UNIX Antivirus and spam protection

[FLAdmin]

Hi, I just started managing a UNIX server (that was heavily neglected since I would say the early 80's).

It's ScoOpenserver 5.06
Using SendMail and some FoxPro for UNIX apps.

I would like to know what solutions are the standard in order to stop things like:

more than 5 login attempts from 1 ip in 1 second (obvious dictionary attacks) and also how to just block out certain subnets within unix all together.
An auto-IP Banning solution would be nice...

The thing is, we have telnet open to the net. (yes i know very bad). but unfortunately it's the foundation of the business, people run the application this way. and to top it off they have 4 letter passwords some of them (I'm working on that already).

I also have a hawking dual wan router with anti-port scanning, DoS attacks etc.. so thats one small step.

Please give me any suggestions. I'm new to UNIX

 

[stefanwagner]

If scoOpenserver is similar to linux, I would check out /etc/hosts.allow, /etc/hosts.deny, /etc/telnet* and /etc/inetd.conf

seeking a job as java-programmer in Berlin:

http://home.arcor.de/hirnstrom/bewerbung

 

[stefanwagner]

btw.: Do the logfiles (/var/log/auth.log?) show how many attacks per second you get?
You could calculate the time an 4-signs password is hacked, to get better arguments against telnet.

seeking a job as java-programmer in Berlin:

http://home.arcor.de/hirnstrom/bewerbung

 

[FLAdmin]

that file doesent exist, i see this is /var/adm/syslog

You can see why this guy is getting on my nerves...
How can I ban 202.79.209.* ?
and many more than this:


