Could anybody HELP me to understand the following server logs? I think i have problems with my MAIL server and don't know how to solve them !! On my server i have HSPHERE control panel where i can set mail server's parameters.
If you think i have serious problems, PLEASE suggest me what to do. Thanks in advance for your help.
Gianni - Italy
################### LogWatch 5.2.2 (06/23/04) ####################
Processing Initiated: Tue Jan 20 09:27:23 2009
Date Range Processed: yesterday
Detail Level of Output: 10
Logfiles for Host: xxxxxxxxxxxxxxx.com
################################################################
--------------------- Cron Begin ------------------------
Commands Run:
User root:
/hsphere/local/config/mail/spamassassin/scripts/rules_du_jour: 1 Time(s)
/hsphere/local/config/mail/spamassassin/scripts/saupdate: 1 Time(s)
/hsphere/local/config/mrtg/scripts/formgraph: 144 Time(s)
/hsphere/local/config/mysql/scripts/manage_mysql_logs >/dev/null 2>&1: 1 Time(s)
/hsphere/local/config/pgsql/scripts/manage_pgsql_logs >/dev/null 2>&1: 1 Time(s)
/hsphere/local/sqwebmail/share/sqwebmail/cleancache.pl: 72 Time(s)
/hsphere/local/var/vpopmail/bin/clearopensmtp: 24 Time(s)
/hsphere/shared/apache/htdocs/horde/config/horde_tmpfile 2>/dev/null: 6 Time(s)
/hsphere/shared/bin/freshclam --quiet: 24 Time(s)
/hsphere/shared/scripts/cron/apache-restart.pl: 288 Time(s)
/hsphere/shared/scripts/cron/ftp-restart.pl: 288 Time(s)
/hsphere/shared/scripts/cron/mail_anlz.sh: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/analyze.pl: 12 Time(s)
nice -15 /hsphere/shared/scripts/cron/cron_rotate.pl: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/db_usage.pl: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/ftp_anlz.pl: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/ftp_anlz_user.pl: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/mail_overlimit.pl: 1 Time(s)
nice -15 /hsphere/shared/scripts/cron/mnogosearch_index.pl: 1 Time(s)
run-parts /etc/cron.daily: 1 Time(s)
run-parts /etc/cron.hourly: 24 Time(s)
su -l cpanel -c "java -Xms64M -Xmx128M psoft.hsphere.UsageLoader": 1 Time(s)
su -l cpanel -c 'java -Xms64M -Xmx128M psoft.hsphere.DSBandwidthLoader': 1 Time(s)
su -l cpanel -c 'java -Xms64M -Xmx128M psoft.hsphere.TrafficLoader': 1 Time(s)
---------------------- Cron End -------------------------
--------------------- IMAP Begin ------------------------
**Unmatched Entries**
Connection, ip=[127.0.0.1]: 22 Time(s)
Connection, ip=[168.144.108.103]: 2 Time(s)
Connection, ip=[168.144.108.11]: 3 Time(s)
Connection, ip=[168.144.108.12]: 1 Time(s)
Connection, ip=[168.144.108.15]: 3 Time(s)
Connection, ip=[168.144.108.16]: 4 Time(s)
Connection, ip=[168.144.108.22]: 2 Time(s)
Connection, ip=[168.144.108.23]: 3 Time(s)
Connection, ip=[168.144.108.25]: 3 Time(s)
Connection, ip=[168.144.108.26]: 2 Time(s)
Connection, ip=[168.144.108.27]: 2 Time(s)
Connection, ip=[168.144.108.28]: 2 Time(s)
Connection, ip=[168.144.108.30]: 3 Time(s)
Connection, ip=[168.144.108.31]: 5 Time(s)
Connection, ip=[168.144.108.34]: 2 Time(s)
Connection, ip=[168.144.108.35]: 2 Time(s)
Connection, ip=[168.144.108.36]: 3 Time(s)
Connection, ip=[168.144.108.37]: 3 Time(s)
Connection, ip=[168.144.108.39]: 4 Time(s)
Connection, ip=[168.144.108.3]: 1 Time(s)
Connection, ip=[168.144.108.41]: 3 Time(s)
Connection, ip=[168.144.108.44]: 4 Time(s)
Connection, ip=[168.144.108.4]: 5 Time(s)
Connection, ip=[168.144.108.5]: 2 Time(s)
Connection, ip=[168.144.108.6]: 2 Time(s)
Connection, ip=[168.144.108.8]: 3 Time(s)
Connection, ip=[168.144.108.9]: 2 Time(s)
Connection, ip=[79.31.197.82]: 5 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.103], headers=0, body=0, rcvd=100, sent=9339, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.103], headers=0, body=0, rcvd=523, sent=1301, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.11], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.11], headers=0, body=0, rcvd=66, sent=387, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.11], headers=0, body=42201, rcvd=40, sent=43411, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.12], headers=0, body=9118, rcvd=42, sent=9708, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.15], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.15], headers=0, body=23032, rcvd=41, sent=23952, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.15], headers=0, body=61534, rcvd=40, sent=62740, time=9: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.16], headers=0, body=0, rcvd=640, sent=1518, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.16], headers=0, body=0, rcvd=965, sent=7040, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.16], headers=0, body=61534, rcvd=41, sent=62770, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.16], headers=0, body=6334, rcvd=40, sent=6802, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.22], headers=0, body=0, rcvd=965, sent=7981, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.22], headers=0, body=0, rcvd=98, sent=3438, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.23], headers=0, body=0, rcvd=81, sent=748, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.23], headers=0, body=0, rcvd=98, sent=3897, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.23], headers=0, body=6334, rcvd=41, sent=6832, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.25], headers=0, body=0, rcvd=100, sent=9517, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.25], headers=0, body=0, rcvd=558, sent=1371, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.25], headers=0, body=42201, rcvd=40, sent=43411, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.26], headers=0, body=117181, rcvd=40, sent=119650, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.26], headers=0, body=5539, rcvd=41, sent=5983, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.27], headers=0, body=0, rcvd=98, sent=3438, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.27], headers=0, body=2819, rcvd=40, sent=3215, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.28], headers=0, body=0, rcvd=632, sent=4409, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.28], headers=0, body=0, rcvd=965, sent=7766, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.30], headers=0, body=0, rcvd=0, sent=18, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.30], headers=0, body=0, rcvd=99, sent=9212, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.30], headers=0, body=6334, rcvd=40, sent=6802, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], headers=0, body=0, rcvd=66, sent=387, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], headers=0, body=0, rcvd=98, sent=3861, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], headers=0, body=0, rcvd=98, sent=4360, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], headers=0, body=23032, rcvd=40, sent=23922, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], headers=0, body=42201, rcvd=41, sent=43441, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.34], headers=0, body=0, rcvd=902, sent=7297, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.34], headers=0, body=61534, rcvd=40, sent=62740, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.35], headers=0, body=0, rcvd=101, sent=8999, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.35], headers=0, body=0, rcvd=98, sent=3438, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.36], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.36], headers=0, body=0, rcvd=965, sent=7218, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.36], headers=0, body=0, rcvd=99, sent=9877, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.37], headers=0, body=0, rcvd=103, sent=461, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.37], headers=0, body=0, rcvd=396, sent=3535, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.37], headers=0, body=0, rcvd=99, sent=9377, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.39], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.39], headers=0, body=0, rcvd=241, sent=739, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.39], headers=0, body=0, rcvd=81, sent=779, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.39], headers=0, body=0, rcvd=99, sent=8542, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.3], headers=0, body=0, rcvd=100, sent=9896, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.41], headers=0, body=0, rcvd=100, sent=10065, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.41], headers=0, body=0, rcvd=146, sent=1127, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.41], headers=0, body=0, rcvd=558, sent=1371, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.44], headers=0, body=0, rcvd=0, sent=18, time=0: 2 