): session closed for user root Dec 20 04:01:07 ispc sshd[2154237]: reverse mapping checking getaddrinfo for americasober.prod [157.245.115.125] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 04:01:07 ispc sshd[2154237]: Invalid user ziplines from 157.245.115.125 Dec 20 04:01:24 ispc sshd[2154478]: Invalid user test from 221.151.181.65 Dec 20 04:02:01 ispc CRON[2154797]: pam_unix(cron:session): session opened for user logcheck by (uid=0) Dec 20 04:02:01 ispc CRON[2154798]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:02:03 ispc CRON[2154798]: pam_unix(cron:session): session closed for user root Dec 20 04:03:01 ispc CRON[2155931]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:03:02 ispc CRON[2155931]: pam_unix(cron:session): session closed for user root Dec 20 04:03:15 ispc sshd[2156118]: Invalid user martof from 210.114.18.123 Dec 20 04:03:15 ispc CRON[2154797]: pam_unix(cron:session): session closed for user logcheck Dec 20 04:03:18 ispc postfix/smtpd[2156134]: sql auxprop plugin using mysql engine Dec 20 04:04:01 ispc CRON[2156213]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:04:02 ispc CRON[2156213]: pam_unix(cron:session): session closed for user root Dec 20 04:04:33 ispc sshd[2156229]: Invalid user from 36.37.244.244 Dec 20 04:04:36 ispc postfix/smtpd[2156240]: sql auxprop plugin using mysql engine Dec 20 04:04:37 ispc saslauthd[2156243]: pam_mysql - SELECT returned no result. Dec 20 04:04:37 ispc saslauthd[2156243]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:04:37 ispc saslauthd[2156243]: do_auth : auth failure: [user=dhs3mt] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:05:01 ispc CRON[2156257]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:05:01 ispc CRON[2156258]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:05:01 ispc CRON[2156259]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:05:01 ispc CRON[2156260]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:05:01 ispc CRON[2156260]: pam_unix(cron:session): session closed for user getmail Dec 20 04:05:01 ispc CRON[2156258]: pam_unix(cron:session): session closed for user root Dec 20 04:05:01 ispc CRON[2156259]: pam_unix(cron:session): session closed for user root Dec 20 04:05:02 ispc CRON[2156257]: pam_unix(cron:session): session closed for user root Dec 20 04:05:30 ispc sshd[2156342]: Invalid user admin from 118.218.219.250 Dec 20 04:06:01 ispc CRON[2156364]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:06:02 ispc CRON[2156364]: pam_unix(cron:session): session closed for user root Dec 20 04:07:01 ispc CRON[2156406]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:07:02 ispc CRON[2156406]: pam_unix(cron:session): session closed for user root Dec 20 04:08:01 ispc CRON[2156455]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:08:02 ispc CRON[2156455]: pam_unix(cron:session): session closed for user root Dec 20 04:08:29 ispc su[2156558]: Successful su for amavis by root Dec 20 04:08:29 ispc su[2156558]: + ??? root:amavis Dec 20 04:08:29 ispc su[2156558]: pam_unix(su:session): session opened for user amavis by (uid=0) Dec 20 04:08:29 ispc postfix/smtpd[2156562]: sql auxprop plugin using mysql engine Dec 20 04:08:48 ispc su[2156558]: pam_unix(su:session): session closed for user amavis Dec 20 04:08:49 ispc postfix/smtpd[2156590]: sql auxprop plugin using mysql engine Dec 20 04:08:50 ispc saslauthd[2156602]: pam_mysql - SELECT returned no result. Dec 20 04:08:50 ispc saslauthd[2156602]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:08:50 ispc saslauthd[2156602]: do_auth : auth failure: [user=pass] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:09:01 ispc CRON[2156696]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:09:01 ispc CRON[2156697]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:09:01 ispc CRON[2156696]: pam_unix(cron:session): session closed for user root Dec 20 04:09:01 ispc CRON[2156697]: pam_unix(cron:session): session closed for user root Dec 20 04:10:01 ispc CRON[2156753]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:10:01 ispc CRON[2156754]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:10:01 ispc CRON[2156755]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 04:10:01 ispc CRON[2156756]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:10:01 ispc CRON[2156757]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:10:01 ispc CRON[2156755]: pam_unix(cron:session): session closed for user www-data Dec 20 04:10:01 ispc CRON[2156754]: pam_unix(cron:session): session closed