Mar 10 10:48:18 sco sshd[19918]: Failed password for illegal user pcap from 202.79.209.9 port 59866 ssh2
Mar 10 10:48:18 sco sshd[19918]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:20 sco sshd[19920]: input_userauth_request: illegal user mailnull
Mar 10 10:48:20 sco sshd[19920]: Failed password for illegal user mailnull from 202.79.209.9 port 59948 ssh2
Mar 10 10:48:21 sco sshd[19920]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:23 sco sshd[19922]: input_userauth_request: illegal user smmsp
Mar 10 10:48:23 sco sshd[19922]: Failed password for illegal user smmsp from 202.79.209.9 port 60033 ssh2
Mar 10 10:48:23 sco sshd[19922]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:25 sco sshd[19924]: input_userauth_request: illegal user apache
Mar 10 10:48:25 sco sshd[19924]: Failed password for illegal user apache from 202.79.209.9 port 60115 ssh2
Mar 10 10:48:26 sco sshd[19924]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:28 sco sshd[19925]: input_userauth_request: illegal user squid
Mar 10 10:48:28 sco sshd[19925]: Failed password for illegal user squid from 202.79.209.9 port 60191 ssh2
Mar 10 10:48:28 sco sshd[19925]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:31 sco sshd[19926]: input_userauth_request: illegal user webalizer
Mar 10 10:48:31 sco sshd[19926]: Failed password for illegal user webalizer from 202.79.209.9 port 60279 ssh2
Mar 10 10:48:31 sco sshd[19926]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:33 sco sshd[19927]: input_userauth_request: illegal user dbus
Mar 10 10:48:33 sco sshd[19927]: Failed password for illegal user dbus from 202.79.209.9 port 60358 ssh2
Mar 10 10:48:34 sco sshd[19927]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:36 sco sshd[19928]: input_userauth_request: illegal user xfs
Mar 10 10:48:36 sco sshd[19928]: Failed password for illegal user xfs from 202.79.209.9 port 60445 ssh2
Mar 10 10:48:37 sco sshd[19928]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:40 sco sshd[19929]: input_userauth_request: illegal user named
Mar 10 10:48:40 sco sshd[19929]: Failed password for illegal user named from 202.79.209.9 port 60536 ssh2
Mar 10 10:48:40 sco sshd[19929]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:46 sco sshd[19930]: input_userauth_request: illegal user ntp
Mar 10 10:48:46 sco sshd[19930]: Failed password for illegal user ntp from 202.79.209.9 port 60654 ssh2
Mar 10 10:48:46 sco sshd[19930]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:49 sco sshd[19931]: input_userauth_request: illegal user gdm
Mar 10 10:48:49 sco sshd[19931]: Failed password for illegal user gdm from 202.79.209.9 port 60827 ssh2
Mar 10 10:48:50 sco sshd[19931]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:52 sco sshd[19932]: Failed password for mysql from 202.79.209.9 port 60941 ssh2
Mar 10 10:48:52 sco sshd[19932]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:55 sco sshd[19933]: input_userauth_request: illegal user manpreet
Mar 10 10:48:55 sco sshd[19933]: Failed password for illegal user manpreet from 202.79.209.9 port 32794 ssh2
Mar 10 10:48:55 sco sshd[19933]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:48:57 sco sshd[19934]: input_userauth_request: illegal user postfix
Mar 10 10:48:57 sco sshd[19934]: Failed password for illegal user postfix from 202.79.209.9 port 32877 ssh2
Mar 10 10:48:57 sco sshd[19934]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:00 sco sshd[19935]: input_userauth_request: illegal user clamav
Mar 10 10:49:00 sco sshd[19935]: Failed password for illegal user clamav from 202.79.209.9 port 32958 ssh2
Mar 10 10:49:00 sco sshd[19935]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:02 sco sshd[19937]: input_userauth_request: illegal user amavis
Mar 10 10:49:02 sco sshd[19937]: Failed password for illegal user amavis from 202.79.209.9 port 33042 ssh2
Mar 10 10:49:03 sco sshd[19937]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:05 sco sshd[19938]: input_userauth_request: illegal user test
Mar 10 10:49:05 sco sshd[19938]: Failed password for illegal user test from 202.79.209.9 port 33129 ssh2
Mar 10 10:49:05 sco sshd[19938]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:08 sco sshd[19939]: input_userauth_request: illegal user test
Mar 10 10:49:08 sco sshd[19939]: Failed password for illegal user test from 202.79.209.9 port 33213 ssh2
Mar 10 10:49:08 sco sshd[19939]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:10 sco sshd[19940]: input_userauth_request: illegal user test
Mar 10 10:49:10 sco sshd[19940]: Failed password for illegal user test from 202.79.209.9 port 33297 ssh2
Mar 10 10:49:11 sco sshd[19940]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:13 sco sshd[19941]: input_userauth_request: illegal user test
Mar 10 10:49:13 sco sshd[19941]: Failed password for illegal user test from 202.79.209.9 port 33384 ssh2
Mar 10 10:49:13 sco sshd[19941]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:15 sco sshd[19943]: input_userauth_request: illegal user test