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.44], headers=0, body=0, rcvd=98, sent=3438, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.44], headers=0, body=0, rcvd=99, sent=9166, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], headers=0, body=0, rcvd=558, sent=1371, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], headers=0, body=0, rcvd=68, sent=391, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], headers=0, body=0, rcvd=99, sent=6833, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], headers=0, body=0, rcvd=99, sent=9377, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], headers=0, body=42201, rcvd=40, sent=43411, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.5], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.5], headers=0, body=0, rcvd=1103, sent=7624, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.6], headers=0, body=0, rcvd=0, sent=18, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.6], headers=0, body=2288, rcvd=40, sent=2693, time=0: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.8], headers=0, body=0, rcvd=100, sent=10280, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.8], headers=0, body=0, rcvd=558, sent=1371, time=3: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.8], headers=0, body=0, rcvd=83, sent=584, time=1: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.9], headers=0, body=0, rcvd=365, sent=1001, time=2: 1 Time(s)
DISCONNECTED, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.9], headers=0, body=0, rcvd=98, sent=2940, time=1: 1 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], protocol=IMAP: 6 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], protocol=IMAP: 4 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], protocol=IMAP: 8 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], protocol=IMAP: 4 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.103], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.11], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.12], protocol=IMAP: 1 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.15], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.16], protocol=IMAP: 4 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.22], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.23], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.25], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.26], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.27], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.28], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.30], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.31], protocol=IMAP: 5 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.34], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.35], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.36], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.37], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.39], protocol=IMAP: 4 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.3], protocol=IMAP: 1 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.41], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.44], protocol=IMAP: 4 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.4], protocol=IMAP: 5 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.5], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.6], protocol=IMAP: 2 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.8], protocol=IMAP: 3 Time(s)
LOGIN, user=xxxxxxxx@xxxxxxxx.com, ip=[168.144.108.9], protocol=IMAP: 2 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=106, sent=351, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=197, sent=719, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=197, sent=719, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=278, sent=850, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=333, sent=682, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=96, sent=483, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=106, sent=349, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=233, sent=765, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=301, sent=562, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=96, sent=483, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], headers=0, body=0, rcvd=156, sent=603, time=3: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], headers=0, body=0, rcvd=156, sent=603, time=61: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=106, sent=352, time=0: 2 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=333, sent=682, time=1: 2 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=96, sent=485, time=1: 2 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=40, body=0, rcvd=1068, sent=16043, time=4: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=40, body=0, rcvd=987, sent=15912, time=2: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=106, sent=349, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=301, sent=560, time=0: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=563, sent=3579, time=1: 1 Time(s)
LOGOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[127.0.0.1], headers=0, body=0, rcvd=96, sent=483, time=0: 1 Time(s)
TIMEOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], headers=0, body=0, rcvd=30, sent=442, time=1823: 1 Time(s)
TIMEOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], headers=735, body=2465343, rcvd=1088, sent=2502001, time=1977: 1 Time(s)
TIMEOUT, user=xxxxxxxx@xxxxxxxx.com, ip=[79.31.197.82], headers=0, body=0, rcvd=146, sent=575, time=1804: 1 Time(s)
---------------------- IMAP End -------------------------
--------------------- pam_unix Begin ------------------------
sshd:
Authentication Failures:
unknown (vipvoipmax.com.br): 1146 Time(s)
root (vipvoipmax.com.br): 960 Time(s)
unknown (host.asterisk-china.com): 470 Time(s)
unknown (mail.mscecuador.com): 445 Time(s)
root (mail.mscecuador.com): 174 Time(s)
root (122.193.4.115): 78 Time(s)
root (host.asterisk-china.com): 45 Time(s)
unknown (66.98.214.20): 36 Time(s)
root (66.98.214.20): 18 Time(s)
mysql (vipvoipmax.com.br): 12 Time(s)
root (220-130-96-97.hinet-ip.hinet.net): 12 Time(s)
unknown (122.193.4.115): 12 Time(s)
ftp (vipvoipmax.com.br): 6 Time(s)
httpd (vipvoipmax.com.br): 6 Time(s)
morgan (vipvoipmax.com.br): 6 Time(s)
postgres (vipvoipmax.com.br): 6 Time(s)
camilla (host.asterisk-china.com): 5 Time(s)
mysql (host.asterisk-china.com): 4 Time(s)
postgres (host.asterisk-china.com): 4 Time(s)
Invalid Users:
Unknown Account: 2109 Time(s)
Sessions Opened:
root: 7 Time(s)
root by root: 4 Time(s)
su:
Sessions Opened:
(uid=0) -> cpanel: 3 Time(s)
---------------------- pam_unix End -------------------------
--------------------- qmail Begin ------------------------
Remote Server Responses:
Deferral(421) - 46 Time(s)
Deferral(443) - 2587 Time(s)
Deferral(450) - 88 Time(s)
Deferral(451) - 132 Time(s)
Deferral(452) - 65 Time(s)
Deferral(453) - 3 Time(s)
Deferral(454) - 1 Time(s)
Deferral(554) - 2 Time(s)
Failure(450) - 1 Time(s)
Failure(451) - 6 Time(s)
Failure(500) - 4 Time(s)
Failure(501) - 7 Time(s)
Failure(503) - 1 Time(s)
Failure(511) - 8761 Time(s)
Failure(550) - 603 Time(s)
Failure(551) - 2 Time(s)
Failure(552) - 4 Time(s)
Failure(553) - 34 Time(s)
Failure(554) - 72 Time(s)
Failure(571) - 3 Time(s)
Failure(591) - 1 Time(s)
Success(250) - 728 Time(s)
Percentage(s):
Deferral - 22.23 %
Failure - 72.23 %
Success - 5.54 %
**Unmatched Entries**
1232319603.071829 double bounce: discarding bounce/328619
1232319615.008272 double bounce: discarding bounce/328618
1232319616.998476 double bounce: discarding bounce/328618
1232319629.629874 double bounce: discarding bounce/328618
1232319637.565770 double bounce: discarding bounce/328619
1232319637.900158 double bounce: discarding bounce/328618
1232319659.794666 double bounce: discarding bounce/328602
1232319687.972190 double bounce: discarding bounce/328602
1232319764.383945 double bounce: discarding bounce/328602
1232319789.747827 double bounce: discarding bounce/328602
1232319790.257352 double bounce: discarding bounce/328602
1232319849.013470 double bounce: discarding bounce/328602
1232319936.599634 double bounce: discarding bounce/328602
1232319938.065118 double bounce: discarding bounce/328601
1232320034.769841 double bounce: discarding bounce/328461
1232320052.120914 double bounce: discarding bounce/328601
.................... about 5000 lines !!
1232405887.580448 double bounce: discarding bounce/329085
1232405888.852440 double bounce: discarding bounce/329149
1232405908.163440 double bounce: discarding bounce/329085
---------------------- qmail End -------------------------
--------------------- sendmail Begin ------------------------
Message traffic by domain:
| Inbound | Outbound | Internal | Total
Domain | Msgs Kbytes | Msgs Kbytes | Msgs Kbytes | Msgs Kbytes
-------------------------+-------------+-------------+-------------+------------
-------------------------+-------------+-------------+-------------+------------
TOTAL | 0 0 | 0 0 | 0 0 | 0 0
Message Size Distribution:
Range # Msgs KBytes
0 - 10k 0 0
10k - 20k 0 0
20k - 50k 0 0
50k - 100k 0 0
100k - 500k 0 0
500k - 1Mb 0 0
1Mb - 2Mb 0 0
2Mb - 5Mb 0 0
5Mb - 10Mb 0 0
10Mb+ 0 0
----------------------------------
TOTAL 0 0
---------------------- sendmail End -------------------------
--------------------- SSHD Begin ------------------------
Couldn't resolve these IPs:
aidingeyes.com(66.98.214.20): 54 Time(s)
Didn't receive an ident from these IPs:
220-130-96-97.HINET-IP.hinet.net (220.130.96.97): 5 Time(s)
afsco-online.com (202.132.68.25): 6 Time(s)
host.asterisk-china.com (67.225.152.116): 6 Time(s)
mail.mscecuador.com (200.7.198.162): 6 Time(s)
vipvoipmax.com.br (189.8.48.3): 6 Time(s)
Failed logins from these:
