[Eisfair] Last LogIn Befehlt defekt

Daniel Kubein kuba_ at web.de
So Jun 2 07:08:09 CEST 2019


das geht hier stündlich ->

Jun  2 02:21:24 superkubi -- MARK --
Jun  2 02:21:24 superkubi -- MARK --
Jun  2 02:30:00 superkubi sshd[13668]: Invalid user admin from 
193.32.163.89 port 47874
Jun  2 02:30:00 superkubi sshd[13668]: Invalid user admin from 
193.32.163.89 port 47874
Jun  2 02:30:00 superkubi sshd[13668]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 02:30:00 superkubi sshd[13668]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 02:30:00 superkubi sshd[13668]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 02:30:00 superkubi sshd[13668]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 02:30:00 superkubi sshd[13668]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=193.32.163.89
Jun  2 02:30:00 superkubi sshd[13668]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=193.32.163.89
Jun  2 02:30:02 superkubi sshd[13668]: Failed password for invalid user 
admin from 193.32.163.89 port 47874 ssh2
Jun  2 02:30:02 superkubi sshd[13668]: Failed password for invalid user 
admin from 193.32.163.89 port 47874 ssh2
Jun  2 02:30:02 superkubi sshd[13668]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 02:30:02 superkubi sshd[13668]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 02:30:04 superkubi sshd[13668]: Disconnecting invalid user admin 
193.32.163.89 port 47874: Change of username or service not allowed: 
(admin,ssh-connection) -> (user,ssh-connection) [preauth]
Jun  2 02:30:04 superkubi sshd[13668]: Disconnecting invalid user admin 
193.32.163.89 port 47874: Change of username or service not allowed: 
(admin,ssh-connection) -> (user,ssh-connection) [preauth]
Jun  2 02:30:39 superkubi sshd[13693]: Received disconnect from 
128.199.55.17 port 40308:11: Bye Bye [preauth]
Jun  2 02:30:39 superkubi sshd[13693]: Received disconnect from 
128.199.55.17 port 40308:11: Bye Bye [preauth]
Jun  2 02:30:39 superkubi sshd[13693]: Disconnected from 128.199.55.17 
port 40308 [preauth]
Jun  2 02:30:39 superkubi sshd[13693]: Disconnected from 128.199.55.17 
port 40308 [preauth]
Jun  2 02:35:52 superkubi sshd[13715]: Did not receive identification 
string from 46.9.119.61 port 48302
Jun  2 02:35:52 superkubi sshd[13715]: Did not receive identification 
string from 46.9.119.61 port 48302
Jun  2 02:52:12 superkubi sshd[13746]: Unable to negotiate with 
116.108.222.246 port 38858: no matching key exchange method found. Their 
offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth]
Jun  2 02:52:12 superkubi sshd[13746]: Unable to negotiate with 
116.108.222.246 port 38858: no matching key exchange method found. Their 
offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 [preauth]