Mar 10 10:49:15 sco sshd[19943]: Failed password for illegal user test from 202.79.209.9 port 33468 ssh2
Mar 10 10:49:16 sco sshd[19943]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:18 sco sshd[19945]: input_userauth_request: illegal user test
Mar 10 10:49:18 sco sshd[19945]: Failed password for illegal user test from 202.79.209.9 port 33549 ssh2
Mar 10 10:49:18 sco sshd[19945]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:21 sco sshd[19946]: input_userauth_request: illegal user test
Mar 10 10:49:21 sco sshd[19946]: Failed password for illegal user test from 202.79.209.9 port 33633 ssh2
Mar 10 10:49:21 sco sshd[19946]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:23 sco sshd[19948]: input_userauth_request: illegal user test
Mar 10 10:49:23 sco sshd[19948]: Failed password for illegal user test from 202.79.209.9 port 33714 ssh2
Mar 10 10:49:24 sco sshd[19948]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:26 sco sshd[19950]: input_userauth_request: illegal user test
Mar 10 10:49:26 sco sshd[19950]: Failed password for illegal user test from 202.79.209.9 port 33794 ssh2
Mar 10 10:49:26 sco sshd[19950]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:28 sco sshd[19951]: input_userauth_request: illegal user test
Mar 10 10:49:28 sco sshd[19951]: Failed password for illegal user test from 202.79.209.9 port 33874 ssh2
Mar 10 10:49:29 sco sshd[19951]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:31 sco sshd[19952]: input_userauth_request: illegal user test1
Mar 10 10:49:31 sco sshd[19952]: Failed password for illegal user test1 from 202.79.209.9 port 33952 ssh2
Mar 10 10:49:31 sco sshd[19952]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:34 sco sshd[19953]: input_userauth_request: illegal user test1
Mar 10 10:49:34 sco sshd[19953]: Failed password for illegal user test1 from 202.79.209.9 port 34035 ssh2
Mar 10 10:49:34 sco sshd[19953]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:36 sco sshd[19954]: input_userauth_request: illegal user test1
Mar 10 10:49:36 sco sshd[19954]: Failed password for illegal user test1 from 202.79.209.9 port 34112 ssh2
Mar 10 10:49:37 sco sshd[19954]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:39 sco sshd[19955]: input_userauth_request: illegal user test1
Mar 10 10:49:39 sco sshd[19955]: Failed password for illegal user test1 from 202.79.209.9 port 34198 ssh2
Mar 10 10:49:39 sco sshd[19955]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:41 sco sshd[19956]: input_userauth_request: illegal user test1
Mar 10 10:49:41 sco sshd[19956]: Failed password for illegal user test1 from 202.79.209.9 port 34278 ssh2
Mar 10 10:49:42 sco sshd[19956]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:44 sco sshd[19957]: input_userauth_request: illegal user test1
Mar 10 10:49:44 sco sshd[19957]: Failed password for illegal user test1 from 202.79.209.9 port 34367 ssh2
Mar 10 10:49:44 sco sshd[19957]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:47 sco sshd[19958]: input_userauth_request: illegal user test1
Mar 10 10:49:47 sco sshd[19958]: Failed password for illegal user test1 from 202.79.209.9 port 34449 ssh2
Mar 10 10:49:47 sco sshd[19958]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:49 sco sshd[19959]: input_userauth_request: illegal user test1
Mar 10 10:49:49 sco sshd[19959]: Failed password for illegal user test1 from 202.79.209.9 port 34532 ssh2
Mar 10 10:49:50 sco sshd[19959]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:52 sco sshd[19960]: input_userauth_request: illegal user test1
Mar 10 10:49:52 sco sshd[19960]: Failed password for illegal user test1 from 202.79.209.9 port 34613 ssh2
Mar 10 10:49:52 sco sshd[19960]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:54 sco sshd[19961]: input_userauth_request: illegal user test1
Mar 10 10:49:54 sco sshd[19961]: Failed password for illegal user test1 from 202.79.209.9 port 34701 ssh2
Mar 10 10:49:55 sco sshd[19961]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:49:57 sco sshd[19962]: input_userauth_request: illegal user test1
Mar 10 10:49:57 sco sshd[19962]: Failed password for illegal user test1 from 202.79.209.9 port 34778 ssh2
Mar 10 10:49:57 sco sshd[19962]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:00 sco sshd[19984]: input_userauth_request: illegal user vmail
Mar 10 10:50:00 sco sshd[19984]: Failed password for illegal user vmail from 202.79.209.9 port 34865 ssh2
Mar 10 10:50:00 sco sshd[19984]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:02 sco sshd[19988]: Accepted password for guest from 202.79.209.9 port 34941 ssh2
Mar 10 10:50:03 sco sshd[19990]: Could not reverse map address 202.79.209.9.
Mar 10 10:50:09 sco sshd[19991]: Failed password for guest from 202.79.209.9 port 35149 ssh2
Mar 10 10:50:09 sco sshd[19991]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:12 sco sshd[19992]: Failed password for guest from 202.79.209.9 port 35230 ssh2
Mar 10 10:50:12 sco sshd[19992]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:14 sco sshd[19994]: Failed password for guest from 202.79.209.9 port 35306 ssh2