camilla/password from ::ffff:67.225.152.116: 10 Time(s)
ftp/password from ::ffff:189.8.48.3: 12 Time(s)
httpd/password from ::ffff:189.8.48.3: 12 Time(s)
morgan/password from ::ffff:189.8.48.3: 12 Time(s)
mysql/password from ::ffff:189.8.48.3: 24 Time(s)
mysql/password from ::ffff:67.225.152.116: 8 Time(s)
postgres/password from ::ffff:189.8.48.3: 12 Time(s)
postgres/password from ::ffff:67.225.152.116: 8 Time(s)
root/password from ::ffff:122.193.4.115: 156 Time(s)
root/password from ::ffff:189.8.48.3: 1920 Time(s)
root/password from ::ffff:200.7.198.162: 348 Time(s)
root/password from ::ffff:220.130.96.97: 24 Time(s)
root/password from ::ffff:66.98.214.20: 36 Time(s)
root/password from ::ffff:67.225.152.116: 90 Time(s)
Illegal users from these:
root/publickey: 5 Time(s)
Postponed authentication:
root/publickey:
::ffff:80.241.169.30: 5 Time(s)
Users logging in through sshd:
root:
cp.jhmilano.com (80.241.169.30): 14 times
213-156-53-25.ip.fastwebnet.it (213.156.53.25): 6 times
89-97-35-73.ip15.fastwebnet.it (89.97.35.73): 2 times
Received disconnect:
11: Bye Bye
::ffff:122.193.4.115 : 90 Time(s)
::ffff:189.8.48.3 : 2142 Time(s)
::ffff:200.7.198.162 : 613 Time(s)
::ffff:220.130.96.97 : 10 Time(s)
::ffff:66.98.214.20 : 54 Time(s)
::ffff:67.225.152.116 : 510 Time(s)
**Unmatched Entries**
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Failed password for invalid user apple from ::ffff:189.8.48.3 port 46712 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 46712 ssh2
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Failed password for invalid user apple from ::ffff:189.8.48.3 port 54730 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 54730 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 33781 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 33781 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 53099 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 53099 ssh2
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Failed password for invalid user apple from ::ffff:189.8.48.3 port 43978 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 43978 ssh2
Invalid user apple from ::ffff:189.8.48.3
input_userauth_request: invalid user apple
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Failed password for invalid user apple from ::ffff:189.8.48.3 port 36887 ssh2
Failed password for invalid user apple from ::ffff:189.8.48.3 port 36887 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 47056 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 47056 ssh2
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Failed password for invalid user brian from ::ffff:189.8.48.3 port 55080 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 55080 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 34122 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 34122 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 53440 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 53440 ssh2
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Failed password for invalid user brian from ::ffff:189.8.48.3 port 44320 ssh2
Failed password for invalid user brian from ::ffff:189.8.48.3 port 44320 ssh2
Invalid user brian from ::ffff:189.8.48.3
input_userauth_request: invalid user brian
Invalid user andrew from ::ffff:189.8.48.3
input_userauth_request: invalid user andrew
..................
.................... about 8500 lines !!
..................
Invalid user carlos from ::ffff:200.7.198.162
input_userauth_request: invalid user carlos
Failed password for invalid user carlos from ::ffff:200.7.198.162 port 43398 ssh2
Failed password for invalid user carlos from ::ffff:200.7.198.162 port 43398 ssh2
---------------------- SSHD End -------------------------
--------------------- vpopmail Begin ------------------------
Password Failures:
xxxxxxxx@xxxxxxxx.com - 2 Time(s)
xxxxxxxx@xxxxxxxx.com - 1 Time(s)
xxxxxxxx@xxxxxxxx.com - 11 Time(s)
xxxxxxxx@xxxxxxxx.com - 2 Time(s)
xxxxxxxx@xxxxxxxx.com - 1 Time(s)
xxxxxxxx@xxxxxxxx.com - 1 Time(s)
xxxxxxxx@xxxxxxxx.com - 45 Time(s)
xxxxxxxx@xxxxxxxx.com - 1421 Time(s)
No Such User Found:
terzi@ - 4 Time(s)
**Unmatched Entries**
vchkpw-pop3: invalid user/domain characters walter terzi:213.140.6.96
vchkpw-pop3: invalid user/domain characters walter terzi:213.140.6.96
vchkpw-pop3: invalid user/domain characters walter terzi:213.140.6.96
---------------------- vpopmail End -------------------------
------------------ Disk Space --------------------
/dev/sda1 15G 562M 14G 5% /
/dev/sda5 83G 5.1G 74G 7% /hsphere
/dev/sda2 25G 1.2G 22G 6% /usr
/dev/sda6 25G 2.0G 21G 9% /var
###################### LogWatch End #########################