for user root Dec 20 04:10:01 ispc CRON[2156757]: pam_unix(cron:session): session closed for user getmail Dec 20 04:10:02 ispc CRON[2156756]: pam_unix(cron:session): session closed for user root Dec 20 04:10:03 ispc CRON[2156753]: pam_unix(cron:session): session closed for user root Dec 20 04:10:52 ispc sshd[2156864]: Invalid user admin from 118.218.219.250 Dec 20 04:10:56 ispc sshd[2156870]: Did not receive identification string from 194.0.234.20 Dec 20 04:11:01 ispc CRON[2156872]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:11:03 ispc CRON[2156872]: pam_unix(cron:session): session closed for user root Dec 20 04:11:14 ispc CRON[2153568]: pam_unix(cron:session): session closed for user root Dec 20 04:11:14 ispc postfix/smtpd[2156894]: sql auxprop plugin using mysql engine Dec 20 04:12:01 ispc CRON[2156908]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:12:01 ispc sshd[2156906]: Invalid user blceu from 43.135.148.156 Dec 20 04:12:02 ispc CRON[2156908]: pam_unix(cron:session): session closed for user root Dec 20 04:13:01 ispc CRON[2156947]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:13:02 ispc CRON[2156947]: pam_unix(cron:session): session closed for user root Dec 20 04:14:01 ispc CRON[2156970]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:14:02 ispc CRON[2156970]: pam_unix(cron:session): session closed for user root Dec 20 04:14:02 ispc saslauthd[2156983]: pam_mysql - SELECT returned no result. Dec 20 04:14:02 ispc saslauthd[2156983]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:14:02 ispc saslauthd[2156983]: do_auth : auth failure: [user=test1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:15:01 ispc CRON[2156996]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:15:01 ispc CRON[2156997]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:15:01 ispc CRON[2156998]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:15:01 ispc CRON[2156995]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:15:01 ispc CRON[2156996]: pam_unix(cron:session): session closed for user root Dec 20 04:15:01 ispc CRON[2156998]: pam_unix(cron:session): session closed for user getmail Dec 20 04:15:02 ispc CRON[2156995]: pam_unix(cron:session): session closed for user root Dec 20 04:15:23 ispc sshd[2157182]: Invalid user ziplines from 5.129.195.224 Dec 20 04:15:47 ispc CRON[2156997]: pam_unix(cron:session): session closed for user root Dec 20 04:16:01 ispc CRON[2157194]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:16:58 ispc postfix/smtpd[2157239]: sql auxprop plugin using mysql engine Dec 20 04:16:59 ispc saslauthd[2157241]: pam_mysql - SELECT returned no result. Dec 20 04:16:59 ispc saslauthd[2157241]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:16:59 ispc saslauthd[2157241]: do_auth : auth failure: [user=ftp] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:17:01 ispc CRON[2157242]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:17:02 ispc CRON[2157242]: pam_unix(cron:session): session closed for user root Dec 20 04:18:01 ispc CRON[2157284]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:18:02 ispc CRON[2157284]: pam_unix(cron:session): session closed for user root Dec 20 04:18:18 ispc postfix/smtpd[2157306]: sql auxprop plugin using mysql engine Dec 20 04:19:01 ispc CRON[2157326]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:19:02 ispc CRON[2157326]: pam_unix(cron:session): session closed for user root Dec 20 04:19:27 ispc postfix/smtpd[2157352]: sql auxprop plugin using mysql engine Dec 20 04:19:28 ispc saslauthd[2157354]: pam_mysql - SELECT returned no result. Dec 20 04:19:28 ispc saslauthd[2157354]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:19:28 ispc saslauthd[2157354]: do_auth : auth failure: [user=dhs3pms] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:20:01 ispc CRON[2157371]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:20:01 ispc CRON[2157370]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:20:01 ispc CRON[2157372]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 04:20:01 ispc CRON[2157373]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:20:01 ispc CRON[2157374]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:20:01 ispc CRON[2157371]: pam_unix(cron:session): session closed for user root Dec 20 04:20:01 ispc CRON[2157372]: pam_unix(cron:session): session closed for user www-data Dec 20 04:20:01 ispc CRON[2157374]: pam_unix(cron:session): session closed for user getmail Dec 20 04:20:02 ispc CRON[2157373]: pam_unix(cron:session): session closed