Mar 10 10:50:15 sco sshd[19994]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:17 sco sshd[19995]: Failed password for guest from 202.79.209.9 port 35392 ssh2
Mar 10 10:50:17 sco sshd[19995]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:19 sco sshd[19996]: Failed password for guest from 202.79.209.9 port 35473 ssh2
Mar 10 10:50:20 sco sshd[19996]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:24 sco sshd[19997]: Failed password for guest from 202.79.209.9 port 35556 ssh2
Mar 10 10:50:25 sco sshd[19997]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:27 sco sshd[19998]: Failed password for guest from 202.79.209.9 port 35708 ssh2
Mar 10 10:50:27 sco sshd[19998]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:29 sco sshd[19999]: Failed password for guest from 202.79.209.9 port 35792 ssh2
Mar 10 10:50:30 sco sshd[19999]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:32 sco sshd[20000]: Failed password for guest from 202.79.209.9 port 35873 ssh2
Mar 10 10:50:32 sco sshd[20000]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:35 sco sshd[20001]: Failed password for guest from 202.79.209.9 port 35949 ssh2
Mar 10 10:50:35 sco sshd[20001]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:37 sco sshd[20002]: input_userauth_request: illegal user quest
Mar 10 10:50:37 sco sshd[20002]: Failed password for illegal user quest from 202.79.209.9 port 36029 ssh2
Mar 10 10:50:38 sco sshd[20002]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:40 sco sshd[20003]: input_userauth_request: illegal user quest
Mar 10 10:50:40 sco sshd[20003]: Failed password for illegal user quest from 202.79.209.9 port 36114 ssh2
Mar 10 10:50:40 sco sshd[20003]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:43 sco sshd[20004]: input_userauth_request: illegal user quest
Mar 10 10:50:43 sco sshd[20004]: Failed password for illegal user quest from 202.79.209.9 port 36198 ssh2
Mar 10 10:50:43 sco sshd[20004]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:45 sco sshd[20005]: input_userauth_request: illegal user quest
Mar 10 10:50:45 sco sshd[20005]: Failed password for illegal user quest from 202.79.209.9 port 36285 ssh2
Mar 10 10:50:46 sco sshd[20005]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:48 sco sshd[20007]: input_userauth_request: illegal user quest
Mar 10 10:50:48 sco sshd[20007]: Failed password for illegal user quest from 202.79.209.9 port 36365 ssh2
Mar 10 10:50:48 sco sshd[20007]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:51 sco sshd[20008]: input_userauth_request: illegal user quest
Mar 10 10:50:51 sco sshd[20008]: Failed password for illegal user quest from 202.79.209.9 port 36445 ssh2
Mar 10 10:50:51 sco sshd[20008]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:57 sco sshd[20010]: input_userauth_request: illegal user quest
Mar 10 10:50:57 sco sshd[20010]: Failed password for illegal user quest from 202.79.209.9 port 36529 ssh2
Mar 10 10:50:57 sco sshd[20010]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:50:59 sco sshd[20011]: input_userauth_request: illegal user quest
Mar 10 10:50:59 sco sshd[20011]: Failed password for illegal user quest from 202.79.209.9 port 36705 ssh2
Mar 10 10:51:00 sco sshd[20011]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:02 sco sshd[20012]: input_userauth_request: illegal user quest
Mar 10 10:51:02 sco sshd[20012]: Failed password for illegal user quest from 202.79.209.9 port 36785 ssh2
Mar 10 10:51:02 sco sshd[20012]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:04 sco sshd[20013]: input_userauth_request: illegal user quest
Mar 10 10:51:04 sco sshd[20013]: Failed password for illegal user quest from 202.79.209.9 port 36865 ssh2
Mar 10 10:51:05 sco sshd[20013]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:07 sco sshd[20014]: input_userauth_request: illegal user quest
Mar 10 10:51:07 sco sshd[20014]: Failed password for illegal user quest from 202.79.209.9 port 36951 ssh2
Mar 10 10:51:07 sco sshd[20014]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:10 sco sshd[20015]: input_userauth_request: illegal user admin
Mar 10 10:51:10 sco sshd[20015]: Failed password for illegal user admin from 202.79.209.9 port 37031 ssh2
Mar 10 10:51:10 sco sshd[20015]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:12 sco sshd[20016]: input_userauth_request: illegal user admin
Mar 10 10:51:12 sco sshd[20016]: Failed password for illegal user admin from 202.79.209.9 port 37116 ssh2
Mar 10 10:51:13 sco sshd[20016]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:15 sco sshd[20017]: input_userauth_request: illegal user admin
Mar 10 10:51:15 sco sshd[20017]: Failed password for illegal user admin from 202.79.209.9 port 37202 ssh2
Mar 10 10:51:15 sco sshd[20017]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:20 sco sshd[20018]: input_userauth_request: illegal user admin
Mar 10 10:51:20 sco sshd[20018]: Failed password for illegal user admin from 202.79.209.9 port 37280 ssh2