Jun  2 04:21:26 superkubi -- MARK --
Jun  2 04:21:26 superkubi -- MARK --
Jun  2 04:41:26 superkubi -- MARK --
Jun  2 04:41:26 superkubi -- MARK --
Jun  2 04:59:01 superkubi fcron[14132]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' started for user root (pid 14141)
Jun  2 04:59:01 superkubi fcron[14132]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' started for user root (pid 14141)
Jun  2 04:59:01 superkubi fcron[14132]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' completed
Jun  2 04:59:01 superkubi fcron[14132]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' completed
Jun  2 05:00:00 superkubi fcron[14152]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' started for user root (pid 14161)
Jun  2 05:00:00 superkubi fcron[14152]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' started for user root (pid 14161)
Jun  2 05:00:00 superkubi fcron[14152]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' completed
Jun  2 05:00:00 superkubi fcron[14152]: Job 'cp /var/www/log/access_log 
/var/www/htdocs/logs/web/' completed
Jun  2 05:00:28 superkubi sshd[14168]: Invalid user admin from 
193.32.163.89 port 49362
Jun  2 05:00:28 superkubi sshd[14168]: Invalid user admin from 
193.32.163.89 port 49362
Jun  2 05:00:28 superkubi sshd[14168]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:00:28 superkubi sshd[14168]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:00:29 superkubi sshd[14168]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:00:29 superkubi sshd[14168]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:00:29 superkubi sshd[14168]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=193.32.163.89
Jun  2 05:00:29 superkubi sshd[14168]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=193.32.163.89
Jun  2 05:00:31 superkubi sshd[14168]: Failed password for invalid user 
admin from 193.32.163.89 port 49362 ssh2
Jun  2 05:00:31 superkubi sshd[14168]: Failed password for invalid user 
admin from 193.32.163.89 port 49362 ssh2
Jun  2 05:00:31 superkubi sshd[14168]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:00:31 superkubi sshd[14168]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:00:32 superkubi sshd[14168]: Disconnecting invalid user admin 
193.32.163.89 port 49362: Change of username or service not allowed: 
(admin,ssh-connection) -> (user,ssh-connection) [preauth]
Jun  2 05:00:32 superkubi sshd[14168]: Disconnecting invalid user admin 
193.32.163.89 port 49362: Change of username or service not allowed: 
(admin,ssh-connection) -> (user,ssh-connection) [preauth]
Jun  2 05:05:01 superkubi fcron[14197]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' started for user root 
(pid 14206)
Jun  2 05:05:01 superkubi fcron[14197]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' started for user root 
(pid 14206)
Jun  2 05:05:01 superkubi fcron[14197]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' completed
Jun  2 05:05:01 superkubi fcron[14197]: Job 
'/var/install/bin/clamav-checkproc 1>/dev/null' completed
Jun  2 05:21:26 superkubi -- MARK --
Jun  2 05:21:26 superkubi -- MARK --
Jun  2 05:41:26 superkubi -- MARK --
Jun  2 05:41:26 superkubi -- MARK --
Jun  2 05:51:59 superkubi sshd[14289]: Invalid user pi from 49.207.5.158 
port 53226
Jun  2 05:51:59 superkubi sshd[14289]: Invalid user pi from 49.207.5.158 
port 53226
Jun  2 05:51:59 superkubi sshd[14289]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:51:59 superkubi sshd[14289]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:51:59 superkubi sshd[14295]: Invalid user pi from 49.207.5.158 
port 53228
Jun  2 05:51:59 superkubi sshd[14295]: Invalid user pi from 49.207.5.158 
port 53228
Jun  2 05:51:59 superkubi sshd[14295]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:51:59 superkubi sshd[14295]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:51:59 superkubi sshd[14289]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:51:59 superkubi sshd[14289]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:51:59 superkubi sshd[14289]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=49.207.5.158
Jun  2 05:51:59 superkubi sshd[14289]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=49.207.5.158
Jun  2 05:52:00 superkubi sshd[14295]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:52:00 superkubi sshd[14295]: pam_unix(sshd:auth): check pass; 
user unknown
Jun  2 05:52:00 superkubi sshd[14295]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=49.207.5.158
Jun  2 05:52:00 superkubi sshd[14295]: pam_unix(sshd:auth): 
authentication failure; logname= uid=0 euid=0 tty=ssh ruser= 
rhost=49.207.5.158
Jun  2 05:52:01 superkubi sshd[14289]: Failed password for invalid user 
pi from 49.207.5.158 port 53226 ssh2
Jun  2 05:52:01 superkubi sshd[14289]: Failed password for invalid user 
pi from 49.207.5.158 port 53226 ssh2
Jun  2 05:52:01 superkubi sshd[14289]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:52:01 superkubi sshd[14289]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:52:01 superkubi sshd[14295]: Failed password for invalid user 
pi from 49.207.5.158 port 53228 ssh2
Jun  2 05:52:01 superkubi sshd[14295]: Failed password for invalid user 
pi from 49.207.5.158 port 53228 ssh2
Jun  2 05:52:02 superkubi sshd[14295]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:52:02 superkubi sshd[14295]: Excess permission or bad 
ownership on file /var/log/btmp
Jun  2 05:52:03 superkubi sshd[14289]: Connection closed by invalid user 
pi 49.207.5.158 port 53226 [preauth]
Jun  2 05:52:03 superkubi sshd[14289]: Connection closed by invalid user 
pi 49.207.5.158 port 53226 [preauth]
Jun  2 05:52:03 superkubi sshd[14295]: Connection closed by invalid user 
pi 49.207.5.158 port 53228 [preauth]
Jun  2 05:52:03 superkubi sshd[14295]: Connection closed by invalid user 
pi 49.207.5.158 port 53228 [preauth]



Mehr Informationen über die Mailingliste Eisfair