for user root Dec 20 04:20:03 ispc CRON[2157370]: pam_unix(cron:session): session closed for user root Dec 20 04:20:41 ispc postfix/smtpd[2157467]: sql auxprop plugin using mysql engine Dec 20 04:21:01 ispc CRON[2157478]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:21:01 ispc CRON[2157477]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:21:01 ispc CRON[2157477]: pam_unix(cron:session): session closed for user root Dec 20 04:21:01 ispc CRON[2157478]: pam_unix(cron:session): session closed for user root Dec 20 04:21:14 ispc sshd[2157495]: Invalid user martof from 211.110.229.128 Dec 20 04:21:19 ispc sshd[2157497]: Invalid user martof from 103.110.84.105 Dec 20 04:21:48 ispc sshd[2157525]: Invalid user klape from 103.164.20.29 Dec 20 04:21:49 ispc sshd[2157527]: Invalid user ubuntu from 103.164.20.29 Dec 20 04:22:01 ispc CRON[2157535]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:22:02 ispc CRON[2157535]: pam_unix(cron:session): session closed for user root Dec 20 04:23:01 ispc CRON[2157579]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:23:03 ispc CRON[2157579]: pam_unix(cron:session): session closed for user root Dec 20 04:23:20 ispc CRON[2154200]: pam_unix(cron:session): session closed for user root Dec 20 04:23:21 ispc postfix/smtpd[2158005]: sql auxprop plugin using mysql engine Dec 20 04:23:31 ispc sshd[2158013]: Invalid user martof from 52.232.19.79 Dec 20 04:24:01 ispc CRON[2158028]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:24:01 ispc CRON[2158028]: pam_unix(cron:session): session closed for user root Dec 20 04:24:21 ispc sshd[2158046]: Invalid user klape from 36.50.177.171 Dec 20 04:24:26 ispc postfix/smtpd[2158055]: sql auxprop plugin using mysql engine Dec 20 04:24:27 ispc saslauthd[2158058]: pam_mysql - SELECT returned no result. Dec 20 04:24:27 ispc saslauthd[2158058]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:24:27 ispc saslauthd[2158058]: do_auth : auth failure: [user=xerox] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:24:28 ispc sshd[2158052]: Invalid user ubuntu from 36.50.177.171 Dec 20 04:24:59 ispc saslauthd[2158076]: pam_mysql - SELECT returned no result. Dec 20 04:24:59 ispc saslauthd[2158076]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:24:59 ispc saslauthd[2158076]: do_auth : auth failure: [user=admin] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:25:01 ispc CRON[2158077]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:25:01 ispc CRON[2158079]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:25:01 ispc CRON[2158080]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:25:01 ispc CRON[2158078]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:25:02 ispc CRON[2158078]: pam_unix(cron:session): session closed for user root Dec 20 04:25:02 ispc CRON[2158080]: pam_unix(cron:session): session closed for user getmail Dec 20 04:25:02 ispc CRON[2158079]: pam_unix(cron:session): session closed for user root Dec 20 04:25:03 ispc CRON[2158077]: pam_unix(cron:session): session closed for user root Dec 20 04:26:02 ispc CRON[2158186]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:26:02 ispc CRON[2158186]: pam_unix(cron:session): session closed for user root Dec 20 04:26:29 ispc sshd[2158205]: reverse mapping checking getaddrinfo for dns112.personaliseplus.com [2.57.121.112] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 04:26:29 ispc sshd[2158205]: Invalid user admin from 2.57.121.112 Dec 20 04:27:01 ispc CRON[2158299]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:27:02 ispc CRON[2158299]: pam_unix(cron:session): session closed for user root Dec 20 04:27:23 ispc postfix/smtpd[2158325]: sql auxprop plugin using mysql engine Dec 20 04:27:24 ispc saslauthd[2158327]: pam_mysql - SELECT returned no result. Dec 20 04:27:24 ispc saslauthd[2158327]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:27:24 ispc saslauthd[2158327]: do_auth : auth failure: [user=client@klape.eu] [service=smtp] [realm=klape.eu] [mech=pam] [reason=PAM auth error] Dec 20 04:28:01 ispc CRON[2158356]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:28:01 ispc CRON[2158356]: pam_unix(cron:session): session closed for user root Dec 20 04:28:26 ispc postfix/smtpd[2158383]: sql auxprop plugin using mysql engine Dec 20 04:29:01 ispc CRON[2158411]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:29:02 ispc CRON[2158411]: pam_unix(cron:session): session closed for user root Dec 20 04:29:16 ispc postfix/smtpd[2158438]: sql auxprop plugin using mysql engine Dec 20 04:29:17 ispc