Mar 10 10:51:21 sco sshd[20018]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:24 sco sshd[20019]: input_userauth_request: illegal user admin
Mar 10 10:51:24 sco sshd[20019]: Failed password for illegal user admin from 202.79.209.9 port 37456 ssh2
Mar 10 10:51:24 sco sshd[20019]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:27 sco sshd[20022]: input_userauth_request: illegal user admin
Mar 10 10:51:27 sco sshd[20022]: Failed password for illegal user admin from 202.79.209.9 port 37570 ssh2
Mar 10 10:51:27 sco sshd[20022]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:29 sco sshd[20023]: input_userauth_request: illegal user admin
Mar 10 10:51:29 sco sshd[20023]: Failed password for illegal user admin from 202.79.209.9 port 37649 ssh2
Mar 10 10:51:30 sco sshd[20023]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:35 sco sshd[20024]: input_userauth_request: illegal user admin
Mar 10 10:51:35 sco sshd[20024]: Failed password for illegal user admin from 202.79.209.9 port 37730 ssh2
Mar 10 10:51:35 sco sshd[20024]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:38 sco sshd[20025]: input_userauth_request: illegal user admin
Mar 10 10:51:38 sco sshd[20025]: Failed password for illegal user admin from 202.79.209.9 port 37907 ssh2
Mar 10 10:51:38 sco sshd[20025]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:40 sco sshd[20026]: input_userauth_request: illegal user admin
Mar 10 10:51:40 sco sshd[20026]: Failed password for illegal user admin from 202.79.209.9 port 37990 ssh2
Mar 10 10:51:40 sco sshd[20026]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:43 sco sshd[20027]: input_userauth_request: illegal user admin
Mar 10 10:51:43 sco sshd[20027]: Failed password for illegal user admin from 202.79.209.9 port 38078 ssh2
Mar 10 10:51:43 sco sshd[20027]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:45 sco sshd[20028]: input_userauth_request: illegal user admin
Mar 10 10:51:45 sco sshd[20028]: Failed password for illegal user admin from 202.79.209.9 port 38166 ssh2
Mar 10 10:51:46 sco sshd[20028]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:51 sco sshd[20031]: input_userauth_request: illegal user admin
Mar 10 10:51:51 sco sshd[20031]: Failed password for illegal user admin from 202.79.209.9 port 38241 ssh2
Mar 10 10:51:51 sco sshd[20031]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:53 sco sshd[20032]: input_userauth_request: illegal user password
Mar 10 10:51:53 sco sshd[20032]: Failed password for illegal user password from 202.79.209.9 port 38426 ssh2
Mar 10 10:51:54 sco sshd[20032]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:56 sco sshd[20033]: input_userauth_request: illegal user password
Mar 10 10:51:56 sco sshd[20033]: Failed password for illegal user password from 202.79.209.9 port 38508 ssh2
Mar 10 10:51:56 sco sshd[20033]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:51:59 sco sshd[20034]: input_userauth_request: illegal user password
Mar 10 10:51:59 sco sshd[20034]: Failed password for illegal user password from 202.79.209.9 port 38581 ssh2
Mar 10 10:51:59 sco sshd[20034]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:01 sco sshd[20035]: input_userauth_request: illegal user password
Mar 10 10:52:01 sco sshd[20035]: Failed password for illegal user password from 202.79.209.9 port 38664 ssh2
Mar 10 10:52:02 sco sshd[20035]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:04 sco sshd[20036]: input_userauth_request: illegal user password
Mar 10 10:52:04 sco sshd[20036]: Failed password for illegal user password from 202.79.209.9 port 38750 ssh2
Mar 10 10:52:04 sco sshd[20036]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:06 sco sshd[20037]: input_userauth_request: illegal user password
Mar 10 10:52:06 sco sshd[20037]: Failed password for illegal user password from 202.79.209.9 port 38834 ssh2
Mar 10 10:52:07 sco sshd[20037]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:09 sco sshd[20038]: input_userauth_request: illegal user password
Mar 10 10:52:09 sco sshd[20038]: Failed password for illegal user password from 202.79.209.9 port 38915 ssh2
Mar 10 10:52:09 sco sshd[20038]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:12 sco sshd[20039]: input_userauth_request: illegal user password
Mar 10 10:52:12 sco sshd[20039]: Failed password for illegal user password from 202.79.209.9 port 38995 ssh2
Mar 10 10:52:12 sco sshd[20039]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:14 sco sshd[20040]: input_userauth_request: illegal user admins
Mar 10 10:52:14 sco sshd[20040]: Failed password for illegal user admins from 202.79.209.9 port 39077 ssh2
Mar 10 10:52:14 sco sshd[20040]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:17 sco sshd[20041]: input_userauth_request: illegal user admins
Mar 10 10:52:17 sco sshd[20041]: Failed password for illegal user admins from 202.79.209.9 port 39157 ssh2
Mar 10 10:52:17 sco sshd[20041]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:19 sco sshd[20042]: input_userauth_request: illegal user admins
Mar 10 10:52:19 sco sshd[20042]: Failed password for illegal user admins from 202.79.209.9 port 39239 ssh2
Mar 10 10:52:20 sco sshd[20042]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:22 sco sshd[20043]: input_userauth_request: illegal user admins
Mar 10 10:52:22 sco sshd[20043]: Failed password for illegal user admins from 202.79.209.9 port 39322 ssh2
Mar 10 10:52:22 sco sshd[20043]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:24 sco sshd[20046]: input_userauth_request: illegal user admins
Mar 10 10:52:24 sco sshd[20046]: Failed password for illegal user admins from 202.79.209.9 port 39396 ssh2
Mar 10 10:52:25 sco sshd[20046]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:27 sco sshd[20047]: input_userauth_request: illegal user admins
Mar 10 10:52:27 sco sshd[20047]: Failed password for illegal user admins from 202.79.209.9 port 39477 ssh2
Mar 10 10:52:27 sco sshd[20047]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:30 sco sshd[20048]: input_userauth_request: illegal user admins
Mar 10 10:52:30 sco sshd[20048]: Failed password for illegal user admins from 202.79.209.9 port 39554 ssh2
Mar 10 10:52:30 sco sshd[20048]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:32 sco sshd[20049]: input_userauth_request: illegal user admins
Mar 10 10:52:32 sco sshd[20049]: Failed password for illegal user admins from 202.79.209.9 port 39642 ssh2
Mar 10 10:52:33 sco sshd[20049]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:35 sco sshd[20068]: input_userauth_request: illegal user admins
Mar 10 10:52:35 sco sshd[20068]: Failed password for illegal user admins from 202.79.209.9 port 39722 ssh2
Mar 10 10:52:35 sco sshd[20068]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:37 sco sshd[20070]: input_userauth_request: illegal user admins
Mar 10 10:52:37 sco sshd[20070]: Failed password for illegal user admins from 202.79.209.9 port 39809 ssh2
Mar 10 10:52:38 sco sshd[20070]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:40 sco sshd[20071]: input_userauth_request: illegal user admins
Mar 10 10:52:40 sco sshd[20071]: Failed password for illegal user admins from 202.79.209.9 port 39886 ssh2
Mar 10 10:52:40 sco sshd[20071]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:43 sco sshd[20076]: Failed password for root from 202.79.209.9 port 39968 ssh2
Mar 10 10:52:43 sco sshd[20076]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:45 sco sshd[20077]: Failed password for root from 202.79.209.9 port 40044 ssh2
Mar 10 10:52:46 sco sshd[20077]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:48 sco sshd[20078]: Failed password for root from 202.79.209.9 port 40130 ssh2
Mar 10 10:52:48 sco sshd[20078]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:50 sco sshd[20079]: Failed password for root from 202.79.209.9 port 40208 ssh2
Mar 10 10:52:51 sco sshd[20079]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:53 sco sshd[20080]: Failed password for root from 202.79.209.9 port 40294 ssh2
Mar 10 10:52:53 sco sshd[20080]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:56 sco sshd[20128]: Failed password for root from 202.79.209.9 port 40378 ssh2
Mar 10 10:52:56 sco sshd[20128]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:52:58 sco sshd[20147]: Failed password for root from 202.79.209.9 port 40451 ssh2
Mar 10 10:52:58 sco sshd[20147]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:01 sco sshd[20148]: Failed password for root from 202.79.209.9 port 40542 ssh2
Mar 10 10:53:01 sco sshd[20148]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:03 sco sshd[20149]: Failed password for root from 202.79.209.9 port 40617 ssh2
Mar 10 10:53:04 sco sshd[20149]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:06 sco sshd[20150]: Failed password for root from 202.79.209.9 port 40702 ssh2
Mar 10 10:53:06 sco sshd[20150]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:08 sco sshd[20151]: Failed password for root from 202.79.209.9 port 40781 ssh2
Mar 10 10:53:09 sco sshd[20151]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:11 sco sshd[20152]: Failed password for root from 202.79.209.9 port 40859 ssh2
Mar 10 10:53:11 sco sshd[20152]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:14 sco sshd[20153]: Failed password for root from 202.79.209.9 port 40939 ssh2
Mar 10 10:53:14 sco sshd[20153]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:16 sco sshd[20154]: Failed password for root from 202.79.209.9 port 41024 ssh2
Mar 10 10:53:16 sco sshd[20154]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:19 sco sshd[20155]: Failed password for root from 202.79.209.9 port 41099 ssh2
Mar 10 10:53:20 sco sshd[20155]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:22 sco sshd[20156]: Failed password for root from 202.79.209.9 port 41213 ssh2
Mar 10 10:53:22 sco sshd[20156]: Received disconnect from 202.79.209.9: 11: Bye Bye
Mar 10 10:53:25 sco sshd[20157]: Failed password for root from 202.79.209.9 port 41288 ssh2
Mar 10 10:53:25 sco sshd[20157]: Received disconnect from 202.79.209.9: 11: Bye Bye