saslauthd[2158441]: pam_mysql - SELECT returned no result. Dec 20 04:29:17 ispc saslauthd[2158441]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:29:17 ispc saslauthd[2158441]: do_auth : auth failure: [user=user1] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:30:01 ispc CRON[2158470]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:30:01 ispc CRON[2158471]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:30:01 ispc CRON[2158472]: pam_unix(cron:session): session opened for user www-data by (uid=0) Dec 20 04:30:01 ispc CRON[2158473]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:30:01 ispc CRON[2158474]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:30:01 ispc CRON[2158472]: pam_unix(cron:session): session closed for user www-data Dec 20 04:30:01 ispc CRON[2158471]: pam_unix(cron:session): session closed for user root Dec 20 04:30:01 ispc CRON[2158474]: pam_unix(cron:session): session closed for user getmail Dec 20 04:30:01 ispc CRON[2158473]: pam_unix(cron:session): session closed for user root Dec 20 04:30:02 ispc CRON[2158470]: pam_unix(cron:session): session closed for user root Dec 20 04:31:01 ispc CRON[2158596]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:31:01 ispc CRON[2158596]: pam_unix(cron:session): session closed for user root Dec 20 04:31:34 ispc sshd[2158628]: Invalid user martof from 116.120.58.228 Dec 20 04:31:42 ispc sshd[2158639]: Invalid user ziplines from 52.232.19.79 Dec 20 04:32:01 ispc CRON[2158653]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:32:02 ispc CRON[2158653]: pam_unix(cron:session): session closed for user root Dec 20 04:32:25 ispc sshd[2158676]: reverse mapping checking getaddrinfo for ip-112-74.4vendeta.com [78.128.112.74] failed - POSSIBLE BREAK-IN ATTEMPT! Dec 20 04:32:57 ispc postfix/smtpd[2158703]: sql auxprop plugin using mysql engine Dec 20 04:32:58 ispc saslauthd[2158706]: pam_mysql - SELECT returned no result. Dec 20 04:32:58 ispc saslauthd[2158706]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:32:58 ispc saslauthd[2158706]: do_auth : auth failure: [user=test] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:33:01 ispc CRON[2158711]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:33:01 ispc CRON[2158711]: pam_unix(cron:session): session closed for user root Dec 20 04:34:01 ispc CRON[2158764]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:34:01 ispc CRON[2158764]: pam_unix(cron:session): session closed for user root Dec 20 04:34:02 ispc sshd[2158775]: Did not receive identification string from 134.122.48.117 Dec 20 04:34:20 ispc saslauthd[2158785]: pam_mysql - SELECT returned no result. Dec 20 04:34:20 ispc saslauthd[2158785]: DEBUG: auth_pam: pam_authenticate failed: User not known to the underlying authentication module Dec 20 04:34:20 ispc saslauthd[2158785]: do_auth : auth failure: [user=diag] [service=smtp] [realm=] [mech=pam] [reason=PAM auth error] Dec 20 04:35:01 ispc CRON[2158813]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:35:01 ispc CRON[2158814]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:35:01 ispc CRON[2158812]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:35:01 ispc CRON[2158815]: pam_unix(cron:session): session opened for user getmail by (uid=0) Dec 20 04:35:01 ispc CRON[2158813]: pam_unix(cron:session): session closed for user root Dec 20 04:35:01 ispc CRON[2158815]: pam_unix(cron:session): session closed for user getmail Dec 20 04:35:02 ispc CRON[2158814]: pam_unix(cron:session): session closed for user root Dec 20 04:35:02 ispc CRON[2158812]: pam_unix(cron:session): session closed for user root Dec 20 04:36:01 ispc CRON[2158925]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:36:02 ispc CRON[2158925]: pam_unix(cron:session): session closed for user root Dec 20 04:36:29 ispc postfix/smtpd[2158947]: sql auxprop plugin using mysql engine Dec 20 04:36:30 ispc CRON[2157194]: pam_unix(cron:session): session closed for user root Dec 20 04:37:01 ispc CRON[2158954]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:37:07 ispc CRON[2158954]: pam_unix(cron:session): session closed for user root Dec 20 04:38:01 ispc CRON[2158979]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:39:01 ispc CRON[2159047]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:39:01 ispc CRON[2159048]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 20 04:39:01 ispc CRON[2159047]: pam_unix(cron:session): session closed for user root Dec 20 04:39:02 ispc CRON[2159048]: pam_unix(cron:session): session closed for user root